AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-07-25 · Documentation medium

File: cli/latest/reference/glue/batch-get-workflows.md

Summary

Added documentation for ExecutionRoleSessionPolicy parameter in StartJobRun API

Security assessment

Introduces documentation for inline session policies that restrict IAM role permissions during job execution, enhancing security controls without indicating a specific vulnerability

Diff

diff --git a/cli/latest/reference/glue/batch-get-workflows.md b/cli/latest/reference/glue/batch-get-workflows.md
index c4d4eb363..93fb587c4 100644
--- a//cli/latest/reference/glue/batch-get-workflows.md
+++ b//cli/latest/reference/glue/batch-get-workflows.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.56 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.59 Command Reference](../../index.html) »
@@ -688,0 +689,4 @@ Workflows -> (list)
+>>>>>>>>> 
+>>>>>>>>> ExecutionRoleSessionPolicy -> (string)
+>>>>>>>>>
+>>>>>>>>>> This inline session policy to the StartJobRun API allows you to dynamically restrict the permissions of the specified execution role for the scope of the job, without requiring the creation of additional IAM roles.
@@ -1126,0 +1131,4 @@ Workflows -> (list)
+>>>>>>>> 
+>>>>>>>> ExecutionRoleSessionPolicy -> (string)
+>>>>>>>>
+>>>>>>>>> This inline session policy to the StartJobRun API allows you to dynamically restrict the permissions of the specified execution role for the scope of the job, without requiring the creation of additional IAM roles.
@@ -1212 +1220 @@ MissingWorkflows -> (list)
-  * [AWS CLI 2.27.56 Command Reference](../../index.html) »
+  * [AWS CLI 2.27.59 Command Reference](../../index.html) »