AWS cli documentation change
Summary
Updated KMS key documentation to clarify ARN format requirements and expand permission requirements to include DataAccessRoleArn
Security assessment
Similar to medical transcription changes - improves documentation about encryption requirements but doesn't indicate remediation of a security issue
Diff
diff --git a/cli/latest/reference/transcribe/start-transcription-job.md b/cli/latest/reference/transcribe/start-transcription-job.md index 74356ada8..d4c0550d3 100644 --- a//cli/latest/reference/transcribe/start-transcription-job.md +++ b//cli/latest/reference/transcribe/start-transcription-job.md @@ -15 +15 @@ - * [AWS CLI 2.28.4 Command Reference](../../index.html) » + * [AWS CLI 2.28.6 Command Reference](../../index.html) » @@ -350 +350 @@ JSON Syntax: -> The KMS key you want to use to encrypt your transcription output. +> The Amazon Resource Name (ARN) of a KMS key that you want to use to encrypt your transcription output. @@ -352,15 +352 @@ JSON Syntax: -> If using a key located in the **current** Amazon Web Services account, you can specify your KMS key in one of four ways: -> -> * Use the KMS key ID itself. For example, `1234abcd-12ab-34cd-56ef-1234567890ab` . -> * Use an alias for the KMS key ID. For example, `alias/ExampleAlias` . -> * Use the Amazon Resource Name (ARN) for the KMS key ID. For example, `arn:aws:kms:region:account-ID:key/1234abcd-12ab-34cd-56ef-1234567890ab` . -> * Use the ARN for the KMS key alias. For example, `arn:aws:kms:region:account-ID:alias/ExampleAlias` . -> - -> -> If using a key located in a **different** Amazon Web Services account than the current Amazon Web Services account, you can specify your KMS key in one of two ways: -> -> * Use the ARN for the KMS key ID. For example, `arn:aws:kms:region:account-ID:key/1234abcd-12ab-34cd-56ef-1234567890ab` . -> * Use the ARN for the KMS key alias. For example, `arn:aws:kms:region:account-ID:alias/ExampleAlias` . -> - +> KMS key ARNs have the format `arn:partition:kms:region:account:key/key-id` . For example: `arn:aws:kms:us-west-2:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab` . For more information, see [KMS key ARNs](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) . @@ -370,3 +356 @@ JSON Syntax: -> If you specify a KMS key to encrypt your output, you must also specify an output location using the `OutputLocation` parameter. -> -> Note that the role making the request must have permission to use the specified KMS key. +> Note that the role making the request and the role specified in the `DataAccessRoleArn` request parameter (if present) must have permission to use the specified KMS key. @@ -1933 +1917 @@ TranscriptionJob -> (structure) - * [AWS CLI 2.28.4 Command Reference](../../index.html) » + * [AWS CLI 2.28.6 Command Reference](../../index.html) »