AWS code-library high security documentation change

Service: code-library · 2026-01-25 · Security-related high

File: code-library/latest/ug/kms_example_kms_Verify_section.md

Summary

Added SAP ABAP code example for KMS Verify API operation

Security assessment

The change adds documentation for digital signature verification using KMS, which is a core security feature. It includes explicit error handling for security-related exceptions like KmsInvalidSignatureException and KmsDisabledException, demonstrating cryptographic integrity verification.

Diff

diff --git a/code-library/latest/ug/kms_example_kms_Verify_section.md b/code-library/latest/ug/kms_example_kms_Verify_section.md
index 8252b201d..1690315ce 100644
--- a//code-library/latest/ug/kms_example_kms_Verify_section.md
+++ b//code-library/latest/ug/kms_example_kms_Verify_section.md
@@ -116,0 +117,45 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+SAP ABAP
+    
+
+**SDK for SAP ABAP**
+    
+
+###### Note
+
+There's more on GitHub. Find the complete example and learn how to set up and run in the [AWS Code Examples Repository](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/sap-abap/services/kms#code-examples). 
+    
+    
+        TRY.
+            " iv_key_id = 'arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab' (asymmetric key)
+            " iv_message contains the original message
+            " iv_signature contains the signature to verify
+            " iv_signing_algorithm = 'RSASSA_PSS_SHA_256'
+            oo_result = lo_kms->verify(
+              iv_keyid = iv_key_id
+              iv_message = iv_message
+              iv_signature = iv_signature
+              iv_signingalgorithm = iv_signing_algorithm
+            ).
+            DATA(lv_valid) = oo_result->get_signaturevalid( ).
+            IF lv_valid = abap_true.
+              MESSAGE 'Signature is valid.' TYPE 'I'.
+            ELSE.
+              MESSAGE 'Signature is invalid.' TYPE 'I'.
+            ENDIF.
+          CATCH /aws1/cx_kmsdisabledexception.
+            MESSAGE 'The key is disabled.' TYPE 'E'.
+          CATCH /aws1/cx_kmsnotfoundexception.
+            MESSAGE 'Key not found.' TYPE 'E'.
+          CATCH /aws1/cx_kmskmsinvalidsigex.
+            MESSAGE 'Invalid signature.' TYPE 'E'.
+          CATCH /aws1/cx_kmskmsinternalex.
+            MESSAGE 'An internal error occurred.' TYPE 'E'.
+        ENDTRY.
+    
+    
+
+  * For API details, see [Verify](https://docs.aws.amazon.com/sdk-for-sap-abap/v1/api/latest/index.html) in _AWS SDK for SAP ABAP API reference_. 
+
+
+
+