AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-07-18 · Documentation low

File: cli/latest/reference/mailmanager/get-traffic-policy.md

Summary

Updated CLI version reference, reordered response parameters, restructured policy statement condition expressions with modified field descriptions and union structures

Security assessment

Changes primarily reorganize documentation structure and clarify existing security controls (like TLS evaluation, address list checks, and message size limits) rather than addressing specific vulnerabilities. The MaxMessageSizeBytes description about blocking oversized emails represents existing security controls. Restructuring of condition expressions improves clarity but doesn't indicate a security fix.

Diff

diff --git a/cli/latest/reference/mailmanager/get-traffic-policy.md b/cli/latest/reference/mailmanager/get-traffic-policy.md
index 7a597f2f2..553347410 100644
--- a//cli/latest/reference/mailmanager/get-traffic-policy.md
+++ b//cli/latest/reference/mailmanager/get-traffic-policy.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.51 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.54 Command Reference](../../index.html) »
@@ -195,5 +195 @@ Disable automatically prompt for CLI input parameters.
-CreatedTimestamp -> (timestamp)
-
-> The timestamp of when the traffic policy was created.
-
-DefaultAction -> (string)
+TrafficPolicyName -> (string)
@@ -201 +197 @@ DefaultAction -> (string)
-> The default action of the traffic policy.
+> A user-friendly name for the traffic policy resource.
@@ -203 +199 @@ DefaultAction -> (string)
-LastUpdatedTimestamp -> (timestamp)
+TrafficPolicyId -> (string)
@@ -205 +201 @@ LastUpdatedTimestamp -> (timestamp)
-> The timestamp of when the traffic policy was last updated.
+> The identifier of the traffic policy resource.
@@ -207 +203 @@ LastUpdatedTimestamp -> (timestamp)
-MaxMessageSizeBytes -> (integer)
+TrafficPolicyArn -> (string)
@@ -209 +205 @@ MaxMessageSizeBytes -> (integer)
-> The maximum message size in bytes of email which is allowed in by this traffic policy—anything larger will be blocked.
+> The Amazon Resource Name (ARN) of the traffic policy resource.
@@ -219,4 +214,0 @@ PolicyStatements -> (list)
->> Action -> (string)
->>
->>> The action that informs a traffic policy resource to either allow or block the email if it matches a condition in the policy statement.
->> 
@@ -233 +225 @@ PolicyStatements -> (list)
->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `BooleanExpression`, `IpExpression`, `Ipv6Expression`, `StringExpression`, `TlsExpression`.
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `StringExpression`, `IpExpression`, `Ipv6Expression`, `TlsExpression`, `BooleanExpression`.
@@ -235 +227 @@ PolicyStatements -> (list)
->>>> BooleanExpression -> (structure)
+>>>> StringExpression -> (structure)
@@ -237 +229 @@ PolicyStatements -> (list)
->>>>> This represents a boolean type condition matching on the incoming mail. It performs the boolean operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’.
+>>>>> This represents a string based condition matching on the incoming mail. It performs the string operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’.
@@ -241 +233 @@ PolicyStatements -> (list)
->>>>>> The operand on which to perform a boolean condition operation.
+>>>>>> The left hand side argument of a string condition expression.
@@ -245 +237,5 @@ PolicyStatements -> (list)
->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `IsInAddressList`.
+>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`, `Analysis`.
+>>>>>> 
+>>>>>> Attribute -> (string)
+>>>>>>
+>>>>>>> The enum type representing the allowed attribute types for a string condition.
@@ -249 +245 @@ PolicyStatements -> (list)
->>>>>>> The structure type for a boolean condition stating the Add On ARN and its returned value.
+>>>>>>> The structure type for a string condition stating the Add On ARN and its returned value.
@@ -258,14 +253,0 @@ PolicyStatements -> (list)
->>>>>> 
->>>>>> IsInAddressList -> (structure)
->>>>>>
->>>>>>> The structure type for a boolean condition that provides the address lists to evaluate incoming traffic on.
->>>>>>> 
->>>>>>> AddressLists -> (list)
->>>>>>>
->>>>>>>> The address lists that will be used for evaluation.
->>>>>>>> 
->>>>>>>> (string)
->>>>>>> 
->>>>>>> Attribute -> (string)
->>>>>>>
->>>>>>>> The email attribute that needs to be evaluated against the address list.
@@ -275 +257,7 @@ PolicyStatements -> (list)
->>>>>> The matching operator for a boolean condition expression.
+>>>>>> The matching operator for a string condition expression.
+>>>>> 
+>>>>> Values -> (list)
+>>>>>
+>>>>>> The right hand side argument of a string condition expression.
+>>>>>> 
+>>>>>> (string)
@@ -329 +317 @@ PolicyStatements -> (list)
->>>> StringExpression -> (structure)
+>>>> TlsExpression -> (structure)
@@ -331 +319 @@ PolicyStatements -> (list)
->>>>> This represents a string based condition matching on the incoming mail. It performs the string operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’.
+>>>>> This represents a TLS based condition matching on the incoming mail. It performs the operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’.
@@ -335 +323 @@ PolicyStatements -> (list)
->>>>>> The left hand side argument of a string condition expression.
+>>>>>> The left hand side argument of a TLS condition expression.
@@ -339,13 +327 @@ PolicyStatements -> (list)
->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `Attribute`.
->>>>>> 
->>>>>> Analysis -> (structure)
->>>>>>
->>>>>>> The structure type for a string condition stating the Add On ARN and its returned value.
->>>>>>> 
->>>>>>> Analyzer -> (string)
->>>>>>>
->>>>>>>> The Amazon Resource Name (ARN) of an Add On.
->>>>>>> 
->>>>>>> ResultField -> (string)
->>>>>>>
->>>>>>>> The returned value from an Add On.
+>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`.
@@ -355 +331 @@ PolicyStatements -> (list)
->>>>>>> The enum type representing the allowed attribute types for a string condition.
+>>>>>>> The enum type representing the allowed attribute types for the TLS condition.
@@ -359 +335 @@ PolicyStatements -> (list)
->>>>>> The matching operator for a string condition expression.
+>>>>>> The matching operator for a TLS condition expression.
@@ -361 +337 @@ PolicyStatements -> (list)
->>>>> Values -> (list)
+>>>>> Value -> (string)
@@ -363,3 +339 @@ PolicyStatements -> (list)
->>>>>> The right hand side argument of a string condition expression.
->>>>>> 
->>>>>> (string)
+>>>>>> The right hand side argument of a TLS condition expression.
@@ -367 +341 @@ PolicyStatements -> (list)
->>>> TlsExpression -> (structure)
+>>>> BooleanExpression -> (structure)
@@ -369 +343 @@ PolicyStatements -> (list)
->>>>> This represents a TLS based condition matching on the incoming mail. It performs the operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’.
+>>>>> This represents a boolean type condition matching on the incoming mail. It performs the boolean operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’.
@@ -373 +347 @@ PolicyStatements -> (list)
->>>>>> The left hand side argument of a TLS condition expression.
+>>>>>> The operand on which to perform a boolean condition operation.
@@ -377 +351 @@ PolicyStatements -> (list)
->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`.
+>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `IsInAddressList`.
@@ -379 +353 @@ PolicyStatements -> (list)
->>>>>> Attribute -> (string)
+>>>>>> Analysis -> (structure)
@@ -381 +355,23 @@ PolicyStatements -> (list)
->>>>>>> The enum type representing the allowed attribute types for the TLS condition.
+>>>>>>> The structure type for a boolean condition stating the Add On ARN and its returned value.
+>>>>>>> 
+>>>>>>> Analyzer -> (string)
+>>>>>>>
+>>>>>>>> The Amazon Resource Name (ARN) of an Add On.
+>>>>>>> 
+>>>>>>> ResultField -> (string)
+>>>>>>>
+>>>>>>>> The returned value from an Add On.
+>>>>>> 
+>>>>>> IsInAddressList -> (structure)
+>>>>>>
+>>>>>>> The structure type for a boolean condition that provides the address lists to evaluate incoming traffic on.
+>>>>>>> 
+>>>>>>> Attribute -> (string)
+>>>>>>>
+>>>>>>>> The email attribute that needs to be evaluated against the address list.
+>>>>>>> 
+>>>>>>> AddressLists -> (list)
+>>>>>>>
+>>>>>>>> The address lists that will be used for evaluation.
+>>>>>>>> 
+>>>>>>>> (string)
@@ -385,5 +381,5 @@ PolicyStatements -> (list)
->>>>>> The matching operator for a TLS condition expression.
->>>>> 
->>>>> Value -> (string)
->>>>>
->>>>>> The right hand side argument of a TLS condition expression.
+>>>>>> The matching operator for a boolean condition expression.
+>> 
+>> Action -> (string)
+>>
+>>> The action that informs a traffic policy resource to either allow or block the email if it matches a condition in the policy statement.
@@ -391 +387 @@ PolicyStatements -> (list)
-TrafficPolicyArn -> (string)
+MaxMessageSizeBytes -> (integer)
@@ -393 +389 @@ TrafficPolicyArn -> (string)
-> The Amazon Resource Name (ARN) of the traffic policy resource.
+> The maximum message size in bytes of email which is allowed in by this traffic policy—anything larger will be blocked.
@@ -395 +391 @@ TrafficPolicyArn -> (string)
-TrafficPolicyId -> (string)
+DefaultAction -> (string)
@@ -397 +393 @@ TrafficPolicyId -> (string)
-> The identifier of the traffic policy resource.
+> The default action of the traffic policy.
@@ -399 +395 @@ TrafficPolicyId -> (string)
-TrafficPolicyName -> (string)
+CreatedTimestamp -> (timestamp)
@@ -401 +397,5 @@ TrafficPolicyName -> (string)
-> A user-friendly name for the traffic policy resource.
+> The timestamp of when the traffic policy was created.
+
+LastUpdatedTimestamp -> (timestamp)
+
+> The timestamp of when the traffic policy was last updated.
@@ -413 +413 @@ TrafficPolicyName -> (string)
-  * [AWS CLI 2.27.51 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.54 Command Reference](../../index.html) »