AWS Security ChangesHomeSearch

AWS kms documentation change

Service: kms · 2026-01-25 · Documentation low

File: kms/latest/developerguide/example_kms_Verify_section.md

Summary

Added SAP ABAP SDK code example for KMS Verify operation with error handling

Security assessment

The change adds documentation for digital signature verification (a security feature) but doesn't address any specific vulnerability. It demonstrates proper error handling for cryptographic operations which improves security posture.

Diff

diff --git a/kms/latest/developerguide/example_kms_Verify_section.md b/kms/latest/developerguide/example_kms_Verify_section.md
index 3d05c790b..6d62348f4 100644
--- a//kms/latest/developerguide/example_kms_Verify_section.md
+++ b//kms/latest/developerguide/example_kms_Verify_section.md
@@ -114,0 +115,45 @@ There's more on GitHub. Find the complete example and learn how to set up and ru
+SAP ABAP
+    
+
+**SDK for SAP ABAP**
+    
+
+###### Note
+
+There's more on GitHub. Find the complete example and learn how to set up and run in the [AWS Code Examples Repository](https://github.com/awsdocs/aws-doc-sdk-examples/tree/main/sap-abap/services/kms#code-examples). 
+    
+    
+        TRY.
+            " iv_key_id = 'arn:aws:kms:us-east-1:123456789012:key/1234abcd-12ab-34cd-56ef-1234567890ab' (asymmetric key)
+            " iv_message contains the original message
+            " iv_signature contains the signature to verify
+            " iv_signing_algorithm = 'RSASSA_PSS_SHA_256'
+            oo_result = lo_kms->verify(
+              iv_keyid = iv_key_id
+              iv_message = iv_message
+              iv_signature = iv_signature
+              iv_signingalgorithm = iv_signing_algorithm
+            ).
+            DATA(lv_valid) = oo_result->get_signaturevalid( ).
+            IF lv_valid = abap_true.
+              MESSAGE 'Signature is valid.' TYPE 'I'.
+            ELSE.
+              MESSAGE 'Signature is invalid.' TYPE 'I'.
+            ENDIF.
+          CATCH /aws1/cx_kmsdisabledexception.
+            MESSAGE 'The key is disabled.' TYPE 'E'.
+          CATCH /aws1/cx_kmsnotfoundexception.
+            MESSAGE 'Key not found.' TYPE 'E'.
+          CATCH /aws1/cx_kmskmsinvalidsigex.
+            MESSAGE 'Invalid signature.' TYPE 'E'.
+          CATCH /aws1/cx_kmskmsinternalex.
+            MESSAGE 'An internal error occurred.' TYPE 'E'.
+        ENDTRY.
+    
+    
+
+  * For API details, see [Verify](https://docs.aws.amazon.com/sdk-for-sap-abap/v1/api/latest/index.html) in _AWS SDK for SAP ABAP API reference_. 
+
+
+
+