AWS transcribe: Added KMS encryption note for custom vocabulary (list)
Summary
Added a note describing how to encrypt custom vocabulary artifacts at rest with a customer-managed KMS key via EncryptionConfiguration in CreateVocabulary.
Security assessment
Documents encryption-at-rest of vocabulary artifacts with customer-managed KMS keys, a security best practice; no specific vulnerability is cited.
Evidence
+To encrypt your custom vocabulary artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateVocabulary`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateVocabulary.html) request. For more information about encrypting resource artifacts with a customer-managed key, see [Encrypting resource artifacts with a customer-managed key](./data-encryption.html#kms-resource-encryption).
Diff
diff --git a/transcribe/latest/dg/custom-vocabulary-create-list.md b/transcribe/latest/dg/custom-vocabulary-create-list.md index 322ab4d27..5aef84182 100644 --- a//transcribe/latest/dg/custom-vocabulary-create-list.md +++ b//transcribe/latest/dg/custom-vocabulary-create-list.md @@ -113,0 +114,4 @@ If you create a new Amazon S3 bucket for your custom vocabulary files, make sure +###### Note + +To encrypt your custom vocabulary artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateVocabulary`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateVocabulary.html) request. For more information about encrypting resource artifacts with a customer-managed key, see [Encrypting resource artifacts with a customer-managed key](./data-encryption.html#kms-resource-encryption). +