AWS cli documentation change

Service: cli · 2026-01-22 · Documentation low

File: cli/latest/reference/verifiedpermissions/get-policy-store.md

Summary

Added documentation for encryptionState configuration in policy stores, including KMS key settings and encryption context. Updated CLI version reference.

Security assessment

The change documents encryption configuration options (KMS keys and encryption contexts) which are security features. However, there's no evidence this addresses a specific vulnerability; it appears to be standard security feature documentation.

Diff

diff --git a/cli/latest/reference/verifiedpermissions/get-policy-store.md b/cli/latest/reference/verifiedpermissions/get-policy-store.md
index c7cae34f6..ed0a0151c 100644
--- a//cli/latest/reference/verifiedpermissions/get-policy-store.md
+++ b//cli/latest/reference/verifiedpermissions/get-policy-store.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.4 Command Reference](../../index.html) »
@@ -325,0 +326,53 @@ deletionProtection -> (string)
+encryptionState -> (tagged union structure)
+
+> A structure that contains the encryption configuration for the policy store.
+> 
+> ### Note
+> 
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `kmsEncryptionState`, `default`.
+> 
+> kmsEncryptionState -> (structure)
+>
+>> The KMS encryption settings currently configured for this policy store to encrypt data with. It contains the customer-managed KMS key, and a user-defined encryption context.
+>> 
+>> key -> (string) [required]
+>>
+>>> The customer-managed KMS key [Amazon Resource Name (ARN)](https://docs.aws.amazon.com/general/latest/gr/aws-arns-and-namespaces.html) being used for encryption processes.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `[a-zA-Z0-9:/_-]+`
+>>> 
+
+>> 
+>> encryptionContext -> (map) [required]
+>>
+>>> User-defined, additional context added to encryption processes.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `8192`
+>>> 
+
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>> 
+
+>>> 
+>>> value -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>> 
+
+> 
+> default -> (structure)
+>
+>> Policy store data is encrypted using AWS owned encryption keys.
+
@@ -376 +429 @@ tags -> (map)
-  * [AWS CLI 2.33.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.4 Command Reference](../../index.html) »