AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-16 · Documentation low

File: cli/latest/reference/datazone/list-subscription-grants.md

Summary

Added new --owning-group-id and --owning-user-id parameters, documented S3 asset permissions structure, and added environmentId pattern constraints

Security assessment

The changes add documentation about access control parameters (owning group/user IDs) and explicit S3 permission levels (READ/WRITE), which are security-related features. However, there's no evidence these changes address a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/datazone/list-subscription-grants.md b/cli/latest/reference/datazone/list-subscription-grants.md
index 3ff4fd4f3..2457e8c65 100644
--- a//cli/latest/reference/datazone/list-subscription-grants.md
+++ b//cli/latest/reference/datazone/list-subscription-grants.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -70,0 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--owning-group-id <value>]
@@ -71,0 +73 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--owning-user-id <value>]
@@ -123,0 +126,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--owning-group-id` (string)
+
+> The ID of the owning group.
+> 
+> Constraints:
+> 
+>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+> 
+
+
@@ -133,0 +146,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--owning-user-id` (string)
+
+> The ID of the owning user.
+> 
+> Constraints:
+> 
+>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+> 
+
+
@@ -388,0 +411,21 @@ items -> (list)
+>>>> 
+>>>> permissions -> (tagged union structure)
+>>>>
+>>>>> The asset permissions.
+>>>>> 
+>>>>> ### Note
+>>>>> 
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>>>> 
+>>>>> s3 -> (list)
+>>>>>
+>>>>>> The S3 details of the asset permissions.
+>>>>>> 
+>>>>>> (string)
+>>>>>>
+>>>>>>> Possible values:
+>>>>>>> 
+>>>>>>>   * `READ`
+>>>>>>>   * `WRITE`
+>>>>>>> 
+
@@ -427,0 +471,10 @@ items -> (list)
+>> 
+>> environmentId -> (string)
+>>
+>>> The environment ID of the subscription grant.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>>> 
+
@@ -537 +590 @@ nextToken -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »