AWS online-register high security documentation change
Summary
Added GetMpaTeamAssociation and GetResourcePolicy actions for retrieving payment cryptography approval teams and key resource policies.
Security assessment
GetResourcePolicy action explicitly relates to cryptographic key policies, which are security-critical components. Access to key policies could enable privilege escalation if improperly managed.
Diff
diff --git a/online-register/latest/data-formats/awspaymentcryptography.md b/online-register/latest/data-formats/awspaymentcryptography.md index df617bd58..2a70fe520 100644 --- a//online-register/latest/data-formats/awspaymentcryptography.md +++ b//online-register/latest/data-formats/awspaymentcryptography.md @@ -14,0 +15 @@ Actions | Description | Access level +[GetMpaTeamAssociation](https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetMpaTeamAssociation.html)| Retrieve information about an MPA approval team association for a payment cryptography action| Read @@ -17,0 +19 @@ Actions | Description | Access level +[GetResourcePolicy](https://docs.aws.amazon.com/payment-cryptography/latest/APIReference/API_GetResourcePolicy.html)| Retrieve the resource-based policy attached to a key| Read