AWS Security ChangesHomeSearch

AWS payment-cryptography documentation change

Service: payment-cryptography · 2025-08-01 · Documentation low

File: payment-cryptography/latest/userguide/generate-ibm3624.md

Summary

Updated example ARNs by removing AWS account ID placeholder (111122223333) from generation and encryption key identifiers

Security assessment

Removal of example account IDs from key ARNs improves documentation hygiene but does not indicate a security fix or vulnerability mitigation. No security context is provided in the change.

Diff

diff --git a/payment-cryptography/latest/userguide/generate-ibm3624.md b/payment-cryptography/latest/userguide/generate-ibm3624.md
index 88133b26b..3c79110ee 100644
--- a//payment-cryptography/latest/userguide/generate-ibm3624.md
+++ b//payment-cryptography/latest/userguide/generate-ibm3624.md
@@ -55 +55 @@ The following example shows generating a random pin then outputting the encrypte
-    $ aws payment-cryptography-data generate-pin-data --generation-key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/37y2tsl45p5zjbh2 --encryption-key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt --primary-account-number 171234567890123 --pin-block-format ISO_FORMAT_0 --generation-attributes Ibm3624RandomPin="{DecimalizationTable=9876543210654321,PinValidationDataPadCharacter=D,PinValidationData=171234567890123}"
+    $ aws payment-cryptography-data generate-pin-data --generation-key-identifier arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2 --encryption-key-identifier arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt --primary-account-number 171234567890123 --pin-block-format ISO_FORMAT_0 --generation-attributes Ibm3624RandomPin="{DecimalizationTable=9876543210654321,PinValidationDataPadCharacter=D,PinValidationData=171234567890123}"
@@ -59 +59 @@ The following example shows generating a random pin then outputting the encrypte
-                  "GenerationKeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/37y2tsl45p5zjbh2",
+                  "GenerationKeyArn": "arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2",
@@ -61 +61 @@ The following example shows generating a random pin then outputting the encrypte
-                  "EncryptionKeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt",
+                  "EncryptionKeyArn": "arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt",