AWS kms documentation change
Summary
Clarified HMAC key material requirements (minimum/maximum length), fixed typos, and removed redundant content about KMS key conversion limitations.
Security assessment
The change updates HMAC key material requirements to allow longer keys (minimum length matches spec, maximum 1024 bits). While this improves clarity, there's no evidence it addresses a specific vulnerability. The correction enhances security documentation by specifying key length constraints.
Diff
diff --git a/kms/latest/developerguide/importing-keys-conceptual.md b/kms/latest/developerguide/importing-keys-conceptual.md index 76340e9af..69b105b3d 100644 --- a//kms/latest/developerguide/importing-keys-conceptual.md +++ b//kms/latest/developerguide/importing-keys-conceptual.md @@ -9,3 +9 @@ Permissions for importing key materialRequirements for imported key material -Imported key material lets you protect your AWS resources under cryptographic keys that you generate. The key material that you import is associated with a particular KMS key. You can reimport the same key material into the same KMS key, but you cannot import different key material into the KMS key and you cannot convert a KMS key designed for imported key material into a KMS key with AWS KMS key material. - -The following overview explains how to import your key material into AWS KMS. For more details about each step in the process, see the corresponding topic. +Imported key material lets you protect your AWS resources under cryptographic keys that you generate. The following overview explains how to import your key material into AWS KMS. For more details about each step in the process, see the corresponding topics. @@ -15 +13 @@ The following overview explains how to import your key material into AWS KMS. Fo -The key material that you import must be compatable with the key spec of the associated AWS KMS key. For more information about compatability, see Requirements for imported key material. +The key material that you import must be compatible with the key spec of the associated AWS KMS key. For more information about compatibility, see Requirements for imported key material. @@ -97 +95 @@ KMS key key spec | Key material requirements -**HMAC keys** HMAC_224HMAC_256HMAC_384HMAC_512 | HMAC key material must conform to [RFC 2104](https://datatracker.ietf.org/doc/html/rfc2104). The key length must match the length specified by the key spec. +**HMAC keys** HMAC_224HMAC_256HMAC_384HMAC_512 | HMAC key material must conform to [RFC 2104](https://datatracker.ietf.org/doc/html/rfc2104). The key length must be at least the same length specified by the key spec. The maximum key length is 1024-bits.