AWS general medium security documentation change
Summary
Added new service quota entry for ML-DSA cryptographic operations with rate limits
Security assessment
ML-DSA is a post-quantum cryptographic algorithm. Documenting its availability and rate limits indicates AWS is preparing for quantum-resistant cryptography, which addresses future security threats to current encryption standards. This proactively addresses emerging cryptographic security concerns.
Diff
diff --git a/general/latest/gr/kms.md b/general/latest/gr/kms.md index 1b9a001e9..03b3e0ab5 100644 --- a//general/latest/gr/kms.md +++ b//general/latest/gr/kms.md @@ -19,35 +19,35 @@ Region Name | Region | Endpoint | Protocol -US East (Ohio) | us-east-2 | kms.us-east-2.amazonaws.com kms-fips.us-east-2.amazonaws.com | HTTPS HTTPS -US East (N. Virginia) | us-east-1 | kms.us-east-1.amazonaws.com kms-fips.us-east-1.amazonaws.com | HTTPS HTTPS -US West (N. California) | us-west-1 | kms.us-west-1.amazonaws.com kms-fips.us-west-1.amazonaws.com | HTTPS HTTPS -US West (Oregon) | us-west-2 | kms.us-west-2.amazonaws.com kms-fips.us-west-2.amazonaws.com | HTTPS HTTPS -Africa (Cape Town) | af-south-1 | kms.af-south-1.amazonaws.com kms-fips.af-south-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Hong Kong) | ap-east-1 | kms.ap-east-1.amazonaws.com kms-fips.ap-east-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Hyderabad) | ap-south-2 | kms.ap-south-2.amazonaws.com kms-fips.ap-south-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Jakarta) | ap-southeast-3 | kms.ap-southeast-3.amazonaws.com kms-fips.ap-southeast-3.amazonaws.com | HTTPS HTTPS -Asia Pacific (Malaysia) | ap-southeast-5 | kms.ap-southeast-5.amazonaws.com kms-fips.ap-southeast-5.amazonaws.com | HTTPS HTTPS -Asia Pacific (Melbourne) | ap-southeast-4 | kms.ap-southeast-4.amazonaws.com kms-fips.ap-southeast-4.amazonaws.com | HTTPS HTTPS -Asia Pacific (Mumbai) | ap-south-1 | kms.ap-south-1.amazonaws.com kms-fips.ap-south-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Osaka) | ap-northeast-3 | kms.ap-northeast-3.amazonaws.com kms-fips.ap-northeast-3.amazonaws.com | HTTPS HTTPS -Asia Pacific (Seoul) | ap-northeast-2 | kms.ap-northeast-2.amazonaws.com kms-fips.ap-northeast-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Singapore) | ap-southeast-1 | kms.ap-southeast-1.amazonaws.com kms-fips.ap-southeast-1.amazonaws.com | HTTPS HTTPS -Asia Pacific (Sydney) | ap-southeast-2 | kms.ap-southeast-2.amazonaws.com kms-fips.ap-southeast-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Taipei) | ap-east-2 | kms.ap-east-2.amazonaws.com kms-fips.ap-east-2.amazonaws.com | HTTPS HTTPS -Asia Pacific (Thailand) | ap-southeast-7 | kms.ap-southeast-7.amazonaws.com kms-fips.ap-southeast-7.amazonaws.com | HTTPS HTTPS -Asia Pacific (Tokyo) | ap-northeast-1 | kms.ap-northeast-1.amazonaws.com kms-fips.ap-northeast-1.amazonaws.com | HTTPS HTTPS -Canada (Central) | ca-central-1 | kms.ca-central-1.amazonaws.com kms-fips.ca-central-1.amazonaws.com | HTTPS HTTPS -Canada West (Calgary) | ca-west-1 | kms.ca-west-1.amazonaws.com kms-fips.ca-west-1.amazonaws.com | HTTPS HTTPS -Europe (Frankfurt) | eu-central-1 | kms.eu-central-1.amazonaws.com kms-fips.eu-central-1.amazonaws.com | HTTPS HTTPS -Europe (Ireland) | eu-west-1 | kms.eu-west-1.amazonaws.com kms-fips.eu-west-1.amazonaws.com | HTTPS HTTPS -Europe (London) | eu-west-2 | kms.eu-west-2.amazonaws.com kms-fips.eu-west-2.amazonaws.com | HTTPS HTTPS -Europe (Milan) | eu-south-1 | kms.eu-south-1.amazonaws.com kms-fips.eu-south-1.amazonaws.com | HTTPS HTTPS -Europe (Paris) | eu-west-3 | kms.eu-west-3.amazonaws.com kms-fips.eu-west-3.amazonaws.com | HTTPS HTTPS -Europe (Spain) | eu-south-2 | kms.eu-south-2.amazonaws.com kms-fips.eu-south-2.amazonaws.com | HTTPS HTTPS -Europe (Stockholm) | eu-north-1 | kms.eu-north-1.amazonaws.com kms-fips.eu-north-1.amazonaws.com | HTTPS HTTPS -Europe (Zurich) | eu-central-2 | kms.eu-central-2.amazonaws.com kms-fips.eu-central-2.amazonaws.com | HTTPS HTTPS -Israel (Tel Aviv) | il-central-1 | kms.il-central-1.amazonaws.com kms-fips.il-central-1.amazonaws.com | HTTPS HTTPS -Mexico (Central) | mx-central-1 | kms.mx-central-1.amazonaws.com kms-fips.mx-central-1.amazonaws.com | HTTPS HTTPS -Middle East (Bahrain) | me-south-1 | kms.me-south-1.amazonaws.com kms-fips.me-south-1.amazonaws.com | HTTPS HTTPS -Middle East (UAE) | me-central-1 | kms.me-central-1.amazonaws.com kms-fips.me-central-1.amazonaws.com | HTTPS HTTPS -South America (São Paulo) | sa-east-1 | kms.sa-east-1.amazonaws.com kms-fips.sa-east-1.amazonaws.com | HTTPS HTTPS -AWS GovCloud (US-East) | us-gov-east-1 | kms.us-gov-east-1.amazonaws.com kms-fips.us-gov-east-1.amazonaws.com | HTTPS HTTPS -AWS GovCloud (US-West) | us-gov-west-1 | kms.us-gov-west-1.amazonaws.com kms-fips.us-gov-west-1.amazonaws.com | HTTPS HTTPS +US East (Ohio) | us-east-2 | kms.us-east-2.amazonaws.com kms-fips.us-east-2.api.aws kms.us-east-2.api.aws kms-fips.us-east-2.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +US East (N. Virginia) | us-east-1 | kms.us-east-1.amazonaws.com kms-fips.us-east-1.api.aws kms-fips.us-east-1.amazonaws.com kms.us-east-1.api.aws | HTTPS HTTPS HTTPS HTTPS +US West (N. California) | us-west-1 | kms.us-west-1.amazonaws.com kms.us-west-1.api.aws kms-fips.us-west-1.amazonaws.com kms-fips.us-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS +US West (Oregon) | us-west-2 | kms.us-west-2.amazonaws.com kms-fips.us-west-2.amazonaws.com kms.us-west-2.api.aws kms-fips.us-west-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Africa (Cape Town) | af-south-1 | kms.af-south-1.amazonaws.com kms.af-south-1.api.aws kms-fips.af-south-1.api.aws kms-fips.af-south-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Hong Kong) | ap-east-1 | kms.ap-east-1.amazonaws.com kms.ap-east-1.api.aws kms-fips.ap-east-1.api.aws kms-fips.ap-east-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Hyderabad) | ap-south-2 | kms.ap-south-2.amazonaws.com kms-fips.ap-south-2.amazonaws.com kms.ap-south-2.api.aws kms-fips.ap-south-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Jakarta) | ap-southeast-3 | kms.ap-southeast-3.amazonaws.com kms.ap-southeast-3.api.aws kms-fips.ap-southeast-3.api.aws kms-fips.ap-southeast-3.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Malaysia) | ap-southeast-5 | kms.ap-southeast-5.amazonaws.com kms-fips.ap-southeast-5.amazonaws.com kms-fips.ap-southeast-5.api.aws kms.ap-southeast-5.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Melbourne) | ap-southeast-4 | kms.ap-southeast-4.amazonaws.com kms-fips.ap-southeast-4.amazonaws.com kms-fips.ap-southeast-4.api.aws kms.ap-southeast-4.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Mumbai) | ap-south-1 | kms.ap-south-1.amazonaws.com kms.ap-south-1.api.aws kms-fips.ap-south-1.amazonaws.com kms-fips.ap-south-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Osaka) | ap-northeast-3 | kms.ap-northeast-3.amazonaws.com kms-fips.ap-northeast-3.amazonaws.com kms-fips.ap-northeast-3.api.aws kms.ap-northeast-3.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Seoul) | ap-northeast-2 | kms.ap-northeast-2.amazonaws.com kms.ap-northeast-2.api.aws kms-fips.ap-northeast-2.api.aws kms-fips.ap-northeast-2.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Singapore) | ap-southeast-1 | kms.ap-southeast-1.amazonaws.com kms-fips.ap-southeast-1.amazonaws.com kms.ap-southeast-1.api.aws kms-fips.ap-southeast-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Sydney) | ap-southeast-2 | kms.ap-southeast-2.amazonaws.com kms-fips.ap-southeast-2.api.aws kms-fips.ap-southeast-2.amazonaws.com kms.ap-southeast-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Taipei) | ap-east-2 | kms.ap-east-2.amazonaws.com kms-fips.ap-east-2.api.aws kms-fips.ap-east-2.amazonaws.com kms.ap-east-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Thailand) | ap-southeast-7 | kms.ap-southeast-7.amazonaws.com kms.ap-southeast-7.api.aws kms-fips.ap-southeast-7.api.aws kms-fips.ap-southeast-7.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Asia Pacific (Tokyo) | ap-northeast-1 | kms.ap-northeast-1.amazonaws.com kms-fips.ap-northeast-1.api.aws kms.ap-northeast-1.api.aws kms-fips.ap-northeast-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Canada (Central) | ca-central-1 | kms.ca-central-1.amazonaws.com kms.ca-central-1.api.aws kms-fips.ca-central-1.api.aws kms-fips.ca-central-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Canada West (Calgary) | ca-west-1 | kms.ca-west-1.amazonaws.com kms-fips.ca-west-1.api.aws kms-fips.ca-west-1.amazonaws.com kms.ca-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Frankfurt) | eu-central-1 | kms.eu-central-1.amazonaws.com kms.eu-central-1.api.aws kms-fips.eu-central-1.api.aws kms-fips.eu-central-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Europe (Ireland) | eu-west-1 | kms.eu-west-1.amazonaws.com kms-fips.eu-west-1.api.aws kms-fips.eu-west-1.amazonaws.com kms.eu-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (London) | eu-west-2 | kms.eu-west-2.amazonaws.com kms-fips.eu-west-2.amazonaws.com kms.eu-west-2.api.aws kms-fips.eu-west-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Milan) | eu-south-1 | kms.eu-south-1.amazonaws.com kms-fips.eu-south-1.amazonaws.com kms-fips.eu-south-1.api.aws kms.eu-south-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Paris) | eu-west-3 | kms.eu-west-3.amazonaws.com kms-fips.eu-west-3.amazonaws.com kms-fips.eu-west-3.api.aws kms.eu-west-3.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Spain) | eu-south-2 | kms.eu-south-2.amazonaws.com kms-fips.eu-south-2.amazonaws.com kms.eu-south-2.api.aws kms-fips.eu-south-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Stockholm) | eu-north-1 | kms.eu-north-1.amazonaws.com kms-fips.eu-north-1.amazonaws.com kms.eu-north-1.api.aws kms-fips.eu-north-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Europe (Zurich) | eu-central-2 | kms.eu-central-2.amazonaws.com kms-fips.eu-central-2.amazonaws.com kms-fips.eu-central-2.api.aws kms.eu-central-2.api.aws | HTTPS HTTPS HTTPS HTTPS +Israel (Tel Aviv) | il-central-1 | kms.il-central-1.amazonaws.com kms-fips.il-central-1.amazonaws.com kms-fips.il-central-1.api.aws kms.il-central-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Mexico (Central) | mx-central-1 | kms.mx-central-1.amazonaws.com kms.mx-central-1.api.aws kms-fips.mx-central-1.amazonaws.com kms-fips.mx-central-1.api.aws | HTTPS HTTPS HTTPS HTTPS +Middle East (Bahrain) | me-south-1 | kms.me-south-1.amazonaws.com kms-fips.me-south-1.api.aws kms.me-south-1.api.aws kms-fips.me-south-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +Middle East (UAE) | me-central-1 | kms.me-central-1.amazonaws.com kms-fips.me-central-1.amazonaws.com kms-fips.me-central-1.api.aws kms.me-central-1.api.aws | HTTPS HTTPS HTTPS HTTPS +South America (São Paulo) | sa-east-1 | kms.sa-east-1.amazonaws.com kms-fips.sa-east-1.api.aws kms.sa-east-1.api.aws kms-fips.sa-east-1.amazonaws.com | HTTPS HTTPS HTTPS HTTPS +AWS GovCloud (US-East) | us-gov-east-1 | kms.us-gov-east-1.amazonaws.com kms-fips.us-gov-east-1.amazonaws.com kms-fips.us-gov-east-1.api.aws kms.us-gov-east-1.api.aws | HTTPS HTTPS HTTPS HTTPS +AWS GovCloud (US-West) | us-gov-west-1 | kms.us-gov-west-1.amazonaws.com kms.us-gov-west-1.api.aws kms-fips.us-gov-west-1.amazonaws.com kms-fips.us-gov-west-1.api.aws | HTTPS HTTPS HTTPS HTTPS @@ -66,0 +67 @@ Cryptographic operations (ECC & SM2) request rate | Each supported Region: 1,000 +Cryptographic operations (ML-DSA) request rate | Each supported Region: 1,000 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-3C995F2B) | Maximum requests for cryptographic operations with ML-DSA CMKs per second. This shared quota applies to Sign and Verify requests using ML-DSA CMKs. When you reach this quota, KMS rejects this type of request for the remainder of the interval.