AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-16 · Documentation low

File: cli/latest/reference/datazone/create-subscription-grant.md

Summary

Updated CLI version reference and added documentation for asset permissions (S3 access levels) and environment ID validation constraints.

Security assessment

The changes document S3 permission granularity (READ/WRITE) and add validation patterns for environment IDs, which relate to access control and resource validation. While these are security-adjacent features, there is no indication they address a specific disclosed vulnerability or security weakness.

Diff

diff --git a/cli/latest/reference/datazone/create-subscription-grant.md b/cli/latest/reference/datazone/create-subscription-grant.md
index ae9912f05..7f2b5bd38 100644
--- a//cli/latest/reference/datazone/create-subscription-grant.md
+++ b//cli/latest/reference/datazone/create-subscription-grant.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -397,0 +398,21 @@ assets -> (list)
+>> 
+>> permissions -> (tagged union structure)
+>>
+>>> The asset permissions.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>> 
+>>> s3 -> (list)
+>>>
+>>>> The S3 details of the asset permissions.
+>>>> 
+>>>> (string)
+>>>>
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `READ`
+>>>>>   * `WRITE`
+>>>>> 
+
@@ -437,0 +459,10 @@ domainId -> (string)
+environmentId -> (string)
+
+> The environment ID for which subscription grant is created.
+> 
+> Constraints:
+> 
+>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+> 
+
+
@@ -535 +566 @@ updatedBy -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »