AWS cli documentation change
Summary
Added DomainJoinServiceAccountSecret parameter documentation for Secrets Manager integration with Active Directory domain joining
Security assessment
The change introduces documentation for securely storing domain join credentials in Secrets Manager rather than passing them directly. While this improves security posture, there is no evidence it addresses a specific existing vulnerability.
Diff
diff --git a/cli/latest/reference/fsx/create-snapshot.md b/cli/latest/reference/fsx/create-snapshot.md index 8cff9b770..a9690ebe3 100644 --- a//cli/latest/reference/fsx/create-snapshot.md +++ b//cli/latest/reference/fsx/create-snapshot.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -878,0 +879,12 @@ Snapshot -> (structure) +>>>>>> +>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>> +>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * min: `64` +>>>>>>> * max: `1024` +>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>> + @@ -2023,0 +2036,12 @@ Snapshot -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -6029,0 +6054,12 @@ Snapshot -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -9274,0 +9311,12 @@ Snapshot -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -11544 +11592 @@ Snapshot -> (structure) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »