AWS cli documentation change

Service: cli · 2025-11-16 · Documentation medium

File: cli/latest/reference/datazone/accept-subscription-request.md

Summary

Added new asset permissions configuration and expanded principal types for subscription requests

Security assessment

Added documentation for granular asset permissions (S3 READ/WRITE controls) and expanded principal types (group/user with IAM/SSO details). While these are security-related features, there is no evidence of addressing a specific vulnerability.

Diff

diff --git a/cli/latest/reference/datazone/accept-subscription-request.md b/cli/latest/reference/datazone/accept-subscription-request.md
index ddbd201ff..f604a10fd 100644
--- a//cli/latest/reference/datazone/accept-subscription-request.md
+++ b//cli/latest/reference/datazone/accept-subscription-request.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -66,0 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--asset-permissions <value>]
@@ -94,0 +96,59 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--asset-permissions` (list)
+
+> The asset permissions of the accept subscription request.
+> 
+> (structure)
+>
+>> The asset permissions.
+>> 
+>> assetId -> (string) [required]
+>>
+>>> The asset ID as part of the asset permissions.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>>> 
+
+>> 
+>> permissions -> (tagged union structure) [required]
+>>
+>>> The details as part of the asset permissions.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>> 
+>>> s3 -> (list)
+>>>
+>>>> The S3 details of the asset permissions.
+>>>> 
+>>>> (string)
+>>>>
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `READ`
+>>>>>   * `WRITE`
+>>>>> 
+
+
+Shorthand Syntax:
+    
+    
+    assetId=string,permissions={s3=[string,string]} ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "assetId": "string",
+        "permissions": {
+          "s3": ["READ"|"WRITE", ...]
+        }
+      }
+      ...
+    ]
+    
+
@@ -543,0 +604,21 @@ subscribedListings -> (list)
+>>>> 
+>>>> permissions -> (tagged union structure)
+>>>>
+>>>>> The asset permissions.
+>>>>> 
+>>>>> ### Note
+>>>>> 
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>>>> 
+>>>>> s3 -> (list)
+>>>>>
+>>>>>> The S3 details of the asset permissions.
+>>>>>> 
+>>>>>> (string)
+>>>>>>
+>>>>>>> Possible values:
+>>>>>>> 
+>>>>>>>   * `READ`
+>>>>>>>   * `WRITE`
+>>>>>>> 
+
@@ -681 +762,27 @@ subscribedPrincipals -> (list)
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `group`, `project`, `user`.
+>> 
+>> group -> (structure)
+>>
+>>> The subscribed group.
+>>> 
+>>> id -> (string)
+>>>
+>>>> The ID of the subscribed group.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>> 
+
+>>> 
+>>> name -> (string)
+>>>
+>>>> The name of the subscribed group.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `1024`
+>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>> 
+
@@ -707,0 +815,58 @@ subscribedPrincipals -> (list)
+>> 
+>> user -> (structure)
+>>
+>>> The subscribed user.
+>>> 
+>>> details -> (tagged union structure)
+>>>
+>>>> The subscribed user details.
+>>>> 
+>>>> ### Note
+>>>> 
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>>> 
+>>>> iam -> (structure)
+>>>>
+>>>>> The IAM details of the user profile.
+>>>>> 
+>>>>> arn -> (string)
+>>>>>
+>>>>>> The ARN of the IAM user.
+>>>>> 
+>>>>> principalId -> (string)
+>>>>>
+>>>>>> The principal ID as part of the IAM user profile details.
+>>>> 
+>>>> sso -> (structure)
+>>>>
+>>>>> The SSO details of the user profile.
+>>>>> 
+>>>>> firstName -> (string)
+>>>>>
+>>>>>> The first name as part of the SSO user profile detail.
+>>>>> 
+>>>>> lastName -> (string)
+>>>>>
+>>>>>> The last name as part of the SSO user profile detail.
+>>>>> 
+>>>>> username -> (string)
+>>>>>
+>>>>>> The username as part of the SSO user profile detail.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>>   * max: `1024`
+>>>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>>>> 
+
+>>> 
+>>> id -> (string)
+>>>
+>>>> The ID of the subscribed user.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>> 
+
@@ -727 +892 @@ updatedBy -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »