AWS cli documentation change
Summary
Added new parameter '--reuse-last-generated-token' to allow reusing existing import tokens and wrapping key certificates with at least 7 days of remaining validity instead of generating new ones each time
Security assessment
Similar to the export change, this introduces token reuse for import operations with a 7-day validity requirement. This is a feature addition for cryptographic operations but doesn't appear to address a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/payment-cryptography/get-parameters-for-import.md b/cli/latest/reference/payment-cryptography/get-parameters-for-import.md index 6b2af0def..57757e855 100644 --- a//cli/latest/reference/payment-cryptography/get-parameters-for-import.md +++ b//cli/latest/reference/payment-cryptography/get-parameters-for-import.md @@ -15 +15 @@ - * [AWS CLI 2.34.23 Command Reference](../../index.html) » + * [AWS CLI 2.34.25 Command Reference](../../index.html) » @@ -63,0 +64,2 @@ The wrapping key certificate wraps the key under import. The import token and wr +To return a previously generated import token and wrapping key certificate instead of generating new ones, set `ReuseLastGeneratedToken` to `true` . + @@ -80,0 +83 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/paymen + [--reuse-last-generated-token | --no-reuse-last-generated-token] @@ -147,0 +151,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/paymen +`--reuse-last-generated-token` | `--no-reuse-last-generated-token` (boolean) + +> Specifies whether to reuse the existing import token and wrapping key certificate. If set to `true` and a valid import token exists for the same key material type and wrapping key algorithm with at least 7 days of remaining validity, the existing token and wrapping key certificate are returned. Otherwise, a new import token and wrapping key certificate are generated. The default value is `false` , which generates a new import token and wrapping key certificate on every call. + @@ -393 +400 @@ ParametersValidUntilTimestamp -> (timestamp) - * [AWS CLI 2.34.23 Command Reference](../../index.html) » + * [AWS CLI 2.34.25 Command Reference](../../index.html) »