AWS cli medium security documentation change
Summary
Updated AWS CLI version reference from 2.31.3 to 2.31.5, restructured rule parameters, added service-identifier documentation, modified validation patterns for identifiers, changed max rules from 5 to 10, and reorganized action/match structures
Security assessment
The change restricts fixed response status codes to only 404/500 (from previous 100-599 range), reducing potential for misconfigured error responses. Added pattern validation improvements for service/listener identifiers could prevent invalid resource targeting. However there's no explicit mention of a specific vulnerability being addressed.
Diff
diff --git a/cli/latest/reference/vpc-lattice/batch-update-rule.md b/cli/latest/reference/vpc-lattice/batch-update-rule.md index d545d5ecb..da9b80b01 100644 --- a//cli/latest/reference/vpc-lattice/batch-update-rule.md +++ b//cli/latest/reference/vpc-lattice/batch-update-rule.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -70,0 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la + --service-identifier <value> @@ -73 +73,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la - --service-identifier <value> @@ -97,0 +98,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la +`--service-identifier` (string) [required] + +> The ID or ARN of the service. +> +> Constraints: +> +> * min: `17` +> * max: `2048` +> * pattern: `((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}))` +> + + @@ -106 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -> * pattern: `^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$` +> * pattern: `((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))` @@ -117 +129 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -> * max: `5` +> * max: `10` @@ -125 +137 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->> action -> (tagged union structure) +>> ruleIdentifier -> (string) [required] @@ -127 +139,13 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>> The rule action. +>>> The ID or ARN of the rule. +>>> +>>> Constraints: +>>> +>>> * min: `20` +>>> * max: `2048` +>>> * pattern: `((rule-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-[0-9a-z]{17}$))` +>>> + +>> +>> match -> (tagged union structure) +>> +>>> The rule match. @@ -131 +155 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `fixedResponse`, `forward`. +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `httpMatch`. @@ -133 +157 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>> fixedResponse -> (structure) +>>> httpMatch -> (structure) @@ -135 +159 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>> The fixed response action. The rule returns a custom HTTP response. +>>>> The HTTP criteria that a rule must match. @@ -137 +161 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>> statusCode -> (integer) [required] +>>>> method -> (string) @@ -139 +163 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> The HTTP response code. +>>>>> The HTTP method type. @@ -143,2 +167,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> * min: `100` ->>>>> * max: `599` +>>>>> * min: `0` +>>>>> * max: `16` @@ -147,4 +170,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>> ->>> forward -> (structure) ->>> ->>>> The forward action. Traffic that matches the rule is forwarded to the specified target groups. @@ -152 +172 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>> targetGroups -> (list) [required] +>>>> pathMatch -> (structure) @@ -154,10 +174 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> The target groups. Traffic matching the rule is forwarded to the specified target groups. With forward actions, you can assign a weight that controls the prioritization and selection of each target group. This means that requests are distributed to individual target groups based on their weights. For example, if two target groups have the same weight, each target group receives half of the traffic. ->>>>> ->>>>> The default value is 1. This means that if only one target group is provided, there is no need to set the weight; 100% of the traffic goes to that target group. ->>>>> ->>>>> Constraints: ->>>>> ->>>>> * min: `1` ->>>>> * max: `10` ->>>>> - +>>>>> The path match. @@ -165 +176 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> (structure) +>>>>> match -> (tagged union structure) [required] @@ -167 +178 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>> Describes the weight of a target group. +>>>>>> The type of path match. @@ -169 +180 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>> targetGroupIdentifier -> (string) [required] +>>>>>> ### Note @@ -171 +182,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> The ID or ARN of the target group. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `exact`, `prefix`. +>>>>>> +>>>>>> exact -> (string) +>>>>>> +>>>>>>> An exact match of the path. @@ -175,3 +190,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> * min: `17` ->>>>>>> * max: `2048` ->>>>>>> * pattern: `^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:targetgroup/tg-[0-9a-z]{17}))$` +>>>>>>> * min: `1` +>>>>>>> * max: `200` +>>>>>>> * pattern: `/[a-zA-Z0-9@:%_+.~#?&/=-]*` @@ -181 +196 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>> weight -> (integer) +>>>>>> prefix -> (string) @@ -183 +198 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> Only required if you specify multiple target groups for a forward action. The weight determines how requests are distributed to the target group. For example, if you specify two target groups, each with a weight of 10, each target group receives half the requests. If you specify two target groups, one with a weight of 10 and the other with a weight of 20, the target group with a weight of 20 receives twice as many requests as the other target group. If there’s only one target group specified, then the default value is 100. +>>>>>>> A prefix match of the path. @@ -187,2 +202,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> * min: `0` ->>>>>>> * max: `999` +>>>>>>> * min: `1` +>>>>>>> * max: `200` +>>>>>>> * pattern: `/[a-zA-Z0-9@:%_+.~#?&/=-]*` @@ -191,12 +207,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->> ->> match -> (tagged union structure) ->> ->>> The rule match. ->>> ->>> ### Note ->>> ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `httpMatch`. ->>> ->>> httpMatch -> (structure) ->>> ->>>> The HTTP criteria that a rule must match. +>>>>> +>>>>> caseSensitive -> (boolean) +>>>>> +>>>>>> Indicates whether the match is case sensitive. @@ -219 +227 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>> caseSensitive -> (boolean) +>>>>>> name -> (string) [required] @@ -221 +229,8 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> Indicates whether the match is case sensitive. +>>>>>>> The name of the header. +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * min: `1` +>>>>>>> * max: `100` +>>>>>>> + @@ -229 +244 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `contains`, `exact`, `prefix`. +>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `exact`, `prefix`, `contains`. @@ -231 +246 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> contains -> (string) +>>>>>>> exact -> (string) @@ -233 +248 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>>> A contains type match. +>>>>>>>> An exact type match. @@ -242 +257 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> exact -> (string) +>>>>>>> prefix -> (string) @@ -244 +259 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>>> An exact type match. +>>>>>>>> A prefix type match. Matches the value with the prefix. @@ -253 +268 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> prefix -> (string) +>>>>>>> contains -> (string) @@ -255 +270 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>>> A prefix type match. Matches the value with the prefix. +>>>>>>>> A contains type match. @@ -264 +279 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>> name -> (string) [required] +>>>>>> caseSensitive -> (boolean) @@ -266,7 +281,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>>>> The name of the header. ->>>>>>> ->>>>>>> Constraints: ->>>>>>> ->>>>>>> * min: `1` ->>>>>>> * max: `100` ->>>>>>> +>>>>>>> Indicates whether the match is case sensitive. +>> +>> priority -> (integer) +>> +>>> The rule priority. A listener can’t have multiple rules with the same priority. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `2000` +>>> @@ -273,0 +293,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la +>> +>> action -> (tagged union structure) +>>