AWS cli documentation change

Service: cli · 2025-11-10 · Documentation low

File: cli/latest/reference/opensearch/update-domain-config.md

Summary

Updated descriptions for IAM identity federation configuration parameters, clarifying SAML assertion key usage for user identifiers and roles

Security assessment

The changes provide clearer documentation about SAML-based identity federation configuration, which is a security feature. However, there's no indication of addressing a specific vulnerability or security incident.

Diff

diff --git a/cli/latest/reference/opensearch/update-domain-config.md b/cli/latest/reference/opensearch/update-domain-config.md
index daacebad1..9528d69ad 100644
--- a//cli/latest/reference/opensearch/update-domain-config.md
+++ b//cli/latest/reference/opensearch/update-domain-config.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »
@@ -1157 +1157 @@ JSON Syntax:
->> Container for information about the IAM federation configuration for an OpenSearch UI application.
+>> Input configuration for IAM identity federation within advanced security options.
@@ -1161 +1161 @@ JSON Syntax:
->>> True to enable IAM federation authentication for a domain.
+>>> Specifies whether IAM identity federation is enabled for the OpenSearch domain.
@@ -1165 +1165 @@ JSON Syntax:
->>> Element of the IAM federation assertion to use for the user name. Default is `sub` .
+>>> The key in the SAML assertion that contains the user’s subject identifier.
@@ -1177 +1177 @@ JSON Syntax:
->>> Element of the IAM federation assertion to use for backend roles. Default is `roles` .
+>>> The key in the SAML assertion that contains the user’s role information.
@@ -2990 +2990 @@ DomainConfig -> (structure)
->>>> Container for information about the IAM federation configuration for an OpenSearch UI application.
+>>>> Configuration options for IAM identity federation in advanced security settings.
@@ -2994 +2994 @@ DomainConfig -> (structure)
->>>>> True if IAM federation is enabled.
+>>>>> Indicates whether IAM identity federation is currently enabled for the domain.
@@ -2998 +2998 @@ DomainConfig -> (structure)
->>>>> The key used for matching the IAM federation subject attribute.
+>>>>> The configured key in the SAML assertion for the user’s subject identifier.
@@ -3010 +3010 @@ DomainConfig -> (structure)
->>>>> The key used for matching the IAM federation roles attribute.
+>>>>> The configured key in the SAML assertion for the user’s role information.
@@ -3713 +3713 @@ DryRunProgressStatus -> (structure)
-  * [AWS CLI 2.31.31 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.32 Command Reference](../../index.html) »