AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-07-04 · Documentation low

File: cli/latest/reference/cleanroomsml/get-configured-model-algorithm.md

Summary

Updated documentation to clarify that Clean Rooms ML only supports `registry/repository[:tag]` image format (removed digest support) and updated CLI version references

Security assessment

The change restricts supported image formats but does not explicitly reference a security vulnerability or weakness. Digest-based image references are generally more secure due to immutability, but the removal is presented as a feature limitation rather than a security fix.

Diff

diff --git a/cli/latest/reference/cleanroomsml/get-configured-model-algorithm.md b/cli/latest/reference/cleanroomsml/get-configured-model-algorithm.md
index cf3414feb..60cd9fe8d 100644
--- a//cli/latest/reference/cleanroomsml/get-configured-model-algorithm.md
+++ b//cli/latest/reference/cleanroomsml/get-configured-model-algorithm.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.46 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.49 Command Reference](../../index.html) »
@@ -217 +217 @@ trainingContainerConfig -> (structure)
->> The registry path of the docker image that contains the algorithm. Clean Rooms ML supports both `registry/repository[:tag]` and `registry/repositry[@digest]` image path formats. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
+>> The registry path of the docker image that contains the algorithm. Clean Rooms ML currently only supports the `registry/repository[:tag]` image path format. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
@@ -253 +253 @@ inferenceContainerConfig -> (structure)
->> The registry path of the docker image that contains the inference algorithm. Clean Rooms ML supports both `registry/repository[:tag]` and `registry/repositry[@digest]` image path formats. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
+>> The registry path of the docker image that contains the inference algorithm. Clean Rooms ML currently only supports the `registry/repository[:tag]` image path format. For more information about using images in Clean Rooms ML, see the [Sagemaker API reference](https://docs.aws.amazon.com/sagemaker/latest/APIReference/API_AlgorithmSpecification.html#sagemaker-Type-AlgorithmSpecification-TrainingImage) .
@@ -297 +297 @@ kmsKeyArn -> (string)
-  * [AWS CLI 2.27.46 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.49 Command Reference](../../index.html) »