AWS cli documentation change

Service: cli · 2026-01-07 · Documentation medium

File: cli/latest/reference/emr-serverless/create-application.md

Summary

Added documentation for '--disk-encryption-configuration' option to enable encryption of local disks using KMS keys

Security assessment

The change introduces documentation for encrypting local disks using KMS keys and encryption contexts, which is a security feature enhancement. There is no evidence of a specific security vulnerability being addressed.

Diff

diff --git a/cli/latest/reference/emr-serverless/create-application.md b/cli/latest/reference/emr-serverless/create-application.md
index f8461b1c9..23e395a1d 100644
--- a//cli/latest/reference/emr-serverless/create-application.md
+++ b//cli/latest/reference/emr-serverless/create-application.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.30 Command Reference](../../index.html) »
@@ -81,0 +82 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/emr-se
+    [--disk-encryption-configuration <value>]
@@ -913,0 +915,61 @@ JSON Syntax:
+`--disk-encryption-configuration` (structure)
+
+> The configuration object that allows encrypting local disks.
+> 
+> encryptionContext -> (map)
+>
+>> Specifies the optional encryption context that will be used when encrypting the data. An encryption context is a collection of non-secret key-value pairs that represent additional authenticated data.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `8`
+>> 
+
+>> 
+>> key -> (string)
+>>
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `128`
+>>> 
+
+>> 
+>> value -> (string)
+>>
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `384`
+>>> 
+
+> 
+> encryptionKeyArn -> (string)
+>
+>> The KMS key ARN to encrypt local disks.
+>> 
+>> Constraints:
+>> 
+>>   * min: `20`
+>>   * max: `2048`
+>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):kms:[a-zA-Z0-9\-]*:([0-9]{12}):key\/[a-zA-Z0-9-]+`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    encryptionContext={KeyName1=string,KeyName2=string},encryptionKeyArn=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "encryptionContext": {"string": "string"
+        ...},
+      "encryptionKeyArn": "string"
+    }
+    
+
@@ -1170 +1232 @@ arn -> (string)
-  * [AWS CLI 2.32.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.30 Command Reference](../../index.html) »