AWS cli medium security documentation change

Service: cli · 2025-07-04 · Security-related medium

File: cli/latest/reference/cleanroomsml/create-configured-model-algorithm.md

Summary

Modified Docker image path requirements to restrict support to tag-based references only (removed digest support)

Security assessment

The removal of digest-based image references reduces security by eliminating immutable image identifiers, which could help prevent supply chain attacks via tag manipulation. This change explicitly restricts security controls previously documented.

Diff

diff --git a/cli/latest/reference/cleanroomsml/create-configured-model-algorithm.md b/cli/latest/reference/cleanroomsml/create-configured-model-algorithm.md
index 23566636c..017b9b40d 100644
--- a//cli/latest/reference/cleanroomsml/create-configured-model-algorithm.md
+++ b//cli/latest/reference/cleanroomsml/create-configured-model-algorithm.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.46 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.49 Command Reference](../../index.html) »
@@ -116 +116 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cleanr
->> The registry path of the docker image that contains the algorithm. Clean Rooms ML supports both `registry/repository[:tag]` and `registry/repositry[@digest]` image path formats. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
+>> The registry path of the docker image that contains the algorithm. Clean Rooms ML currently only supports the `registry/repository[:tag]` image path format. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
@@ -175 +175 @@ JSON Syntax:
->> The registry path of the docker image that contains the inference algorithm. Clean Rooms ML supports both `registry/repository[:tag]` and `registry/repositry[@digest]` image path formats. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
+>> The registry path of the docker image that contains the inference algorithm. Clean Rooms ML currently only supports the `registry/repository[:tag]` image path format. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
@@ -341 +341 @@ configuredModelAlgorithmArn -> (string)
-  * [AWS CLI 2.27.46 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.49 Command Reference](../../index.html) »