AWS cli documentation change

Service: cli · 2025-06-28 · Documentation low

File: cli/latest/reference/kms/import-key-material.md

Summary

Updated CLI version references and clarified parameter behavior for key material import, including adding example output

Security assessment

The change clarifies the default behavior of the 'KeyMaterialSpec' parameter for symmetric encryption keys and adds an example output. While key material import is security-sensitive, this update provides operational clarity rather than addressing a security vulnerability or documenting a new security feature.

Diff

diff --git a/cli/latest/reference/kms/import-key-material.md b/cli/latest/reference/kms/import-key-material.md
index 5dfffef53..ecf8b0897 100644
--- a//cli/latest/reference/kms/import-key-material.md
+++ b//cli/latest/reference/kms/import-key-material.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.42 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.45 Command Reference](../../index.html) »
@@ -198 +198 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/kms-20
-> Indicates whether the key material being imported is previously associated with this KMS key or not. This parameter is optional and only usable with symmetric encryption keys. The default is `EXISTING_KEY_MATERIAL` . If no key material has ever been imported into the KMS key, and this parameter is omitted, the parameter defaults to `NEW_KEY_MATERIAL` .
+> Indicates whether the key material being imported is previously associated with this KMS key or not. This parameter is optional and only usable with symmetric encryption keys. If no key material has ever been imported into the KMS key, and this parameter is omitted, the parameter defaults to `NEW_KEY_MATERIAL` . After the first key material is imported, if this parameter is omitted then the parameter defaults to `EXISTING_KEY_MATERIAL` .
@@ -347 +347,8 @@ Before running this command, replace the example key ID with a valid key ID or k
-This command produces no output.
+Output:
+    
+    
+    {
+        "KeyId": "1234abcd-12ab-34cd-56ef-1234567890ab",
+        "KeyMaterialId": "0b7fd7ddbac6eef27907413567cad8c810e2883dc8a7534067a82ee1142fc1e6"
+    }
+    
@@ -371 +378 @@ KeyMaterialId -> (string)
-  * [AWS CLI 2.27.42 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.45 Command Reference](../../index.html) »