AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-07 · Documentation medium

File: cli/latest/reference/fsx/release-file-system-nfs-v3-locks.md

Summary

Added documentation for DomainJoinServiceAccountSecret parameter specifying Secrets Manager ARN requirements for Active Directory domain joining credentials

Security assessment

Documents secure credential storage practices but does not indicate remediation of a specific security flaw. The pattern validation helps prevent misconfigurations.

Diff

diff --git a/cli/latest/reference/fsx/release-file-system-nfs-v3-locks.md b/cli/latest/reference/fsx/release-file-system-nfs-v3-locks.md
index 3a86ccdb5..6f3bc8de1 100644
--- a//cli/latest/reference/fsx/release-file-system-nfs-v3-locks.md
+++ b//cli/latest/reference/fsx/release-file-system-nfs-v3-locks.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
@@ -562,0 +563,12 @@ FileSystem -> (structure)
+>>> 
+>>> DomainJoinServiceAccountSecret -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `64`
+>>>>   * max: `1024`
+>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>> 
+
@@ -1707,0 +1720,12 @@ FileSystem -> (structure)
+>>>>>> 
+>>>>>> DomainJoinServiceAccountSecret -> (string)
+>>>>>>
+>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * min: `64`
+>>>>>>>   * max: `1024`
+>>>>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>>>>> 
+
@@ -5226,0 +5251,12 @@ FileSystem -> (structure)
+>>>>>>>>> 
+>>>>>>>>> DomainJoinServiceAccountSecret -> (string)
+>>>>>>>>>
+>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `64`
+>>>>>>>>>>   * max: `1024`
+>>>>>>>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>>>>>>>> 
+
@@ -8471,0 +8508,12 @@ FileSystem -> (structure)
+>>>>>>>>> 
+>>>>>>>>> DomainJoinServiceAccountSecret -> (string)
+>>>>>>>>>
+>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `64`
+>>>>>>>>>>   * max: `1024`
+>>>>>>>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>>>>>>>> 
+
@@ -11462 +11510 @@ FileSystem -> (structure)
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »