AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-16 · Documentation low

File: cli/latest/reference/datazone/get-subscription-request-details.md

Summary

Added documentation for S3 asset permissions (READ/WRITE) and expanded subscribed principals to include group/user details with IAM/SSO authentication patterns

Security assessment

The changes document security-related access controls (S3 permissions) and authentication mechanisms (IAM/SSO user details with pattern constraints), but there's no evidence of addressing a specific security vulnerability. The changes appear to enhance documentation of existing security features rather than fix issues.

Diff

diff --git a/cli/latest/reference/datazone/get-subscription-request-details.md b/cli/latest/reference/datazone/get-subscription-request-details.md
index 4aaff3ad5..bed976c6c 100644
--- a//cli/latest/reference/datazone/get-subscription-request-details.md
+++ b//cli/latest/reference/datazone/get-subscription-request-details.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -482,0 +483,21 @@ subscribedListings -> (list)
+>>>> 
+>>>> permissions -> (tagged union structure)
+>>>>
+>>>>> The asset permissions.
+>>>>> 
+>>>>> ### Note
+>>>>> 
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>>>> 
+>>>>> s3 -> (list)
+>>>>>
+>>>>>> The S3 details of the asset permissions.
+>>>>>> 
+>>>>>> (string)
+>>>>>>
+>>>>>>> Possible values:
+>>>>>>> 
+>>>>>>>   * `READ`
+>>>>>>>   * `WRITE`
+>>>>>>> 
+
@@ -620 +641,27 @@ subscribedPrincipals -> (list)
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `group`, `project`, `user`.
+>> 
+>> group -> (structure)
+>>
+>>> The subscribed group.
+>>> 
+>>> id -> (string)
+>>>
+>>>> The ID of the subscribed group.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>> 
+
+>>> 
+>>> name -> (string)
+>>>
+>>>> The name of the subscribed group.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `1024`
+>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>> 
+
@@ -646,0 +694,58 @@ subscribedPrincipals -> (list)
+>> 
+>> user -> (structure)
+>>
+>>> The subscribed user.
+>>> 
+>>> details -> (tagged union structure)
+>>>
+>>>> The subscribed user details.
+>>>> 
+>>>> ### Note
+>>>> 
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>>> 
+>>>> iam -> (structure)
+>>>>
+>>>>> The IAM details of the user profile.
+>>>>> 
+>>>>> arn -> (string)
+>>>>>
+>>>>>> The ARN of the IAM user.
+>>>>> 
+>>>>> principalId -> (string)
+>>>>>
+>>>>>> The principal ID as part of the IAM user profile details.
+>>>> 
+>>>> sso -> (structure)
+>>>>
+>>>>> The SSO details of the user profile.
+>>>>> 
+>>>>> firstName -> (string)
+>>>>>
+>>>>>> The first name as part of the SSO user profile detail.
+>>>>> 
+>>>>> lastName -> (string)
+>>>>>
+>>>>>> The last name as part of the SSO user profile detail.
+>>>>> 
+>>>>> username -> (string)
+>>>>>
+>>>>>> The username as part of the SSO user profile detail.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>>   * max: `1024`
+>>>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>>>> 
+
+>>> 
+>>> id -> (string)
+>>>
+>>>> The ID of the subscribed user.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>> 
+
@@ -666 +771 @@ updatedBy -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »