AWS cli documentation change

Service: cli · 2025-11-07 · Documentation low

File: cli/latest/reference/fsx/create-storage-virtual-machine.md

Summary

Added DomainJoinServiceAccountSecret parameter and made UserName/Password optional when using Secrets Manager

Security assessment

Promotes secure credential storage via Secrets Manager instead of inline credentials. The removal of [required] on UserName/Password suggests a shift to secret-based authentication, but no specific vulnerability is mentioned.

Diff

diff --git a/cli/latest/reference/fsx/create-storage-virtual-machine.md b/cli/latest/reference/fsx/create-storage-virtual-machine.md
index da705123a..070c4d718 100644
--- a//cli/latest/reference/fsx/create-storage-virtual-machine.md
+++ b//cli/latest/reference/fsx/create-storage-virtual-machine.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
@@ -158 +158 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/fsx-20
->> UserName -> (string) [required]
+>> UserName -> (string)
@@ -170 +170 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/fsx-20
->> Password -> (string) [required]
+>> Password -> (string)
@@ -201,0 +202,21 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/fsx-20
+>> 
+>> DomainJoinServiceAccountSecret -> (string)
+>>
+>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the self-managed Active Directory domain join service account credentials. When provided, Amazon FSx uses the credentials stored in this secret to join the file system to your self-managed Active Directory domain.
+>>> 
+>>> The secret must contain two key-value pairs:
+>>> 
+>>>   * `CUSTOMER_MANAGED_ACTIVE_DIRECTORY_USERNAME` \- The username for the service account
+>>>   * `CUSTOMER_MANAGED_ACTIVE_DIRECTORY_PASSWORD` \- The password for the service account
+>>> 
+
+>>> 
+>>> For more information, see [Using Amazon FSx for Windows with your self-managed Microsoft Active Directory](https://docs.aws.amazon.com/fsx/latest/WindowsGuide/self-manage-prereqs.html) or [Using Amazon FSx for ONTAP with your self-managed Microsoft Active Directory](https://docs.aws.amazon.com/fsx/latest/ONTAPGuide/self-manage-prereqs.html) .
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `64`
+>>>   * max: `1024`
+>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>> 
+
@@ -206 +227 @@ Shorthand Syntax:
-    NetBiosName=string,SelfManagedActiveDirectoryConfiguration={DomainName=string,OrganizationalUnitDistinguishedName=string,FileSystemAdministratorsGroup=string,UserName=string,Password=string,DnsIps=[string,string]}
+    NetBiosName=string,SelfManagedActiveDirectoryConfiguration={DomainName=string,OrganizationalUnitDistinguishedName=string,FileSystemAdministratorsGroup=string,UserName=string,Password=string,DnsIps=[string,string],DomainJoinServiceAccountSecret=string}
@@ -220 +241,2 @@ JSON Syntax:
-        "DnsIps": ["string", ...]
+        "DnsIps": ["string", ...],
+        "DomainJoinServiceAccountSecret": "string"
@@ -538,0 +561,12 @@ StorageVirtualMachine -> (structure)
+>>> 
+>>> DomainJoinServiceAccountSecret -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `64`
+>>>>   * max: `1024`
+>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>> 
+
@@ -952 +986 @@ StorageVirtualMachine -> (structure)
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »