AWS payment-cryptography documentation change
Summary
Modified cross-account use to include resource-based policy conditions
Security assessment
Clarifies security controls for cross-account operations by referencing IAM policies, with no vulnerability addressed.
Diff
diff --git a/payment-cryptography/latest/DataAPIReference/API_GenerateMacEmvPinChange.md b/payment-cryptography/latest/DataAPIReference/API_GenerateMacEmvPinChange.md index 88cf89d8c..9616d9cf5 100644 --- a//payment-cryptography/latest/DataAPIReference/API_GenerateMacEmvPinChange.md +++ b//payment-cryptography/latest/DataAPIReference/API_GenerateMacEmvPinChange.md @@ -25 +25 @@ Use [GenerateMac](./API_GenerateMac.html) operation when sending a script update -**Cross-account use** : This operation can't be used across different AWS accounts. +**Cross-account use** : This operation supports cross-account use when the key has a resource-based policy that grants access. For more information, see [Resource-based policies](https://docs.aws.amazon.com/payment-cryptography/latest/userguide/security_iam_resource-based-policies.html).