AWS Security ChangesHomeSearch

AWS kms documentation change

Service: kms · 2025-09-28 · Documentation low

File: kms/latest/developerguide/attested-calls.md

Summary

Updated Nitro Enclaves attestation documentation with NSM API reference and fixed typos

Security assessment

Added NSM API method enhances documentation completeness for secure attestation processes, but doesn't address a specific vulnerability. Typo fixes don't impact security.

Diff

diff --git a/kms/latest/developerguide/attested-calls.md b/kms/latest/developerguide/attested-calls.md
index 62b589cef..75f2e525c 100644
--- a//kms/latest/developerguide/attested-calls.md
+++ b//kms/latest/developerguide/attested-calls.md
@@ -13 +13 @@ The AWS Nitro Enclaves SDK, which is supported only within a Nitro enclave, auto
-To make attested requests in the AWS SDKs, you have to specify the `Recipient` parameter and its values. The attestation document can be retrived from the NitroTPM using the [nitro-tpm-attest utility](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/attestation-get-doc.html).
+To make attested requests in the AWS SDKs, you have to specify the `Recipient` parameter and its values. The attestation document can be retrieved from the NitroTPM using the [nitro-tpm-attest utility](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/attestation-get-doc.html) or from the Nitro Secure Module (NSM) using [the NSM API](https://github.com/aws/aws-nitro-enclaves-nsm-api).