AWS cli documentation change

Service: cli · 2026-05-01 · Documentation medium

File: cli/latest/reference/payment-cryptography/start-key-usage.md

Summary

Updated cross-account use documentation to reference resource-based policies and added MPAStatus structure detailing Multi-Party Approval workflow

Security assessment

Added documentation for resource-based cross-account access controls and Multi-Party Approval security feature. Changes describe security capabilities without indicating a security fix.

Diff

diff --git a/cli/latest/reference/payment-cryptography/start-key-usage.md b/cli/latest/reference/payment-cryptography/start-key-usage.md
index f36ada74c..c5642f31f 100644
--- a//cli/latest/reference/payment-cryptography/start-key-usage.md
+++ b//cli/latest/reference/payment-cryptography/start-key-usage.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
@@ -62 +62 @@ Enables an Amazon Web Services Payment Cryptography key, which makes it active f
-> **Cross-account use:** This operation can’t be used across different Amazon Web Services accounts.
+> **Cross-account use:** This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see [Resource-based policies](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html) .
@@ -593,0 +594,44 @@ Key -> (structure)
+> 
+> MpaStatus -> (structure)
+>
+>> The Multi-Party Approval (MPA) status for the key, if applicable.
+>> 
+>> MpaSessionArn -> (string) [required]
+>>
+>>> The ARN of the MPA session.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `20`
+>>>   * max: `2048`
+>>>   * pattern: `arn:aws(-[^:]+)?:mpa:[a-z0-9-]{1,20}:[0-9]{12}:session/[a-zA-Z0-9._-]+/[a-zA-Z0-9_-]+`
+>>> 
+
+>> 
+>> Status -> (string) [required]
+>>
+>>> The current status of the MPA session.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `PENDING`
+>>>   * `APPROVED`
+>>>   * `FAILED`
+>>>   * `CANCELLED`
+>>> 
+
+>> 
+>> InitiationDate -> (timestamp) [required]
+>>
+>>> The date and time when the MPA session was initiated.
+>> 
+>> StatusMessage -> (string)
+>>
+>>> The message providing additional information about the MPA session status.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `1000`
+>>> 
+
@@ -605 +649 @@ Key -> (structure)
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »