AWS cli documentation change

Service: cli · 2025-11-07 · Documentation medium

File: cli/latest/reference/identitystore/describe-group-membership.md

Summary

Updated member account access documentation with IAM Identity Center guidance, added audit fields (CreatedAt, UpdatedAt, CreatedBy, UpdatedBy), and updated CLI version references

Security assessment

The change adds audit trail fields (CreatedAt/UpdatedAt/CreatedBy/UpdatedBy) which support security monitoring and compliance. The updated documentation reference to 'limiting access from member accounts' provides explicit security guidance. While these improve security visibility and best practices, there's no indication they address a specific existing vulnerability.

Diff

diff --git a/cli/latest/reference/identitystore/describe-group-membership.md b/cli/latest/reference/identitystore/describe-group-membership.md
index b870bdbb7..a962d688e 100644
--- a//cli/latest/reference/identitystore/describe-group-membership.md
+++ b//cli/latest/reference/identitystore/describe-group-membership.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
@@ -63 +63 @@ Retrieves membership metadata and attributes from `MembershipId` in an identity
-If you have administrator access to a member account, you can use this API from the member account. Read about [member accounts](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html) in the _Organizations User Guide_ .
+If you have access to a member account, you can use this API operation from the member account. For more information, see [Limiting access to the identity store from member accounts](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts) in the _IAM Identity Center User Guide_ .
@@ -275,0 +276,16 @@ MemberId -> (tagged union structure)
+CreatedAt -> (timestamp)
+
+> The date and time the group membership was created.
+
+UpdatedAt -> (timestamp)
+
+> The date and time the group membership was last updated.
+
+CreatedBy -> (string)
+
+> The identifier of the user or system that created the group membership.
+
+UpdatedBy -> (string)
+
+> The identifier of the user or system that last updated the group membership.
+
@@ -286 +302 @@ MemberId -> (tagged union structure)
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »