AWS cli documentation change
Summary
Added DomainJoinServiceAccountSecret parameter documentation for specifying Secrets Manager ARN containing domain join credentials
Security assessment
The change introduces documentation for securely storing domain join credentials in Secrets Manager rather than passing them directly, improving security posture through secret management best practices. No evidence of addressing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/fsx/update-snapshot.md b/cli/latest/reference/fsx/update-snapshot.md index 42e757998..195dc5d63 100644 --- a//cli/latest/reference/fsx/update-snapshot.md +++ b//cli/latest/reference/fsx/update-snapshot.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -809,0 +810,12 @@ Snapshot -> (structure) +>>>>>> +>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>> +>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * min: `64` +>>>>>>> * max: `1024` +>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>> + @@ -1954,0 +1967,12 @@ Snapshot -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -5960,0 +5985,12 @@ Snapshot -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -9205,0 +9242,12 @@ Snapshot -> (structure) +>>>>>>>>> +>>>>>>>>> DomainJoinServiceAccountSecret -> (string) +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * min: `64` +>>>>>>>>>> * max: `1024` +>>>>>>>>>> * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$` +>>>>>>>>>> + @@ -11475 +11523 @@ Snapshot -> (structure) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »