AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-07 · Documentation medium

File: cli/latest/reference/fsx/update-storage-virtual-machine.md

Summary

Added DomainJoinServiceAccountSecret parameter to SelfManagedActiveDirectoryConfiguration for secure credential storage

Security assessment

Documents integration with Secrets Manager for domain join credentials, promoting secure credential handling patterns. This is a security enhancement but not a response to a specific disclosed issue.

Diff

diff --git a/cli/latest/reference/fsx/update-storage-virtual-machine.md b/cli/latest/reference/fsx/update-storage-virtual-machine.md
index 5bc09de30..40287562a 100644
--- a//cli/latest/reference/fsx/update-storage-virtual-machine.md
+++ b//cli/latest/reference/fsx/update-storage-virtual-machine.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
@@ -184,0 +185,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/fsx-20
+>> 
+>> DomainJoinServiceAccountSecret -> (string)
+>>
+>>> Specifies the updated Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the self-managed Active Directory domain join service account credentials. Amazon FSx uses this account to join to your self-managed Active Directory domain.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `64`
+>>>   * max: `1024`
+>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>> 
+
@@ -201 +213 @@ Shorthand Syntax:
-    SelfManagedActiveDirectoryConfiguration={UserName=string,Password=string,DnsIps=[string,string],DomainName=string,OrganizationalUnitDistinguishedName=string,FileSystemAdministratorsGroup=string},NetBiosName=string
+    SelfManagedActiveDirectoryConfiguration={UserName=string,Password=string,DnsIps=[string,string],DomainName=string,OrganizationalUnitDistinguishedName=string,FileSystemAdministratorsGroup=string,DomainJoinServiceAccountSecret=string},NetBiosName=string
@@ -214 +226,2 @@ JSON Syntax:
-        "FileSystemAdministratorsGroup": "string"
+        "FileSystemAdministratorsGroup": "string",
+        "DomainJoinServiceAccountSecret": "string"
@@ -446,0 +460,12 @@ StorageVirtualMachine -> (structure)
+>>> 
+>>> DomainJoinServiceAccountSecret -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Secrets Manager secret containing the service account credentials used to join the file system to your self-managed Active Directory domain.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `64`
+>>>>   * max: `1024`
+>>>>   * pattern: `^arn:[^:]{1,63}:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+-[a-zA-Z0-9]{6}$`
+>>>> 
+
@@ -860 +885 @@ StorageVirtualMachine -> (structure)
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »