AWS kms documentation change

Service: kms · 2025-06-07 · Documentation medium

File: kms/latest/developerguide/ct-deleteimportedkeymaterial.md

Summary

Added key material ID and TLS details to CloudTrail logs

Security assessment

Enhances security visibility by tracking specific key material and connection security parameters during deletion operations

Diff

diff --git a/kms/latest/developerguide/ct-deleteimportedkeymaterial.md b/kms/latest/developerguide/ct-deleteimportedkeymaterial.md
index 871ebbc22..3eca5eee5 100644
--- a//kms/latest/developerguide/ct-deleteimportedkeymaterial.md
+++ b//kms/latest/developerguide/ct-deleteimportedkeymaterial.md
@@ -13 +13 @@ The following example shows an AWS CloudTrail log entry generated for the `Delet
-        "eventVersion": "1.08",
+        "eventVersion": "1.11",
@@ -22 +22 @@ The following example shows an AWS CloudTrail log entry generated for the `Delet
-        "eventTime": "2022-10-04T21:43:33Z",
+        "eventTime": "2025-05-20T20:45:08Z",
@@ -29 +29,2 @@ The following example shows an AWS CloudTrail log entry generated for the `Delet
-            "keyId": "1234abcd-12ab-34cd-56ef-1234567890ab"
+            "keyId": "1234abcd-12ab-34cd-56ef-1234567890ab",
+            "keyMaterialId": "123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0"
@@ -32 +33,2 @@ The following example shows an AWS CloudTrail log entry generated for the `Delet
-            "keyId":"&example-key-arn-1;"
+            "keyId": "arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab",
+            "keyMaterialId": "123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0"
@@ -47 +49,6 @@ The following example shows an AWS CloudTrail log entry generated for the `Delet
-        "eventCategory": "Management"
+        "eventCategory": "Management",
+        "tlsDetails": {
+            "tlsVersion": "TLSv1.2",
+            "cipherSuite": "ECDHE-RSA-AES256-GCM-SHA384",
+            "clientProvidedHostHeader": "kms.us-west-2.amazonaws.com"
+        }