AWS cli documentation change
Summary
Added documentation for DomainJoinServiceAccountSecret parameter with ARN pattern constraints for Secrets Manager secret
Security assessment
The change documents proper use of Secrets Manager for storing domain join credentials, improving security documentation but not addressing a specific vulnerability
Diff
diff --git a/cli/latest/reference/fsx/describe-file-systems.md b/cli/latest/reference/fsx/describe-file-systems.md index 89626625f..f2bb7f58e 100644 --- a//cli/latest/reference/fsx/describe-file-systems.md +++ b//cli/latest/reference/fsx/describe-file-systems.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -609,0 +610,12 @@ FileSystems -> (list) +>>>> +>>>> DomainJoinServiceAccountSecret -> (string) +>>>> +>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `64` +>>>>> * max: `1024` +>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>> + @@ -1754,0 +1767,12 @@ FileSystems -> (list) +>>>>>>> +>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>> +>>>>>>>> Constraints: +>>>>>>>> +>>>>>>>> * min: `64` +>>>>>>>> * max: `1024` +>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>> + @@ -5273,0 +5298,12 @@ FileSystems -> (list) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -8518,0 +8555,12 @@ FileSystems -> (list) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -11521 +11569 @@ NextToken -> (string) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »