AWS cli documentation change
Summary
Updated CLI version references, removed warning about required permissions/service-linked role, and rephrased template body description
Security assessment
Removal of permissions warning reduces visibility into implicit role permissions but doesn't directly indicate a security fix. The change appears focused on documentation clarity rather than addressing a security vulnerability.
Diff
diff --git a/cli/latest/reference/configservice/put-conformance-pack.md b/cli/latest/reference/configservice/put-conformance-pack.md index 972b0ec51..23cd67e43 100644 --- a//cli/latest/reference/configservice/put-conformance-pack.md +++ b//cli/latest/reference/configservice/put-conformance-pack.md @@ -15 +15 @@ - * [AWS CLI 2.27.45 Command Reference](../../index.html) » + * [AWS CLI 2.27.46 Command Reference](../../index.html) » @@ -61,6 +60,0 @@ Creates or updates a conformance pack. A conformance pack is a collection of Con -### Warning - -When you use `PutConformancePack` to deploy conformance packs in your account, the operation can create Config rules and remediation actions without requiring `config:PutConfigRule` or `config:PutRemediationConfigurations` permissions in your account IAM policies. - -This API uses the `AWSServiceRoleForConfigConforms` service-linked role in your account to create conformance pack resources. This service-linked role includes the permissions to create Config rules and remediation configurations, even if your account IAM policies explicitly deny these actions. - @@ -124 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/config -> A string that contains the full conformance pack template body. The structure containing the template body has a minimum length of 1 byte and a maximum length of 51,200 bytes. +> A string containing the full conformance pack template body. The structure containing the template body has a minimum length of 1 byte and a maximum length of 51,200 bytes. @@ -324 +318 @@ ConformancePackArn -> (string) - * [AWS CLI 2.27.45 Command Reference](../../index.html) » + * [AWS CLI 2.27.46 Command Reference](../../index.html) »