AWS transcribe: Note customer-managed key encryption for vocabulary filters
Summary
Adds a note that custom vocabulary filter artifacts can be encrypted at rest with a customer-managed KMS key by including an `EncryptionConfiguration` in the CreateVocabularyFilter request, linking to the resource-artifact encryption documentation.
Security assessment
Documents an at-rest encryption option (customer-managed KMS key) for stored resource artifacts, which is encryption/at-rest data protection guidance. No vulnerability or advisory is cited.
Evidence
+To encrypt your custom vocabulary filter artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateVocabularyFilter`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateVocabularyFilter.html) request.
Diff
diff --git a/transcribe/latest/dg/vocabulary-filter-create.md b/transcribe/latest/dg/vocabulary-filter-create.md index 05a5af162..77f873c42 100644 --- a//transcribe/latest/dg/vocabulary-filter-create.md +++ b//transcribe/latest/dg/vocabulary-filter-create.md @@ -167,0 +168,4 @@ If you create a new Amazon S3 bucket for your custom vocabulary filter files, ma +###### Note + +To encrypt your custom vocabulary filter artifacts at rest with a customer-managed KMS key, include an `EncryptionConfiguration` in your [`CreateVocabularyFilter`](https://docs.aws.amazon.com/transcribe/latest/APIReference/API_CreateVocabularyFilter.html) request. For more information about encrypting resource artifacts with a customer-managed key, see [Encrypting resource artifacts with a customer-managed key](./data-encryption.html#kms-resource-encryption). +