AWS cli documentation change

Service: cli · 2025-11-07 · Documentation low

File: cli/latest/reference/fsx/start-misconfigured-state-recovery.md

Summary

Added 'DomainJoinServiceAccountSecret' parameter documentation for specifying Secrets Manager ARN containing domain join credentials

Security assessment

The change introduces documentation for securely storing domain join credentials in Secrets Manager rather than plaintext, improving security practices. However, there's no evidence this addresses an existing vulnerability.

Diff

diff --git a/cli/latest/reference/fsx/start-misconfigured-state-recovery.md b/cli/latest/reference/fsx/start-misconfigured-state-recovery.md
index dbbf9561c..4582e464d 100644
--- a//cli/latest/reference/fsx/start-misconfigured-state-recovery.md
+++ b//cli/latest/reference/fsx/start-misconfigured-state-recovery.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
@@ -562,0 +563,12 @@ FileSystem -> (structure)
+>>> 
+>>> DomainJoinServiceAccountSecret -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `64`
+>>>>   * max: `1024`
+>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>> 
+
@@ -1707,0 +1720,12 @@ FileSystem -> (structure)
+>>>>>> 
+>>>>>> DomainJoinServiceAccountSecret -> (string)
+>>>>>>
+>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * min: `64`
+>>>>>>>   * max: `1024`
+>>>>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>>>>> 
+
@@ -5226,0 +5251,12 @@ FileSystem -> (structure)
+>>>>>>>>> 
+>>>>>>>>> DomainJoinServiceAccountSecret -> (string)
+>>>>>>>>>
+>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `64`
+>>>>>>>>>>   * max: `1024`
+>>>>>>>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>>>>>>>> 
+
@@ -8471,0 +8508,12 @@ FileSystem -> (structure)
+>>>>>>>>> 
+>>>>>>>>> DomainJoinServiceAccountSecret -> (string)
+>>>>>>>>>
+>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `64`
+>>>>>>>>>>   * max: `1024`
+>>>>>>>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>>>>>>>> 
+
@@ -11462 +11510 @@ FileSystem -> (structure)
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »