AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-22 · Documentation low

File: cli/latest/reference/kms/replicate-key.md

Summary

Updated key material origin documentation to include multi-region keys with EXTERNAL origin in rotation support

Security assessment

Expands documentation about supported key origins for rotation without indicating a security fix. This improves clarity about security features but doesn't address a specific vulnerability.

Diff

diff --git a/cli/latest/reference/kms/replicate-key.md b/cli/latest/reference/kms/replicate-key.md
index 617266572..072b4801b 100644
--- a//cli/latest/reference/kms/replicate-key.md
+++ b//cli/latest/reference/kms/replicate-key.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.39 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.3 Command Reference](../../index.html) »
@@ -792 +792 @@ ReplicaKeyMetadata -> (structure)
->> Identifies the current key material. This value is present for symmetric encryption keys with `AWS_KMS` origin and single-Region, symmetric encryption keys with `EXTERNAL` origin. These KMS keys support automatic or on-demand key rotation and can have multiple key materials associated with them. KMS uses the current key material for both encryption and decryption, and the non-current key material for decryption operations only.
+>> Identifies the current key material. This value is present for symmetric encryption keys with `AWS_KMS` or `EXTERNAL` origin. These KMS keys support automatic or on-demand key rotation and can have multiple key materials associated with them. KMS uses the current key material for both encryption and decryption, and the non-current key material for decryption operations only.
@@ -860 +860 @@ ReplicaTags -> (list)
-  * [AWS CLI 2.31.39 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.3 Command Reference](../../index.html) »