AWS cli documentation change
Summary
Updated AWS CLI version reference from 2.31.13 to 2.31.16, added RegexValues parameters for host/header/path matching, and introduced new Transforms section for request rewriting capabilities
Security assessment
The changes introduce regex pattern validation (128 character limit) and host/URL rewrite transforms. While regex validation helps prevent overly complex patterns that could cause ReDoS vulnerabilities, there's no explicit mention of addressing a specific security vulnerability. The rewrite transforms (host-header/url-rewrite) could impact security configurations but are presented as new features rather than security fixes. Documentation improvements about input validation constraints contribute to security awareness.
Diff
diff --git a/cli/latest/reference/elbv2/set-rule-priorities.md b/cli/latest/reference/elbv2/set-rule-priorities.md index be3fda455..55f6ba1ed 100644 --- a//cli/latest/reference/elbv2/set-rule-priorities.md +++ b//cli/latest/reference/elbv2/set-rule-priorities.md @@ -15 +15 @@ - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) » @@ -359 +359 @@ Rules -> (list) ->>>>>> The host names. The maximum size of each name is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). You must include at least one “.” character. You can include only alphabetical characters after the final “.” character. +>>>>>> The host names. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). You must include at least one “.” character. You can include only alphabetical characters after the final “.” character. @@ -363,0 +364,6 @@ Rules -> (list) +>>>>> +>>>>> RegexValues -> (list) +>>>>> +>>>>>> The regular expressions to compare against the host header. The maximum length of each string is 128 characters. +>>>>>> +>>>>>> (string) @@ -371 +377 @@ Rules -> (list) ->>>>>> The path patterns to compare against the request URL. The maximum size of each string is 128 characters. The comparison is case sensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). +>>>>>> The path patterns to compare against the request URL. The maximum length of each string is 128 characters. The comparison is case sensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). @@ -375,0 +382,6 @@ Rules -> (list) +>>>>> +>>>>> RegexValues -> (list) +>>>>> +>>>>>> The regular expressions to compare against the request URL. The maximum length of each string is 128 characters. +>>>>>> +>>>>>> (string) @@ -383 +395 @@ Rules -> (list) ->>>>>> The name of the HTTP header field. The maximum size is 40 characters. The header name is case insensitive. The allowed characters are specified by RFC 7230. Wildcards are not supported. +>>>>>> The name of the HTTP header field. The maximum length is 40 characters. The header name is case insensitive. The allowed characters are specified by RFC 7230. Wildcards are not supported. @@ -389 +401 @@ Rules -> (list) ->>>>>> The strings to compare against the value of the HTTP header. The maximum size of each string is 128 characters. The comparison strings are case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). +>>>>>> The strings to compare against the value of the HTTP header. The maximum length of each string is 128 characters. The comparison strings are case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). @@ -395,0 +408,6 @@ Rules -> (list) +>>>>> +>>>>> RegexValues -> (list) +>>>>> +>>>>>> The regular expression to compare against the HTTP header. The maximum length of each string is 128 characters. +>>>>>> +>>>>>> (string) @@ -403 +421 @@ Rules -> (list) ->>>>>> The key/value pairs or values to find in the query string. The maximum size of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). To search for a literal ‘*’ or ‘?’ character in a query string, you must escape these characters in `Values` using a ‘' character. +>>>>>> The key/value pairs or values to find in the query string. The maximum length of each string is 128 characters. The comparison is case insensitive. The following wildcard characters are supported: * (matches 0 or more characters) and ? (matches exactly 1 character). To search for a literal ‘*’ or ‘?’ character in a query string, you must escape these characters in `Values` using a ‘' character. @@ -425 +443 @@ Rules -> (list) ->>>>>> The name of the request method. The maximum size is 40 characters. The allowed characters are A-Z, hyphen (-), and underscore (_). The comparison is case sensitive. Wildcards are not supported; therefore, the method name must be an exact match. +>>>>>> The name of the request method. The maximum length is 40 characters. The allowed characters are A-Z, hyphen (-), and underscore (_). The comparison is case sensitive. Wildcards are not supported; therefore, the method name must be an exact match. @@ -443,0 +462,6 @@ Rules -> (list) +>>>> +>>>> RegexValues -> (list) +>>>> +>>>>> The regular expressions to match against the condition field. The maximum length of each string is 128 characters. Specify only when `Field` is `http-header` , `host-header` , or `path-pattern` . +>>>>> +>>>>> (string) @@ -746,0 +771,64 @@ Rules -> (list) +>> +>> Transforms -> (list) +>> +>>> The transforms for the rule. +>>> +>>> (structure) +>>> +>>>> Information about a transform to apply to requests that match a rule. Transforms are applied to requests before they are sent to targets. +>>>> +>>>> Type -> (string) [required] +>>>> +>>>>> The type of transform. +>>>>> +>>>>> * `host-header-rewrite` \- Rewrite the host header. +>>>>> * `url-rewrite` \- Rewrite the request URL. +>>>>> + +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `host-header-rewrite` +>>>>> * `url-rewrite` +>>>>> + +>>>> +>>>> HostHeaderRewriteConfig -> (structure) +>>>> +>>>>> Information about a host header rewrite transform. This transform modifies the host header in an HTTP request. Specify only when `Type` is `host-header-rewrite` . +>>>>> +>>>>> Rewrites -> (list) +>>>>> +>>>>>> The host header rewrite transform. Each transform consists of a regular expression to match and a replacement string. +>>>>>> +>>>>>> (structure) +>>>>>> +>>>>>>> Information about a rewrite transform. This transform matches a pattern and replaces it with the specified string. +>>>>>>> +>>>>>>> Regex -> (string) [required] +>>>>>>> +>>>>>>>> The regular expression to match in the input string. The maximum length of the string is 1,024 characters. +>>>>>>> +>>>>>>> Replace -> (string) [required] +>>>>>>> +>>>>>>>> The replacement string to use when rewriting the matched input. The maximum length of the string is 1,024 characters. You can specify capture groups in the regular expression (for example, $1 and $2). +>>>> +>>>> UrlRewriteConfig -> (structure) +>>>> +>>>>> Information about a URL rewrite transform. This transform modifies the request URL. Specify only when `Type` is `url-rewrite` . +>>>>> +>>>>> Rewrites -> (list) +>>>>> +>>>>>> The URL rewrite transform to apply to the request. The transform consists of a regular expression to match and a replacement string. +>>>>>> +>>>>>> (structure) +>>>>>> +>>>>>>> Information about a rewrite transform. This transform matches a pattern and replaces it with the specified string. +>>>>>>> +>>>>>>> Regex -> (string) [required] +>>>>>>> +>>>>>>>> The regular expression to match in the input string. The maximum length of the string is 1,024 characters. +>>>>>>> +>>>>>>> Replace -> (string) [required] +>>>>>>> +>>>>>>>> The replacement string to use when rewriting the matched input. The maximum length of the string is 1,024 characters. You can specify capture groups in the regular expression (for example, $1 and $2). @@ -758 +846 @@ Rules -> (list) - * [AWS CLI 2.31.13 Command Reference](../../index.html) » + * [AWS CLI 2.31.16 Command Reference](../../index.html) »