AWS cli documentation change
Summary
Added support for external authority configuration (e.g., Infoblox integration) in IPAM scope management
Security assessment
The changes document integration with third-party IPAM systems, which involves security-sensitive configurations. However, this is a feature addition rather than a security fix. Proper configuration of external authorities is a security best practice but not evidence of a resolved vulnerability.
Diff
diff --git a/cli/latest/reference/ec2/modify-ipam-scope.md b/cli/latest/reference/ec2/modify-ipam-scope.md index 61f989515..94cd9002e 100644 --- a//cli/latest/reference/ec2/modify-ipam-scope.md +++ b//cli/latest/reference/ec2/modify-ipam-scope.md @@ -15 +15 @@ - * [AWS CLI 2.31.31 Command Reference](../../index.html) » + * [AWS CLI 2.31.32 Command Reference](../../index.html) » @@ -70,0 +71,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20 + [--external-authority-configuration <value>] + [--remove-external-authority-configuration | --no-remove-external-authority-configuration] @@ -106,0 +109,39 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20 +`--external-authority-configuration` (structure) + +> The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system. +> +> In IPAM, an external authority is a third-party IP address management system that provides CIDR blocks when you provision address space for top-level IPAM pools. This allows you to use your existing IP management system to control which address ranges are allocated to Amazon Web Services while using Amazon VPC IPAM to manage subnets within those ranges. +> +> Type -> (string) +> +>> The type of external authority. +>> +>> Possible values: +>> +>> * `infoblox` +>> + +> +> ExternalResourceIdentifier -> (string) +> +>> The identifier for the external resource managing this scope. For Infoblox integrations, this is the Infoblox resource identifier in the format `<version>.identity.account.<entity_realm>.<entity_id>` . + +Shorthand Syntax: + + + Type=string,ExternalResourceIdentifier=string + + +JSON Syntax: + + + { + "Type": "infoblox", + "ExternalResourceIdentifier": "string" + } + + +`--remove-external-authority-configuration` | `--no-remove-external-authority-configuration` (boolean) + +> Remove the external authority configuration. `true` to remove. + @@ -350,0 +392,22 @@ IpamScope -> (structure) +> +> ExternalAuthorityConfiguration -> (structure) +> +>> The external authority configuration for this IPAM scope, if configured. +>> +>> The configuration that links an Amazon VPC IPAM scope to an external authority system. It specifies the type of external system and the external resource identifier that identifies your account or instance in that system. +>> +>> In IPAM, an external authority is a third-party IP address management system that provides CIDR blocks when you provision address space for top-level IPAM pools. This allows you to use your existing IP management system to control which address ranges are allocated to Amazon Web Services while using Amazon VPC IPAM to manage subnets within those ranges. +>> +>> Type -> (string) +>> +>>> The type of external authority managing this scope. Currently supports `Infoblox` for integration with Infoblox Universal DDI. +>>> +>>> Possible values: +>>> +>>> * `infoblox` +>>> + +>> +>> ExternalResourceIdentifier -> (string) +>> +>>> The identifier for the external resource managing this scope. For Infoblox integrations, this is the Infoblox resource identifier in the format `<version>.identity.account.<entity_realm>.<entity_id>` . @@ -362 +425 @@ IpamScope -> (structure) - * [AWS CLI 2.31.31 Command Reference](../../index.html) » + * [AWS CLI 2.31.32 Command Reference](../../index.html) »