AWS cli documentation change

Service: cli · 2026-05-01 · Documentation low

File: cli/latest/reference/payment-cryptography/get-key.md

Summary

Updated cross-account use note to support resource-based policies and added MPAStatus documentation

Security assessment

Adds documentation for resource-based access policies and Multi-Party Approval workflows. This enhances security features documentation but doesn't address a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/payment-cryptography/get-key.md b/cli/latest/reference/payment-cryptography/get-key.md
index 6740fbdf4..44ac287a9 100644
--- a//cli/latest/reference/payment-cryptography/get-key.md
+++ b//cli/latest/reference/payment-cryptography/get-key.md
@@ -13 +13 @@
-  * [next](get-parameters-for-export.html "get-parameters-for-export") |
+  * [next](get-mpa-team-association.html "get-mpa-team-association") |
@@ -15 +15 @@
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
@@ -23 +23 @@
-  * [get-parameters-for-export →](get-parameters-for-export.html "next chapter \(use the right arrow\)")
+  * [get-mpa-team-association →](get-mpa-team-association.html "next chapter \(use the right arrow\)")
@@ -62 +62 @@ Gets the key metadata for an Amazon Web Services Payment Cryptography key, inclu
-> **Cross-account use:** This operation can’t be used across different Amazon Web Services accounts.
+> **Cross-account use:** This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see [Resource-based policies](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html) .
@@ -596,0 +597,44 @@ Key -> (structure)
+> 
+> MpaStatus -> (structure)
+>
+>> The Multi-Party Approval (MPA) status for the key, if applicable.
+>> 
+>> MpaSessionArn -> (string) [required]
+>>
+>>> The ARN of the MPA session.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `20`
+>>>   * max: `2048`
+>>>   * pattern: `arn:aws(-[^:]+)?:mpa:[a-z0-9-]{1,20}:[0-9]{12}:session/[a-zA-Z0-9._-]+/[a-zA-Z0-9_-]+`
+>>> 
+
+>> 
+>> Status -> (string) [required]
+>>
+>>> The current status of the MPA session.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `PENDING`
+>>>   * `APPROVED`
+>>>   * `FAILED`
+>>>   * `CANCELLED`
+>>> 
+
+>> 
+>> InitiationDate -> (timestamp) [required]
+>>
+>>> The date and time when the MPA session was initiated.
+>> 
+>> StatusMessage -> (string)
+>>
+>>> The message providing additional information about the MPA session status.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `1000`
+>>> 
+
@@ -599 +643 @@ Key -> (structure)
-  * [get-parameters-for-export →](get-parameters-for-export.html "next chapter \(use the right arrow\)")
+  * [get-mpa-team-association →](get-mpa-team-association.html "next chapter \(use the right arrow\)")
@@ -606 +650 @@ Key -> (structure)
-  * [next](get-parameters-for-export.html "get-parameters-for-export") |
+  * [next](get-mpa-team-association.html "get-mpa-team-association") |
@@ -608 +652 @@ Key -> (structure)
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »