AWS cli documentation change
Summary
Updated CLI version reference, reordered parameters, restructured policy statement documentation with clarified condition types (Boolean/String/TLS expressions), and added/moved security-related fields like default-action and max-message-size-bytes
Security assessment
Changes clarify security controls like message size limits (--max-message-size-bytes) and default allow/deny actions, but there's no evidence of addressing a specific vulnerability. The restructured condition expressions improve documentation of existing security filtering capabilities.
Diff
diff --git a/cli/latest/reference/mailmanager/create-traffic-policy.md b/cli/latest/reference/mailmanager/create-traffic-policy.md index 4e275c372..804277869 100644 --- a//cli/latest/reference/mailmanager/create-traffic-policy.md +++ b//cli/latest/reference/mailmanager/create-traffic-policy.md @@ -15 +15 @@ - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) » @@ -67,0 +68,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma + --traffic-policy-name <value> + --policy-statements <value> @@ -70 +71,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma - --policy-statements <value> @@ -72 +72,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma - --traffic-policy-name <value> @@ -101,12 +101 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma -`--default-action` (string) - -> Default action instructs the traffic policy to either Allow or Deny (block) messages that fall outside of (or not addressed by) the conditions of your policy statements -> -> Possible values: -> -> * `ALLOW` -> * `DENY` -> - - -`--max-message-size-bytes` (integer) +`--traffic-policy-name` (string) @@ -114 +103 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma -> The maximum message size in bytes of email which is allowed in by this traffic policy—anything larger will be blocked. +> A user-friendly name for the traffic policy resource. @@ -124,4 +112,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->> Action -> (string) ->> ->>> The action that informs a traffic policy resource to either allow or block the email if it matches a condition in the policy statement. ->> @@ -138 +123 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `BooleanExpression`, `IpExpression`, `Ipv6Expression`, `StringExpression`, `TlsExpression`. +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `StringExpression`, `IpExpression`, `Ipv6Expression`, `TlsExpression`, `BooleanExpression`. @@ -140 +125 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> BooleanExpression -> (structure) +>>>> StringExpression -> (structure) @@ -142 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> This represents a boolean type condition matching on the incoming mail. It performs the boolean operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. +>>>>> This represents a string based condition matching on the incoming mail. It performs the string operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. @@ -146 +131 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The operand on which to perform a boolean condition operation. +>>>>>> The left hand side argument of a string condition expression. @@ -150 +135,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `IsInAddressList`. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`, `Analysis`. +>>>>>> +>>>>>> Attribute -> (string) +>>>>>> +>>>>>>> The enum type representing the allowed attribute types for a string condition. @@ -154 +143 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>>> The structure type for a boolean condition stating the Add On ARN and its returned value. +>>>>>>> The structure type for a string condition stating the Add On ARN and its returned value. @@ -163,14 +151,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> ->>>>>> IsInAddressList -> (structure) ->>>>>> ->>>>>>> The structure type for a boolean condition that provides the address lists to evaluate incoming traffic on. ->>>>>>> ->>>>>>> AddressLists -> (list) ->>>>>>> ->>>>>>>> The address lists that will be used for evaluation. ->>>>>>>> ->>>>>>>> (string) ->>>>>>> ->>>>>>> Attribute -> (string) ->>>>>>> ->>>>>>>> The email attribute that needs to be evaluated against the address list. @@ -180 +155,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The matching operator for a boolean condition expression. +>>>>>> The matching operator for a string condition expression. +>>>>> +>>>>> Values -> (list) +>>>>> +>>>>>> The right hand side argument of a string condition expression. +>>>>>> +>>>>>> (string) @@ -234 +215 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> StringExpression -> (structure) +>>>> TlsExpression -> (structure) @@ -236 +217 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> This represents a string based condition matching on the incoming mail. It performs the string operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. +>>>>> This represents a TLS based condition matching on the incoming mail. It performs the operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. @@ -240 +221 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The left hand side argument of a string condition expression. +>>>>>> The left hand side argument of a TLS condition expression. @@ -244,13 +225 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `Attribute`. ->>>>>> ->>>>>> Analysis -> (structure) ->>>>>> ->>>>>>> The structure type for a string condition stating the Add On ARN and its returned value. ->>>>>>> ->>>>>>> Analyzer -> (string) ->>>>>>> ->>>>>>>> The Amazon Resource Name (ARN) of an Add On. ->>>>>>> ->>>>>>> ResultField -> (string) ->>>>>>> ->>>>>>>> The returned value from an Add On. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`. @@ -260 +229 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>>> The enum type representing the allowed attribute types for a string condition. +>>>>>>> The enum type representing the allowed attribute types for the TLS condition. @@ -264 +233 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The matching operator for a string condition expression. +>>>>>> The matching operator for a TLS condition expression. @@ -266 +235 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> Values -> (list) +>>>>> Value -> (string) @@ -268,3 +237 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The right hand side argument of a string condition expression. ->>>>>> ->>>>>> (string) +>>>>>> The right hand side argument of a TLS condition expression. @@ -272 +239 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> TlsExpression -> (structure) +>>>> BooleanExpression -> (structure) @@ -274 +241 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> This represents a TLS based condition matching on the incoming mail. It performs the operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. +>>>>> This represents a boolean type condition matching on the incoming mail. It performs the boolean operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. @@ -278 +245 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The left hand side argument of a TLS condition expression. +>>>>>> The operand on which to perform a boolean condition operation. @@ -282 +249 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `IsInAddressList`. @@ -284 +251 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> Attribute -> (string) +>>>>>> Analysis -> (structure) @@ -286 +253,23 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>>> The enum type representing the allowed attribute types for the TLS condition. +>>>>>>> The structure type for a boolean condition stating the Add On ARN and its returned value. +>>>>>>> +>>>>>>> Analyzer -> (string) +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of an Add On. +>>>>>>> +>>>>>>> ResultField -> (string) +>>>>>>> +>>>>>>>> The returned value from an Add On. +>>>>>> +>>>>>> IsInAddressList -> (structure) +>>>>>> +>>>>>>> The structure type for a boolean condition that provides the address lists to evaluate incoming traffic on. +>>>>>>> +>>>>>>> Attribute -> (string) +>>>>>>> +>>>>>>>> The email attribute that needs to be evaluated against the address list. +>>>>>>> +>>>>>>> AddressLists -> (list) +>>>>>>> +>>>>>>>> The address lists that will be used for evaluation. +>>>>>>>> +>>>>>>>> (string) @@ -290,5 +279,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The matching operator for a TLS condition expression. ->>>>> ->>>>> Value -> (string) ->>>>> ->>>>>> The right hand side argument of a TLS condition expression. +>>>>>> The matching operator for a boolean condition expression. +>> +>> Action -> (string) +>> +>>> The action that informs a traffic policy resource to either allow or block the email if it matches a condition in the policy statement. @@ -301 +289,0 @@ JSON Syntax: - "Action": "ALLOW"|"DENY", @@ -304 +292 @@ JSON Syntax: - "BooleanExpression": { + "StringExpression": { @@ -305,0 +294 @@ JSON Syntax: + "Attribute": "RECIPIENT", @@ -309,4 +297,0 @@ JSON Syntax: - }, - "IsInAddressList": { - "AddressLists": ["string", ...], - "Attribute": "RECIPIENT" @@ -315 +300,2 @@ JSON Syntax: - "Operator": "IS_TRUE"|"IS_FALSE" + "Operator": "EQUALS"|"NOT_EQUALS"|"STARTS_WITH"|"ENDS_WITH"|"CONTAINS", + "Values": ["string", ...] @@ -331,11 +316,0 @@ JSON Syntax: - "StringExpression": { - "Evaluate": { - "Analysis": { - "Analyzer": "string", - "ResultField": "string" - }, - "Attribute": "RECIPIENT" - }, - "Operator": "EQUALS"|"NOT_EQUALS"|"STARTS_WITH"|"ENDS_WITH"|"CONTAINS", - "Values": ["string", ...] - }, @@ -347,0 +323,13 @@ JSON Syntax: