AWS payment-cryptography medium security documentation change

Service: payment-cryptography · 2026-05-31 · Security-related medium

File: payment-cryptography/latest/userguide/alias-about.md

Summary

Added warning about eventual consistency during alias updates and key resolution risks

Security assessment

Explicitly documents a security risk where inconsistent key resolution during updates could break processes. The warning highlights a cryptographic operation risk that could lead to system failures or unintended key usage.

Diff

diff --git a/payment-cryptography/latest/userguide/alias-about.md b/payment-cryptography/latest/userguide/alias-about.md
index 277c2c2d3..3b170c080 100644
--- a//payment-cryptography/latest/userguide/alias-about.md
+++ b//payment-cryptography/latest/userguide/alias-about.md
@@ -91,0 +92,4 @@ AWS Payment Cryptography doesn't validate that the old and new keys have all the
+###### Warning
+
+Updates to aliases are subject to eventual consistency. After you update an alias, there is a brief period during which the alias might resolve to either the old key or the new key. Do not update aliases if this behavior would break your processes.
+