AWS cli medium security documentation change

Service: cli · 2025-09-28 · Security-related medium

File: cli/latest/reference/glue/get-connection.md

Summary

Added multiple new connection types, clarified JDBC_ENFORCE_SSL parameter case insensitivity, and documented KmsKeyArn for encrypting sensitive data

Security assessment

The clarification that JDBC_ENFORCE_SSL is case-insensitive prevents misconfigurations where uppercase values (e.g., 'True') might have previously been ignored, ensuring SSL enforcement remains consistent. The KmsKeyArn addition explicitly documents encryption of credentials using AWS KMS, a critical security feature. Both changes directly impact secure configuration practices.

Diff

diff --git a/cli/latest/reference/glue/get-connection.md b/cli/latest/reference/glue/get-connection.md
index aef994904..6a4224f5f 100644
--- a//cli/latest/reference/glue/get-connection.md
+++ b//cli/latest/reference/glue/get-connection.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
@@ -292,0 +293 @@ Connection -> (structure)
+>>   * `ADOBEANALYTICS`
@@ -293,0 +295,3 @@ Connection -> (structure)
+>>   * `LINKEDIN`
+>>   * `MIXPANEL`
+>>   * `ASANA`
@@ -294,0 +299,3 @@ Connection -> (structure)
+>>   * `SMARTSHEET`
+>>   * `DATADOG`
+>>   * `WOOCOMMERCE`
@@ -296,0 +304,56 @@ Connection -> (structure)
+>>   * `PAYPAL`
+>>   * `QUICKBOOKS`
+>>   * `FACEBOOKPAGEINSIGHTS`
+>>   * `FRESHDESK`
+>>   * `TWILIO`
+>>   * `DOCUSIGNMONITOR`
+>>   * `FRESHSALES`
+>>   * `ZOOM`
+>>   * `GOOGLESEARCHCONSOLE`
+>>   * `SALESFORCECOMMERCECLOUD`
+>>   * `SAPCONCUR`
+>>   * `DYNATRACE`
+>>   * `MICROSOFTDYNAMIC365FINANCEANDOPS`
+>>   * `MICROSOFTTEAMS`
+>>   * `BLACKBAUDRAISEREDGENXT`
+>>   * `MAILCHIMP`
+>>   * `GITLAB`
+>>   * `PENDO`
+>>   * `PRODUCTBOARD`
+>>   * `CIRCLECI`
+>>   * `PIPEDIVE`
+>>   * `SENDGRID`
+>>   * `AZURECOSMOS`
+>>   * `AZURESQL`
+>>   * `BIGQUERY`
+>>   * `BLACKBAUD`
+>>   * `CLOUDERAHIVE`
+>>   * `CLOUDERAIMPALA`
+>>   * `CLOUDWATCH`
+>>   * `CLOUDWATCHMETRICS`
+>>   * `CMDB`
+>>   * `DATALAKEGEN2`
+>>   * `DB2`
+>>   * `DB2AS400`
+>>   * `DOCUMENTDB`
+>>   * `DOMO`
+>>   * `DYNAMODB`
+>>   * `GOOGLECLOUDSTORAGE`
+>>   * `HBASE`
+>>   * `KUSTOMER`
+>>   * `MICROSOFTDYNAMICS365CRM`
+>>   * `MONDAY`
+>>   * `MYSQL`
+>>   * `OKTA`
+>>   * `OPENSEARCH`
+>>   * `ORACLE`
+>>   * `PIPEDRIVE`
+>>   * `POSTGRESQL`
+>>   * `SAPHANA`
+>>   * `SQLSERVER`
+>>   * `SYNAPSE`
+>>   * `TERADATA`
+>>   * `TERADATANOS`
+>>   * `TIMESTREAM`
+>>   * `TPCDS`
+>>   * `VERTICA`
@@ -337 +400 @@ Connection -> (structure)
->>   * `JDBC_ENFORCE_SSL` \- A Boolean string (true, false) specifying whether Secure Sockets Layer (SSL) with hostname matching is enforced for the JDBC connection on the client. The default is false.
+>>   * `JDBC_ENFORCE_SSL` \- A case-insensitive Boolean string (true, false) specifying whether Secure Sockets Layer (SSL) with hostname matching is enforced for the JDBC connection on the client. The default is false.
@@ -634,0 +698,10 @@ Connection -> (structure)
+>> 
+>> KmsKeyArn -> (string)
+>>
+>>> The Amazon Resource Name (ARN) of the KMS key used to encrypt sensitive authentication information. This key is used to protect credentials and other sensitive data stored within the authentication configuration.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `arn:aws:kms:.*`
+>>> 
+
@@ -746 +819 @@ Connection -> (structure)
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »