AWS cli high security documentation change

Service: cli · 2025-10-01 · Security-related high

File: cli/latest/reference/vpc-lattice/update-service-network-vpc-association.md

Summary

Updated CLI version reference, adjusted parameter ordering, modified regex patterns for security group IDs and association identifiers (removed regex anchors), added required parameter documentation, and reorganized status/createdBy fields.

Security assessment

The removal of regex anchors (^ and $) in security group ID validation (e.g., changing pattern from ^sg-...$ to sg-...) weakens input validation, potentially allowing partial matches. This could permit misconfigured security group associations, leading to unintended network access if invalid IDs are accepted. The security_group_ids parameter directly impacts network security controls.

Diff

diff --git a/cli/latest/reference/vpc-lattice/update-service-network-vpc-association.md b/cli/latest/reference/vpc-lattice/update-service-network-vpc-association.md
index 05e0d3685..029947f25 100644
--- a//cli/latest/reference/vpc-lattice/update-service-network-vpc-association.md
+++ b//cli/latest/reference/vpc-lattice/update-service-network-vpc-association.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »
@@ -67 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
-    --security-group-ids <value>
@@ -68,0 +68 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+    --security-group-ids <value>
@@ -92,0 +93,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
+`--service-network-vpc-association-identifier` (string) [required]
+
+> The ID or ARN of the association.
+> 
+> Constraints:
+> 
+>   * min: `17`
+>   * max: `2048`
+>   * pattern: `((snva-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}))`
+> 
+
+
@@ -110 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/vpc-la
->>   * pattern: `^sg-(([0-9a-z]{8})|([0-9a-z]{17}))$`
+>>   * pattern: `sg-(([0-9a-z]{8})|([0-9a-z]{17}))`
@@ -120,12 +131,0 @@ Syntax:
-`--service-network-vpc-association-identifier` (string) [required]
-
-> The ID or ARN of the association.
-> 
-> Constraints:
-> 
->   * min: `17`
->   * max: `2048`
->   * pattern: `^((snva-[0-9a-z]{17})|(arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}))$`
-> 
-
-
@@ -230,0 +231,12 @@ Disable automatically prompt for CLI input parameters.
+id -> (string)
+
+> The ID of the association.
+> 
+> Constraints:
+> 
+>   * min: `22`
+>   * max: `22`
+>   * pattern: `snva-[0-9a-z]{17}`
+> 
+
+
@@ -239 +251 @@ arn -> (string)
->   * pattern: `^arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}$`
+>   * pattern: `arn:[a-z0-9\-]+:vpc-lattice:[a-zA-Z0-9\-]+:\d{12}:servicenetworkvpcassociation/snva-[0-9a-z]{17}`
@@ -243 +255 @@ arn -> (string)
-createdBy -> (string)
+status -> (string)
@@ -245 +257 @@ createdBy -> (string)
-> The account that created the association.
+> The status. You can retry the operation if the status is `DELETE_FAILED` . However, if you retry it while the status is `DELETE_IN_PROGRESS` , there is no change in the status.
@@ -247 +259 @@ createdBy -> (string)
-> Constraints:
+> Possible values:
@@ -249,3 +261,7 @@ createdBy -> (string)
->   * min: `1`
->   * max: `12`
->   * pattern: `^[0-9]{12}$`
+>   * `CREATE_IN_PROGRESS`
+>   * `ACTIVE`
+>   * `UPDATE_IN_PROGRESS`
+>   * `DELETE_IN_PROGRESS`
+>   * `CREATE_FAILED`
+>   * `DELETE_FAILED`
+>   * `UPDATE_FAILED`
@@ -255 +271 @@ createdBy -> (string)
-id -> (string)
+createdBy -> (string)
@@ -257 +273 @@ id -> (string)
-> The ID of the association.
+> The account that created the association.
@@ -261,3 +277,3 @@ id -> (string)
->   * min: `22`
->   * max: `22`
->   * pattern: `^snva-[0-9a-z]{17}$`
+>   * min: `1`
+>   * max: `12`
+>   * pattern: `[0-9]{12}`
@@ -277 +293 @@ securityGroupIds -> (list)
->>   * pattern: `^sg-(([0-9a-z]{8})|([0-9a-z]{17}))$`
+>>   * pattern: `sg-(([0-9a-z]{8})|([0-9a-z]{17}))`
@@ -281,16 +296,0 @@ securityGroupIds -> (list)
-status -> (string)
-
-> The status. You can retry the operation if the status is `DELETE_FAILED` . However, if you retry it while the status is `DELETE_IN_PROGRESS` , there is no change in the status.
-> 
-> Possible values:
-> 
->   * `CREATE_IN_PROGRESS`
->   * `ACTIVE`
->   * `UPDATE_IN_PROGRESS`
->   * `DELETE_IN_PROGRESS`
->   * `CREATE_FAILED`
->   * `DELETE_FAILED`
->   * `UPDATE_FAILED`
-> 
-
-
@@ -307 +307 @@ status -> (string)
-  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.5 Command Reference](../../index.html) »