### Issue Only our hosted documentation detail that KMS Aliases are valid for Encrypt Only. This leads to customer confusion. ### Proposed Fix Update our Java Docs and Examples to clarify that KMS Alias are Decrypt Only. ### Note See https://github.com/aws/aws-database-encryption-sdk-dynamodb-java/pull/359 for an example.