AWS cli medium security documentation change
Summary
Updated CLI version reference and added restrictions for action connectors in sharing configurations
Security assessment
Added explicit statements that namespace sharing and account root sharing are not supported for action connectors. This clarifies security boundaries by preventing over-permissive sharing configurations that could lead to unauthorized access through action connectors. The changes address potential misconfiguration risks.
Diff
diff --git a/cli/latest/reference/quicksight/update-dashboard-permissions.md b/cli/latest/reference/quicksight/update-dashboard-permissions.md index fd3a66b47..51f2f69b7 100644 --- a//cli/latest/reference/quicksight/update-dashboard-permissions.md +++ b//cli/latest/reference/quicksight/update-dashboard-permissions.md @@ -15 +15 @@ - * [AWS CLI 2.31.10 Command Reference](../../index.html) » + * [AWS CLI 2.31.13 Command Reference](../../index.html) » @@ -139,3 +139,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/quicks ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -201,3 +201,3 @@ JSON Syntax: ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -263,3 +263,3 @@ JSON Syntax: ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -325,3 +325,3 @@ JSON Syntax: ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -502,3 +502,3 @@ Permissions -> (list) ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -559,3 +559,3 @@ LinkSharingConfiguration -> (structure) ->>>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -595 +595 @@ LinkSharingConfiguration -> (structure) - * [AWS CLI 2.31.10 Command Reference](../../index.html) » + * [AWS CLI 2.31.13 Command Reference](../../index.html) »