AWS cli documentation change

Service: cli · 2026-05-01 · Documentation low

File: cli/latest/reference/payment-cryptography/stop-key-usage.md

Summary

Updated CLI version reference, added cross-account use documentation with resource-based policies link, and introduced MpaStatus structure detailing Multi-Party Approval process

Security assessment

Added documentation for cross-account access via resource-based policies and Multi-Party Approval (MPA) security feature, but no evidence of addressing a specific vulnerability. MPA enhances operational security by requiring multiple approvals for key operations.

Diff

diff --git a/cli/latest/reference/payment-cryptography/stop-key-usage.md b/cli/latest/reference/payment-cryptography/stop-key-usage.md
index e313375ec..03f855dd5 100644
--- a//cli/latest/reference/payment-cryptography/stop-key-usage.md
+++ b//cli/latest/reference/payment-cryptography/stop-key-usage.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
@@ -64 +64 @@ You can use this operation instead of [DeleteKey](https://docs.aws.amazon.com/pa
-> **Cross-account use:** This operation can’t be used across different Amazon Web Services accounts.
+> **Cross-account use:** This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see [Resource-based policies](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html) .
@@ -596,0 +597,44 @@ Key -> (structure)
+> 
+> MpaStatus -> (structure)
+>
+>> The Multi-Party Approval (MPA) status for the key, if applicable.
+>> 
+>> MpaSessionArn -> (string) [required]
+>>
+>>> The ARN of the MPA session.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `20`
+>>>   * max: `2048`
+>>>   * pattern: `arn:aws(-[^:]+)?:mpa:[a-z0-9-]{1,20}:[0-9]{12}:session/[a-zA-Z0-9._-]+/[a-zA-Z0-9_-]+`
+>>> 
+
+>> 
+>> Status -> (string) [required]
+>>
+>>> The current status of the MPA session.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `PENDING`
+>>>   * `APPROVED`
+>>>   * `FAILED`
+>>>   * `CANCELLED`
+>>> 
+
+>> 
+>> InitiationDate -> (timestamp) [required]
+>>
+>>> The date and time when the MPA session was initiated.
+>> 
+>> StatusMessage -> (string)
+>>
+>>> The message providing additional information about the MPA session status.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `1000`
+>>> 
+
@@ -608 +652 @@ Key -> (structure)
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »