AWS kms documentation change

Service: kms · 2025-06-07 · Documentation medium

File: kms/latest/developerguide/ct-decrypt.md

Summary

Updated CloudTrail log format with key material ID and TLS connection details

Security assessment

Enhances audit capabilities by adding cryptographic material tracking and transport security details for decryption events

Diff

diff --git a/kms/latest/developerguide/ct-decrypt.md b/kms/latest/developerguide/ct-decrypt.md
index 144d50785..3738affac 100644
--- a//kms/latest/developerguide/ct-decrypt.md
+++ b//kms/latest/developerguide/ct-decrypt.md
@@ -34 +34 @@ The following is an example CloudTrail log entry for a `Decrypt` operation with
-        "eventVersion": "1.05",
+        "eventVersion": "1.11",
@@ -43 +43 @@ The following is an example CloudTrail log entry for a `Decrypt` operation with
-        "eventTime": "2020-07-27T22:58:24Z",
+        "eventTime": "2025-05-20T20:45:00Z",
@@ -57,0 +58,3 @@ The following is an example CloudTrail log entry for a `Decrypt` operation with
+        "additionalEventData": {
+            "keyMaterialId": "123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0"
+        },
@@ -69 +72,8 @@ The following is an example CloudTrail log entry for a `Decrypt` operation with
-        "recipientAccountId": "111122223333"
+        "managementEvent": true,
+        "recipientAccountId": "111122223333",
+        "eventCategory": "Management",
+        "tlsDetails": {
+            "tlsVersion": "TLSv1.2",
+            "cipherSuite": "ECDHE-RSA-AES256-GCM-SHA384",
+            "clientProvidedHostHeader": "kms.us-west-2.amazonaws.com"
+        }