AWS marketplace documentation change
Summary
Added 'customer AWS account ID' as a filter parameter for GetEntitlements operation
Security assessment
Enhances API documentation by adding account ID validation which improves access control checks, but no evidence of addressing a specific security vulnerability
Diff
diff --git a/marketplace/latest/userguide/checking-entitlements.md b/marketplace/latest/userguide/checking-entitlements.md index f5b491573..94975dd7c 100644 --- a/marketplace/latest/userguide/checking-entitlements.md +++ b/marketplace/latest/userguide/checking-entitlements.md @@ -13 +13 @@ To verify a customer's entitlement to your product, use the `GetEntitlements` op -`GetEntitlements` accepts a customer identifier and dimension as filters. `ProductCode` is a required parameter. The operation returns a paginated list of entitlements. The result has an `ExpirationDate` field that shows the minimum period of time that the entitlement is valid for. If the customer has set up automatic renewal, the date in the ExpirationDate field is the renewal date. +`GetEntitlements` accepts a customer AWS account ID, customer identifier and dimension as filters. `ProductCode` is a required parameter. The operation returns a paginated list of entitlements. The result has an `ExpirationDate` field that shows the minimum period of time that the entitlement is valid for. If the customer has set up automatic renewal, the date in the ExpirationDate field is the renewal date. @@ -15 +15 @@ To verify a customer's entitlement to your product, use the `GetEntitlements` op -For code samples, see [Code examples for SaaS product integration](./saas-code-examples.html). +For code examples, see [Code examples for SaaS product integration](./saas-code-examples.html).