AWS kms documentation change
Summary
Added SAP ABAP SDK code example for CreateGrant operation
Security assessment
Added code sample demonstrating grant creation with explicit operations list. Shows proper error handling for disabled keys. Documents security feature without addressing vulnerabilities.
Diff
diff --git a/kms/latest/developerguide/example_kms_CreateGrant_section.md b/kms/latest/developerguide/example_kms_CreateGrant_section.md index c133c3e30..cc9d0b9fc 100644 --- a//kms/latest/developerguide/example_kms_CreateGrant_section.md +++ b//kms/latest/developerguide/example_kms_CreateGrant_section.md @@ -306,0 +307,36 @@ There's more on GitHub. Find the complete example and learn how to set up and ru +SAP ABAP + + +**SDK for SAP ABAP** + + +###### Note + +There's more on GitHub. Find the complete example and learn how to set up and run in the [AWS Code Examples Repository](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/sap-abap/services/kms#code-examples). + + + TRY. + " iv_key_id = 'arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab' + " iv_grantee_principal = 'arn:aws:iam::123456789012:role/my-role' + " it_operations contains 'Encrypt', 'Decrypt', 'GenerateDataKey' + oo_result = lo_kms->creategrant( + iv_keyid = iv_key_id + iv_granteeprincipal = iv_grantee_principal + it_operations = it_operations + ). + MESSAGE 'Grant created successfully.' TYPE 'I'. + CATCH /aws1/cx_kmsdisabledexception. + MESSAGE 'The key is disabled.' TYPE 'E'. + CATCH /aws1/cx_kmsnotfoundexception. + MESSAGE 'Key not found.' TYPE 'E'. + CATCH /aws1/cx_kmskmsinternalex. + MESSAGE 'An internal error occurred.' TYPE 'E'. + ENDTRY. + + + + * For API details, see [CreateGrant](https://docs.aws.amazon.com/sdk-for-sap-abap/v1/api/latest/index.html) in _AWS SDK for SAP ABAP API reference_. + + + +