AWS Security ChangesHomeSearch

AWS payment-cryptography documentation change

Service: payment-cryptography · 2025-08-01 · Documentation low

File: payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.emvmac.md

Summary

Updated example key ARNs to remove account IDs in EMV MAC generation commands

Security assessment

Changes only affect example resource ARN formatting. No security features added or vulnerabilities addressed - appears to be documentation consistency improvement.

Diff

diff --git a/payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.emvmac.md b/payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.emvmac.md
index b34a19914..c232610bf 100644
--- a//payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.emvmac.md
+++ b//payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.emvmac.md
@@ -36 +36 @@ The response echoes back the request parameters, including an ARN for subsequent
-                "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/pw3s6nl62t5ushfk",
+                "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/pw3s6nl62t5ushfk",
@@ -64 +64 @@ The response echoes back the request parameters, including an ARN for subsequent
-Take note of the `KeyArn` that represents the key, for example _arn:aws:payment-cryptography:us-east-2:111122223333:key/pw3s6nl62t5ushfk_. You need that in the next step.
+Take note of the `KeyArn` that represents the key, for example _arn:aws:payment-cryptography:us-east-2::key/pw3s6nl62t5ushfk_. You need that in the next step.
@@ -110 +110 @@ Padding is automatically applied and uses ISO/IEC 9797-1 padding method 2.
-    $ aws payment-cryptography-data generate-mac --message-data 84240000080007999E57FD0F47CACE --key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/pw3s6nl62t5ushfk --message-data 8424000008999E57FD0F47CACE0007 --generation-attributes EmvMac="{MajorKeyDerivationMode=EMV_OPTION_A,PanSequenceNumber='00',PrimaryAccountNumber='2235521304123282',SessionKeyDerivationMode=EMV_COMMON_SESSION_KEY,SessionKeyDerivationValue={ApplicationCryptogram='999E57FD0F47CACE'}}"
+    $ aws payment-cryptography-data generate-mac --message-data 84240000080007999E57FD0F47CACE --key-identifier arn:aws:payment-cryptography:us-east-2::key/pw3s6nl62t5ushfk --message-data 8424000008999E57FD0F47CACE0007 --generation-attributes EmvMac="{MajorKeyDerivationMode=EMV_OPTION_A,PanSequenceNumber='00',PrimaryAccountNumber='2235521304123282',SessionKeyDerivationMode=EMV_COMMON_SESSION_KEY,SessionKeyDerivationValue={ApplicationCryptogram='999E57FD0F47CACE'}}"
@@ -114 +114 @@ Padding is automatically applied and uses ISO/IEC 9797-1 padding method 2.
-    "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/pw3s6nl62t5ushfk",
+    "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/pw3s6nl62t5ushfk",