AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-01 · Documentation low

File: cli/latest/reference/payment-cryptography/add-key-replication-regions.md

Summary

Updated documentation for multi-region key replication with improved terminology, added user guide links, and clarified replication status details

Security assessment

The changes enhance documentation about Multi-Region key replication security features (secure key material replication across regions) but do not address any specific security vulnerability. Updates include terminology standardization (PRK/RRK), status code formatting, and links to security-related user guide content.

Diff

diff --git a/cli/latest/reference/payment-cryptography/add-key-replication-regions.md b/cli/latest/reference/payment-cryptography/add-key-replication-regions.md
index e130ae32f..5ee9ce0b6 100644
--- a//cli/latest/reference/payment-cryptography/add-key-replication-regions.md
+++ b//cli/latest/reference/payment-cryptography/add-key-replication-regions.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.27 Command Reference](../../index.html) »
@@ -61 +61 @@ Adds replication Amazon Web Services Regions to an existing Amazon Web Services
-Multi-region keys allow you to use the same key material across multiple Amazon Web Services Regions, providing lower latency for applications distributed across regions. When you add Replication Regions, Amazon Web Services Payment Cryptography securely replicates the key material to the specified Amazon Web Services Regions.
+> [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) allow you to use the same key material across multiple Amazon Web Services Regions, providing lower latency for applications distributed across regions. When you add Replication Regions, Amazon Web Services Payment Cryptography securely replicates the key material to the specified Amazon Web Services Regions.
@@ -486 +486 @@ Key -> (structure)
->> Indicates whether this key is a multi-region key and its role in the multi-region key hierarchy.
+>> Indicates whether this key is a Multi-Region key and its role in the Multi-Region key hierarchy.
@@ -488 +488 @@ Key -> (structure)
->> Multi-region keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a primary key (which can be replicated to other regions) or a replica key (which is a copy of a primary key in another region).
+>> Multi-Region replication keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a Primary Region key (PRK) (which can be replicated to other Amazon Web Services Regions) or a Replica Region key (RRK) (which is a copy of a PRK in another Region). For more information, see [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -511 +511 @@ Key -> (structure)
->> Information about the replication status of the key across different regions.
+>> Information about the replication status of the key across different Amazon Web Services Regions.
@@ -529 +529 @@ Key -> (structure)
->>> Represents the replication status information for a key in a replication region.
+>>> Represents the replication status information for a key in a replication region for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -535 +535 @@ Key -> (structure)
->>>> The current status of key replication in this region.
+>>>> The current status of key replication in this Amazon Web Services Region.
@@ -537 +537 @@ Key -> (structure)
->>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as SYNCRHONIZED, IN_PROGRESS, DELETE_IN_PROGRESS, or FAILED. This provides visibility into the replication process for monitoring and troubleshooting purposes.
+>>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as `SYNCRHONIZED` , `IN_PROGRESS` , `DELETE_IN_PROGRESS` , or `FAILED` . This provides visibility into the replication process for monitoring and troubleshooting purposes.
@@ -556 +556 @@ Key -> (structure)
->> Indicates whether this key is using the account’s default replication regions configuration.
+>> Indicates whether this key is using the account’s default replication regions configuration for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -570 +570 @@ Key -> (structure)
-  * [AWS CLI 2.31.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.27 Command Reference](../../index.html) »