AWS transcribe: Added KMS customer-managed key encryption note for CLM artifacts
Summary
Added a note explaining how to encrypt custom language model artifacts at rest with a customer-managed KMS key via EncryptionConfiguration in CreateLanguageModel, and reworded the base-model upgrade section.
Security assessment
The added note documents encryption-at-rest using customer-managed KMS keys, a security best practice for protecting model artifacts; no specific vulnerability is referenced.
Evidence
+To encrypt your custom language model artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateLanguageModel`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateLanguageModel.html) request. For more information about encrypting resource artifacts with a customer-managed key, see [Encrypting resource artifacts with a customer-managed key](./data-encryption.html#kms-resource-encryption).
Diff
diff --git a/transcribe/latest/dg/custom-language-models-create.md b/transcribe/latest/dg/custom-language-models-create.md index c763a55b8..c507ab50b 100644 --- a//transcribe/latest/dg/custom-language-models-create.md +++ b//transcribe/latest/dg/custom-language-models-create.md @@ -7 +7 @@ -Preparing your dataUploading your dataAllowing access to your dataCreating your custom language modelUpdating your custom language model +Preparing your dataUploading your dataAllowing access to your dataCreating your custom language modelUpgrading your custom language model base @@ -167 +167,5 @@ For additional examples using the AWS SDKs, including feature-specific, scenario -## Updating your custom language model +###### Note + +To encrypt your custom language model artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateLanguageModel`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateLanguageModel.html) request. For more information about encrypting resource artifacts with a customer-managed key, see [Encrypting resource artifacts with a customer-managed key](./data-encryption.html#kms-resource-encryption). + +## Upgrading your custom language model base @@ -173 +177 @@ To see if your custom language model is using the latest base model, run a [`Des -If `UpgradeAvailability` is `true`, your model is not running the latest version of the base model. To use the latest base model in a custom language model, you must create a new custom language model. Custom language models cannot be upgraded. +If `UpgradeAvailability` is `true`, your model is not running the latest version of the base model. The base model of an existing custom language model cannot be upgraded in place. To use the latest base model, create a new custom language model.