AWS rekognition medium security documentation change

Service: rekognition · 2025-07-04 · Security-related medium

File: rekognition/latest/dg/face-liveness-programming-api.md

Summary

Added ChallengePreference parameter and KmsKeyId field. Updated request structure with new security-related parameters.

Security assessment

Addition of KmsKeyId parameter indicates support for encryption key management, which directly relates to data security. This change enables customers to implement encryption controls for sensitive data.

Diff

diff --git a/rekognition/latest/dg/face-liveness-programming-api.md b/rekognition/latest/dg/face-liveness-programming-api.md
index eb2466dc4..e7efaedfd 100644
--- a//rekognition/latest/dg/face-liveness-programming-api.md
+++ b//rekognition/latest/dg/face-liveness-programming-api.md
@@ -29,0 +30,2 @@ It is also possible to provide an `AuditImagesLimit`, which is a number between
+Finally, you can provide a ChallengePreference, including the Type and version of challenge you want your session to default to. By default, this will use FaceLivenessMovementAndLightChallenge but can be set to FaceMovementChallenge.
+
@@ -34 +36,2 @@ It is also possible to provide an `AuditImagesLimit`, which is a number between
-        "ClientRequestToken": "my_default_session",
+       "ClientRequestToken": "string",
+       "KmsKeyId": "string",
@@ -35,0 +39,10 @@ It is also possible to provide an `AuditImagesLimit`, which is a number between
+          "AuditImagesLimit": number,
+          "ChallengePreferences": [ 
+             { 
+                "Type": "string",
+                "Versions": { 
+                   "Maximum": "string",
+                   "Minimum": "string"
+                }
+             }
+          ],
@@ -37,4 +50,3 @@ It is also possible to provide an `AuditImagesLimit`, which is a number between
-                "S3Bucket": "s3bucket",
-                "S3KeyPrefix": "s3prefix"
-            },
-            "AuditImagesLimit": 1
+             "S3Bucket": "string",
+             "S3KeyPrefix": "string"
+          }