AWS cli low security documentation change

Service: cli · 2025-08-10 · Security-related low

File: cli/latest/reference/glue/update-catalog.md

Summary

Added documentation for IcebergOptimizationProperties configuration including IAM role requirements and parameters for compaction, retention, and orphan file deletion

Security assessment

Introduces IAM role configuration (RoleArn) for Iceberg table optimization operations. Proper IAM role configuration is critical for security as it controls permissions for data operations. However, there's no evidence this addresses an existing vulnerability.

Diff

diff --git a/cli/latest/reference/glue/update-catalog.md b/cli/latest/reference/glue/update-catalog.md
index 8556646f3..0c89b33a2 100644
--- a//cli/latest/reference/glue/update-catalog.md
+++ b//cli/latest/reference/glue/update-catalog.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.4 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.6 Command Reference](../../index.html) »
@@ -160,0 +161,32 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/glue-2
+>> IcebergOptimizationProperties -> (structure)
+>>
+>>> A structure that specifies Iceberg table optimization properties for the catalog. This includes configuration for compaction, retention, and orphan file deletion operations that can be applied to Iceberg tables in this catalog.
+>>> 
+>>> RoleArn -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the IAM role that will be assumed to perform Iceberg table optimization operations.
+>>> 
+>>> Compaction -> (map)
+>>>
+>>>> A map of key-value pairs that specify configuration parameters for Iceberg table compaction operations, which optimize the layout of data files to improve query performance.
+>>>> 
+>>>> key -> (string)
+>>>> 
+>>>> value -> (string)
+>>> 
+>>> Retention -> (map)
+>>>
+>>>> A map of key-value pairs that specify configuration parameters for Iceberg table retention operations, which manage the lifecycle of table snapshots to control storage costs.
+>>>> 
+>>>> key -> (string)
+>>>> 
+>>>> value -> (string)
+>>> 
+>>> OrphanFileDeletion -> (map)
+>>>
+>>>> A map of key-value pairs that specify configuration parameters for Iceberg orphan file deletion operations, which identify and remove files that are no longer referenced by the table metadata.
+>>>> 
+>>>> key -> (string)
+>>>> 
+>>>> value -> (string)
+>> 
@@ -238,0 +271,9 @@ JSON Syntax:
+        "IcebergOptimizationProperties": {
+          "RoleArn": "string",
+          "Compaction": {"string": "string"
+            ...},
+          "Retention": {"string": "string"
+            ...},
+          "OrphanFileDeletion": {"string": "string"
+            ...}
+        },
@@ -375 +416 @@ None
-  * [AWS CLI 2.28.4 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.6 Command Reference](../../index.html) »