AWS cli medium security documentation change
Summary
Updated CLI version reference from 2.31.10 to 2.31.13 and modified documentation about ARN permissions. Added restrictions that namespace sharing and account root sharing are not supported for action connectors.
Security assessment
The change adds explicit restrictions about unsupported sharing methods for action connectors (namespace and account root sharing). This clarifies security boundaries and prevents potential misconfiguration that could lead to unauthorized access through action connectors. The specific mention of unsupported sharing methods constitutes a security control documentation update.
Diff
diff --git a/cli/latest/reference/quicksight/update-theme-permissions.md b/cli/latest/reference/quicksight/update-theme-permissions.md index 72f40b3cd..b05767e39 100644 --- a//cli/latest/reference/quicksight/update-theme-permissions.md +++ b//cli/latest/reference/quicksight/update-theme-permissions.md @@ -15 +15 @@ - * [AWS CLI 2.31.10 Command Reference](../../index.html) » + * [AWS CLI 2.31.13 Command Reference](../../index.html) » @@ -160,3 +160,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/quicks ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -222,3 +222,3 @@ JSON Syntax: ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -399,3 +399,3 @@ Permissions -> (list) ->>> * The ARN of an Amazon QuickSight user or group associated with a data source or dataset. (This is common.) ->>> * The ARN of an Amazon QuickSight user, group, or namespace associated with an analysis, dashboard, template, or theme. (This is common.) ->>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a QuickSight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. (This is less common.) +>>> * The ARN of an Quick Sight user or group associated with a data source or dataset. (This is common.) +>>> * The ARN of an Quick Sight user, group, or namespace associated with an analysis, dashboard, template, or theme. Namespace sharing is not supported for action connectors. (This is common.) +>>> * The ARN of an Amazon Web Services account root: This is an IAM ARN rather than a Quick Sight ARN. Use this option only to share resources (templates) across Amazon Web Services accounts. Account root sharing is not supported for action connectors. (This is less common.) @@ -443 +443 @@ Status -> (integer) - * [AWS CLI 2.31.10 Command Reference](../../index.html) » + * [AWS CLI 2.31.13 Command Reference](../../index.html) »