AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-16 · Documentation low

File: cli/latest/reference/pcs/get-compute-node-group.md

Summary

Enhanced IAM instance profile documentation with security guidance link

Security assessment

Updated documentation to include security guidance link for IAM roles, improving security awareness but not fixing a specific issue

Diff

diff --git a/cli/latest/reference/pcs/get-compute-node-group.md b/cli/latest/reference/pcs/get-compute-node-group.md
index bf4e62364..cb547ce4d 100644
--- a//cli/latest/reference/pcs/get-compute-node-group.md
+++ b//cli/latest/reference/pcs/get-compute-node-group.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
@@ -270,8 +270 @@ computeNodeGroup -> (structure)
->> The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the `pcs:RegisterComputeNodeGroupInstance` permission. The resource identifier of the ARN must start with `AWSPCS` or it must have `/aws-pcs/` in its path.
->>
->>> **Examples**
->> 
->>   * `arn:aws:iam::111122223333:instance-profile/AWSPCS-example-role-1`
->>   * `arn:aws:iam::111122223333:instance-profile/aws-pcs/example-role-2`
->> 
-
+>> The Amazon Resource Name (ARN) of the IAM instance profile used to pass an IAM role when launching EC2 instances. The role contained in your instance profile must have the `pcs:RegisterComputeNodeGroupInstance` permission and the role name must start with `AWSPCS` or must have the path `/aws-pcs/` . For more information, see [IAM instance profiles for PCS](https://docs.aws.amazon.com/pcs/latest/userguide/security-instance-profiles.html) in the _PCS User Guide_ .
@@ -369 +362 @@ computeNodeGroup -> (structure)
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »