AWS Security ChangesHomeSearch

AWS kms documentation change

Service: kms · 2025-07-04 · Documentation low

File: kms/latest/developerguide/resource-limits.md

Summary

Updated anchor links and terminology for KMS key types (e.g., changed 'customer-cmk' to 'customer-mgn-key', 'aws-managed-cmk' to 'aws-managed-key') to align with documentation structure

Security assessment

The changes involve documentation link corrections and terminology updates for consistency, but do not address any security vulnerabilities or introduce new security-related content. No evidence of security fixes or vulnerability mitigation in the diff.

Diff

diff --git a/kms/latest/developerguide/resource-limits.md b/kms/latest/developerguide/resource-limits.md
index b7cbd49b5..e0cafd279 100644
--- a//kms/latest/developerguide/resource-limits.md
+++ b//kms/latest/developerguide/resource-limits.md
@@ -9 +9 @@ AWS KMS keys: 100,000Aliases per KMS key: 50Grants per KMS key: 50,000Custom key
-AWS KMS establishes resource quotas to ensure that it can provide fast and resilient service to all of our customers. Some resource quotas apply only to resources that you create, but not to resources that AWS services create for you. Resources that you use, but that aren't in your AWS account, such as [AWS owned keys](./concepts.html#aws-owned-cmk), do not count against these quotas.
+AWS KMS establishes resource quotas to ensure that it can provide fast and resilient service to all of our customers. Some resource quotas apply only to resources that you create, but not to resources that AWS services create for you. Resources that you use, but that aren't in your AWS account, such as [AWS owned keys](./concepts.html#aws-owned-key), do not count against these quotas.
@@ -29 +29 @@ In addition to resource quotas, AWS KMS uses request quotas to ensure the respon
-You can have up to 100,000 [customer managed keys](./concepts.html#customer-cmk) in each Region of your AWS account. This quota applies to all customer managed keys in all AWS Regions regardless of their [key spec](./create-keys.html#key-spec) or [key state](./key-state.html). Each KMS key is considered to be one resource. [AWS managed keys](./concepts.html#aws-managed-cmk) and [AWS owned keys](./concepts.html#aws-owned-cmk) do not count against this quota.
+You can have up to 100,000 [customer managed keys](./concepts.html#customer-mgn-key) in each Region of your AWS account. This quota applies to all customer managed keys in all AWS Regions regardless of their [key spec](./create-keys.html#key-spec) or [key state](./key-state.html). Each KMS key is considered to be one resource. [AWS managed keys](./concepts.html#aws-managed-key) and [AWS owned keys](./concepts.html#aws-owned-key) do not count against this quota.
@@ -33 +33 @@ You can have up to 100,000 [customer managed keys](./concepts.html#customer-cmk)
-You can associate up to 50 [aliases](./kms-alias.html) with each [customer managed key](./concepts.html#customer-cmk). Aliases that AWS associates with [AWS managed keys](./concepts.html#aws-managed-cmk) do not count against this quota. You might encounter this quota when you [create](./alias-create.html) or [update](./alias-update.html) an alias.
+You can associate up to 50 [aliases](./kms-alias.html) with each [customer managed key](./concepts.html#customer-mgn-key). Aliases that AWS associates with [AWS managed keys](./concepts.html#aws-managed-key) do not count against this quota. You might encounter this quota when you [create](./alias-create.html) or [update](./alias-update.html) an alias.
@@ -43 +43 @@ The Aliases per KMS key quota replaces the Aliases per Region quota that limited
-Each [customer managed key](./concepts.html#customer-cmk) can have up to 50,000 [grants](./grants.html), including the grants created by [AWS services that are integrated with AWS KMS](https://aws.amazon.com/kms/features/#AWS_Service_Integration). This quota does not apply to [AWS managed keys](./concepts.html#aws-managed-cmk) or [AWS owned keys](./concepts.html#aws-owned-cmk).
+Each [customer managed key](./concepts.html#customer-mgn-key) can have up to 50,000 [grants](./grants.html), including the grants created by [AWS services that are integrated with AWS KMS](https://aws.amazon.com/kms/features/#AWS_Service_Integration). This quota does not apply to [AWS managed keys](./concepts.html#aws-managed-key) or [AWS owned keys](./concepts.html#aws-owned-key).