AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-01 · Documentation low

File: cli/latest/reference/payment-cryptography/import-key.md

Summary

Updated terminology for Multi-Region keys, added replication documentation links, corrected a description of certificate usage in TR-34 key block wrapping, and standardized region references

Security assessment

The correction from 'Key Identifier used for unwrapping' to 'certificate used to wrap' clarifies secure key import processes, but this is a documentation improvement rather than a vulnerability fix. The changes enhance understanding of security features without addressing a specific security incident.

Diff

diff --git a/cli/latest/reference/payment-cryptography/import-key.md b/cli/latest/reference/payment-cryptography/import-key.md
index 4161ea55d..e0dd94b4c 100644
--- a//cli/latest/reference/payment-cryptography/import-key.md
+++ b//cli/latest/reference/payment-cryptography/import-key.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.27 Command Reference](../../index.html) »
@@ -548 +548 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/paymen
->>> Key Identifier used for unwrapping the import key
+>>> The certificate used to wrap the TR-34 key block.
@@ -1473 +1473 @@ Key -> (structure)
->> Indicates whether this key is a multi-region key and its role in the multi-region key hierarchy.
+>> Indicates whether this key is a Multi-Region key and its role in the Multi-Region key hierarchy.
@@ -1475 +1475 @@ Key -> (structure)
->> Multi-region keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a primary key (which can be replicated to other regions) or a replica key (which is a copy of a primary key in another region).
+>> Multi-Region replication keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a Primary Region key (PRK) (which can be replicated to other Amazon Web Services Regions) or a Replica Region key (RRK) (which is a copy of a PRK in another Region). For more information, see [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -1498 +1498 @@ Key -> (structure)
->> Information about the replication status of the key across different regions.
+>> Information about the replication status of the key across different Amazon Web Services Regions.
@@ -1516 +1516 @@ Key -> (structure)
->>> Represents the replication status information for a key in a replication region.
+>>> Represents the replication status information for a key in a replication region for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -1522 +1522 @@ Key -> (structure)
->>>> The current status of key replication in this region.
+>>>> The current status of key replication in this Amazon Web Services Region.
@@ -1524 +1524 @@ Key -> (structure)
->>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as SYNCRHONIZED, IN_PROGRESS, DELETE_IN_PROGRESS, or FAILED. This provides visibility into the replication process for monitoring and troubleshooting purposes.
+>>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as `SYNCRHONIZED` , `IN_PROGRESS` , `DELETE_IN_PROGRESS` , or `FAILED` . This provides visibility into the replication process for monitoring and troubleshooting purposes.
@@ -1543 +1543 @@ Key -> (structure)
->> Indicates whether this key is using the account’s default replication regions configuration.
+>> Indicates whether this key is using the account’s default replication regions configuration for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -1557 +1557 @@ Key -> (structure)
-  * [AWS CLI 2.31.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.27 Command Reference](../../index.html) »