AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-01 · Documentation low

File: cli/latest/reference/vpc-lattice/create-service.md

Summary

Updated CLI version reference from 2.31.3 to 2.31.5, reordered command parameters, modified validation patterns for custom-domain-name and service ID, restructured response field documentation

Security assessment

Changes involve documentation restructuring and pattern updates without explicit security context. Modified patterns (e.g., custom-domain-name from '[!-~]+' to '.*[!-~]+.*') appear to adjust validation rules but lack evidence of addressing specific vulnerabilities. Auth-type and certificate-arn documentation moved but not substantively changed.

Diff

diff --git a/cli/latest/reference/vpc-lattice/create-service.md b/cli/latest/reference/vpc-lattice/create-service.md
index 9f2f554af..8b3e0d0e4 100644
--- a//cli/latest/reference/vpc-lattice/create-service.md
+++ b//cli/latest/reference/vpc-lattice/create-service.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -70,2 +69,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-    [--auth-type <value>]
-    [--certificate-arn <value>]
@@ -73 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-    [--custom-domain-name <value>]
@@ -75,0 +73,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+    [--custom-domain-name <value>]
+    [--certificate-arn <value>]
+    [--auth-type <value>]
@@ -100,28 +99,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-`--auth-type` (string)
-
-> The type of IAM policy.
-> 
->   * `NONE` : The resource does not use an IAM policy. This is the default.
->   * `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required.
-> 
-
-> 
-> Possible values:
-> 
->   * `NONE`
->   * `AWS_IAM`
-> 
-
-
-`--certificate-arn` (string)
-
-> The Amazon Resource Name (ARN) of the certificate.
-> 
-> Constraints:
-> 
->   * min: `0`
->   * max: `2048`
->   * pattern: `^(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?){2}:certificate/[0-9a-z-]+)?$`
-> 
-
-
@@ -136,12 +108 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->   * pattern: `[!-~]+`
-> 
-
-
-`--custom-domain-name` (string)
-
-> The custom domain name of the service.
-> 
-> Constraints:
-> 
->   * min: `3`
->   * max: `255`
+>   * pattern: `.*[!-~]+.*`
@@ -159 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->   * pattern: `^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$`
+>   * pattern: `(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+`
@@ -212,0 +174,39 @@ JSON Syntax:
+`--custom-domain-name` (string)
+
+> The custom domain name of the service.
+> 
+> Constraints:
+> 
+>   * min: `3`
+>   * max: `255`
+> 
+
+
+`--certificate-arn` (string)
+
+> The Amazon Resource Name (ARN) of the certificate.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `2048`
+>   * pattern: `(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?){2}:certificate/[0-9a-z-]+)?`
+> 
+
+
+`--auth-type` (string)
+
+> The type of IAM policy.
+> 
+>   * `NONE` : The resource does not use an IAM policy. This is the default.
+>   * `AWS_IAM` : The resource uses an IAM policy. When this type is used, auth is enabled and an auth policy is required.
+> 
+
+> 
+> Possible values:
+> 
+>   * `NONE`
+>   * `AWS_IAM`
+> 
+
+
@@ -347 +347 @@ For more information, see [Services in VPC Lattice](https://docs.aws.amazon.com/
-arn -> (string)
+id -> (string)
@@ -349 +349 @@ arn -> (string)
-> The Amazon Resource Name (ARN) of the service.
+> The ID of the service.
@@ -353,3 +353,3 @@ arn -> (string)
->   * min: `20`
->   * max: `2048`
->   * pattern: `^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}$`
+>   * min: `21`
+>   * max: `21`
+>   * pattern: `svc-[0-9a-z]{17}`
@@ -359 +359 @@ arn -> (string)
-authType -> (string)
+arn -> (string)
@@ -361 +361 @@ authType -> (string)
-> The type of IAM policy.
+> The Amazon Resource Name (ARN) of the service.
@@ -363 +363 @@ authType -> (string)
-> Possible values:
+> Constraints:
@@ -365,2 +365,3 @@ authType -> (string)
->   * `NONE`
->   * `AWS_IAM`
+>   * min: `20`
+>   * max: `2048`
+>   * pattern: `arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}`
@@ -370 +371 @@ authType -> (string)
-certificateArn -> (string)
+name -> (string)
@@ -372 +373 @@ certificateArn -> (string)
-> The Amazon Resource Name (ARN) of the certificate.
+> The name of the service.
@@ -376,3 +377,3 @@ certificateArn -> (string)
->   * min: `0`
->   * max: `2048`
->   * pattern: `^(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?){2}:certificate/[0-9a-z-]+)?$`
+>   * min: `3`
+>   * max: `40`
+>   * pattern: `(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+`
@@ -393 +394 @@ customDomainName -> (string)
-dnsEntry -> (structure)
+certificateArn -> (string)
@@ -395,3 +396 @@ dnsEntry -> (structure)
-> The public DNS name of the service.
-> 
-> domainName -> (string)
+> The Amazon Resource Name (ARN) of the certificate.
@@ -399 +398 @@ dnsEntry -> (structure)
->> The domain name of the service.
+> Constraints:
@@ -401 +400,3 @@ dnsEntry -> (structure)
-> hostedZoneId -> (string)
+>   * min: `0`
+>   * max: `2048`
+>   * pattern: `(arn(:[a-z0-9]+([.-][a-z0-9]+)*){2}(:([a-z0-9]+([.-][a-z0-9]+)*)?){2}:certificate/[0-9a-z-]+)?`
@@ -403 +403,0 @@ dnsEntry -> (structure)
->> The ID of the hosted zone.
@@ -405 +404,0 @@ dnsEntry -> (structure)
-id -> (string)
@@ -407 +406,3 @@ id -> (string)
-> The ID of the service.
+status -> (string)
+
+> The status. If the status is `CREATE_FAILED` , you must delete and recreate the service.
@@ -409 +410 @@ id -> (string)
-> Constraints:
+> Possible values:
@@ -411,3 +412,5 @@ id -> (string)
->   * min: `21`
->   * max: `21`
->   * pattern: `^svc-[0-9a-z]{17}$`
+>   * `ACTIVE`
+>   * `CREATE_IN_PROGRESS`
+>   * `DELETE_IN_PROGRESS`
+>   * `CREATE_FAILED`
+>   * `DELETE_FAILED`
@@ -417 +420 @@ id -> (string)
-name -> (string)
+authType -> (string)
@@ -419 +422 @@ name -> (string)
-> The name of the service.
+> The type of IAM policy.
@@ -421 +424 @@ name -> (string)
-> Constraints:
+> Possible values:
@@ -423,3 +426,2 @@ name -> (string)
->   * min: `3`
->   * max: `40`
->   * pattern: `^(?!svc-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+$`
+>   * `NONE`
+>   * `AWS_IAM`
@@ -429 +431 @@ name -> (string)
-status -> (string)
+dnsEntry -> (structure)
@@ -431 +433 @@ status -> (string)
-> The status. If the status is `CREATE_FAILED` , you must delete and recreate the service.