AWS cli documentation change

Service: cli · 2025-10-16 · Documentation low

File: cli/latest/reference/datazone/create-connection.md

Summary

Added support for Amazon Q connection properties, trusted identity propagation flag, scope parameter, and updated CLI version reference

Security assessment

Added --enable-trusted-identity-propagation flag and authentication mode constraints for Amazon Q properties, which document security-related features but do not indicate fixes for existing vulnerabilities

Diff

diff --git a/cli/latest/reference/datazone/create-connection.md b/cli/latest/reference/datazone/create-connection.md
index 4d8778fe4..7ec447321 100644
--- a//cli/latest/reference/datazone/create-connection.md
+++ b//cli/latest/reference/datazone/create-connection.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »
@@ -71 +71,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --environment-identifier <value>
+    [--enable-trusted-identity-propagation | --no-enable-trusted-identity-propagation]
+    [--environment-identifier <value>]
@@ -73,0 +75 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--scope <value>]
@@ -185 +187,5 @@ JSON Syntax:
-`--environment-identifier` (string) [required]
+`--enable-trusted-identity-propagation` | `--no-enable-trusted-identity-propagation` (boolean)
+
+> Specifies whether the trusted identity propagation is enabled.
+
+`--environment-identifier` (string)
@@ -212 +218,32 @@ JSON Syntax:
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `amazonQProperties`, `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+> 
+> amazonQProperties -> (structure)
+>
+>> The Amazon Q properties of the connection.
+>> 
+>> authMode -> (string)
+>>
+>>> The authentication mode of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `128`
+>>> 
+
+>> 
+>> isEnabled -> (boolean) [required]
+>>
+>>> Specifies whether Amazon Q is enabled for the connection.
+>> 
+>> profileArn -> (string)
+>>
+>>> The profile ARN of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `2048`
+>>>   * pattern: `^arn:aws[a-z\-]*:[a-z0-9\-]+:[a-z0-9\-]*:[0-9]*:.*`
+>>> 
+
@@ -1048,0 +1086,5 @@ JSON Syntax:
+      "amazonQProperties": {
+        "authMode": "string",
+        "isEnabled": true|false,
+        "profileArn": "string"
+      },
@@ -1163,0 +1206,11 @@ JSON Syntax:
+`--scope` (string)
+
+> The scope of the connection.
+> 
+> Possible values:
+> 
+>   * `DOMAIN`
+>   * `PROJECT`
+> 
+
+
@@ -1379,0 +1433,4 @@ physicalEndpoints -> (list)
+>> 
+>> enableTrustedIdentityPropagation -> (boolean)
+>>
+>>> Specified whether trusted identity propagation for the connection is enabled.
@@ -1661,0 +1719 @@ physicalEndpoints -> (list)
+>>>>   * `AMAZON_Q`
@@ -1897 +1955,32 @@ props -> (tagged union structure)
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `amazonQProperties`, `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+> 
+> amazonQProperties -> (structure)
+>
+>> The Amazon Q properties of the connection.
+>> 
+>> authMode -> (string)
+>>
+>>> The authentication mode of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `128`
+>>> 
+
+>> 
+>> isEnabled -> (boolean) [required]
+>>
+>>> Specifies whether Amazon Q is enabled for the connection.
+>> 
+>> profileArn -> (string)
+>>
+>>> The profile ARN of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `2048`
+>>>   * pattern: `^arn:aws[a-z\-]*:[a-z0-9\-]+:[a-z0-9\-]*:[0-9]*:.*`
+>>> 
+
@@ -2314,0 +2404,11 @@ props -> (tagged union structure)
+scope -> (string)
+
+> The scope of the connection.
+> 
+> Possible values:
+> 
+>   * `DOMAIN`
+>   * `PROJECT`
+> 
+
+
@@ -2340,0 +2441 @@ type -> (string)
+>   * `AMAZON_Q`
@@ -2354 +2455 @@ type -> (string)
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »