AWS Security ChangesHomeSearch

AWS cli medium security documentation change

Service: cli · 2025-11-10 · Security-related medium

File: cli/latest/reference/controltower/update-landing-zone.md

Summary

Added --remediation-types parameter and updated validation patterns

Security assessment

New remediation-types parameter allows configuring security-related remediation actions like INHERITANCE_DRIFT handling. This enables security-focused configuration management during updates, though no explicit vulnerability is mentioned.

Diff

diff --git a/cli/latest/reference/controltower/update-landing-zone.md b/cli/latest/reference/controltower/update-landing-zone.md
index a5ef61738..41ffa8add 100644
--- a//cli/latest/reference/controltower/update-landing-zone.md
+++ b//cli/latest/reference/controltower/update-landing-zone.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/contro
-    --landing-zone-identifier <value>
@@ -70,0 +70,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/contro
+    [--remediation-types <value>]
+    --landing-zone-identifier <value>
@@ -96,4 +96,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/contro
-`--landing-zone-identifier` (string) [required]
-
-> The unique identifier of the landing zone.
-
@@ -109,0 +107,29 @@ JSON Syntax:
+`--remediation-types` (list)
+
+> Specifies the types of remediation actions to apply when updating the landing zone configuration.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `1`
+> 
+
+> 
+> (string)
+>
+>> Possible values:
+>> 
+>>   * `INHERITANCE_DRIFT`
+>> 
+
+
+Syntax:
+    
+    
+    "string" "string" ...
+    
+
+`--landing-zone-identifier` (string) [required]
+
+> The unique identifier of the landing zone.
+
@@ -118 +144 @@ JSON Syntax:
->   * pattern: `^\d+.\d+$`
+>   * pattern: `\d+.\d+`
@@ -229 +255 @@ operationIdentifier -> (string)
->   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -243 +269 @@ operationIdentifier -> (string)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »