AWS kms documentation change

Service: kms · 2025-06-07 · Documentation medium

File: kms/latest/developerguide/ct-generatedatakeypair.md

Summary

Enhanced CloudTrail example with new eventVersion, keyMaterialId, managementEvent, and TLS configuration details

Security assessment

Adds documentation about secure TLS configurations and key material tracking without evidence of patching a security flaw.

Diff

diff --git a/kms/latest/developerguide/ct-generatedatakeypair.md b/kms/latest/developerguide/ct-generatedatakeypair.md
index c2eba36a4..49e366ab0 100644
--- a//kms/latest/developerguide/ct-generatedatakeypair.md
+++ b//kms/latest/developerguide/ct-generatedatakeypair.md
@@ -11 +11 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
-        "eventVersion": "1.05",
+        "eventVersion": "1.11",
@@ -20 +20 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
-        "eventTime": "2020-07-27T18:57:57Z",
+        "eventTime": "2025-05-20T20:46:16Z",
@@ -33,0 +34,3 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
+        "additionalEventData": {
+            "keyMaterialId": "123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0"
+        },
@@ -44,0 +48 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
+        "managementEvent": true,
@@ -45,0 +50,6 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
+        "eventCategory": "Management",
+        "tlsDetails": {
+            "tlsVersion": "TLSv1.3",
+            "cipherSuite": "TLS_AES_256_GCM_SHA384",
+            "clientProvidedHostHeader": "kms.us-west-2.amazonaws.com"
+        }