AWS glue high security documentation change

Service: glue · 2025-11-25 · Security-related high

File: glue/latest/webapi/API_JobBookmarksEncryption.md

Summary

Updated KMS key ARN pattern validation to require valid KMS ARN format

Security assessment

The pattern change removes the empty string allowance and enforces proper KMS ARN format, which strengthens encryption configuration validation. This prevents misconfigurations that could lead to unencrypted job bookmarks.

Diff

diff --git a/glue/latest/webapi/API_JobBookmarksEncryption.md b/glue/latest/webapi/API_JobBookmarksEncryption.md
index d28638767..70b6f8b62 100644
--- a//glue/latest/webapi/API_JobBookmarksEncryption.md
+++ b//glue/latest/webapi/API_JobBookmarksEncryption.md
@@ -31 +31 @@ Type: String
-Pattern: `^$|arn:aws[a-z0-9-]*:kms:.*`
+Pattern: `arn:aws:kms:.*`