AWS powershell medium security documentation change
Summary
Documented removal of the `LoggedAt` output property and provided a script workaround for timestamp generation
Security assessment
The removal of `LoggedAt` (previously part of cmdlets like `Get-SSMCommandInvocationDetail`) suggests mitigation of potential sensitive timestamp/logging exposure. The documentation update explicitly addresses this change, indicating a security-related adjustment.
Diff
diff --git a/powershell/v5/userguide/migrating-v5.md b/powershell/v5/userguide/migrating-v5.md index f9387d1db..0d0b68a87 100644 --- a//powershell/v5/userguide/migrating-v5.md +++ b//powershell/v5/userguide/migrating-v5.md @@ -5 +5 @@ -Minimum PowerShell versionInstall or update AWS.Tools V4Cancel cmdlet execution with CTRL+C and CMD+CNullable value typesCollectionsDateTime versus UTC DateTimePipelining and $AWSHistoryThe -PassThru parameterSome DynamoDB cmdlets moved and renamedLogging of sensitive informationCredential and profile resolutionCredential error messageConsistent auto-iterationS3 cmdlets deprecated and replacedCleaning and trimming S3 key parametersInteractive session capabilitiesCloudWatch alarmsLitJsonProgramming elements that were removed +Minimum PowerShell versionInstall or update AWS.Tools V4Cancel cmdlet execution with CTRL+C and CMD+CNullable value typesCollectionsDateTime versus UTC DateTimePipelining and $AWSHistoryThe -PassThru parameterSome DynamoDB cmdlets moved and renamedLogging of sensitive informationCredential and profile resolutionCredential error messageConsistent auto-iterationS3 cmdlets deprecated and replacedCleaning and trimming S3 key parametersInteractive session capabilitiesCloudWatch alarmsLitJsonThe LoggedAt output propertyProgramming elements that were removed @@ -293,0 +294,9 @@ The AWS Tools for PowerShell have been updated to use `System.Text.Json` instead +## The `LoggedAt` output property + +The `LoggedAt` output property has been removed. In V4 of the tools, this property was returned by default on some cmdlets (for example `Get-SSMCommandInvocationDetail` and `Invoke-LMFunction`). + +If you need to replicate the information that was provided by the `LoggedAt` output property, you can include something similar to the following in your scripts: + + + $loggedAt = (Get-Date).ToUniversalTime().ToString('s') +