AWS cli documentation change

Service: cli · 2025-11-10 · Documentation low

File: cli/latest/reference/opensearch/create-domain.md

Summary

Updated IAM federation configuration documentation with more precise terminology and SAML assertion details

Security assessment

The changes clarify IAM identity federation configuration parameters (SAML assertion mapping) which is a security feature, but there's no evidence of addressing a specific vulnerability. The updates improve documentation accuracy for security settings.

Diff

diff --git a/cli/latest/reference/opensearch/create-domain.md b/cli/latest/reference/opensearch/create-domain.md
index 93ad1ecdf..b772f4f30 100644
--- a//cli/latest/reference/opensearch/create-domain.md
+++ b//cli/latest/reference/opensearch/create-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -1170 +1170 @@ JSON Syntax:
->> Container for information about the IAM federation configuration for an OpenSearch UI application.
+>> Input configuration for IAM identity federation within advanced security options.
@@ -1174 +1174 @@ JSON Syntax:
->>> True to enable IAM federation authentication for a domain.
+>>> Specifies whether IAM identity federation is enabled for the OpenSearch domain.
@@ -1178 +1178 @@ JSON Syntax:
->>> Element of the IAM federation assertion to use for the user name. Default is `sub` .
+>>> The key in the SAML assertion that contains the user’s subject identifier.
@@ -1190 +1190 @@ JSON Syntax:
->>> Element of the IAM federation assertion to use for backend roles. Default is `roles` .
+>>> The key in the SAML assertion that contains the user’s role information.
@@ -2593 +2593 @@ DomainStatus -> (structure)
->>> Container for information about the IAM federation configuration for an OpenSearch UI application.
+>>> Configuration options for IAM identity federation in advanced security settings.
@@ -2597 +2597 @@ DomainStatus -> (structure)
->>>> True if IAM federation is enabled.
+>>>> Indicates whether IAM identity federation is currently enabled for the domain.
@@ -2601 +2601 @@ DomainStatus -> (structure)
->>>> The key used for matching the IAM federation subject attribute.
+>>>> The configured key in the SAML assertion for the user’s subject identifier.
@@ -2613 +2613 @@ DomainStatus -> (structure)
->>>> The key used for matching the IAM federation roles attribute.
+>>>> The configured key in the SAML assertion for the user’s role information.
@@ -2944 +2944 @@ DomainStatus -> (structure)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »