AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-01 · Documentation low

File: cli/latest/reference/workspaces-web/create-user-settings.md

Summary

Updated CLI version reference, reordered parameters, restructured documentation for security controls (copy/paste/download/upload permissions, encryption context, session timeouts), and clarified tag syntax.

Security assessment

The changes explicitly document security-related parameters like encryption context, session timeouts, and user permission controls (copy/paste/download/upload). While these are security features, there is no evidence of a specific vulnerability being addressed. The updates improve clarity around existing security controls but do not indicate a security incident response.

Diff

diff --git a/cli/latest/reference/workspaces-web/create-user-settings.md b/cli/latest/reference/workspaces-web/create-user-settings.md
index 4858c8f42..2fe0cf25e 100644
--- a//cli/latest/reference/workspaces-web/create-user-settings.md
+++ b//cli/latest/reference/workspaces-web/create-user-settings.md
@@ -15 +15 @@
-  * [AWS CLI 2.27.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.0 Command Reference](../../index.html) »
@@ -67,3 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-    [--additional-encryption-context <value>]
-    [--client-token <value>]
-    [--cookie-synchronization-configuration <value>]
@@ -71,5 +67,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-    [--customer-managed-key <value>]
-    [--deep-link-allowed <value>]
-    [--disconnect-timeout-in-minutes <value>]
-    --download-allowed <value>
-    [--idle-disconnect-timeout-in-minutes <value>]
@@ -76,0 +69,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
+    --download-allowed <value>
+    --upload-allowed <value>
@@ -78,0 +73,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
+    [--disconnect-timeout-in-minutes <value>]
+    [--idle-disconnect-timeout-in-minutes <value>]
+    [--client-token <value>]
+    [--cookie-synchronization-configuration <value>]
+    [--customer-managed-key <value>]
+    [--additional-encryption-context <value>]
+    [--deep-link-allowed <value>]
@@ -80 +80,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-    --upload-allowed <value>
@@ -105 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-`--additional-encryption-context` (map)
+`--copy-allowed` (string)
@@ -107 +107 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-> The additional encryption context of the user settings.
+> Specifies whether the user can copy text from the streaming session to the local device.
@@ -109 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-> key -> (string)
+> Possible values:
@@ -111 +111,64 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/worksp
-> value -> (string)
+>   * `Disabled`
+>   * `Enabled`
+> 
+
+
+`--paste-allowed` (string)
+
+> Specifies whether the user can paste text from the local device to the streaming session.
+> 
+> Possible values:
+> 
+>   * `Disabled`
+>   * `Enabled`
+> 
+
+
+`--download-allowed` (string)
+
+> Specifies whether the user can download files from the streaming session to the local device.
+> 
+> Possible values:
+> 
+>   * `Disabled`
+>   * `Enabled`
+> 
+
+
+`--upload-allowed` (string)
+
+> Specifies whether the user can upload files from the local device to the streaming session.
+> 
+> Possible values:
+> 
+>   * `Disabled`
+>   * `Enabled`
+> 
+
+
+`--print-allowed` (string)
+
+> Specifies whether the user can print to the local device.
+> 
+> Possible values:
+> 
+>   * `Disabled`
+>   * `Enabled`
+> 
+
+
+`--tags` (list)
+
+> The tags to add to the user settings resource. A tag is a key-value pair.
+> 
+> (structure)
+>
+>> The tag.
+>> 
+>> Key -> (string)
+>>
+>>> The key of the tag.
+>> 
+>> Value -> (string)
+>>
+>>> The value of the tag
@@ -116 +179 @@ Shorthand Syntax:
-    KeyName1=string,KeyName2=string
+    Key=string,Value=string ...
@@ -122,2 +185,8 @@ JSON Syntax:
-    {"string": "string"
-      ...}
+    [
+      {
+        "Key": "string",
+        "Value": "string"
+      }
+      ...
+    ]
+    
@@ -124,0 +194,7 @@ JSON Syntax:
+`--disconnect-timeout-in-minutes` (integer)
+
+> The amount of time that a streaming session remains active after users disconnect.
+
+`--idle-disconnect-timeout-in-minutes` (integer)
+
+> The amount of time that users can be idle (inactive) before they are disconnected from their streaming session and the disconnect timeout interval begins.
@@ -205,11 +280,0 @@ JSON Syntax:
-`--copy-allowed` (string)
-
-> Specifies whether the user can copy text from the streaming session to the local device.
-> 
-> Possible values:
-> 
->   * `Disabled`
->   * `Enabled`
-> 
-
-
@@ -220 +285 @@ JSON Syntax:
-`--deep-link-allowed` (string)
+`--additional-encryption-context` (map)
@@ -222,3 +287 @@ JSON Syntax:
-> Specifies whether the user can use deep links that open automatically when connecting to a session.
-> 
-> Possible values:
+> The additional encryption context of the user settings.
@@ -226,2 +289 @@ JSON Syntax:
->   * `Disabled`
->   * `Enabled`
+> key -> (string)
@@ -228,0 +291 @@ JSON Syntax:
+> value -> (string)
@@ -229,0 +293 @@ JSON Syntax:
+Shorthand Syntax:
@@ -231 +294,0 @@ JSON Syntax:
-`--disconnect-timeout-in-minutes` (integer)
@@ -233 +296 @@ JSON Syntax:
-> The amount of time that a streaming session remains active after users disconnect.
+    KeyName1=string,KeyName2=string
@@ -235 +297,0 @@ JSON Syntax:
-`--download-allowed` (string)
@@ -237,7 +299 @@ JSON Syntax:
-> Specifies whether the user can download files from the streaming session to the local device.
-> 
-> Possible values:
-> 
->   * `Disabled`
->   * `Enabled`
-> 
+JSON Syntax:
@@ -246 +302,2 @@ JSON Syntax:
-`--idle-disconnect-timeout-in-minutes` (integer)
+    {"string": "string"
+      ...}
@@ -248 +304,0 @@ JSON Syntax:
-> The amount of time that users can be idle (inactive) before they are disconnected from their streaming session and the disconnect timeout interval begins.
@@ -250 +306 @@ JSON Syntax:
-`--paste-allowed` (string)
+`--deep-link-allowed` (string)
@@ -252 +308 @@ JSON Syntax:
-> Specifies whether the user can paste text from the local device to the streaming session.
+> Specifies whether the user can use deep links that open automatically when connecting to a session.
@@ -261 +317 @@ JSON Syntax:
-`--print-allowed` (string)
+`--toolbar-configuration` (structure)
@@ -263,3 +319 @@ JSON Syntax:
-> Specifies whether the user can print to the local device.
-> 
-> Possible values:
+> The configuration of the toolbar. This allows administrators to select the toolbar type and visual mode, set maximum display resolution for sessions, and choose which items are visible to end users during their sessions. If administrators do not modify these settings, end users retain control over their toolbar preferences.
@@ -267,2 +321 @@ JSON Syntax:
->   * `Disabled`
->   * `Enabled`
+> toolbarType -> (string)
@@ -270,5 +323 @@ JSON Syntax:
-
-
-`--tags` (list)
-