AWS cli documentation change
Summary
Added 'DomainJoinServiceAccountSecret' parameter to update command for managing domain join credentials via Secrets Manager
Security assessment
Documents a new security feature allowing credential management through Secrets Manager during filesystem updates, but doesn't indicate remediation of a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/fsx/update-file-system.md b/cli/latest/reference/fsx/update-file-system.md index 917d45165..9b08e8a6d 100644 --- a//cli/latest/reference/fsx/update-file-system.md +++ b//cli/latest/reference/fsx/update-file-system.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -357,0 +358,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/fsx-20 +>> +>> DomainJoinServiceAccountSecret -> (string) +>> +>>> Specifies the updated Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the self-managed Active Directory domain join service account credentials. Amazon FSx uses this account to join to your self-managed Active Directory domain. +>>> +>>> Constraints: +>>> +>>> * min: `64` +>>> * max: `1024` +>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>> + @@ -458 +470 @@ Shorthand Syntax: - WeeklyMaintenanceStartTime=string,DailyAutomaticBackupStartTime=string,AutomaticBackupRetentionDays=integer,ThroughputCapacity=integer,SelfManagedActiveDirectoryConfiguration={UserName=string,Password=string,DnsIps=[string,string],DomainName=string,OrganizationalUnitDistinguishedName=string,FileSystemAdministratorsGroup=string},AuditLogConfiguration={FileAccessAuditLogLevel=string,FileShareAccessAuditLogLevel=string,AuditLogDestination=string},DiskIopsConfiguration={Mode=string,Iops=long} + WeeklyMaintenanceStartTime=string,DailyAutomaticBackupStartTime=string,AutomaticBackupRetentionDays=integer,ThroughputCapacity=integer,SelfManagedActiveDirectoryConfiguration={UserName=string,Password=string,DnsIps=[string,string],DomainName=string,OrganizationalUnitDistinguishedName=string,FileSystemAdministratorsGroup=string,DomainJoinServiceAccountSecret=string},AuditLogConfiguration={FileAccessAuditLogLevel=string,FileShareAccessAuditLogLevel=string,AuditLogDestination=string},DiskIopsConfiguration={Mode=string,Iops=long} @@ -475 +487,2 @@ JSON Syntax: - "FileSystemAdministratorsGroup": "string" + "FileSystemAdministratorsGroup": "string", + "DomainJoinServiceAccountSecret": "string" @@ -1719,0 +1733,12 @@ FileSystem -> (structure) +>>> +>>> DomainJoinServiceAccountSecret -> (string) +>>> +>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `64` +>>>> * max: `1024` +>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>> + @@ -2864,0 +2890,12 @@ FileSystem -> (structure) +>>>>>> +>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>> +>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * min: `64` +>>>>>>> * max: `1024` +>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>> + @@ -6383,0 +6421,12 @@ FileSystem -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -9628,0 +9678,12 @@ FileSystem -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -12619 +12680 @@ FileSystem -> (structure) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »