AWS powershell documentation change
Summary
Added section about improved credential resolution error messages
Security assessment
Enhanced credential error messaging helps users diagnose authentication issues, which relates to security awareness. However, this is an improvement rather than addressing a specific vulnerability.
Diff
diff --git a/powershell/v5/userguide/migrating-v5.md b/powershell/v5/userguide/migrating-v5.md index 90a146a3e..f9387d1db 100644 --- a//powershell/v5/userguide/migrating-v5.md +++ b//powershell/v5/userguide/migrating-v5.md @@ -5 +5 @@ -Minimum PowerShell versionInstall or update AWS.Tools V4Cancel cmdlet execution with CTRL+C and CMD+CNullable value typesCollectionsDateTime versus UTC DateTimePipelining and $AWSHistoryThe -PassThru parameterSome DynamoDB cmdlets moved and renamedLogging of sensitive informationCredential and profile resolutionConsistent auto-iterationS3 cmdlets deprecated and replacedCleaning and trimming S3 key parametersInteractive session capabilitiesCloudWatch alarmsLitJsonProgramming elements that were removed +Minimum PowerShell versionInstall or update AWS.Tools V4Cancel cmdlet execution with CTRL+C and CMD+CNullable value typesCollectionsDateTime versus UTC DateTimePipelining and $AWSHistoryThe -PassThru parameterSome DynamoDB cmdlets moved and renamedLogging of sensitive informationCredential and profile resolutionCredential error messageConsistent auto-iterationS3 cmdlets deprecated and replacedCleaning and trimming S3 key parametersInteractive session capabilitiesCloudWatch alarmsLitJsonProgramming elements that were removed @@ -223,0 +224,18 @@ The AWS Tools for PowerShell have been updated to use certain environment variab +## Credential error message + +The error message that the AWS Tools for PowerShell returns if it can't obtain appropriate credentials has changed. + +In v4 of the tools, the message was similar to the following: + + + Get-SFNExecutionList -Region us-west-2 + Get-SFNExecutionList: No credentials specified or obtained from persisted/shell defaults. + +In V5 of the tools, the message is similar to the following instead: + + + Get-SFNExecutionList -Region us-west-2 + Get-SFNExecutionList: Failed to resolve AWS credentials. The credential providers used to search for credentials returned the following errors: + ... <list of specific exceptions> + +