AWS payment-cryptography documentation change
Summary
Corrected GitHub sample code links and removed account IDs from example ARNs
Security assessment
Changes involve fixing broken links and sanitizing example ARNs by removing account IDs. No indication of security vulnerability remediation or new security documentation.
Diff
diff --git a/payment-cryptography/latest/userguide/keys-import.md b/payment-cryptography/latest/userguide/keys-import.md index a74800b46..5526889c0 100644 --- a//payment-cryptography/latest/userguide/keys-import.md +++ b//payment-cryptography/latest/userguide/keys-import.md @@ -42 +42 @@ TR-34 uses RSA asymmetric cryptography to encrypt and sign symmetric keys for ex -To import your own keys, check out the AWS Payment Cryptography sample project on [GitHub](https://github.com/aws-samples/samples-for-payment-cryptography-service/tree/main/key-import-export). For instructions on how to import/export keys from other platforms, sample code is available on [GitHub](https://github.com/aws-samples/samples-for-payment-cryptography-service/tree/main/key-import-export/hsm/) or consult the user guide for those platforms. +To import your own keys, check out the AWS Payment Cryptography sample project on [GitHub](https://github.com/aws-samples/samples-for-payment-cryptography-service/tree/main/key-import-export). For instructions on how to import/export keys from other platforms, sample code is available on [GitHub](https://github.com/aws-samples/samples-for-payment-cryptography-service/tree/main/key-import-export) or consult the user guide for those platforms. @@ -88 +88 @@ Call the importKey API with a KeyMaterialType of `TR34_KEY_BLOCK`. Use the keyAR - "CertificateAuthorityPublicKeyIdentifier": "arn:aws:payment-cryptography:us-east-2:111122223333:key/zabouwe3574jysdl", \ + "CertificateAuthorityPublicKeyIdentifier": "arn:aws:payment-cryptography:us-east-2::key/zabouwe3574jysdl", \ @@ -99 +99 @@ Call the importKey API with a KeyMaterialType of `TR34_KEY_BLOCK`. Use the keyAR - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza", @@ -155 +155 @@ Although low-level ECDH generates a derived key that can be used for any purpose - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/wc3rjsssguhxtilv", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/wc3rjsssguhxtilv", @@ -188 +188 @@ Call `get-public-key-certificate` to receive the public key as an X.509 certific - --key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/wc3rjsssguhxtilv + --key-identifier arn:aws:payment-cryptography:us-east-2::key/wc3rjsssguhxtilv @@ -233 +233 @@ Call the `import-key` API with a KeyMaterialType of `DiffieHellmanTr31KeyBlock`. - "CertificateAuthorityPublicKeyIdentifier": "arn:aws:payment-cryptography:us-east-2:111122223333:key/swseahwtq2oj6zi5", + "CertificateAuthorityPublicKeyIdentifier": "arn:aws:payment-cryptography:us-east-2::key/swseahwtq2oj6zi5", @@ -240 +240 @@ Call the `import-key` API with a KeyMaterialType of `DiffieHellmanTr31KeyBlock`. - "PrivateKeyIdentifier": "arn:aws:payment-cryptography:us-east-2:111122223333:key/wc3rjsssguhxtilv", + "PrivateKeyIdentifier": "arn:aws:payment-cryptography:us-east-2::key/wc3rjsssguhxtilv", @@ -250 +250 @@ Call the `import-key` API with a KeyMaterialType of `DiffieHellmanTr31KeyBlock`. - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza", @@ -412 +412 @@ When calling the **import-key** command, use the keyARN (or alias) of your key e - "WrappingKeyIdentifier": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza", \ + "WrappingKeyIdentifier": "arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza", \ @@ -476 +476 @@ Use the following command to import the root certificate: - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/zabouwe3574jysdl", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/zabouwe3574jysdl", @@ -505 +505 @@ You can now import a public key. As TR-34 and ECDH rely on passing the leaf cert - "WrappingKeyIdentifier": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza", \ + "WrappingKeyIdentifier": "arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza", \ @@ -513 +513 @@ You can now import a public key. As TR-34 and ECDH rely on passing the leaf cert - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/4kd6xud22e64wcbk", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/4kd6xud22e64wcbk", @@ -562 +562 @@ Use the following command to import the root certificate: - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/wv4gb6h3xcqjk6sm", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/wv4gb6h3xcqjk6sm", @@ -591 +591 @@ Use the following command to import an intermediate certificate: - --certificate-authority-public-key-identifier='"arn:aws:payment-cryptography:us-east-2:111122223333:key/wv4gb6h3xcqjk6sm" \ + --certificate-authority-public-key-identifier='"arn:aws:payment-cryptography:us-east-2::key/wv4gb6h3xcqjk6sm" \ @@ -605 +605 @@ Use the following command to import an intermediate certificate: - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/swseahwtq2oj6zi5", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/swseahwtq2oj6zi5",