AWS Security ChangesHomeSearch

AWS kms documentation change

Service: kms · 2025-11-01 · Documentation low

File: kms/latest/developerguide/update-xks-keystore.md

Summary

Updated documentation for editing external key stores: Added VPC endpoint service owner field requirement, fixed typos, adjusted step numbering, and clarified UI navigation steps

Security assessment

Changes focus on procedural clarity and documentation accuracy without addressing specific vulnerabilities. The VPC endpoint service owner addition improves configuration guidance but doesn't indicate a security fix. No evidence of patching vulnerabilities or mitigating exploits.

Diff

diff --git a/kms/latest/developerguide/update-xks-keystore.md b/kms/latest/developerguide/update-xks-keystore.md
index bc5abe52a..3bac976bb 100644
--- a//kms/latest/developerguide/update-xks-keystore.md
+++ b//kms/latest/developerguide/update-xks-keystore.md
@@ -40,0 +41 @@ Do not include confidential or sensitive information in this field. This field m
+[VPC endpoint service owner ](./create-xks-keystore.html#require-vpc-service-name) (XksProxyVpcEndpointServiceOwner)(This field is required for VPC endpoint service connectivity) |  | ![Green checkmark icon indicating success or completion.](/images/kms/latest/developerguide/images/icon-successful.png)  
@@ -46 +47 @@ You can edit your external key store's properties in the AWS KMS console or by u
-When you edit an key store, you can change any or of the editable values. Some changes require that the external key store be disconnected from its external key store proxy.
+When you edit an key store, you can change any of the editable values. Some changes require that the external key store be disconnected from its external key store proxy.
@@ -56 +57 @@ If you are editing the proxy URI path or proxy authentication credential, you ca
-  4. Choose the row of the external key store you want to edit.
+  4. Choose the key store you want to edit.
@@ -58 +59 @@ If you are editing the proxy URI path or proxy authentication credential, you ca
-  5. If necessary, disconnect the external key store from its external key store proxy. From the **Key store actions** menu, choose **Disconnect**.
+    1. If necessary, disconnect the external key store from its external key store proxy. From the **Key store actions** menu, choose **Disconnect**.
@@ -60 +61 @@ If you are editing the proxy URI path or proxy authentication credential, you ca
-  6. From the **Key store actions** menu, choose **Edit**.
+  5. From the **Key store actions** menu, choose **Edit**.
@@ -62 +63 @@ If you are editing the proxy URI path or proxy authentication credential, you ca
-  7. Change one or more of the editable external key store properties. You can also upload an external key store [proxy configuration file](./create-xks-keystore.html#proxy-configuration-file) with values for the proxy URI path and proxy authentication credential.You can use a proxy configuration file even if some values specified in the file haven't changed.
+  6. Change one or more of the editable external key store properties. You can also upload an external key store [proxy configuration file](./create-xks-keystore.html#proxy-configuration-file) with values for the proxy URI path and proxy authentication credential.You can use a proxy configuration file even if some values specified in the file haven't changed.
@@ -64 +65 @@ If you are editing the proxy URI path or proxy authentication credential, you ca
-  8. Choose **Update external key store**. 
+  7. Choose **Update external key store**. 
@@ -66 +67 @@ If you are editing the proxy URI path or proxy authentication credential, you ca
-  9. Review the warning, and if you decide to continue, confirm the warning, and then choose **Update external key store**.
+  8. Review the warning, and if you decide to continue, confirm the warning, and then choose **Update external key store**.
@@ -70 +71 @@ When the procedure is successful, a message describes the properties that you ed
-  10. If necessary, reconnect the external key store. From the **Key store actions** menu, choose **Connect**.
+  9. If necessary, reconnect the external key store. From the **Key store actions** menu, choose **Connect**.