AWS cli documentation change
Summary
Updated KMS key documentation with ARN requirements and best practices
Security assessment
Added explicit guidance about KMS key ARNs for container encryption. Strengthens documentation around secure encryption configuration without addressing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/imagebuilder/create-container-recipe.md b/cli/latest/reference/imagebuilder/create-container-recipe.md index 6f98ce81e..d5b6cd82c 100644 --- a//cli/latest/reference/imagebuilder/create-container-recipe.md +++ b//cli/latest/reference/imagebuilder/create-container-recipe.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -298 +298 @@ JSON Syntax: ->>>>> Use to configure the KMS key to use when encrypting the device. +>>>>> The Amazon Resource Name (ARN) that uniquely identifies the KMS key to use when encrypting the device. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the _Key Management Service Developer Guide_ . @@ -549 +549 @@ JSON Syntax: -> Identifies which KMS key is used to encrypt the Dockerfile template. +> The Amazon Resource Name (ARN) that uniquely identifies which KMS key is used to encrypt the Dockerfile template. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the _Key Management Service Developer Guide_ . @@ -710 +710 @@ containerRecipeArn -> (string) - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) »