AWS cli documentation change
Summary
Updated CLI version reference from 2.28.11 to 2.28.12 and added note about ConnectionToken usage and lack of Signature Version 4 authentication
Security assessment
The change adds documentation about authentication mechanisms (using ConnectionToken instead of ParticipantToken) and explicitly states that Signature Version 4 authentication is not used. While this informs security practices, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/connectparticipant/get-authentication-url.md b/cli/latest/reference/connectparticipant/get-authentication-url.md index 337f3c92b..7e379987a 100644 --- a//cli/latest/reference/connectparticipant/get-authentication-url.md +++ b//cli/latest/reference/connectparticipant/get-authentication-url.md @@ -15 +15 @@ - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) » @@ -69,0 +70,6 @@ For security recommendations, see [Amazon Connect Chat security best practices]( +### Note + +`ConnectionToken` is used for invoking this API instead of `ParticipantToken` . + +The Amazon Connect Participant Service APIs do not use [Signature Version 4 authentication](https://docs.aws.amazon.com/general/latest/gr/signature-version-4.html) . + @@ -228 +234 @@ AuthenticationUrl -> (string) - * [AWS CLI 2.28.11 Command Reference](../../index.html) » + * [AWS CLI 2.28.12 Command Reference](../../index.html) »