AWS cli documentation change
Summary
Added documentation for DomainJoinServiceAccountSecret parameter specifying Secrets Manager ARN for Active Directory credentials
Security assessment
The change adds documentation about securely storing Active Directory join credentials in Secrets Manager, which is a security best practice. However, there is no evidence this addresses an existing security vulnerability.
Diff
diff --git a/cli/latest/reference/fsx/copy-backup.md b/cli/latest/reference/fsx/copy-backup.md index 06effe822..3cac76ea9 100644 --- a//cli/latest/reference/fsx/copy-backup.md +++ b//cli/latest/reference/fsx/copy-backup.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -817,0 +818,12 @@ Backup -> (structure) +>>>> +>>>> DomainJoinServiceAccountSecret -> (string) +>>>> +>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `64` +>>>>> * max: `1024` +>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>> + @@ -1962,0 +1975,12 @@ Backup -> (structure) +>>>>>>> +>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>> +>>>>>>>> Constraints: +>>>>>>>> +>>>>>>>> * min: `64` +>>>>>>>> * max: `1024` +>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>> + @@ -5481,0 +5506,12 @@ Backup -> (structure) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -8726,0 +8763,12 @@ Backup -> (structure) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -12835,0 +12884,12 @@ Backup -> (structure) +>>>>>>> +>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>> +>>>>>>>> Constraints: +>>>>>>>> +>>>>>>>> * min: `64` +>>>>>>>> * max: `1024` +>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>> + @@ -13980,0 +14041,12 @@ Backup -> (structure) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -17986,0 +18059,12 @@ Backup -> (structure) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -20334,0 +20419,12 @@ Backup -> (structure) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -23050 +23146 @@ Backup -> (structure) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »