AWS cli documentation change
Summary
Restructured data protection settings documentation, reordered fields, updated inline redaction pattern configuration details, and added clarification for encryption context and confidence levels
Security assessment
The changes reorganize and clarify security-related data protection settings including encryption context, customer-managed keys, and redaction confidence levels. While these are security features, there's no evidence of addressing a specific vulnerability. The updates improve documentation of existing security controls rather than patching an issue.
Diff
diff --git a/cli/latest/reference/workspaces-web/get-data-protection-settings.md b/cli/latest/reference/workspaces-web/get-data-protection-settings.md index df4579ca9..c88a9b116 100644 --- a//cli/latest/reference/workspaces-web/get-data-protection-settings.md +++ b//cli/latest/reference/workspaces-web/get-data-protection-settings.md @@ -15 +15 @@ - * [AWS CLI 2.27.63 Command Reference](../../index.html) » + * [AWS CLI 2.28.0 Command Reference](../../index.html) » @@ -199,22 +198,0 @@ dataProtectionSettings -> (structure) -> additionalEncryptionContext -> (map) -> ->> The additional encryption context of the data protection settings. ->> ->> key -> (string) ->> ->> value -> (string) -> -> associatedPortalArns -> (list) -> ->> A list of web portal ARNs that this data protection settings resource is associated with. ->> ->> (string) -> -> creationDate -> (timestamp) -> ->> The creation date timestamp of the data protection settings. -> -> customerManagedKey -> (string) -> ->> The customer managed key used to encrypt sensitive information in the data protection settings. -> @@ -225,8 +202,0 @@ dataProtectionSettings -> (structure) -> description -> (string) -> ->> The description of the data protection settings. -> -> displayName -> (string) -> ->> The display name of the data protection settings. -> @@ -237,16 +206,0 @@ dataProtectionSettings -> (structure) ->> globalConfidenceLevel -> (integer) ->> ->>> The global confidence level for the inline redaction configuration. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This is applied to patterns that do not have a pattern-level confidence level. Defaults to confidence level 2. ->> ->> globalEnforcedUrls -> (list) ->> ->>> The global enforced URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level enforced URL list. ->>> ->>> (string) ->> ->> globalExemptUrls -> (list) ->> ->>> The global exempt URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level exempt URL list. ->>> ->>> (string) ->> @@ -265,4 +218,0 @@ dataProtectionSettings -> (structure) ->>>> confidenceLevel -> (integer) ->>>> ->>>>> The confidence level for inline redaction pattern. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This overrides the global confidence level. ->>>> @@ -273 +223 @@ dataProtectionSettings -> (structure) ->>>>> keywordRegex -> (string) +>>>>> patternName -> (string) @@ -275 +225,5 @@ dataProtectionSettings -> (structure) ->>>>>> The keyword regex for the customer pattern. After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, “/ab+c/gi” +>>>>>> The pattern name for the custom pattern. +>>>>> +>>>>> patternRegex -> (string) +>>>>> +>>>>>> The pattern regex for the customer pattern. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example: “/ab+c/gi”. @@ -281 +235 @@ dataProtectionSettings -> (structure) ->>>>> patternName -> (string) +>>>>> keywordRegex -> (string) @@ -283 +237,5 @@ dataProtectionSettings -> (structure) ->>>>>> The pattern name for the custom pattern. +>>>>>> The keyword regex for the customer pattern. After there is a match to the pattern regex, the keyword regex is used to search within the proximity of the match. If there is a keyword match, then the match is confirmed. If no keyword regex is provided, the pattern regex match will automatically be confirmed. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example, “/ab+c/gi” +>>>> +>>>> redactionPlaceHolder -> (structure) +>>>> +>>>>> The redaction placeholder that will replace the redacted text in session for the inline redaction pattern. @@ -285 +243 @@ dataProtectionSettings -> (structure) ->>>>> patternRegex -> (string) +>>>>> redactionPlaceHolderType -> (string) @@ -287 +245,5 @@ dataProtectionSettings -> (structure) ->>>>>> The pattern regex for the customer pattern. The format must follow JavaScript regex format. The pattern must be enclosed between slashes, and can have flags behind the second slash. For example: “/ab+c/gi”. +>>>>>> The redaction placeholder type that will replace the redacted text in session. +>>>>> +>>>>> redactionPlaceHolderText -> (string) +>>>>> +>>>>>> The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type. @@ -301 +263 @@ dataProtectionSettings -> (structure) ->>>> redactionPlaceHolder -> (structure) +>>>> confidenceLevel -> (integer) @@ -303,9 +265,47 @@ dataProtectionSettings -> (structure) ->>>>> The redaction placeholder that will replace the redacted text in session for the inline redaction pattern. ->>>>> ->>>>> redactionPlaceHolderText -> (string) ->>>>> ->>>>>> The redaction placeholder text that will replace the redacted text in session for the custom text redaction placeholder type. ->>>>> ->>>>> redactionPlaceHolderType -> (string) ->>>>> ->>>>>> The redaction placeholder type that will replace the redacted text in session. +>>>>> The confidence level for inline redaction pattern. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This overrides the global confidence level. +>> +>> globalEnforcedUrls -> (list) +>> +>>> The global enforced URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level enforced URL list. +>>> +>>> (string) +>> +>> globalExemptUrls -> (list) +>> +>>> The global exempt URL configuration for the inline redaction configuration. This is applied to patterns that do not have a pattern-level exempt URL list. +>>> +>>> (string) +>> +>> globalConfidenceLevel -> (integer) +>> +>>> The global confidence level for the inline redaction configuration. This indicates the certainty of data type matches in the redaction process. Confidence level 3 means high confidence, and requires a formatted text pattern match in order for content to be redacted. Confidence level 2 means medium confidence, and redaction considers both formatted and unformatted text, and adds keyword associate to the logic. Confidence level 1 means low confidence, and redaction is enforced for both formatted pattern + unformatted pattern without keyword. This is applied to patterns that do not have a pattern-level confidence level. Defaults to confidence level 2. +> +> associatedPortalArns -> (list) +> +>> A list of web portal ARNs that this data protection settings resource is associated with. +>> +>> (string) +> +> displayName -> (string) +> +>> The display name of the data protection settings. +> +> description -> (string) +> +>> The description of the data protection settings. +> +> creationDate -> (timestamp) +> +>> The creation date timestamp of the data protection settings. +> +> customerManagedKey -> (string) +> +>> The customer managed key used to encrypt sensitive information in the data protection settings. +> +> additionalEncryptionContext -> (map) +> +>> The additional encryption context of the data protection settings. +>> +>> key -> (string) +>> +>> value -> (string) @@ -323 +323 @@ dataProtectionSettings -> (structure) - * [AWS CLI 2.27.63 Command Reference](../../index.html) » + * [AWS CLI 2.28.0 Command Reference](../../index.html) »