AWS AWSCloudFormation documentation change
Summary
Updated KMS key documentation to specify ARN format requirements
Security assessment
Enhances encryption configuration guidance but does not patch a vulnerability.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification.md index 57c55e183..c194af2d4 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-imagebuilder-imagerecipe-ebsinstanceblockdevicespecification.md @@ -85 +85 @@ _Required_ : No -Use to configure the KMS key to use when encrypting the device. +The Amazon Resource Name (ARN) that uniquely identifies the KMS key to use when encrypting the device. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the _AWS Key Management Service Developer Guide_.