AWS general documentation change
Summary
Standardized KMS GenerateDataKeyPair request rate quotas across all supported regions for RSA key types
Security assessment
This updates service quotas for cryptographic operations but does not indicate a security fix or vulnerability. Rate limits are operational controls, not direct security features.
Diff
diff --git a/general/latest/gr/kms.md b/general/latest/gr/kms.md index 90ba40100..208d62a39 100644 --- a//general/latest/gr/kms.md +++ b//general/latest/gr/kms.md @@ -87,3 +87,3 @@ GenerateDataKeyPair (ECC_SECG_P256K1) request rate | Each supported Region: 100 -GenerateDataKeyPair (RSA_2048) request rate | us-east-1: 20 per second ap-northeast-2: 20 per second ap-south-1: 20 per second ca-central-1: 20 per second eu-central-1: 20 per second eu-west-3: 20 per second sa-east-1: 20 per second Each of the other supported Regions: 1 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-77042783) | Maximum requests per second to generate RSA_2048 data key pairs. This shared quota applies to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext requests for RSA_2048 data key pairs. When you reach this quota, KMS rejects this type of request for the remainder of the interval. -GenerateDataKeyPair (RSA_3072) request rate | us-east-1: 4 per second ap-northeast-2: 4 per second ap-south-1: 4 per second ca-central-1: 4 per second eu-central-1: 4 per second eu-west-3: 4 per second sa-east-1: 4 per second Each of the other supported Regions: 0.5 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-AE57B391) | Maximum requests per second to generate RSA_3072 data key pairs. This shared quota applies to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext requests for RSA_3072 data key pairs. When you reach this quota, KMS rejects this type of request for the remainder of the interval. -GenerateDataKeyPair (RSA_4096) request rate | us-east-1: 1 per second ap-northeast-2: 1 per second ap-south-1: 1 per second ca-central-1: 1 per second eu-central-1: 1 per second eu-west-3: 1 per second sa-east-1: 1 per second Each of the other supported Regions: 0.1 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-FCE4492D) | Maximum requests per second to generate RSA_4096 data key pairs. This shared quota applies to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext requests for RSA_4096 data key pairs. When you reach this quota, KMS rejects this type of request for the remainder of the interval. +GenerateDataKeyPair (RSA_2048) request rate | Each supported Region: 20 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-77042783) | Maximum requests per second to generate RSA_2048 data key pairs. This shared quota applies to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext requests for RSA_2048 data key pairs. When you reach this quota, KMS rejects this type of request for the remainder of the interval. +GenerateDataKeyPair (RSA_3072) request rate | Each supported Region: 4 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-AE57B391) | Maximum requests per second to generate RSA_3072 data key pairs. This shared quota applies to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext requests for RSA_3072 data key pairs. When you reach this quota, KMS rejects this type of request for the remainder of the interval. +GenerateDataKeyPair (RSA_4096) request rate | Each supported Region: 1 per second | [Yes](https://console.aws.amazon.com/servicequotas/home/services/kms/quotas/L-FCE4492D) | Maximum requests per second to generate RSA_4096 data key pairs. This shared quota applies to GenerateDataKeyPair and GenerateDataKeyPairWithoutPlaintext requests for RSA_4096 data key pairs. When you reach this quota, KMS rejects this type of request for the remainder of the interval.