AWS cli documentation change
Summary
Updated CLI version reference, modified member account access documentation, restructured parameters (IdentityStoreId/UserName), added UserStatus field, extended user attributes (Photos, Website, Birthdate), and added audit fields (CreatedAt/UpdatedAt).
Security assessment
The change updates documentation about member account access to reference IAM Identity Center guidance on limiting access, which improves security awareness. However, there is no evidence this addresses an active vulnerability. Parameter constraint changes (e.g., IdentityStoreId pattern) improve validation but don't explicitly fix a disclosed issue. UserStatus field addition helps track account state but is a feature enhancement.
Diff
diff --git a/cli/latest/reference/identitystore/describe-user.md b/cli/latest/reference/identitystore/describe-user.md index e08663292..78b9b7b75 100644 --- a//cli/latest/reference/identitystore/describe-user.md +++ b//cli/latest/reference/identitystore/describe-user.md @@ -15 +15 @@ - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) » @@ -63 +63 @@ Retrieves the user metadata and attributes from the `UserId` in an identity stor -If you have administrator access to a member account, you can use this API from the member account. Read about [member accounts](https://docs.aws.amazon.com/organizations/latest/userguide/orgs_manage_accounts_access.html) in the _Organizations User Guide_ . +If you have access to a member account, you can use this API operation from the member account. For more information, see [Limiting access to the identity store from member accounts](https://docs.aws.amazon.com/singlesignon/latest/userguide/manage-your-accounts.html#limiting-access-from-member-accounts) in the _IAM Identity Center User Guide_ . @@ -220 +220 @@ Disable automatically prompt for CLI input parameters. -UserName -> (string) +IdentityStoreId -> (string) @@ -222 +222 @@ UserName -> (string) -> A unique string used to identify the user. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store. +> The globally unique identifier for the identity store. @@ -227,2 +227,2 @@ UserName -> (string) -> * max: `128` -> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}]+` +> * max: `36` +> * pattern: `d-[0-9a-f]{10}$|^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}` @@ -243,0 +244,12 @@ UserId -> (string) +UserName -> (string) + +> A unique string used to identify the user. The length limit is 128 characters. This value can consist of letters, accented characters, symbols, numbers, and punctuation. This value is specified at the time the user is created and stored as an attribute of the user object in the identity store. +> +> Constraints: +> +> * min: `1` +> * max: `128` +> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}]+` +> + + @@ -266,2 +278,2 @@ ExternalIds -> (list) ->>> * max: `100` ->>> * pattern: `(?!(?i)(arn|aws):)[\p{L}\p{M}\p{S}\p{N}\p{P}]+` +>>> * max: `256` +>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}]+` @@ -644 +656 @@ Timezone -> (string) -IdentityStoreId -> (string) +UserStatus -> (string) @@ -646 +658,12 @@ IdentityStoreId -> (string) -> The globally unique identifier for the identity store. +> The current status of the user account. +> +> Possible values: +> +> * `ENABLED` +> * `DISABLED` +> + + +Photos -> (list) + +> A list of photos associated with the user. Returns up to 3 photos with their associated metadata including type, display name, and primary designation. @@ -651,2 +674,3 @@ IdentityStoreId -> (string) -> * max: `36` -> * pattern: `d-[0-9a-f]{10}$|^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}` +> * max: `3` +> + @@ -653,0 +678,81 @@ IdentityStoreId -> (string) +> (structure) +> +>> Contains information about a user’s photo. Users can have up to 3 photos, with one designated as primary. Supports common image formats, including jpg, jpeg, png, and gif. +>> +>> Value -> (string) [required] +>> +>>> The photo data or URL. Supported formats include jpg, jpeg, png, and gif. This field is required for all photo entries. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +>>> + +>> +>> Type -> (string) +>> +>>> The type of photo. This field is optional and can be used to categorize different types of photos. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +>>> + +>> +>> Display -> (string) +>> +>>> A human-readable description of the photo for display purposes. This optional field provides context about the photo. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `1024` +>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +>>> + +>> +>> Primary -> (boolean) +>> +>>> Specifies whether this is the user’s primary photo. Default value is `false` . Only one photo can be designated as primary per user. + +Website -> (string) + +> The user’s personal website or blog URL. Returns the stored website information for the user. +> +> Constraints: +> +> * min: `1` +> * max: `1024` +> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +> + + +Birthdate -> (string) + +> The user’s birthdate in YYYY-MM-DD format. This field returns the stored birthdate information for the user. +> +> Constraints: +> +> * min: `1` +> * max: `1024` +> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` +> + + +CreatedAt -> (timestamp) + +> The date and time the user was created. + +CreatedBy -> (string) + +> The identifier of the user or system that created the user. + +UpdatedAt -> (timestamp) + +> The date and time the user was last updated. + +UpdatedBy -> (string) @@ -654,0 +760 @@ IdentityStoreId -> (string) +> The identifier of the user or system that last updated the user. @@ -666 +772 @@ IdentityStoreId -> (string) - * [AWS CLI 2.31.28 Command Reference](../../index.html) » + * [AWS CLI 2.31.31 Command Reference](../../index.html) »