AWS cli medium security documentation change

Service: cli · 2025-10-16 · Security-related medium

File: cli/latest/reference/datazone/list-connections.md

Summary

Added support for Amazon Q connection properties, scope parameter, and trusted identity propagation. Updated CLI version reference.

Security assessment

Added 'enableTrustedIdentityPropagation' field and 'authMode' in Amazon Q properties which directly relate to authentication controls and identity management. The 'scope' parameter introduces access boundary definitions (DOMAIN/PROJECT). These changes document new security-related features for connections.

Diff

diff --git a/cli/latest/reference/datazone/list-connections.md b/cli/latest/reference/datazone/list-connections.md
index 5c23953dc..ff1ca604f 100644
--- a//cli/latest/reference/datazone/list-connections.md
+++ b//cli/latest/reference/datazone/list-connections.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »
@@ -72 +72,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --project-identifier <value>
+    [--project-identifier <value>]
+    [--scope <value>]
@@ -134 +135 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--project-identifier` (string) [required]
+`--project-identifier` (string)
@@ -143,0 +145,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--scope` (string)
+
+> The scope of the connection.
+> 
+> Possible values:
+> 
+>   * `DOMAIN`
+>   * `PROJECT`
+> 
+
+
@@ -190,0 +203 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+>   * `AMAZON_Q`
@@ -424,0 +438,4 @@ items -> (list)
+>>>> 
+>>>> enableTrustedIdentityPropagation -> (boolean)
+>>>>
+>>>>> Specified whether trusted identity propagation for the connection is enabled.
@@ -706,0 +724 @@ items -> (list)
+>>>>>>   * `AMAZON_Q`
@@ -942 +960,32 @@ items -> (list)
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `amazonQProperties`, `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+>>> 
+>>> amazonQProperties -> (structure)
+>>>
+>>>> The Amazon Q properties of the connection.
+>>>> 
+>>>> authMode -> (string)
+>>>>
+>>>>> The authentication mode of the connection’s Amazon Q properties.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `128`
+>>>>> 
+
+>>>> 
+>>>> isEnabled -> (boolean) [required]
+>>>>
+>>>>> Specifies whether Amazon Q is enabled for the connection.
+>>>> 
+>>>> profileArn -> (string)
+>>>>
+>>>>> The profile ARN of the connection’s Amazon Q properties.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `^arn:aws[a-z\-]*:[a-z0-9\-]+:[a-z0-9\-]*:[0-9]*:.*`
+>>>>> 
+
@@ -1358,0 +1408,11 @@ items -> (list)
+>> 
+>> scope -> (string)
+>>
+>>> The scope of the connection.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `DOMAIN`
+>>>   * `PROJECT`
+>>> 
+
@@ -1385,0 +1446 @@ items -> (list)
+>>>   * `AMAZON_Q`
@@ -1410 +1471 @@ nextToken -> (string)
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »