AWS kms documentation change

Service: kms · 2025-06-07 · Documentation medium

File: kms/latest/developerguide/ct-generatedatakeypairwithoutplaintext.md

Summary

Updated CloudTrail log with eventVersion change, keyMaterialId addition, and TLS connection details

Security assessment

Documents modern TLS standards and key material identifiers for better audit capabilities, not a security fix.

Diff

diff --git a/kms/latest/developerguide/ct-generatedatakeypairwithoutplaintext.md b/kms/latest/developerguide/ct-generatedatakeypairwithoutplaintext.md
index df529d908..f6d980784 100644
--- a//kms/latest/developerguide/ct-generatedatakeypairwithoutplaintext.md
+++ b//kms/latest/developerguide/ct-generatedatakeypairwithoutplaintext.md
@@ -11 +11 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
-        "eventVersion": "1.05",
+        "eventVersion": "1.11",
@@ -20 +20 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
-        "eventTime": "2020-07-27T18:57:57Z",
+        "eventTime": "2025-05-20T20:46:16Z",
@@ -33,0 +34,3 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
+        "additionalEventData": {
+            "keyMaterialId": "123456789abcdef0123456789abcdef0123456789abcdef0123456789abcdef0"
+        },
@@ -44,0 +48 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
+        "managementEvent": true,
@@ -45,0 +50,6 @@ The following example shows an AWS CloudTrail log entry for the [GenerateDataKey
+        "eventCategory": "Management",
+        "tlsDetails": {
+            "tlsVersion": "TLSv1.3",
+            "cipherSuite": "TLS_AES_256_GCM_SHA384",
+            "clientProvidedHostHeader": "kms.us-west-2.amazonaws.com"
+        }