AWS cli documentation change
Summary
Added new parameters (--all-users, --marker, --max-items) and documentation for Bedrock API key credential alias/expiration fields
Security assessment
Added documentation for credential expiration dates and alias fields related to Bedrock API keys, which improves visibility into security-sensitive credential attributes. The --all-users flag enables broader credential visibility but there's no evidence this addresses a specific vulnerability.
Diff
diff --git a/cli/latest/reference/iam/list-service-specific-credentials.md b/cli/latest/reference/iam/list-service-specific-credentials.md index 89bacfc8a..501203005 100644 --- a//cli/latest/reference/iam/list-service-specific-credentials.md +++ b//cli/latest/reference/iam/list-service-specific-credentials.md @@ -15 +15 @@ - * [AWS CLI 2.27.45 Command Reference](../../index.html) » + * [AWS CLI 2.27.46 Command Reference](../../index.html) » @@ -69,0 +70,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/iam-20 + [--all-users | --no-all-users] + [--marker <value>] + [--max-items <value>] @@ -103,0 +107,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/iam-20 +`--all-users` | `--no-all-users` (boolean) + +> A flag indicating whether to list service specific credentials for all users. This parameter cannot be specified together with UserName. When true, returns all credentials associated with the specified service. + +`--marker` (string) + +> Use this parameter only when paginating results and only after you receive a response indicating that the results are truncated. Set it to the value of the Marker from the response that you received to indicate where the next call should start. + +`--max-items` (integer) + +> Use this only when paginating results to indicate the maximum number of items you want in the response. If additional items exist beyond the maximum you specify, the IsTruncated response element is true. + @@ -267,0 +283,4 @@ ServiceSpecificCredentials -> (list) +>> ServiceCredentialAlias -> (string) +>> +>>> For Bedrock API keys, this is the public portion of the credential that includes the IAM user name and a suffix containing version and creation information. +>> @@ -271,0 +291,4 @@ ServiceSpecificCredentials -> (list) +>> ExpirationDate -> (timestamp) +>> +>>> The date and time when the service specific credential expires. This field is only present for Bedrock API keys that were created with an expiration period. +>> @@ -279,0 +303,8 @@ ServiceSpecificCredentials -> (list) +Marker -> (string) + +> When IsTruncated is true, this element is present and contains the value to use for the Marker parameter in a subsequent pagination request. + +IsTruncated -> (boolean) + +> A flag that indicates whether there are more items to return. If your results were truncated, you can make a subsequent pagination request using the Marker request parameter to retrieve more items. + @@ -290 +321 @@ ServiceSpecificCredentials -> (list) - * [AWS CLI 2.27.45 Command Reference](../../index.html) » + * [AWS CLI 2.27.46 Command Reference](../../index.html) »