AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-16 · Documentation low

File: cli/latest/reference/amp/list-scrapers.md

Summary

Updated CLI version reference, reorganized scraper response structure fields, added scraperId documentation, restructured role configuration details, and moved pagination token documentation

Security assessment

The changes primarily reorganize field documentation and add clarification about IAM role configurations (sourceRoleArn/targetRoleArn) used for cross-account scraping. While IAM roles are security-relevant, there's no evidence this addresses a specific vulnerability. The documentation now better explains security-related aspects of role configurations but doesn't indicate a security fix.

Diff

diff --git a/cli/latest/reference/amp/list-scrapers.md b/cli/latest/reference/amp/list-scrapers.md
index 9d79b9cf5..5f2f532a6 100644
--- a//cli/latest/reference/amp/list-scrapers.md
+++ b//cli/latest/reference/amp/list-scrapers.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
@@ -251,4 +250,0 @@ Disable automatically prompt for CLI input parameters.
-nextToken -> (string)
-
-> A token indicating that there are more results to retrieve. You can use this token as part of your next `ListScrapers` operation to retrieve those results.
-
@@ -266,0 +263,4 @@ scrapers -> (list)
+>> scraperId -> (string)
+>>
+>>> The ID of the scraper.
+>> 
@@ -271 +271 @@ scrapers -> (list)
->> createdAt -> (timestamp)
+>> roleArn -> (string)
@@ -273 +273 @@ scrapers -> (list)
->>> The date and time that the scraper was created.
+>>> The Amazon Resource Name (ARN) of the IAM role that provides permissions for the scraper to discover and collect metrics on your behalf.
@@ -275 +275 @@ scrapers -> (list)
->> destination -> (tagged union structure)
+>> status -> (structure)
@@ -277,5 +277 @@ scrapers -> (list)
->>> The Amazon Managed Service for Prometheus workspace the scraper sends metrics to.
->>> 
->>> ### Note
->>> 
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `ampConfiguration`.
+>>> A structure that contains the current status of the scraper.
@@ -283 +279 @@ scrapers -> (list)
->>> ampConfiguration -> (structure)
+>>> statusCode -> (string)
@@ -285,5 +281 @@ scrapers -> (list)
->>>> The Amazon Managed Service for Prometheus workspace to send metrics to.
->>>> 
->>>> workspaceArn -> (string)
->>>>
->>>>> ARN of the Amazon Managed Service for Prometheus workspace.
+>>>> The current status of the scraper.
@@ -291 +283 @@ scrapers -> (list)
->> lastModifiedAt -> (timestamp)
+>> createdAt -> (timestamp)
@@ -293 +285 @@ scrapers -> (list)
->>> The date and time that the scraper was last modified.
+>>> The date and time that the scraper was created.
@@ -295 +287 @@ scrapers -> (list)
->> roleArn -> (string)
+>> lastModifiedAt -> (timestamp)
@@ -297 +289 @@ scrapers -> (list)
->>> The Amazon Resource Name (ARN) of the IAM role that provides permissions for the scraper to discover and collect metrics on your behalf.
+>>> The date and time that the scraper was last modified.
@@ -299 +291 @@ scrapers -> (list)
->> roleConfiguration -> (structure)
+>> tags -> (map)
@@ -301 +293 @@ scrapers -> (list)
->>> This structure displays information about the IAM roles used for cross-account scraping configuration.
+>>> (Optional) The list of tag keys and values associated with the scraper.
@@ -303 +295 @@ scrapers -> (list)
->>> sourceRoleArn -> (string)
+>>> key -> (string)
@@ -305 +297 @@ scrapers -> (list)
->>>> The Amazon Resource Name (ARN) of the role used in the source account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
+>>>> The key of the tag. Must not begin with `aws:` .
@@ -307 +299 @@ scrapers -> (list)
->>> targetRoleArn -> (string)
+>>> value -> (string)
@@ -309 +301 @@ scrapers -> (list)
->>>> The Amazon Resource Name (ARN) of the role used in the target account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
+>>>> The value of the tag.
@@ -311 +303 @@ scrapers -> (list)
->> scraperId -> (string)
+>> statusReason -> (string)
@@ -313 +305 @@ scrapers -> (list)
->>> The ID of the scraper.
+>>> If there is a failure, the reason for the failure.
@@ -347 +339 @@ scrapers -> (list)
->> status -> (structure)
+>> destination -> (tagged union structure)
@@ -349 +341 @@ scrapers -> (list)
->>> A structure that contains the current status of the scraper.
+>>> The Amazon Managed Service for Prometheus workspace the scraper sends metrics to.
@@ -351 +343 @@ scrapers -> (list)
->>> statusCode -> (string)
+>>> ### Note
@@ -353,5 +345,9 @@ scrapers -> (list)
->>>> The current status of the scraper.
->> 
->> statusReason -> (string)
->>
->>> If there is a failure, the reason for the failure.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `ampConfiguration`.
+>>> 
+>>> ampConfiguration -> (structure)
+>>>
+>>>> The Amazon Managed Service for Prometheus workspace to send metrics to.
+>>>> 
+>>>> workspaceArn -> (string)
+>>>>
+>>>>> ARN of the Amazon Managed Service for Prometheus workspace.
@@ -359 +355 @@ scrapers -> (list)
->> tags -> (map)
+>> roleConfiguration -> (structure)
@@ -361 +357 @@ scrapers -> (list)
->>> (Optional) The list of tag keys and values associated with the scraper.
+>>> This structure displays information about the IAM roles used for cross-account scraping configuration.
@@ -363 +359 @@ scrapers -> (list)
->>> key -> (string)
+>>> sourceRoleArn -> (string)
@@ -365 +361 @@ scrapers -> (list)
->>>> The key of the tag. Must not begin with `aws:` .
+>>>> The Amazon Resource Name (ARN) of the role used in the source account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
@@ -367 +363 @@ scrapers -> (list)
->>> value -> (string)
+>>> targetRoleArn -> (string)
@@ -369 +365,5 @@ scrapers -> (list)
->>>> The value of the tag.
+>>>> The Amazon Resource Name (ARN) of the role used in the target account to enable cross-account scraping. For information about the contents of this policy, see [Cross-account setup](https://docs.aws.amazon.com/prometheus/latest/userguide/AMP-collector-how-to.html#cross-account-remote-write) .
+
+nextToken -> (string)
+
+> A token indicating that there are more results to retrieve. You can use this token as part of your next `ListScrapers` operation to retrieve those results.
@@ -381 +381 @@ scrapers -> (list)
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »