AWS cli medium security documentation change

Service: cli · 2025-10-16 · Security-related medium

File: cli/latest/reference/datazone/update-connection.md

Summary

Added Amazon Q connection properties configuration and scope parameter support. Updated CLI version reference.

Security assessment

Introduced 'amazonQProperties' with authentication mode constraints and ARN validation patterns. Added 'enableTrustedIdentityPropagation' flag which controls security-sensitive identity delegation features. These changes document enhanced security controls for connection configurations.

Diff

diff --git a/cli/latest/reference/datazone/update-connection.md b/cli/latest/reference/datazone/update-connection.md
index c90b5b950..9307227e2 100644
--- a//cli/latest/reference/datazone/update-connection.md
+++ b//cli/latest/reference/datazone/update-connection.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »
@@ -196 +196,32 @@ JSON Syntax:
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `amazonQProperties`, `athenaProperties`, `glueProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`.
+> 
+> amazonQProperties -> (structure)
+>
+>> The Amazon Q properties of the connection.
+>> 
+>> authMode -> (string)
+>>
+>>> The authentication mode of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `128`
+>>> 
+
+>> 
+>> isEnabled -> (boolean) [required]
+>>
+>>> Specifies whether Amazon Q is enabled for the connection.
+>> 
+>> profileArn -> (string)
+>>
+>>> The profile ARN of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `2048`
+>>>   * pattern: `^arn:aws[a-z\-]*:[a-z0-9\-]+:[a-z0-9\-]*:[0-9]*:.*`
+>>> 
+
@@ -539,0 +571,5 @@ JSON Syntax:
+      "amazonQProperties": {
+        "authMode": "string",
+        "isEnabled": true|false,
+        "profileArn": "string"
+      },
@@ -814,0 +851,4 @@ physicalEndpoints -> (list)
+>> 
+>> enableTrustedIdentityPropagation -> (boolean)
+>>
+>>> Specified whether trusted identity propagation for the connection is enabled.
@@ -1096,0 +1137 @@ physicalEndpoints -> (list)
+>>>>   * `AMAZON_Q`
@@ -1332 +1373,32 @@ props -> (tagged union structure)
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `amazonQProperties`, `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`.
+> 
+> amazonQProperties -> (structure)
+>
+>> The Amazon Q properties of the connection.
+>> 
+>> authMode -> (string)
+>>
+>>> The authentication mode of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `128`
+>>> 
+
+>> 
+>> isEnabled -> (boolean) [required]
+>>
+>>> Specifies whether Amazon Q is enabled for the connection.
+>> 
+>> profileArn -> (string)
+>>
+>>> The profile ARN of the connection’s Amazon Q properties.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `2048`
+>>>   * pattern: `^arn:aws[a-z\-]*:[a-z0-9\-]+:[a-z0-9\-]*:[0-9]*:.*`
+>>> 
+
@@ -1749,0 +1822,11 @@ props -> (tagged union structure)
+scope -> (string)
+
+> The scope of the connection.
+> 
+> Possible values:
+> 
+>   * `DOMAIN`
+>   * `PROJECT`
+> 
+
+
@@ -1775,0 +1859 @@ type -> (string)
+>   * `AMAZON_Q`
@@ -1789 +1873 @@ type -> (string)
-  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.16 Command Reference](../../index.html) »