AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/opensearch/create-domain.md

Summary

Added IAMFederationOptions configuration parameters for OpenSearch UI application authentication

Security assessment

Added documentation for IAM federation authentication settings (Enabled, SubjectKey, RolesKey) which are security-related features for access control, but no evidence of addressing a specific vulnerability

Diff

diff --git a/cli/latest/reference/opensearch/create-domain.md b/cli/latest/reference/opensearch/create-domain.md
index f3ba2b7c5..d1f6d1e33 100644
--- a//cli/latest/reference/opensearch/create-domain.md
+++ b//cli/latest/reference/opensearch/create-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -656,0 +657,16 @@ JSON Syntax:
+> IAMFederationOptions -> (structure)
+>
+>> Container for information about the IAM federation configuration for an OpenSearch UI application.
+>> 
+>> Enabled -> (boolean)
+>>
+>>> True to enable IAM federation authentication for a domain.
+>> 
+>> SubjectKey -> (string)
+>>
+>>> Element of the IAM federation assertion to use for the user name. Default is `sub` .
+>> 
+>> RolesKey -> (string)
+>>
+>>> Element of the IAM federation assertion to use for backend roles. Default is `roles` .
+> 
@@ -664 +680 @@ Shorthand Syntax:
-    Enabled=boolean,InternalUserDatabaseEnabled=boolean,MasterUserOptions={MasterUserARN=string,MasterUserName=string,MasterUserPassword=string},SAMLOptions={Enabled=boolean,Idp={MetadataContent=string,EntityId=string},MasterUserName=string,MasterBackendRole=string,SubjectKey=string,RolesKey=string,SessionTimeoutMinutes=integer},JWTOptions={Enabled=boolean,SubjectKey=string,RolesKey=string,PublicKey=string},AnonymousAuthEnabled=boolean
+    Enabled=boolean,InternalUserDatabaseEnabled=boolean,MasterUserOptions={MasterUserARN=string,MasterUserName=string,MasterUserPassword=string},SAMLOptions={Enabled=boolean,Idp={MetadataContent=string,EntityId=string},MasterUserName=string,MasterBackendRole=string,SubjectKey=string,RolesKey=string,SessionTimeoutMinutes=integer},JWTOptions={Enabled=boolean,SubjectKey=string,RolesKey=string,PublicKey=string},IAMFederationOptions={Enabled=boolean,SubjectKey=string,RolesKey=string},AnonymousAuthEnabled=boolean
@@ -695,0 +712,5 @@ JSON Syntax:
+      "IAMFederationOptions": {
+        "Enabled": true|false,
+        "SubjectKey": "string",
+        "RolesKey": "string"
+      },
@@ -1466,0 +1488,16 @@ DomainStatus -> (structure)
+>> IAMFederationOptions -> (structure)
+>>
+>>> Container for information about the IAM federation configuration for an OpenSearch UI application.
+>>> 
+>>> Enabled -> (boolean)
+>>>
+>>>> True if IAM federation is enabled.
+>>> 
+>>> SubjectKey -> (string)
+>>>
+>>>> The key used for matching the IAM federation subject attribute.
+>>> 
+>>> RolesKey -> (string)
+>>>
+>>>> The key used for matching the IAM federation roles attribute.
+>> 
@@ -1648 +1685 @@ DomainStatus -> (structure)
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »