AWS cli documentation change
Summary
Added documentation for DomainJoinServiceAccountSecret parameter in backup descriptions showing stored credential ARNs
Security assessment
The change exposes where domain join credentials are stored in backup metadata, enhancing visibility of security-sensitive information. This improves documentation but doesn't indicate a security vulnerability resolution.
Diff
diff --git a/cli/latest/reference/fsx/describe-backups.md b/cli/latest/reference/fsx/describe-backups.md index f5a4acffc..9ccd1849f 100644 --- a//cli/latest/reference/fsx/describe-backups.md +++ b//cli/latest/reference/fsx/describe-backups.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -827,0 +828,12 @@ Backups -> (list) +>>>>> +>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>> +>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `64` +>>>>>> * max: `1024` +>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>> + @@ -1972,0 +1985,12 @@ Backups -> (list) +>>>>>>>> +>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>> +>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>> +>>>>>>>>> Constraints: +>>>>>>>>> +>>>>>>>>> * min: `64` +>>>>>>>>> * max: `1024` +>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>> + @@ -5491,0 +5516,12 @@ Backups -> (list) +>>>>>>>>>>> +>>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `64` +>>>>>>>>>>>> * max: `1024` +>>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>>> + @@ -8736,0 +8773,12 @@ Backups -> (list) +>>>>>>>>>>> +>>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `64` +>>>>>>>>>>>> * max: `1024` +>>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>>> + @@ -12845,0 +12894,12 @@ Backups -> (list) +>>>>>>>> +>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>> +>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>> +>>>>>>>>> Constraints: +>>>>>>>>> +>>>>>>>>> * min: `64` +>>>>>>>>> * max: `1024` +>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>> + @@ -13990,0 +14051,12 @@ Backups -> (list) +>>>>>>>>>>> +>>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `64` +>>>>>>>>>>>> * max: `1024` +>>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>>> + @@ -17996,0 +18069,12 @@ Backups -> (list) +>>>>>>>>>>> +>>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `64` +>>>>>>>>>>>> * max: `1024` +>>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>>> + @@ -20344,0 +20429,12 @@ Backups -> (list) +>>>>>>>>>>> +>>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `64` +>>>>>>>>>>>> * max: `1024` +>>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>>> + @@ -23072 +23168 @@ NextToken -> (string) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »