AWS transcribe: Added KMS encryption note for custom vocabulary (table)
Summary
Added a note describing how to encrypt custom vocabulary artifacts at rest with a customer-managed KMS key via EncryptionConfiguration in CreateVocabulary.
Security assessment
Same encryption-at-rest guidance as the list variant, documenting customer-managed KMS key usage for vocabulary artifacts.
Evidence
+To encrypt your custom vocabulary artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateVocabulary`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateVocabulary.html) request. For more information about encrypting resource artifacts with a customer-managed key, see [Encrypting resource artifacts with a customer-managed key](./data-encryption.html#kms-resource-encryption).
Diff
diff --git a/transcribe/latest/dg/custom-vocabulary-create-table.md b/transcribe/latest/dg/custom-vocabulary-create-table.md index a174fb36d..7e3d0710c 100644 --- a//transcribe/latest/dg/custom-vocabulary-create-table.md +++ b//transcribe/latest/dg/custom-vocabulary-create-table.md @@ -201,0 +202,4 @@ If you create a new Amazon S3 bucket for your custom vocabulary files, make sure +###### Note + +To encrypt your custom vocabulary artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateVocabulary`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateVocabulary.html) request. For more information about encrypting resource artifacts with a customer-managed key, see [Encrypting resource artifacts with a customer-managed key](./data-encryption.html#kms-resource-encryption). +