AWS Security ChangesHomeSearch

AWS payment-cryptography documentation change

Service: payment-cryptography · 2026-05-04 · Documentation low

File: payment-cryptography/latest/DataAPIReference/API_GenerateAs2805KekValidation.md

Summary

Updated cross-account use terms to include resource-based policy support

Security assessment

Enhances security documentation by explaining controlled cross-account access via policies, with no indication of a security flaw being remediated.

Diff

diff --git a/payment-cryptography/latest/DataAPIReference/API_GenerateAs2805KekValidation.md b/payment-cryptography/latest/DataAPIReference/API_GenerateAs2805KekValidation.md
index e99aa0bd7..78a4ac3d6 100644
--- a//payment-cryptography/latest/DataAPIReference/API_GenerateAs2805KekValidation.md
+++ b//payment-cryptography/latest/DataAPIReference/API_GenerateAs2805KekValidation.md
@@ -21 +21 @@ For information about valid keys for this operation, see [Understanding key attr
-**Cross-account use** : This operation can't be used across different AWS accounts.
+**Cross-account use** : This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see [Resource-based policies](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html).