AWS cli medium security documentation change
Summary
Reorganized CLI parameters and updated policy statement documentation structure. Changed parameter order, modified descriptions for traffic policy parameters, and restructured condition expression documentation (Boolean/String/TLS expressions). Added missing 'Action' field documentation.
Security assessment
The changes clarify security controls in traffic policies including: 1) Default allow/deny actions for unmatched messages 2) Message size restrictions to block oversized emails 3) Detailed condition expressions for TLS verification, IP filtering, and address list checks. These directly document security enforcement mechanisms for email filtering policies.
Diff
diff --git a/cli/latest/reference/mailmanager/update-traffic-policy.md b/cli/latest/reference/mailmanager/update-traffic-policy.md index 8cf0f3e47..d3d1dc4a4 100644 --- a//cli/latest/reference/mailmanager/update-traffic-policy.md +++ b//cli/latest/reference/mailmanager/update-traffic-policy.md @@ -15 +15 @@ - * [AWS CLI 2.27.51 Command Reference](../../index.html) » + * [AWS CLI 2.27.54 Command Reference](../../index.html) » @@ -67,3 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma - [--default-action <value>] - [--max-message-size-bytes <value>] - [--policy-statements <value>] @@ -71,0 +69,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma + [--policy-statements <value>] + [--default-action <value>] + [--max-message-size-bytes <value>] @@ -96,9 +96 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma -`--default-action` (string) - -> Default action instructs the traffic policy to either Allow or Deny (block) messages that fall outside of (or not addressed by) the conditions of your policy statements -> -> Possible values: -> -> * `ALLOW` -> * `DENY` -> +`--traffic-policy-id` (string) @@ -105,0 +98 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma +> The identifier of the traffic policy that you want to update. @@ -107 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma -`--max-message-size-bytes` (integer) +`--traffic-policy-name` (string) @@ -109 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma -> The maximum message size in bytes of email which is allowed in by this traffic policy—anything larger will be blocked. +> A user-friendly name for the traffic policy resource. @@ -119,4 +111,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->> Action -> (string) ->> ->>> The action that informs a traffic policy resource to either allow or block the email if it matches a condition in the policy statement. ->> @@ -133 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `BooleanExpression`, `IpExpression`, `Ipv6Expression`, `StringExpression`, `TlsExpression`. +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `StringExpression`, `IpExpression`, `Ipv6Expression`, `TlsExpression`, `BooleanExpression`. @@ -135 +124 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> BooleanExpression -> (structure) +>>>> StringExpression -> (structure) @@ -137 +126 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> This represents a boolean type condition matching on the incoming mail. It performs the boolean operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. +>>>>> This represents a string based condition matching on the incoming mail. It performs the string operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. @@ -141 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The operand on which to perform a boolean condition operation. +>>>>>> The left hand side argument of a string condition expression. @@ -145 +134,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `IsInAddressList`. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`, `Analysis`. +>>>>>> +>>>>>> Attribute -> (string) +>>>>>> +>>>>>>> The enum type representing the allowed attribute types for a string condition. @@ -149 +142 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>>> The structure type for a boolean condition stating the Add On ARN and its returned value. +>>>>>>> The structure type for a string condition stating the Add On ARN and its returned value. @@ -158,14 +150,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> ->>>>>> IsInAddressList -> (structure) ->>>>>> ->>>>>>> The structure type for a boolean condition that provides the address lists to evaluate incoming traffic on. ->>>>>>> ->>>>>>> AddressLists -> (list) ->>>>>>> ->>>>>>>> The address lists that will be used for evaluation. ->>>>>>>> ->>>>>>>> (string) ->>>>>>> ->>>>>>> Attribute -> (string) ->>>>>>> ->>>>>>>> The email attribute that needs to be evaluated against the address list. @@ -175 +154,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The matching operator for a boolean condition expression. +>>>>>> The matching operator for a string condition expression. +>>>>> +>>>>> Values -> (list) +>>>>> +>>>>>> The right hand side argument of a string condition expression. +>>>>>> +>>>>>> (string) @@ -229 +214 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> StringExpression -> (structure) +>>>> TlsExpression -> (structure) @@ -231 +216 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> This represents a string based condition matching on the incoming mail. It performs the string operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. +>>>>> This represents a TLS based condition matching on the incoming mail. It performs the operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. @@ -235 +220 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The left hand side argument of a string condition expression. +>>>>>> The left hand side argument of a TLS condition expression. @@ -239,13 +224 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `Attribute`. ->>>>>> ->>>>>> Analysis -> (structure) ->>>>>> ->>>>>>> The structure type for a string condition stating the Add On ARN and its returned value. ->>>>>>> ->>>>>>> Analyzer -> (string) ->>>>>>> ->>>>>>>> The Amazon Resource Name (ARN) of an Add On. ->>>>>>> ->>>>>>> ResultField -> (string) ->>>>>>> ->>>>>>>> The returned value from an Add On. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`. @@ -255 +228 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>>> The enum type representing the allowed attribute types for a string condition. +>>>>>>> The enum type representing the allowed attribute types for the TLS condition. @@ -259 +232 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The matching operator for a string condition expression. +>>>>>> The matching operator for a TLS condition expression. @@ -261 +234 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> Values -> (list) +>>>>> Value -> (string) @@ -263,3 +236 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The right hand side argument of a string condition expression. ->>>>>> ->>>>>> (string) +>>>>>> The right hand side argument of a TLS condition expression. @@ -267 +238 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>> TlsExpression -> (structure) +>>>> BooleanExpression -> (structure) @@ -269 +240 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>> This represents a TLS based condition matching on the incoming mail. It performs the operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. +>>>>> This represents a boolean type condition matching on the incoming mail. It performs the boolean operation configured in ‘Operator’ and evaluates the ‘Protocol’ object against the ‘Value’. @@ -273 +244 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The left hand side argument of a TLS condition expression. +>>>>>> The operand on which to perform a boolean condition operation. @@ -277 +248 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Attribute`. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Analysis`, `IsInAddressList`. @@ -279 +250 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> Attribute -> (string) +>>>>>> Analysis -> (structure) @@ -281 +252,23 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>>> The enum type representing the allowed attribute types for the TLS condition. +>>>>>>> The structure type for a boolean condition stating the Add On ARN and its returned value. +>>>>>>> +>>>>>>> Analyzer -> (string) +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of an Add On. +>>>>>>> +>>>>>>> ResultField -> (string) +>>>>>>> +>>>>>>>> The returned value from an Add On. +>>>>>> +>>>>>> IsInAddressList -> (structure) +>>>>>> +>>>>>>> The structure type for a boolean condition that provides the address lists to evaluate incoming traffic on. +>>>>>>> +>>>>>>> Attribute -> (string) +>>>>>>> +>>>>>>>> The email attribute that needs to be evaluated against the address list. +>>>>>>> +>>>>>>> AddressLists -> (list) +>>>>>>> +>>>>>>>> The address lists that will be used for evaluation. +>>>>>>>> +>>>>>>>> (string) @@ -285,5 +278,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mailma ->>>>>> The matching operator for a TLS condition expression. ->>>>> ->>>>> Value -> (string) ->>>>> ->>>>>> The right hand side argument of a TLS condition expression. +>>>>>> The matching operator for a boolean condition expression. +>> +>> Action -> (string) +>> +>>> The action that informs a traffic policy resource to either allow or block the email if it matches a condition in the policy statement. @@ -296 +288,0 @@ JSON Syntax: - "Action": "ALLOW"|"DENY", @@ -299 +291 @@ JSON Syntax: - "BooleanExpression": { + "StringExpression": { @@ -300,0 +293 @@ JSON Syntax: + "Attribute": "RECIPIENT", @@ -304,4 +296,0 @@ JSON Syntax: - }, - "IsInAddressList": { - "AddressLists": ["string", ...], - "Attribute": "RECIPIENT" @@ -310 +299,2 @@ JSON Syntax: - "Operator": "IS_TRUE"|"IS_FALSE" + "Operator": "EQUALS"|"NOT_EQUALS"|"STARTS_WITH"|"ENDS_WITH"|"CONTAINS", + "Values": ["string", ...] @@ -326,11 +315,0 @@ JSON Syntax: - "StringExpression": { - "Evaluate": { - "Analysis": { - "Analyzer": "string", - "ResultField": "string" - }, - "Attribute": "RECIPIENT" - }, - "Operator": "EQUALS"|"NOT_EQUALS"|"STARTS_WITH"|"ENDS_WITH"|"CONTAINS",