AWS cli documentation change

Service: cli · 2025-11-07 · Documentation low

File: cli/latest/reference/identitystore/describe-group.md

Summary

Updated CLI version reference, modified access permissions guidance to include security best practices link, increased ExternalId max length, adjusted pattern validation, and added audit trail fields (CreatedAt, UpdatedAt, CreatedBy, UpdatedBy).

Security assessment

The change adds documentation about limiting access from member accounts (security best practices) and introduces audit trail fields for tracking group modifications. While these improve security transparency, there is no explicit mention of addressing a specific vulnerability or security incident.

Diff

diff --git a/cli/latest/reference/identitystore/describe-group.md b/cli/latest/reference/identitystore/describe-group.md
index 054012c63..c736695b8 100644
--- a//cli/latest/reference/identitystore/describe-group.md
+++ b//cli/latest/reference/identitystore/describe-group.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
@@ -63 +63 @@ Retrieves the group metadata and attributes from `GroupId` in an identity store.
-If you have administrator access to a member account, you can use this API from the member account. Read about [member accounts](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html) in the _Organizations User Guide_ .
+If you have access to a member account, you can use this API operation from the member account. For more information, see [Limiting access to the identity store from member accounts](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts) in the _IAM Identity Center User Guide_ .
@@ -266,2 +266,2 @@ ExternalIds -> (list)
->>>   * max: `100`
->>>   * pattern: `(?!(?i)(arn|aws):)[\p{L}\p{M}\p{S}\p{N}\p{P}]+`
+>>>   * max: `256`
+>>>   * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}]+`
@@ -294,0 +295,16 @@ Description -> (string)
+CreatedAt -> (timestamp)
+
+> The date and time the group was created.
+
+UpdatedAt -> (timestamp)
+
+> The date and time the group was last updated.
+
+CreatedBy -> (string)
+
+> The identifier of the user or system that created the group.
+
+UpdatedBy -> (string)
+
+> The identifier of the user or system that last updated the group.
+
@@ -317 +333 @@ IdentityStoreId -> (string)
-  * [AWS CLI 2.31.28 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.31 Command Reference](../../index.html) »