AWS cli documentation change

Service: cli · 2026-01-07 · Documentation medium

File: cli/latest/reference/emr-serverless/update-application.md

Summary

Added documentation for new --disk-encryption-configuration parameter enabling local disk encryption using KMS keys

Security assessment

The change introduces documentation for encrypting local disks using KMS keys and encryption contexts, which is a security enhancement feature. There's no evidence this addresses a specific vulnerability.

Diff

diff --git a/cli/latest/reference/emr-serverless/update-application.md b/cli/latest/reference/emr-serverless/update-application.md
index 4f627fb98..561400ffa 100644
--- a//cli/latest/reference/emr-serverless/update-application.md
+++ b//cli/latest/reference/emr-serverless/update-application.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.30 Command Reference](../../index.html) »
@@ -80,0 +81 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/emr-se
+    [--disk-encryption-configuration <value>]
@@ -883,0 +885,61 @@ JSON Syntax:
+`--disk-encryption-configuration` (structure)
+
+> The configuration object that allows encrypting local disks.
+> 
+> encryptionContext -> (map)
+>
+>> Specifies the optional encryption context that will be used when encrypting the data. An encryption context is a collection of non-secret key-value pairs that represent additional authenticated data.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `8`
+>> 
+
+>> 
+>> key -> (string)
+>>
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `128`
+>>> 
+
+>> 
+>> value -> (string)
+>>
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `384`
+>>> 
+
+> 
+> encryptionKeyArn -> (string)
+>
+>> The KMS key ARN to encrypt local disks.
+>> 
+>> Constraints:
+>> 
+>>   * min: `20`
+>>   * max: `2048`
+>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):kms:[a-zA-Z0-9\-]*:([0-9]{12}):key\/[a-zA-Z0-9-]+`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    encryptionContext={KeyName1=string,KeyName2=string},encryptionKeyArn=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "encryptionContext": {"string": "string"
+        ...},
+      "encryptionKeyArn": "string"
+    }
+    
+
@@ -1756,0 +1819,45 @@ application -> (structure)
+> 
+> diskEncryptionConfiguration -> (structure)
+>
+>> The configuration object that allows encrypting local disks.
+>> 
+>> encryptionContext -> (map)
+>>
+>>> Specifies the optional encryption context that will be used when encrypting the data. An encryption context is a collection of non-secret key-value pairs that represent additional authenticated data.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `8`
+>>> 
+
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `128`
+>>>> 
+
+>>> 
+>>> value -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `384`
+>>>> 
+
+>> 
+>> encryptionKeyArn -> (string)
+>>
+>>> The KMS key ARN to encrypt local disks.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `20`
+>>>   * max: `2048`
+>>>   * pattern: `arn:(aws[a-zA-Z0-9-]*):kms:[a-zA-Z0-9\-]*:([0-9]{12}):key\/[a-zA-Z0-9-]+`
+>>> 
+
@@ -1830 +1937 @@ application -> (structure)
-  * [AWS CLI 2.32.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.30 Command Reference](../../index.html) »