AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-01 · Documentation low

File: cli/latest/reference/vpc-lattice/create-target-group.md

Summary

Updated CLI command reference documentation for create-target-group, including parameter reordering, added type parameter, modified name validation constraints, updated health check configuration parameters, and adjusted JSON syntax structure

Security assessment

Changes primarily involve documentation structure reorganization, parameter ordering adjustments, and validation pattern updates. No evidence of addressing specific vulnerabilities or security incidents. The modified name pattern (now prohibiting certain hyphen placements) and health check parameter changes appear to be validation improvements rather than security fixes

Diff

diff --git a/cli/latest/reference/vpc-lattice/create-target-group.md b/cli/latest/reference/vpc-lattice/create-target-group.md
index 07e45a3d0..72575478f 100644
--- a//cli/latest/reference/vpc-lattice/create-target-group.md
+++ b//cli/latest/reference/vpc-lattice/create-target-group.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -70,2 +69,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-    [--client-token <value>]
-    [--config <value>]
@@ -73 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-    [--tags <value>]
@@ -74,0 +72,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+    [--config <value>]
+    [--client-token <value>]
+    [--tags <value>]
@@ -99 +99 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-`--client-token` (string)
+`--name` (string) [required]
@@ -101 +101 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-> A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If you retry a request that completed successfully using the same client token and parameters, the retry succeeds without performing any actions. If the parameters aren’t identical, the retry fails.
+> The name of the target group. The name must be unique within the account. The valid characters are a-z, 0-9, and hyphens (-). You can’t use a hyphen as the first or last character, or immediately after another hyphen.
@@ -105,3 +105,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->   * min: `1`
->   * max: `64`
->   * pattern: `[!-~]+`
+>   * min: `3`
+>   * max: `128`
+>   * pattern: `(?!tg-)(?![-])(?!.*[-]$)(?!.*[-]{2})[a-z0-9-]+`
+> 
+
+
+`--type` (string) [required]
+
+> The type of target group.
+> 
+> Possible values:
+> 
+>   * `IP`
+>   * `LAMBDA`
+>   * `INSTANCE`
+>   * `ALB`
@@ -113,0 +127,58 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+> 
+> port -> (integer)
+>
+>> The port on which the targets are listening. For HTTP, the default is 80. For HTTPS, the default is 443. Not supported if the target group type is `LAMBDA` .
+>> 
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `65535`
+>> 
+
+> 
+> protocol -> (string)
+>
+>> The protocol to use for routing traffic to the targets. The default is the protocol of the target group. Not supported if the target group type is `LAMBDA` .
+>> 
+>> Possible values:
+>> 
+>>   * `HTTP`
+>>   * `HTTPS`
+>>   * `TCP`
+>> 
+
+> 
+> protocolVersion -> (string)
+>
+>> The protocol version. The default is `HTTP1` . Not supported if the target group type is `LAMBDA` .
+>> 
+>> Possible values:
+>> 
+>>   * `HTTP1`
+>>   * `HTTP2`
+>>   * `GRPC`
+>> 
+
+> 
+> ipAddressType -> (string)
+>
+>> The type of IP address used for the target group. Supported only if the target group type is `IP` . The default is `IPV4` .
+>> 
+>> Possible values:
+>> 
+>>   * `IPV4`
+>>   * `IPV6`
+>> 
+
+> 
+> vpcIdentifier -> (string)
+>
+>> The ID of the VPC. Not supported if the target group type is `LAMBDA` .
+>> 
+>> Constraints:
+>> 
+>>   * min: `5`
+>>   * max: `50`
+>>   * pattern: `vpc-(([0-9a-z]{8})|([0-9a-z]{17}))`
+>> 
+
@@ -123 +194 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->> healthCheckIntervalSeconds -> (integer)
+>> protocol -> (string)
@@ -125 +196 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> The approximate amount of time, in seconds, between health checks of an individual target. The range is 5–300 seconds. The default is 30 seconds.
+>>> The protocol used when performing health checks on targets. The possible protocols are `HTTP` and `HTTPS` . The default is `HTTP` .
@@ -127 +198 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> Constraints:
+>>> Possible values:
@@ -129,2 +200,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>   * min: `0`
->>>   * max: `300`
+>>>   * `HTTP`
+>>>   * `HTTPS`
+>>>   * `TCP`
@@ -134 +206 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->> healthCheckTimeoutSeconds -> (integer)
+>> protocolVersion -> (string)
@@ -136 +208 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> The amount of time, in seconds, to wait before reporting a target as unhealthy. The range is 1–120 seconds. The default is 5 seconds.
+>>> The protocol version used when performing health checks on targets. The possible protocol versions are `HTTP1` and `HTTP2` .
@@ -138 +210 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> Constraints:
+>>> Possible values:
@@ -140,2 +212,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>   * min: `0`
->>>   * max: `120`
+>>>   * `HTTP1`
+>>>   * `HTTP2`
@@ -145 +217 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->> healthyThresholdCount -> (integer)
+>> port -> (integer)
@@ -147 +219 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> The number of consecutive successful health checks required before considering an unhealthy target healthy. The range is 2–10. The default is 5.
+>>> The port used when performing health checks on targets. The default setting is the port that a target receives traffic on.
@@ -152,13 +224 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>   * max: `10`
->>> 
-
->> 
->> matcher -> (tagged union structure)
->>
->>> The codes to use when checking for a successful response from a target.
->>> 
->>> ### Note
->>> 
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `httpCode`.
->>> 
->>> httpCode -> (string)
+>>>   * max: `65535`
@@ -166,8 +225,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>> The HTTP code to use when checking for a successful response from a target.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * min: `0`
->>>>   * max: `2000`
->>>>   * pattern: `(^[0-9-,]+$|(^$))`
->>>> 
@@ -184 +236 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>   * pattern: `(^/[a-zA-Z0-9@:%_+.~#?&/=-]*$|(^$))`
+>>>   * pattern: `.*(^/[a-zA-Z0-9@:%_+.~#?&/=-]*$|(^$)).*`
@@ -188 +240 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->> port -> (integer)
+>> healthCheckIntervalSeconds -> (integer)
@@ -190 +242 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> The port used when performing health checks on targets. The default setting is the port that a target receives traffic on.
+>>> The approximate amount of time, in seconds, between health checks of an individual target. The range is 5–300 seconds. The default is 30 seconds.
@@ -195 +247 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>   * max: `65535`
+>>>   * max: `300`
@@ -199 +251 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->> protocol -> (string)
+>> healthCheckTimeoutSeconds -> (integer)
@@ -201 +253 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> The protocol used when performing health checks on targets. The possible protocols are `HTTP` and `HTTPS` . The default is `HTTP` .
+>>> The amount of time, in seconds, to wait before reporting a target as unhealthy. The range is 1–120 seconds. The default is 5 seconds.
@@ -203 +255 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> Possible values:
+>>> Constraints:
@@ -205,3 +257,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>   * `HTTP`
->>>   * `HTTPS`
->>>   * `TCP`
+>>>   * min: `0`
+>>>   * max: `120`
@@ -211 +262 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->> protocolVersion -> (string)
+>> healthyThresholdCount -> (integer)
@@ -213 +264 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> The protocol version used when performing health checks on targets. The possible protocol versions are `HTTP1` and `HTTP2` .
+>>> The number of consecutive successful health checks required before considering an unhealthy target healthy. The range is 2–10. The default is 5.
@@ -215 +266 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>> Possible values:
+>>> Constraints:
@@ -217,2 +268,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>>   * `HTTP1`
->>>   * `HTTP2`
+>>>   * min: `0`