AWS cli documentation change
Summary
Updated CLI version reference from 2.31.3 to 2.31.5. Added --ami-tags parameter with constraints. Enhanced KMS key ARN description and clarified SSM Agent removal default behavior.
Security assessment
The change adds documentation about AMI tagging constraints (including security-relevant pattern preventing 'aws:' prefixes) and clarifies KMS key usage for encryption. While these relate to security best practices, there is no evidence of addressing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/imagebuilder/create-image-recipe.md b/cli/latest/reference/imagebuilder/create-image-recipe.md index d76991ab5..178adfae8 100644 --- a//cli/latest/reference/imagebuilder/create-image-recipe.md +++ b//cli/latest/reference/imagebuilder/create-image-recipe.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -76,0 +77 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/imageb + [--ami-tags <value>] @@ -286 +287 @@ JSON Syntax: ->>>> Use to configure the KMS key to use when encrypting the device. +>>>> The Amazon Resource Name (ARN) that uniquely identifies the KMS key to use when encrypting the device. This can be either the Key ARN or the Alias ARN. For more information, see [Key identifiers (KeyId)](https://docs.aws.amazon.com/kms/latest/developerguide/concepts.html#key-id-key-ARN) in the _Key Management Service Developer Guide_ . @@ -458 +459,3 @@ JSON Syntax: ->>> Controls whether the Systems Manager agent is removed from your final build image, prior to creating the new AMI. If this is set to true, then the agent is removed from the final image. If it’s set to false, then the agent is left in, so that it is included in the new AMI. The default value is false. +>>> Controls whether the Systems Manager agent is removed from your final build image, prior to creating the new AMI. If this is set to true, then the agent is removed from the final image. If it’s set to false, then the agent is left in, so that it is included in the new AMI. default value is false. +>>> +>>> The default behavior of uninstallAfterBuild is to remove the SSM Agent if it was installed by EC2 Image Builder @@ -500,0 +504,42 @@ JSON Syntax: +`--ami-tags` (map) + +> Tags that are applied to the AMI that Image Builder creates during the Build phase prior to image distribution. +> +> Constraints: +> +> * min: `1` +> * max: `50` +> + +> +> key -> (string) +> +>> Constraints: +>> +>> * min: `1` +>> * max: `128` +>> * pattern: `^(?!aws:)[a-zA-Z+-=._:/]+$` +>> + +> +> value -> (string) +> +>> Constraints: +>> +>> * max: `256` +>> + + +Shorthand Syntax: + + + KeyName1=string,KeyName2=string + + +JSON Syntax: + + + {"string": "string" + ...} + + @@ -702 +747 @@ imageRecipeArn -> (string) - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) »