AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-07-10 · Documentation medium

File: cli/latest/reference/lambda/get-function-configuration.md

Summary

Added KMSKeyArn field to DurableConfig structure documentation

Security assessment

Documents encryption of durable execution payloads using customer-managed KMS keys, enhancing security documentation without addressing a specific vulnerability

Diff

diff --git a/cli/latest/reference/lambda/get-function-configuration.md b/cli/latest/reference/lambda/get-function-configuration.md
index 8611b05c5..dbd0ed3db 100644
--- a//cli/latest/reference/lambda/get-function-configuration.md
+++ b//cli/latest/reference/lambda/get-function-configuration.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »
@@ -1128,0 +1129,12 @@ DurableConfig -> (structure)
+> 
+> KMSKeyArn -> (string)
+>
+>> The ARN of the Key Management Service (KMS) customer managed key that is used to encrypt your durable execution’s payload data, including input, output, and error payloads.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `10000`
+>>   * pattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()`
+>> 
+
@@ -1162 +1174 @@ DurableConfig -> (structure)
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »