AWS cli medium security documentation change
Summary
Updated AWS CLI version reference, reordered command parameters, restructured documentation for tags, encryption context, inline redaction configuration, and added/modified field descriptions related to data protection settings.
Security assessment
The changes include modifications to encryption context parameters (customer-managed key, additional encryption context) and inline redaction configuration details (confidence levels, enforced/exempt URLs, pattern matching logic). These directly relate to data protection mechanisms and encryption controls, which are security-critical features. However, there is no explicit mention of addressing a specific vulnerability or incident.
Diff
diff --git a/cli/latest/reference/workspaces-web/create-data-protection-settings.md b/cli/latest/reference/workspaces-web/create-data-protection-settings.md index 2f4849fe8..3f4806518 100644 --- a//cli/latest/reference/workspaces-web/create-data-protection-settings.md +++ b//cli/latest/reference/workspaces-web/create-data-protection-settings.md @@ -15 +15 @@ - * [AWS CLI 2.27.63 Command Reference](../../index.html) » + * [AWS CLI 2.28.0 Command Reference](../../index.html) » @@ -67,4 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp - [--additional-encryption-context <value>] - [--client-token <value>] - [--customer-managed-key <value>] - [--description <value>] @@ -72 +68 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp - [--inline-redaction-configuration <value>] + [--description <value>] @@ -73,0 +70,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp + [--customer-managed-key <value>] + [--additional-encryption-context <value>] + [--inline-redaction-configuration <value>] + [--client-token <value>] @@ -98 +98 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp -`--additional-encryption-context` (map) +`--display-name` (string) @@ -100 +100,9 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp -> Additional encryption context of the data protection settings. +> The display name of the data protection settings. + +`--description` (string) + +> The description of the data protection settings. + +`--tags` (list) + +> The tags to add to the data protection settings resource. A tag is a key-value pair. @@ -102 +110 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp -> key -> (string) +> (structure) @@ -104 +112,9 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp -> value -> (string) +>> The tag. +>> +>> Key -> (string) +>> +>>> The key of the tag. +>> +>> Value -> (string) +>> +>>> The value of the tag @@ -109 +125 @@ Shorthand Syntax: - KeyName1=string,KeyName2=string + Key=string,Value=string ... @@ -115,2 +131,7 @@ JSON Syntax: - {"string": "string" - ...} + [ + { + "Key": "string", + "Value": "string" + } + ... + ] @@ -119 +140 @@ JSON Syntax: -`--client-token` (string) +`--customer-managed-key` (string) @@ -121 +142,5 @@ JSON Syntax: -> A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token returns the result from the original successful request. +> The custom managed key of the data protection settings. + +`--additional-encryption-context` (map) + +> Additional encryption context of the data protection settings. @@ -123 +148,3 @@ JSON Syntax: -> If you do not specify a client token, one is automatically generated by the Amazon Web Services SDK. +> key -> (string) +> +> value -> (string) @@ -125 +152 @@ JSON Syntax: -`--customer-managed-key` (string) +Shorthand Syntax: @@ -127 +153,0 @@ JSON Syntax: -> The custom managed key of the data protection settings. @@ -129 +155 @@ JSON Syntax: -`--description` (string) + KeyName1=string,KeyName2=string @@ -131 +156,0 @@ JSON Syntax: -> The description of the data protection settings. @@ -133 +158,5 @@ JSON Syntax: -`--display-name` (string) +JSON Syntax: + + + {"string": "string" + ...} @@ -135 +163,0 @@ JSON Syntax: -> The display name of the data protection settings. @@ -141,16 +168,0 @@ JSON Syntax: -> globalConfidenceLevel -> (integer) -> ->> The global confidence level for the inline redaction configuration. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This is applied to patterns that do not have a pattern-level confidence level. Defaults to confidence level 2. -> -> globalEnforcedUrls -> (list) -> ->> The global enforced URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level enforced URL list. ->> ->> (string) -> -> globalExemptUrls -> (list) -> ->> The global exempt URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level exempt URL list. ->> ->> (string) -> @@ -169,4 +180,0 @@ JSON Syntax: ->>> confidenceLevel -> (integer) ->>> ->>>> The confidence level for inline redaction pattern. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This overrides the global confidence level. ->>> @@ -177 +185 @@ JSON Syntax: ->>>> keywordRegex -> (string) +>>>> patternName -> (string) @@ -179 +187,5 @@ JSON Syntax: ->>>>> The keyword regex for the customer pattern. After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, “/ab+c/gi” +>>>>> The pattern name for the custom pattern. +>>>> +>>>> patternRegex -> (string) +>>>> +>>>>> The pattern regex for the customer pattern. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example: “/ab+c/gi”. @@ -185 +197 @@ JSON Syntax: ->>>> patternName -> (string) +>>>> keywordRegex -> (string) @@ -187 +199,5 @@ JSON Syntax: ->>>>> The pattern name for the custom pattern. +>>>>> The keyword regex for the customer pattern. After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, “/ab+c/gi” +>>> +>>> redactionPlaceHolder -> (structure) +>>> +>>>> The redaction placeholder that will replace the redacted text in session for the inline redaction pattern. @@ -189 +205 @@ JSON Syntax: ->>>> patternRegex -> (string) +>>>> redactionPlaceHolderType -> (string) @@ -191 +207,5 @@ JSON Syntax: ->>>>> The pattern regex for the customer pattern. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example: “/ab+c/gi”. +>>>>> The redaction placeholder type that will replace the redacted text in session. +>>>> +>>>> redactionPlaceHolderText -> (string) +>>>> +>>>>> The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type. @@ -205 +225 @@ JSON Syntax: ->>> redactionPlaceHolder -> (structure) +>>> confidenceLevel -> (integer) @@ -207,9 +227,17 @@ JSON Syntax: ->>>> The redaction placeholder that will replace the redacted text in session for the inline redaction pattern. ->>>> ->>>> redactionPlaceHolderText -> (string) ->>>> ->>>>> The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type. ->>>> ->>>> redactionPlaceHolderType -> (string) ->>>> ->>>>> The redaction placeholder type that will replace the redacted text in session. +>>>> The confidence level for inline redaction pattern. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This overrides the global confidence level. +> +> globalEnforcedUrls -> (list) +> +>> The global enforced URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level enforced URL list. +>> +>> (string) +> +> globalExemptUrls -> (list) +> +>> The global exempt URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level exempt URL list. +>> +>> (string) +> +> globalConfidenceLevel -> (integer) +> +>> The global confidence level for the inline redaction configuration. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This is applied to patterns that do not have a pattern-level confidence level. Defaults to confidence level 2. @@ -221,3 +248,0 @@ JSON Syntax: - "globalConfidenceLevel": integer, - "globalEnforcedUrls": ["string", ...], - "globalExemptUrls": ["string", ...], @@ -227 +251,0 @@ JSON Syntax: - "confidenceLevel": integer, @@ -229,2 +252,0 @@ JSON Syntax: - "keywordRegex": "string", - "patternDescription": "string", @@ -232 +254,7 @@ JSON Syntax: - "patternRegex": "string" + "patternRegex": "string", + "patternDescription": "string", + "keywordRegex": "string" + }, + "redactionPlaceHolder": { + "redactionPlaceHolderType": "CustomText", + "redactionPlaceHolderText": "string" @@ -236,4 +264 @@ JSON Syntax: - "redactionPlaceHolder": { - "redactionPlaceHolderText": "string", - "redactionPlaceHolderType": "CustomText" - }