AWS kms documentation change
Summary
Updated documentation links from '#customer-cmk' and '#aws-managed-cmk' to '#customer-mgn-key' and '#aws-managed-key' anchors throughout the file
Security assessment
Changes are documentation link corrections without altering security practices. No evidence of addressing vulnerabilities or security incidents. The updates maintain existing security guidance about key rotation without introducing new security content.
Diff
diff --git a/kms/latest/developerguide/rotate-keys.md b/kms/latest/developerguide/rotate-keys.md index 8b27b3ac5..0c22a4db0 100644 --- a//kms/latest/developerguide/rotate-keys.md +++ b//kms/latest/developerguide/rotate-keys.md @@ -9 +9 @@ Why rotate KMS keys?How key rotation works -To create new cryptographic material for your [customer managed keys](./concepts.html#customer-cmk), you can create new KMS keys, and then change your applications or aliases to use the new KMS keys. Or, you can rotate the key material associated with an existing KMS key by enabling automatic key rotation or performing on-demand rotation. +To create new cryptographic material for your [customer managed keys](./concepts.html#customer-mgn-key), you can create new KMS keys, and then change your applications or aliases to use the new KMS keys. Or, you can rotate the key material associated with an existing KMS key by enabling automatic key rotation or performing on-demand rotation. @@ -76 +76 @@ You might consider performing on-demand rotations to demonstrate key material ro -Key rotation in AWS KMS is a designed to be transparent and easy to use. AWS KMS supports optional automatic and on-demand key rotation only for [customer managed keys](./concepts.html#customer-cmk). +AWS KMS key rotation is designed to be transparent and easy to use. AWS KMS supports optional automatic and on-demand key rotation only for [customer managed keys](./concepts.html#customer-mgn-key). @@ -152 +152 @@ AWS KMS automatically rotates the KMS key on the rotation date defined by your r -Because automatic key rotation is optional on [customer managed keys](./concepts.html#customer-cmk) and can be enabled and disabled at any time, the rotation date depends on the date that rotation was most recently enabled. The date can change if you modify the rotation period for a key that you previously enabled automatic key rotation on. The rotation date can change many times over the life of the key. +Because automatic key rotation is optional on [customer managed keys](./concepts.html#customer-mgn-key) and can be enabled and disabled at any time, the rotation date depends on the date that rotation was most recently enabled. The date can change if you modify the rotation period for a key that you previously enabled automatic key rotation on. The rotation date can change many times over the life of the key. @@ -170 +170 @@ The following examples assume that automatic key rotation was enabled with the d -AWS KMS automatically rotates AWS managed keys every year (approximately 365 days). You cannot enable or disable key rotation for [AWS managed keys](./concepts.html#aws-managed-cmk). +AWS KMS automatically rotates AWS managed keys every year (approximately 365 days). You cannot enable or disable key rotation for [AWS managed keys](./concepts.html#aws-managed-key). @@ -208 +208 @@ This pattern ensures that related multi-Region keys are fully interoperable. Any -You can enable automatic key rotation on the [customer managed keys](./concepts.html#customer-cmk) that you use for server-side encryption in AWS services. The annual rotation is transparent and compatible with AWS services. +You can enable automatic key rotation on the [customer managed keys](./concepts.html#customer-mgn-key) that you use for server-side encryption in AWS services. The annual rotation is transparent and compatible with AWS services. @@ -213 +213 @@ You can enable automatic key rotation on the [customer managed keys](./concepts. -When AWS KMS rotates the key material for an [AWS managed key](./concepts.html#aws-managed-cmk) or [customer managed key](./concepts.html#customer-cmk), it writes a `KMS CMK Rotation` event to Amazon EventBridge and a [RotateKey event](./ct-rotatekey.html) to your AWS CloudTrail log. You can use these records to verify that the KMS key was rotated. +When AWS KMS rotates the key material for an [AWS managed key](./concepts.html#aws-managed-key) or [customer managed key](./concepts.html#customer-mgn-key), it writes a `KMS CMK Rotation` event to Amazon EventBridge and a [RotateKey event](./ct-rotatekey.html) to your AWS CloudTrail log. You can use these records to verify that the KMS key was rotated.