AWS Security ChangesHomeSearch

AWS payment-cryptography documentation change

Service: payment-cryptography · 2025-08-01 · Documentation low

File: payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.md

Summary

Removed account IDs from example key ARNs in decrypt-data and translate-pin commands

Security assessment

Changes only affect example command syntax by using empty account specifiers (::) in ARNs. No indication this fixes a security issue or adds security content - appears to be documentation formatting.

Diff

diff --git a/payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.md b/payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.md
index 373b07b3a..864a9b4a2 100644
--- a//payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.md
+++ b//payment-cryptography/latest/userguide/use-cases-acquirers-dynamickeys.md
@@ -33 +33 @@ The following example shows using Dynamic Keys along with the decrypt command. T
-    $ aws payment-cryptography-data decrypt-data --key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza --cipher-text 1234123412341234123412341234123A --decryption-attributes 'Symmetric={Mode=CBC,InitializationVector=1234123412341234}'   --wrapped-key WrappedKeyMaterial={"Tr31KeyBlock"="D0112D0TN00E0000B05A6E82D7FC68B95C84306634B0000DA4701BE9BCA318B3A30A400B059FD4A8DE19924A9D3EE459F24FDE680F8E4A40"}
+    $ aws payment-cryptography-data decrypt-data --key-identifier arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza --cipher-text 1234123412341234123412341234123A --decryption-attributes 'Symmetric={Mode=CBC,InitializationVector=1234123412341234}'   --wrapped-key WrappedKeyMaterial={"Tr31KeyBlock"="D0112D0TN00E0000B05A6E82D7FC68B95C84306634B0000DA4701BE9BCA318B3A30A400B059FD4A8DE19924A9D3EE459F24FDE680F8E4A40"}
@@ -38 +38 @@ The following example shows using Dynamic Keys along with the decrypt command. T
-       "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza",
+       "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza",
@@ -55 +55 @@ The following example shows using Dynamic Keys along with the translate pin comm
-       "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza",
+       "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza",