AWS cli documentation change
Summary
Added --policy and --bypass-policy-lockout-safety-check parameters for cluster resource policies
Security assessment
Introduces documentation for resource-based access policies and a safety check bypass flag. While the policy configuration relates to security controls, there is no evidence of addressing a specific vulnerability. The bypass parameter warns about potential lockout risks but does not indicate an active security issue.
Diff
diff --git a/cli/latest/reference/dsql/create-cluster.md b/cli/latest/reference/dsql/create-cluster.md index bfbc9cbd5..4403a93f1 100644 --- a//cli/latest/reference/dsql/create-cluster.md +++ b//cli/latest/reference/dsql/create-cluster.md @@ -15 +15 @@ - * [AWS CLI 2.31.19 Command Reference](../../index.html) » + * [AWS CLI 2.31.21 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -The CreateCluster API allows you to create both single-region clusters and multi-Region clusters. With the addition of the _multiRegionProperties_ parameter, you can create a cluster with witness Region support and establish peer relationships with clusters in other Regions during creation. +The CreateCluster API allows you to create both single-Region clusters and multi-Region clusters. With the addition of the _multiRegionProperties_ parameter, you can create a cluster with witness Region support and establish peer relationships with clusters in other Regions during creation. @@ -81 +81 @@ Resources: `arn:aws:dsql:region:account-id:cluster/*` -Permission to configure multi-region properties for a cluster. +Permission to configure multi-Region properties for a cluster. @@ -122,0 +123,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/dsql-2 + [--policy <value>] + [--bypass-policy-lockout-safety-check | --no-bypass-policy-lockout-safety-check] @@ -231 +233 @@ JSON Syntax: ->> The that serves as the witness region for a multi-Region cluster. The witness region helps maintain cluster consistency and quorum. +>> The Region that serves as the witness region for a multi-Region cluster. The witness Region helps maintain cluster consistency and quorum. @@ -242 +244 @@ JSON Syntax: ->> The set of linked clusters that form the multi-Region cluster configuration. Each linked cluster represents a database instance in a different Region. +>> The set of peered clusters that form the multi-Region cluster configuration. Each peered cluster represents a database instance in a different Region. @@ -268,0 +271,15 @@ JSON Syntax: +`--policy` (string) + +> An optional resource-based policy document in JSON format that defines access permissions for the cluster. +> +> Constraints: +> +> * min: `1` +> * max: `20480` +> + + +`--bypass-policy-lockout-safety-check` | `--no-bypass-policy-lockout-safety-check` (boolean) + +> An optional field that controls whether to bypass the lockout prevention check. When set to true, this parameter allows you to apply a policy that might lock you out of the cluster. Use with caution. + @@ -417 +434 @@ multiRegionProperties -> (structure) ->> The that serves as the witness region for a multi-Region cluster. The witness region helps maintain cluster consistency and quorum. +>> The Region that serves as the witness region for a multi-Region cluster. The witness Region helps maintain cluster consistency and quorum. @@ -428 +445 @@ multiRegionProperties -> (structure) ->> The set of linked clusters that form the multi-Region cluster configuration. Each linked cluster represents a database instance in a different Region. +>> The set of peered clusters that form the multi-Region cluster configuration. Each peered cluster represents a database instance in a different Region. @@ -486 +503 @@ deletionProtectionEnabled -> (boolean) - * [AWS CLI 2.31.19 Command Reference](../../index.html) » + * [AWS CLI 2.31.21 Command Reference](../../index.html) »