AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-16 · Documentation low

File: cli/latest/reference/amp/create-scraper.md

Summary

Reordered command parameters and updated CLI version reference. Moved '--client-token' parameter documentation lower and reorganized parameter descriptions.

Security assessment

The changes involve parameter reordering and documentation restructuring without introducing new security content. The 'role-configuration' parameter already existed with cross-account access documentation, and 'client-token' relates to idempotency rather than security. No vulnerability fixes or new security features were added.

Diff

diff --git a/cli/latest/reference/amp/create-scraper.md b/cli/latest/reference/amp/create-scraper.md
index ff60b5c2a..2480fc458 100644
--- a//cli/latest/reference/amp/create-scraper.md
+++ b//cli/latest/reference/amp/create-scraper.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
@@ -78,3 +77,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/amp-20
-    [--client-token <value>]
-    --destination <value>
-    [--role-configuration <value>]
@@ -82,0 +80,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/amp-20
+    --destination <value>
+    [--role-configuration <value>]
+    [--client-token <value>]
@@ -112,63 +111,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/amp-20
-`--client-token` (string)
-
-> (Optional) A unique, case-sensitive identifier that you can provide to ensure the idempotency of the request.
-
-`--destination` (tagged union structure)
-
-> The Amazon Managed Service for Prometheus workspace to send metrics to.
-> 
-> ### Note
-> 
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `ampConfiguration`.
-> 
-> ampConfiguration -> (structure)
->
->> The Amazon Managed Service for Prometheus workspace to send metrics to.
->> 
->> workspaceArn -> (string)
->>
->>> ARN of the Amazon Managed Service for Prometheus workspace.
-
-Shorthand Syntax:
-    
-    
-    ampConfiguration={workspaceArn=string}
-    
-
-JSON Syntax:
-    
-    
-    {
-      "ampConfiguration": {
-        "workspaceArn": "string"
-      }
-    }
-    
-
-`--role-configuration` (structure)
-
-> Use this structure to enable cross-account access, so that you can use a target account to access Prometheus metrics from source accounts.
-> 
-> sourceRoleArn -> (string)
->
->> The Amazon Resource Name (ARN) of the role used in the source account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
-> 
-> targetRoleArn -> (string)
->
->> The Amazon Resource Name (ARN) of the role used in the target account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
-
-Shorthand Syntax:
-    
-    
-    sourceRoleArn=string,targetRoleArn=string
-    
-
-JSON Syntax:
-    
-    
-    {
-      "sourceRoleArn": "string",
-      "targetRoleArn": "string"
-    }
-    
-
@@ -250,0 +188,63 @@ JSON Syntax:
+`--destination` (tagged union structure)
+
+> The Amazon Managed Service for Prometheus workspace to send metrics to.
+> 
+> ### Note
+> 
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `ampConfiguration`.
+> 
+> ampConfiguration -> (structure)
+>
+>> The Amazon Managed Service for Prometheus workspace to send metrics to.
+>> 
+>> workspaceArn -> (string)
+>>
+>>> ARN of the Amazon Managed Service for Prometheus workspace.
+
+Shorthand Syntax:
+    
+    
+    ampConfiguration={workspaceArn=string}
+    
+
+JSON Syntax:
+    
+    
+    {
+      "ampConfiguration": {
+        "workspaceArn": "string"
+      }
+    }
+    
+
+`--role-configuration` (structure)
+
+> Use this structure to enable cross-account access, so that you can use a target account to access Prometheus metrics from source accounts.
+> 
+> sourceRoleArn -> (string)
+>
+>> The Amazon Resource Name (ARN) of the role used in the source account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
+> 
+> targetRoleArn -> (string)
+>
+>> The Amazon Resource Name (ARN) of the role used in the target account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
+
+Shorthand Syntax:
+    
+    
+    sourceRoleArn=string,targetRoleArn=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "sourceRoleArn": "string",
+      "targetRoleArn": "string"
+    }
+    
+
+`--client-token` (string)
+
+> (Optional) A unique, case-sensitive identifier that you can provide to ensure the idempotency of the request.
+
@@ -375,4 +374,0 @@ Disable automatically prompt for CLI input parameters.
-arn -> (string)
-
-> The Amazon Resource Name (ARN) of the new scraper.
-
@@ -382,0 +379,4 @@ scraperId -> (string)
+arn -> (string)
+
+> The Amazon Resource Name (ARN) of the new scraper.
+
@@ -413 +413 @@ tags -> (map)
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »