AWS cli documentation change
Summary
Added documentation for DomainJoinServiceAccountSecret parameter specifying Secrets Manager ARN requirements for Active Directory domain joining credentials
Security assessment
The change documents proper storage of domain join credentials in AWS Secrets Manager, which is a security best practice. However, there is no evidence this addresses an active vulnerability.
Diff
diff --git a/cli/latest/reference/fsx/describe-volumes.md b/cli/latest/reference/fsx/describe-volumes.md index edd4ad304..9a83c03fd 100644 --- a//cli/latest/reference/fsx/describe-volumes.md +++ b//cli/latest/reference/fsx/describe-volumes.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -1355,0 +1356,12 @@ Volumes -> (list) +>>>>>>> +>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>> +>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>> +>>>>>>>> Constraints: +>>>>>>>> +>>>>>>>> * min: `64` +>>>>>>>> * max: `1024` +>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>> + @@ -2500,0 +2513,12 @@ Volumes -> (list) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -6506,0 +6531,12 @@ Volumes -> (list) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -8854,0 +8891,12 @@ Volumes -> (list) +>>>>>>>>>> +>>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>>> +>>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `64` +>>>>>>>>>>> * max: `1024` +>>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>>> + @@ -11572 +11620 @@ NextToken -> (string) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »