AWS cli documentation change
Summary
Updated documentation for ELBv2 rules to add regex pattern support in host/path/header matching, clarify length limits, and document new request transform features (host-header-rewrite and url-rewrite)
Security assessment
The changes add documentation about regex validation constraints (128 character limits) and request transformation capabilities. While regex validation and request rewriting can have security implications (e.g., preventing regex-based attacks or misconfigurations), there is no explicit mention of patching vulnerabilities. The transforms documentation warns about regex length limits which could help prevent ReDoS attacks, but this is preventive guidance rather than addressing a specific disclosed issue.
Diff
diff --git a/cli/latest/reference/elbv2/describe-rules.md b/cli/latest/reference/elbv2/describe-rules.md index e2285700d..42e2712cd 100644 --- a//cli/latest/reference/elbv2/describe-rules.md +++ b//cli/latest/reference/elbv2/describe-rules.md @@ -15 +15 @@ - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) » @@ -336 +336 @@ Rules -> (list) ->>>>>> The host names. The maximum size of each name is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). You must include at least one “.” character. You can include only alphabetical characters after the final “.” character. +>>>>>> The host names. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). You must include at least one “.” character. You can include only alphabetical characters after the final “.” character. @@ -340,0 +341,6 @@ Rules -> (list) +>>>>> +>>>>> RegexValues -> (list) +>>>>> +>>>>>> The regular expressions to compare against the host header. The maximum length of each string is 128 characters. +>>>>>> +>>>>>> (string) @@ -348 +354 @@ Rules -> (list) ->>>>>> The path patterns to compare against the request URL. The maximum size of each string is 128 characters. The comparison is case sensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). +>>>>>> The path patterns to compare against the request URL. The maximum length of each string is 128 characters. The comparison is case sensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). @@ -352,0 +359,6 @@ Rules -> (list) +>>>>> +>>>>> RegexValues -> (list) +>>>>> +>>>>>> The regular expressions to compare against the request URL. The maximum length of each string is 128 characters. +>>>>>> +>>>>>> (string) @@ -360 +372 @@ Rules -> (list) ->>>>>> The name of the HTTP header field. The maximum size is 40 characters. The header name is case insensitive. The allowed characters are specified by RFC 7230. Wildcards are not supported. +>>>>>> The name of the HTTP header field. The maximum length is 40 characters. The header name is case insensitive. The allowed characters are specified by RFC 7230. Wildcards are not supported. @@ -366 +378 @@ Rules -> (list) ->>>>>> The strings to compare against the value of the HTTP header. The maximum size of each string is 128 characters. The comparison strings are case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). +>>>>>> The strings to compare against the value of the HTTP header. The maximum length of each string is 128 characters. The comparison strings are case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). @@ -372,0 +385,6 @@ Rules -> (list) +>>>>> +>>>>> RegexValues -> (list) +>>>>> +>>>>>> The regular expression to compare against the HTTP header. The maximum length of each string is 128 characters. +>>>>>> +>>>>>> (string) @@ -380 +398 @@ Rules -> (list) ->>>>>> The key/value pairs or values to find in the query string. The maximum size of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). To search for a literal ‘*’ or ‘?’ character in a query string, you must escape these characters in `Values` using a ‘' character. +>>>>>> The key/value pairs or values to find in the query string. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). To search for a literal ‘*’ or ‘?’ character in a query string, you must escape these characters in `Values` using a ‘' character. @@ -402 +420 @@ Rules -> (list) ->>>>>> The name of the request method. The maximum size is 40 characters. The allowed characters are A-Z, hyphen (-), and underscore (_). The comparison is case sensitive. Wildcards are not supported; therefore, the method name must be an exact match. +>>>>>> The name of the request method. The maximum length is 40 characters. The allowed characters are A-Z, hyphen (-), and underscore (_). The comparison is case sensitive. Wildcards are not supported; therefore, the method name must be an exact match. @@ -420,0 +439,6 @@ Rules -> (list) +>>>> +>>>> RegexValues -> (list) +>>>> +>>>>> The regular expressions to match against the condition field. The maximum length of each string is 128 characters. Specify only when `Field` is `http-header` , `host-header` , or `path-pattern` . +>>>>> +>>>>> (string) @@ -723,0 +748,64 @@ Rules -> (list) +>> +>> Transforms -> (list) +>> +>>> The transforms for the rule. +>>> +>>> (structure) +>>> +>>>> Information about a transform to apply to requests that match a rule. Transforms are applied to requests before they are sent to targets. +>>>> +>>>> Type -> (string) [required] +>>>> +>>>>> The type of transform. +>>>>> +>>>>> * `host-header-rewrite` \- Rewrite the host header. +>>>>> * `url-rewrite` \- Rewrite the request URL. +>>>>> + +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `host-header-rewrite` +>>>>> * `url-rewrite` +>>>>> + +>>>> +>>>> HostHeaderRewriteConfig -> (structure) +>>>> +>>>>> Information about a host header rewrite transform. This transform modifies the host header in an HTTP request. Specify only when `Type` is `host-header-rewrite` . +>>>>> +>>>>> Rewrites -> (list) +>>>>> +>>>>>> The host header rewrite transform. Each transform consists of a regular expression to match and a replacement string. +>>>>>> +>>>>>> (structure) +>>>>>> +>>>>>>> Information about a rewrite transform. This transform matches a pattern and replaces it with the specified string. +>>>>>>> +>>>>>>> Regex -> (string) [required] +>>>>>>> +>>>>>>>> The regular expression to match in the input string. The maximum length of the string is 1,024 characters. +>>>>>>> +>>>>>>> Replace -> (string) [required] +>>>>>>> +>>>>>>>> The replacement string to use when rewriting the matched input. The maximum length of the string is 1,024 characters. You can specify capture groups in the regular expression (for example, $1 and $2). +>>>> +>>>> UrlRewriteConfig -> (structure) +>>>> +>>>>> Information about a URL rewrite transform. This transform modifies the request URL. Specify only when `Type` is `url-rewrite` . +>>>>> +>>>>> Rewrites -> (list) +>>>>> +>>>>>> The URL rewrite transform to apply to the request. The transform consists of a regular expression to match and a replacement string. +>>>>>> +>>>>>> (structure) +>>>>>> +>>>>>>> Information about a rewrite transform. This transform matches a pattern and replaces it with the specified string. +>>>>>>> +>>>>>>> Regex -> (string) [required] +>>>>>>> +>>>>>>>> The regular expression to match in the input string. The maximum length of the string is 1,024 characters. +>>>>>>> +>>>>>>> Replace -> (string) [required] +>>>>>>> +>>>>>>>> The replacement string to use when rewriting the matched input. The maximum length of the string is 1,024 characters. You can specify capture groups in the regular expression (for example, $1 and $2). @@ -739 +827 @@ NextMarker -> (string) - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) »