AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-01 · Documentation low

File: cli/latest/reference/payment-cryptography/restore-key.md

Summary

Updated CLI version reference and enhanced Multi-Region key replication documentation with terminology consistency, added PRK/RRK definitions, and links to user guide

Security assessment

Changes improve documentation about Multi-Region key security features (PRK/RRK roles, replication status monitoring) but do not address a specific vulnerability. Enhancements provide better operational visibility rather than patching security flaws.

Diff

diff --git a/cli/latest/reference/payment-cryptography/restore-key.md b/cli/latest/reference/payment-cryptography/restore-key.md
index 7eec3b230..f995f8652 100644
--- a//cli/latest/reference/payment-cryptography/restore-key.md
+++ b//cli/latest/reference/payment-cryptography/restore-key.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.27 Command Reference](../../index.html) »
@@ -509 +509 @@ Key -> (structure)
->> Indicates whether this key is a multi-region key and its role in the multi-region key hierarchy.
+>> Indicates whether this key is a Multi-Region key and its role in the Multi-Region key hierarchy.
@@ -511 +511 @@ Key -> (structure)
->> Multi-region keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a primary key (which can be replicated to other regions) or a replica key (which is a copy of a primary key in another region).
+>> Multi-Region replication keys allow the same key material to be used across multiple Amazon Web Services Regions. This field specifies whether the key is a Primary Region key (PRK) (which can be replicated to other Amazon Web Services Regions) or a Replica Region key (RRK) (which is a copy of a PRK in another Region). For more information, see [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -534 +534 @@ Key -> (structure)
->> Information about the replication status of the key across different regions.
+>> Information about the replication status of the key across different Amazon Web Services Regions.
@@ -552 +552 @@ Key -> (structure)
->>> Represents the replication status information for a key in a replication region.
+>>> Represents the replication status information for a key in a replication region for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -558 +558 @@ Key -> (structure)
->>>> The current status of key replication in this region.
+>>>> The current status of key replication in this Amazon Web Services Region.
@@ -560 +560 @@ Key -> (structure)
->>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as SYNCRHONIZED, IN_PROGRESS, DELETE_IN_PROGRESS, or FAILED. This provides visibility into the replication process for monitoring and troubleshooting purposes.
+>>>> This field indicates whether the key replication is in progress, completed successfully, or has encountered an error. Possible values include states such as `SYNCRHONIZED` , `IN_PROGRESS` , `DELETE_IN_PROGRESS` , or `FAILED` . This provides visibility into the replication process for monitoring and troubleshooting purposes.
@@ -579 +579 @@ Key -> (structure)
->> Indicates whether this key is using the account’s default replication regions configuration.
+>> Indicates whether this key is using the account’s default replication regions configuration for [Multi-Region key replication](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/keys-multi-region-replication.html) .
@@ -593 +593 @@ Key -> (structure)
-  * [AWS CLI 2.31.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.27 Command Reference](../../index.html) »