AWS payment-cryptography documentation change
Summary
Updated example AWS Key ARNs to remove account ID placeholder (replaced '111122223333' with empty segment '::')
Security assessment
The change aligns example ARN formats with a generic structure but does not resolve a security issue or document security features. This is a documentation consistency improvement rather than a security-related update.
Diff
diff --git a/payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.pvv.md b/payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.pvv.md index 635f135b9..504155883 100644 --- a//payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.pvv.md +++ b//payment-cryptography/latest/userguide/use-cases-issuers.generalfunctions.pvv.md @@ -40 +40 @@ The response echoes back the request parameters, including an ARN for subsequent - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt", @@ -68 +68 @@ The response echoes back the request parameters, including an ARN for subsequent -Take note of the `KeyArn` that represents the key, for example _arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt_. You need that in the next step. +Take note of the `KeyArn` that represents the key, for example _arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt_. You need that in the next step. @@ -80 +80 @@ The response echoes back the request parameters, including an ARN for subsequent - "KeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza", + "KeyArn": "arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza", @@ -108 +108 @@ The response echoes back the request parameters, including an ARN for subsequent -Take note of the `KeyArn` that represents the key, for example _arn:aws:payment-cryptography:us-east-2:111122223333:key/ov6icy4ryas4zcza_. You need that in the next step. +Take note of the `KeyArn` that represents the key, for example _arn:aws:payment-cryptography:us-east-2::key/ov6icy4ryas4zcza_. You need that in the next step. @@ -117 +117 @@ This command requires that the key is of type `TR31_V2_VISA_PIN_VERIFICATION_KEY - $ aws payment-cryptography-data generate-pin-data --generation-key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/37y2tsl45p5zjbh2 --encryption-key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt --primary-account-number 171234567890123 --pin-block-format ISO_FORMAT_0 --generation-attributes VisaPin={PinVerificationKeyIndex=1} + $ aws payment-cryptography-data generate-pin-data --generation-key-identifier arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2 --encryption-key-identifier arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt --primary-account-number 171234567890123 --pin-block-format ISO_FORMAT_0 --generation-attributes VisaPin={PinVerificationKeyIndex=1} @@ -121 +121 @@ This command requires that the key is of type `TR31_V2_VISA_PIN_VERIFICATION_KEY - "GenerationKeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/37y2tsl45p5zjbh2", + "GenerationKeyArn": "arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2", @@ -123 +123 @@ This command requires that the key is of type `TR31_V2_VISA_PIN_VERIFICATION_KEY - "EncryptionKeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt", + "EncryptionKeyArn": "arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt", @@ -138 +138 @@ If AWS Payment Cryptography is able to validate the pin, an http/200 is returned - $ aws payment-cryptography-data verify-pin-data --verification-key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/37y2tsl45p5zjbh2 --encryption-key-identifier arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt --primary-account-number 171234567890123 --pin-block-format ISO_FORMAT_0 --verification-attributes VisaPin="{PinVerificationKeyIndex=1,VerificationValue=5507}" --encrypted-pin-block AC17DC148BDA645E + $ aws payment-cryptography-data verify-pin-data --verification-key-identifier arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2 --encryption-key-identifier arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt --primary-account-number 171234567890123 --pin-block-format ISO_FORMAT_0 --verification-attributes VisaPin="{PinVerificationKeyIndex=1,VerificationValue=5507}" --encrypted-pin-block AC17DC148BDA645E @@ -143 +143 @@ If AWS Payment Cryptography is able to validate the pin, an http/200 is returned - "VerificationKeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/37y2tsl45p5zjbh2", + "VerificationKeyArn": "arn:aws:payment-cryptography:us-east-2::key/37y2tsl45p5zjbh2", @@ -145 +145 @@ If AWS Payment Cryptography is able to validate the pin, an http/200 is returned - "EncryptionKeyArn": "arn:aws:payment-cryptography:us-east-2:111122223333:key/ivi5ksfsuplneuyt", + "EncryptionKeyArn": "arn:aws:payment-cryptography:us-east-2::key/ivi5ksfsuplneuyt",