AWS cli documentation change

Service: cli · 2025-11-16 · Documentation low

File: cli/latest/reference/datazone/get-subscription.md

Summary

Added S3 permissions documentation and expanded subscribed principal definitions to include group/user authentication details with validation constraints

Security assessment

The updates provide documentation for access control mechanisms (S3 READ/WRITE permissions) and user authentication patterns (IAM ARNs, SSO username validation). While these relate to security features, there's no indication of patching vulnerabilities or addressing security incidents. The changes improve documentation clarity around existing security controls.

Diff

diff --git a/cli/latest/reference/datazone/get-subscription.md b/cli/latest/reference/datazone/get-subscription.md
index f5bae7cf0..6def53765 100644
--- a//cli/latest/reference/datazone/get-subscription.md
+++ b//cli/latest/reference/datazone/get-subscription.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -392,0 +393,21 @@ subscribedListing -> (structure)
+>>> 
+>>> permissions -> (tagged union structure)
+>>>
+>>>> The asset permissions.
+>>>> 
+>>>> ### Note
+>>>> 
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>>> 
+>>>> s3 -> (list)
+>>>>
+>>>>> The S3 details of the asset permissions.
+>>>>> 
+>>>>> (string)
+>>>>>
+>>>>>> Possible values:
+>>>>>> 
+>>>>>>   * `READ`
+>>>>>>   * `WRITE`
+>>>>>> 
+
@@ -519 +540,27 @@ subscribedPrincipal -> (tagged union structure)
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `group`, `project`, `user`.
+> 
+> group -> (structure)
+>
+>> The subscribed group.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>> 
+
@@ -545,0 +593,58 @@ subscribedPrincipal -> (tagged union structure)
+> 
+> user -> (structure)
+>
+>> The subscribed user.
+>> 
+>> details -> (tagged union structure)
+>>
+>>> The subscribed user details.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>> 
+>>> iam -> (structure)
+>>>
+>>>> The IAM details of the user profile.
+>>>> 
+>>>> arn -> (string)
+>>>>
+>>>>> The ARN of the IAM user.
+>>>> 
+>>>> principalId -> (string)
+>>>>
+>>>>> The principal ID as part of the IAM user profile details.
+>>> 
+>>> sso -> (structure)
+>>>
+>>>> The SSO details of the user profile.
+>>>> 
+>>>> firstName -> (string)
+>>>>
+>>>>> The first name as part of the SSO user profile detail.
+>>>> 
+>>>> lastName -> (string)
+>>>>
+>>>>> The last name as part of the SSO user profile detail.
+>>>> 
+>>>> username -> (string)
+>>>>
+>>>>> The username as part of the SSO user profile detail.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>>> 
+
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed user.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>> 
+
@@ -575 +680 @@ updatedBy -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »