AWS cli documentation change

Service: cli · 2026-04-28 · Documentation low

File: cli/latest/reference/kms/update-custom-key-store.md

Summary

Updated CloudHSM key store update requirements and CLI version reference

Security assessment

Clarifies operational requirements for updating CloudHSM key stores but doesn't address vulnerabilities or security features. The change allows name updates in connected state without security implications.

Diff

diff --git a/cli/latest/reference/kms/update-custom-key-store.md b/cli/latest/reference/kms/update-custom-key-store.md
index c5ec8f631..391c79a0e 100644
--- a//cli/latest/reference/kms/update-custom-key-store.md
+++ b//cli/latest/reference/kms/update-custom-key-store.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
@@ -78 +78 @@ When updating an external key store in the KMS console, you can upload a JSON-ba
-For an CloudHSM key store, you can use this operation to change the custom key store friendly name (`NewCustomKeyStoreName` ), to tell KMS about a change to the `kmsuser` crypto user password (`KeyStorePassword` ), or to associate the custom key store with a different, but related, CloudHSM cluster (`CloudHsmClusterId` ). To update any property of an CloudHSM key store, the `ConnectionState` of the CloudHSM key store must be `DISCONNECTED` .
+For an CloudHSM key store, you can use this operation to change the custom key store friendly name (`NewCustomKeyStoreName` ), to tell KMS about a change to the `kmsuser` crypto user password (`KeyStorePassword` ), or to associate the custom key store with a different, but related, CloudHSM cluster (`CloudHsmClusterId` ). To update most properties of an CloudHSM key store, the `ConnectionState` of the CloudHSM key store must be `DISCONNECTED` . However, you can update the `CustomKeyStoreName` of an AWS CloudHSM key store when it is in the `CONNECTED` or `DISCONNECTED` state.
@@ -164 +164 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/kms-20
-> To change this value, an CloudHSM key store must be disconnected. An external key store can be connected or disconnected.
+> To change this value, the custom key store can be connected or disconnected.
@@ -557 +557 @@ None
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »