AWS cli documentation change
Summary
Updated cross-account use documentation to reference resource-based policies and added MPAStatus structure detailing Multi-Party Approval workflow
Security assessment
The change enhances documentation about cross-account access controls and introduces Multi-Party Approval (MPA) workflows, improving clarity on security features without indicating a vulnerability fix.
Diff
diff --git a/cli/latest/reference/payment-cryptography/remove-key-replication-regions.md b/cli/latest/reference/payment-cryptography/remove-key-replication-regions.md index dc7328d5d..97a5df9cd 100644 --- a//cli/latest/reference/payment-cryptography/remove-key-replication-regions.md +++ b//cli/latest/reference/payment-cryptography/remove-key-replication-regions.md @@ -14,2 +14,2 @@ - * [previous](list-tags-for-resource.html "list-tags-for-resource") | - * [AWS CLI 2.34.38 Command Reference](../../index.html) » + * [previous](put-resource-policy.html "put-resource-policy") | + * [AWS CLI 2.34.40 Command Reference](../../index.html) » @@ -22 +22 @@ - * [← list-tags-for-resource](list-tags-for-resource.html "previous chapter \(use the left arrow\)") / + * [← put-resource-policy](put-resource-policy.html "previous chapter \(use the left arrow\)") / @@ -67 +67 @@ When you remove Replication Regions, the key material is securely deleted from t -**Cross-account use:** This operation can’t be used across different Amazon Web Services accounts. +**Cross-account use:** This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see [Resource-based policies](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html) . @@ -575,0 +576,44 @@ Key -> (structure) +> +> MpaStatus -> (structure) +> +>> The Multi-Party Approval (MPA) status for the key, if applicable. +>> +>> MpaSessionArn -> (string) [required] +>> +>>> The ARN of the MPA session. +>>> +>>> Constraints: +>>> +>>> * min: `20` +>>> * max: `2048` +>>> * pattern: `arn:aws(-[^:]+)?:mpa:[a-z0-9-]{1,20}:[0-9]{12}:session/[a-zA-Z0-9._-]+/[a-zA-Z0-9_-]+` +>>> + +>> +>> Status -> (string) [required] +>> +>>> The current status of the MPA session. +>>> +>>> Possible values: +>>> +>>> * `PENDING` +>>> * `APPROVED` +>>> * `FAILED` +>>> * `CANCELLED` +>>> + +>> +>> InitiationDate -> (timestamp) [required] +>> +>>> The date and time when the MPA session was initiated. +>> +>> StatusMessage -> (string) +>> +>>> The message providing additional information about the MPA session status. +>>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1000` +>>> + @@ -577 +621 @@ Key -> (structure) - * [← list-tags-for-resource](list-tags-for-resource.html "previous chapter \(use the left arrow\)") / + * [← put-resource-policy](put-resource-policy.html "previous chapter \(use the left arrow\)") / @@ -586,2 +630,2 @@ Key -> (structure) - * [previous](list-tags-for-resource.html "list-tags-for-resource") | - * [AWS CLI 2.34.38 Command Reference](../../index.html) » + * [previous](put-resource-policy.html "put-resource-policy") | + * [AWS CLI 2.34.40 Command Reference](../../index.html) »