AWS cli documentation change
Summary
Added explicit warning about dependency checks before region removal, enhanced Multi-Region key documentation with terminology/clarity, and updated replication status descriptions
Security assessment
While the changes emphasize secure key material deletion and operational warnings, they document existing security practices rather than introducing new security features or addressing specific vulnerabilities. The warning improves operational safety but doesn't indicate a resolved security flaw.
Diff
diff --git a/cli/latest/reference/payment-cryptography/remove-key-replication-regions.md b/cli/latest/reference/payment-cryptography/remove-key-replication-regions.md index e5a95e2d4..4076f9803 100644 --- a//cli/latest/reference/payment-cryptography/remove-key-replication-regions.md +++ b//cli/latest/reference/payment-cryptography/remove-key-replication-regions.md @@ -15 +15 @@ - * [AWS CLI 2.31.26 Command Reference](../../index.html) » + * [AWS CLI 2.31.27 Command Reference](../../index.html) » @@ -61 +61 @@ Removes Replication Regions from an existing Amazon Web Services Payment Cryptog -When you remove Replication Regions, the key material is securely deleted from those regions and can no longer be used for cryptographic operations there. This operation is irreversible for the specified Amazon Web Services Regions. +When you remove Replication Regions, the key material is securely deleted from those regions and can no longer be used for cryptographic operations there. This operation is irreversible for the specified Amazon Web Services Regions. For more information, see [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) . @@ -63 +63 @@ When you remove Replication Regions, the key material is securely deleted from t -Ensure that no active cryptographic operations or applications depend on the key in the regions you’re removing before performing this operation. +### Warning @@ -65,3 +65,5 @@ Ensure that no active cryptographic operations or applications depend on the key -> **Cross-account use:** This operation can’t be used across different Amazon Web Services accounts. -> -> **Related operations:** +> Ensure that no active cryptographic operations or applications depend on the key in the regions you’re removing before performing this operation. + +**Cross-account use:** This operation can’t be used across different Amazon Web Services accounts. + +**Related operations:** @@ -485 +487 @@ Key -> (structure) ->> Indicates whether this key is a multi-region key and its role in the multi-region key hierarchy. +>> Indicates whether this key is a Multi-Region key and its role in the Multi-Region key hierarchy. @@ -487 +489 @@ Key -> (structure) ->> Multi-region keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a primary key (which can be replicated to other regions) or a replica key (which is a copy of a primary key in another region). +>> Multi-Region replication keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a Primary Region key (PRK) (which can be replicated to other Amazon Web Services Regions) or a Replica Region key (RRK) (which is a copy of a PRK in another Region). For more information, see [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) . @@ -510 +512 @@ Key -> (structure) ->> Information about the replication status of the key across different regions. +>> Information about the replication status of the key across different Amazon Web Services Regions. @@ -528 +530 @@ Key -> (structure) ->>> Represents the replication status information for a key in a replication region. +>>> Represents the replication status information for a key in a replication region for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) . @@ -534 +536 @@ Key -> (structure) ->>>> The current status of key replication in this region. +>>>> The current status of key replication in this Amazon Web Services Region. @@ -536 +538 @@ Key -> (structure) ->>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as SYNCRHONIZED, IN_PROGRESS, DELETE_IN_PROGRESS, or FAILED. This provides visibility into the replication process for monitoring and troubleshooting purposes. +>>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as `SYNCRHONIZED` , `IN_PROGRESS` , `DELETE_IN_PROGRESS` , or `FAILED` . This provides visibility into the replication process for monitoring and troubleshooting purposes. @@ -555 +557 @@ Key -> (structure) ->> Indicates whether this key is using the account’s default replication regions configuration. +>> Indicates whether this key is using the account’s default replication regions configuration for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) . @@ -569 +571 @@ Key -> (structure) - * [AWS CLI 2.31.26 Command Reference](../../index.html) » + * [AWS CLI 2.31.27 Command Reference](../../index.html) »