AWS cli medium security documentation change
Summary
Updated command parameters, reordered required identifiers, added match configuration details, and modified action structure with explicit status code constraints
Security assessment
Added explicit restriction that fixedResponse statusCode only allows 404 and 500 codes (previously allowed 100-599). This prevents potential misuse of non-error HTTP status codes in error handling scenarios, reducing risk of misconfiguration leading to incorrect client responses.
Diff
diff --git a/cli/latest/reference/vpc-lattice/update-rule.md b/cli/latest/reference/vpc-lattice/update-rule.md index 0e50003c1..fce5686bd 100644 --- a//cli/latest/reference/vpc-lattice/update-rule.md +++ b//cli/latest/reference/vpc-lattice/update-rule.md @@ -15 +15 @@ - * [AWS CLI 2.31.3 Command Reference](../../index.html) » + * [AWS CLI 2.31.5 Command Reference](../../index.html) » @@ -67 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la - [--action <value>] + --service-identifier <value> @@ -68,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la + --rule-identifier <value> @@ -71,2 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la - --rule-identifier <value> - --service-identifier <value> + [--action <value>] @@ -97 +97 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -`--action` (tagged union structure) +`--service-identifier` (string) [required] @@ -99 +99 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -> Information about the action for the specified listener rule. +> The ID or ARN of the service. @@ -101 +101 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -> ### Note +> Constraints: @@ -103 +103,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -> This is a Tagged Union structure. Only one of the following top level keys can be set: `fixedResponse`, `forward`. +> * min: `17` +> * max: `2048` +> * pattern: `((svc-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}))` @@ -105 +107,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -> fixedResponse -> (structure) + + +`--listener-identifier` (string) [required] + +> The ID or ARN of the listener. +> +> Constraints: +> +> * min: `20` +> * max: `2048` +> * pattern: `((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))` @@ -107,11 +118,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->> The fixed response action. The rule returns a custom HTTP response. ->> ->> statusCode -> (integer) [required] ->> ->>> The HTTP response code. ->>> ->>> Constraints: ->>> ->>> * min: `100` ->>> * max: `599` ->>> @@ -118,0 +120,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la + +`--rule-identifier` (string) [required] + +> The ID or ARN of the rule. @@ -120 +125 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la -> forward -> (structure) +> Constraints: @@ -122 +127,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->> The forward action. Traffic that matches the rule is forwarded to the specified target groups. +> * min: `20` +> * max: `2048` +> * pattern: `((rule-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}/rule/rule-[0-9a-z]{17}$))` +> + + +`--match` (tagged union structure) + +> The rule match. +> +> ### Note +> +> This is a Tagged Union structure. Only one of the following top level keys can be set: `httpMatch`. +> +> httpMatch -> (structure) +> +>> The HTTP criteria that a rule must match. @@ -124 +145 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->> targetGroups -> (list) [required] +>> method -> (string) @@ -126,3 +147 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>> The target groups. Traffic matching the rule is forwarded to the specified target groups. With forward actions, you can assign a weight that controls the prioritization and selection of each target group. This means that requests are distributed to individual target groups based on their weights. For example, if two target groups have the same weight, each target group receives half of the traffic. ->>> ->>> The default value is 1. This means that if only one target group is provided, there is no need to set the weight; 100% of the traffic goes to that target group. +>>> The HTTP method type. @@ -132,2 +151,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>> * min: `1` ->>> * max: `10` +>>> * min: `0` +>>> * max: `16` @@ -135,0 +155,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la +>> +>> pathMatch -> (structure) +>> +>>> The path match. @@ -137 +160 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>> (structure) +>>> match -> (tagged union structure) [required] @@ -139 +162 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>> Describes the weight of a target group. +>>>> The type of path match. @@ -141 +164 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>> targetGroupIdentifier -> (string) [required] +>>>> ### Note @@ -143 +166,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> The ID or ARN of the target group. +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `exact`, `prefix`. +>>>> +>>>> exact -> (string) +>>>> +>>>>> An exact match of the path. @@ -147,3 +174,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> * min: `17` ->>>>> * max: `2048` ->>>>> * pattern: `^((tg-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:targetgroup/tg-[0-9a-z]{17}))$` +>>>>> * min: `1` +>>>>> * max: `200` +>>>>> * pattern: `/[a-zA-Z0-9@:%_+.~#?&/=-]*` @@ -153 +180 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>> weight -> (integer) +>>>> prefix -> (string) @@ -155 +182 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> Only required if you specify multiple target groups for a forward action. The weight determines how requests are distributed to the target group. For example, if you specify two target groups, each with a weight of 10, each target group receives half the requests. If you specify two target groups, one with a weight of 10 and the other with a weight of 20, the target group with a weight of 20 receives twice as many requests as the other target group. If there’s only one target group specified, then the default value is 100. +>>>>> A prefix match of the path. @@ -159,2 +186,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la ->>>>> * min: `0` ->>>>> * max: `999` +>>>>> * min: `1` +>>>>> * max: `200` +>>>>> * pattern: `/[a-zA-Z0-9@:%_+.~#?&/=-]*` @@ -163,43 +191,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la - -JSON Syntax: - - - { - "fixedResponse": { - "statusCode": integer - }, - "forward": { - "targetGroups": [ - { - "targetGroupIdentifier": "string", - "weight": integer - } - ... - ] - } - } - - -`--listener-identifier` (string) [required] - -> The ID or ARN of the listener. -> -> Constraints: -> -> * min: `20` -> * max: `2048` -> * pattern: `^((listener-[0-9a-z]{17})|(^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:service/svc-[0-9a-z]{17}/listener/listener-[0-9a-z]{17}$))$` -> - - -`--match` (tagged union structure) - -> The rule match. -> -> ### Note -> -> This is a Tagged Union structure. Only one of the following top level keys can be set: `httpMatch`. -> -> httpMatch -> (structure) -> ->> The HTTP criteria that a rule must match. +>>> +>>> caseSensitive -> (boolean) +>>> +>>>> Indicates whether the match is case sensitive. @@ -222 +211 @@ JSON Syntax: ->>>> caseSensitive -> (boolean) +>>>> name -> (string) [required] @@ -224 +213,8 @@ JSON Syntax: ->>>>> Indicates whether the match is case sensitive. +>>>>> The name of the header. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `100` +>>>>> + @@ -232 +228 @@ JSON Syntax: ->>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `contains`, `exact`, `prefix`. +>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `exact`, `prefix`, `contains`. @@ -234 +230 @@ JSON Syntax: