AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/workspaces-web/create-identity-provider.md

Summary

Updated CLI version reference, reordered command parameters, added identity provider type documentation with supported values, and restructured parameter descriptions.

Security assessment

The changes primarily reorganize parameters and add explicit documentation for identity provider types (including SAML/OIDC). While identity providers relate to authentication security, there's no evidence this addresses a specific vulnerability. The client-token documentation about idempotency is a standard API practice, not a security fix.

Diff

diff --git a/cli/latest/reference/workspaces-web/create-identity-provider.md b/cli/latest/reference/workspaces-web/create-identity-provider.md
index 7e849dd46..162b3109b 100644
--- a//cli/latest/reference/workspaces-web/create-identity-provider.md
+++ b//cli/latest/reference/workspaces-web/create-identity-provider.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -67,2 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-    [--client-token <value>]
-    --identity-provider-details <value>
+    --portal-arn <value>
@@ -71 +70,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-    --portal-arn <value>
+    --identity-provider-details <value>
+    [--client-token <value>]
@@ -97 +97 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-`--client-token` (string)
+`--portal-arn` (string)
@@ -99 +99,18 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-> A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token returns the result from the original successful request.
+> The ARN of the web portal.
+
+`--identity-provider-name` (string)
+
+> The identity provider name.
+
+`--identity-provider-type` (string)
+
+> The identity provider type.
+> 
+> Possible values:
+> 
+>   * `SAML`
+>   * `Facebook`
+>   * `Google`
+>   * `LoginWithAmazon`
+>   * `SignInWithApple`
+>   * `OIDC`
@@ -101 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-> If you do not specify a client token, one is automatically generated by the Amazon Web Services SDK.
+
@@ -158,5 +175 @@ JSON Syntax:
-`--identity-provider-name` (string)
-
-> The identity provider name.
-
-`--identity-provider-type` (string)
+`--client-token` (string)
@@ -164,10 +177 @@ JSON Syntax:
-> The identity provider type.
-> 
-> Possible values:
-> 
->   * `SAML`
->   * `Facebook`
->   * `Google`
->   * `LoginWithAmazon`
->   * `SignInWithApple`
->   * `OIDC`
+> A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. Idempotency ensures that an API request completes only once. With an idempotent request, if the original request completes successfully, subsequent retries with the same client token returns the result from the original successful request.
@@ -175,5 +179 @@ JSON Syntax:
-
-
-`--portal-arn` (string)
-
-> The ARN of the web portal.
+> If you do not specify a client token, one is automatically generated by the Amazon Web Services SDK.
@@ -328 +328 @@ identityProviderArn -> (string)
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »