AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-16 · Documentation low

File: cli/latest/reference/security-ir/create-membership.md

Summary

Added --cover-entire-organization flag, updated command description, and enhanced parameter documentation

Security assessment

Adds documentation for security feature (organization-wide membership scope control) but does not address a specific security vulnerability. The --cover-entire-organization parameter helps configure security boundaries.

Diff

diff --git a/cli/latest/reference/security-ir/create-membership.md b/cli/latest/reference/security-ir/create-membership.md
index 7b89a0bee..12c8f8b10 100644
--- a//cli/latest/reference/security-ir/create-membership.md
+++ b//cli/latest/reference/security-ir/create-membership.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
@@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c
-Grants permissions to create a new membership.
+Creates a new membership.
@@ -71,0 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+    [--cover-entire-organization | --no-cover-entire-organization]
@@ -98 +99,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
-> An optional element used in combination with CreateMembership.
+> ### Note
+> 
+> The `clientToken` field is an idempotency key used to ensure that repeated attempts for a single action will be ignored by the server during retries. A caller supplied unique ID (typically a UUID) should be provided.
@@ -102 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
-> Required element use in combination with CreateMembership to create a name for the membership.
+> Required element used in combination with CreateMembership to create a name for the membership.
@@ -106 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
-> Required element use in combination with CreateMembership to add customer incident response team members and trusted partners to the membership.
+> Required element used in combination with CreateMembership to add customer incident response team members and trusted partners to the membership.
@@ -183,0 +187,11 @@ JSON Syntax:
+`--cover-entire-organization` | `--no-cover-entire-organization` (boolean)
+
+> The `coverEntireOrganization` parameter is a boolean flag that determines whether the membership should be applied to the entire Amazon Web Services Organization. When set to true, the membership will be created for all accounts within the organization. When set to false, the membership will only be created for specified accounts.
+> 
+> This parameter is optional. If not specified, the default value is false.
+> 
+>   * If set to _true_ : The membership will automatically include all existing and future accounts in the Amazon Web Services Organization.
+>   * If set to _false_ : The membership will only apply to explicitly specified accounts.
+> 
+
+
@@ -297 +311 @@ membershipId -> (string)
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »