AWS cli documentation change
Summary
Added new parameters (photos, website, birthdate) for user creation, updated CLI version references, clarified IAM Identity Center requirements for name parameter, and corrected IdentityStoreId/UserId field patterns
Security assessment
The changes primarily add new optional user attributes and update field validation patterns. While the new parameters handle personal data (photos/birthdate), there's no evidence of addressing a specific security vulnerability. The pattern changes ([0-9a-f] to [A-Fa-f0-9]) appear to be validation improvements but lack explicit security context. The IAM Identity Center requirement clarification improves accuracy but doesn't directly document security features.
Diff
diff --git a/cli/latest/reference/identitystore/create-user.md b/cli/latest/reference/identitystore/create-user.md index a09eab4b3..56f07a86a 100644 --- a//cli/latest/reference/identitystore/create-user.md +++ b//cli/latest/reference/identitystore/create-user.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -80,0 +81,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/identi + [--photos <value>] + [--website <value>] + [--birthdate <value>] @@ -131 +134 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/identi -> An object containing the name of the user. +> An object containing the name of the user. When used in IAM Identity Center, this parameter is required. @@ -226 +229 @@ JSON Syntax: -> A string containing the name of the user. This value is typically formatted for display when the user is referenced. For example, “John Doe.” +> A string containing the name of the user. This value is typically formatted for display when the user is referenced. For example, “John Doe.” When used in IAM Identity Center, this parameter is required. @@ -570,0 +574,99 @@ JSON Syntax: +`--photos` (list) + +> A list of photos associated with the user. You can add up to 3 photos per user. Each photo can include a value, type, display name, and primary designation. +> +> Constraints: +> +> * min: `1` +> * max: `3` +> + +> +> (structure) +> +>> Contains information about a user’s photo. Users can have up to 3 photos, with one designated as primary. Supports common image formats, including jpg, jpeg, png, and gif. +>> +>> Value -> (string) [required] +>> +>>> The photo data or URL. Supported formats include jpg, jpeg, png, and gif. This field is required for all photo entries. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +>>> + +>> +>> Type -> (string) +>> +>>> The type of photo. This field is optional and can be used to categorize different types of photos. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +>>> + +>> +>> Display -> (string) +>> +>>> A human-readable description of the photo for display purposes. This optional field provides context about the photo. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +>>> + +>> +>> Primary -> (boolean) +>> +>>> Specifies whether this is the user’s primary photo. Default value is `false` . Only one photo can be designated as primary per user. + +Shorthand Syntax: + + + Value=string,Type=string,Display=string,Primary=boolean ... + + +JSON Syntax: + + + [ + { + "Value": "string", + "Type": "string", + "Display": "string", + "Primary": true|false + } + ... + ] + + +`--website` (string) + +> The user’s personal website or blog URL. This field allows users to provide a link to their personal or professional website. +> +> Constraints: +> +> * min: `1` +> * max: `1024` +> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +> + + +`--birthdate` (string) + +> The user’s birthdate in YYYY-MM-DD format. This field supports standard date format for storing personal information. +> +> Constraints: +> +> * min: `1` +> * max: `1024` +> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +> + + @@ -670 +772 @@ Disable automatically prompt for CLI input parameters. -UserId -> (string) +IdentityStoreId -> (string) @@ -672 +774 @@ UserId -> (string) -> The identifier of the newly created user in the identity store. +> The globally unique identifier for the identity store. @@ -677,2 +779,2 @@ UserId -> (string) -> * max: `47` -> * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}` +> * max: `36` +> * pattern: `d-[0-9a-f]{10}$|^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}` @@ -682 +784 @@ UserId -> (string) -IdentityStoreId -> (string) +UserId -> (string) @@ -684 +786 @@ IdentityStoreId -> (string) -> The globally unique identifier for the identity store. +> The identifier of the newly created user in the identity store. @@ -689,2 +791,2 @@ IdentityStoreId -> (string) -> * max: `36` -> * pattern: `d-[0-9a-f]{10}$|^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}` +> * max: `47` +> * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}` @@ -704 +806 @@ IdentityStoreId -> (string) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »