AWS kms documentation change

Service: kms · 2025-06-07 · Documentation medium

File: kms/latest/developerguide/ct-deleteexpiredkeymaterial.md

Summary

Added key material ID to CloudTrail log entry

Security assessment

Improves audit trail for key material lifecycle events by adding unique material identifier

Diff

diff --git a/kms/latest/developerguide/ct-deleteexpiredkeymaterial.md b/kms/latest/developerguide/ct-deleteexpiredkeymaterial.md
index c1cd3a3cc..489b1c3a4 100644
--- a//kms/latest/developerguide/ct-deleteexpiredkeymaterial.md
+++ b//kms/latest/developerguide/ct-deleteexpiredkeymaterial.md
@@ -13 +13 @@ The following example shows an AWS CloudTrail log entry generated when AWS KMS d
-        "eventVersion": "1.05",
+        "eventVersion": "1.11",
@@ -18 +18 @@ The following example shows an AWS CloudTrail log entry generated when AWS KMS d
-        "eventTime": "2021-01-01T16:00:00Z",
+        "eventTime": "2025-05-22T19:55:11Z",
@@ -38,2 +38,4 @@ The following example shows an AWS CloudTrail log entry generated when AWS KMS d
-            "keyId": "1234abcd-12ab-34cd-56ef-1234567890ab"
-        }
+            "keyId": "1234abcd-12ab-34cd-56ef-1234567890ab",
+            "keyMaterialId": "123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0"
+        },
+        "eventCategory": "Management"