AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-16 · Documentation low

File: cli/latest/reference/datazone/list-subscriptions.md

Summary

Added new parameters (--owning-group-id, --owning-user-id) with UUID pattern constraints, expanded permissions documentation with S3 READ/WRITE controls, and added group/user subscription details with IAM/SSO structures

Security assessment

The changes add documentation about permission controls (S3 READ/WRITE) and authentication mechanisms (IAM/SSO user details), which are security features. However, there's no evidence of addressing a specific vulnerability. The UUID pattern constraints improve input validation but are part of normal feature documentation.

Diff

diff --git a/cli/latest/reference/datazone/list-subscriptions.md b/cli/latest/reference/datazone/list-subscriptions.md
index 39fddc7f1..65f090fd2 100644
--- a//cli/latest/reference/datazone/list-subscriptions.md
+++ b//cli/latest/reference/datazone/list-subscriptions.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -70,0 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--owning-group-id <value>]
@@ -71,0 +73 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--owning-user-id <value>]
@@ -123,0 +126,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--owning-group-id` (string)
+
+> The ID of the owning group.
+> 
+> Constraints:
+> 
+>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+> 
+
+
@@ -133,0 +146,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--owning-user-id` (string)
+
+> The ID of the owning user.
+> 
+> Constraints:
+> 
+>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+> 
+
+
@@ -497,0 +520,21 @@ items -> (list)
+>>>>> 
+>>>>> permissions -> (tagged union structure)
+>>>>>
+>>>>>> The asset permissions.
+>>>>>> 
+>>>>>> ### Note
+>>>>>> 
+>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>>>>> 
+>>>>>> s3 -> (list)
+>>>>>>
+>>>>>>> The S3 details of the asset permissions.
+>>>>>>> 
+>>>>>>> (string)
+>>>>>>>
+>>>>>>>> Possible values:
+>>>>>>>> 
+>>>>>>>>   * `READ`
+>>>>>>>>   * `WRITE`
+>>>>>>>> 
+
@@ -624 +667,27 @@ items -> (list)
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `group`, `project`, `user`.
+>>> 
+>>> group -> (structure)
+>>>
+>>>> The subscribed group.
+>>>> 
+>>>> id -> (string)
+>>>>
+>>>>> The ID of the subscribed group.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>>> 
+
+>>>> 
+>>>> name -> (string)
+>>>>
+>>>>> The name of the subscribed group.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>>> 
+
@@ -650,0 +720,58 @@ items -> (list)
+>>> 
+>>> user -> (structure)
+>>>
+>>>> The subscribed user.
+>>>> 
+>>>> details -> (tagged union structure)
+>>>>
+>>>>> The subscribed user details.
+>>>>> 
+>>>>> ### Note
+>>>>> 
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>>>> 
+>>>>> iam -> (structure)
+>>>>>
+>>>>>> The IAM details of the user profile.
+>>>>>> 
+>>>>>> arn -> (string)
+>>>>>>
+>>>>>>> The ARN of the IAM user.
+>>>>>> 
+>>>>>> principalId -> (string)
+>>>>>>
+>>>>>>> The principal ID as part of the IAM user profile details.
+>>>>> 
+>>>>> sso -> (structure)
+>>>>>
+>>>>>> The SSO details of the user profile.
+>>>>>> 
+>>>>>> firstName -> (string)
+>>>>>>
+>>>>>>> The first name as part of the SSO user profile detail.
+>>>>>> 
+>>>>>> lastName -> (string)
+>>>>>>
+>>>>>>> The last name as part of the SSO user profile detail.
+>>>>>> 
+>>>>>> username -> (string)
+>>>>>>
+>>>>>>> The username as part of the SSO user profile detail.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * min: `1`
+>>>>>>>   * max: `1024`
+>>>>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>>>>> 
+
+>>>> 
+>>>> id -> (string)
+>>>>
+>>>>> The ID of the subscribed user.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>>> 
+
@@ -691 +818 @@ nextToken -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »