AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-11-16 · Documentation low

File: cli/latest/reference/datazone/reject-subscription-request.md

Summary

Added permissions documentation with S3 READ/WRITE controls and expanded subscribed principals to include group/user structures with IAM/SSO details

Security assessment

The changes document permission management (S3 access levels) and authentication methods (IAM/SSO integration), which are security-related features. No evidence of patching a specific vulnerability exists in the diff. The updates improve documentation clarity around access controls but don't indicate a security fix.

Diff

diff --git a/cli/latest/reference/datazone/reject-subscription-request.md b/cli/latest/reference/datazone/reject-subscription-request.md
index 40b9a2cdb..88f5de0b4 100644
--- a//cli/latest/reference/datazone/reject-subscription-request.md
+++ b//cli/latest/reference/datazone/reject-subscription-request.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -494,0 +495,21 @@ subscribedListings -> (list)
+>>>> 
+>>>> permissions -> (tagged union structure)
+>>>>
+>>>>> The asset permissions.
+>>>>> 
+>>>>> ### Note
+>>>>> 
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>>>> 
+>>>>> s3 -> (list)
+>>>>>
+>>>>>> The S3 details of the asset permissions.
+>>>>>> 
+>>>>>> (string)
+>>>>>>
+>>>>>>> Possible values:
+>>>>>>> 
+>>>>>>>   * `READ`
+>>>>>>>   * `WRITE`
+>>>>>>> 
+
@@ -632 +653,27 @@ subscribedPrincipals -> (list)
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `group`, `project`, `user`.
+>> 
+>> group -> (structure)
+>>
+>>> The subscribed group.
+>>> 
+>>> id -> (string)
+>>>
+>>>> The ID of the subscribed group.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>> 
+
+>>> 
+>>> name -> (string)
+>>>
+>>>> The name of the subscribed group.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `1024`
+>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>> 
+
@@ -658,0 +706,58 @@ subscribedPrincipals -> (list)
+>> 
+>> user -> (structure)
+>>
+>>> The subscribed user.
+>>> 
+>>> details -> (tagged union structure)
+>>>
+>>>> The subscribed user details.
+>>>> 
+>>>> ### Note
+>>>> 
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>>> 
+>>>> iam -> (structure)
+>>>>
+>>>>> The IAM details of the user profile.
+>>>>> 
+>>>>> arn -> (string)
+>>>>>
+>>>>>> The ARN of the IAM user.
+>>>>> 
+>>>>> principalId -> (string)
+>>>>>
+>>>>>> The principal ID as part of the IAM user profile details.
+>>>> 
+>>>> sso -> (structure)
+>>>>
+>>>>> The SSO details of the user profile.
+>>>>> 
+>>>>> firstName -> (string)
+>>>>>
+>>>>>> The first name as part of the SSO user profile detail.
+>>>>> 
+>>>>> lastName -> (string)
+>>>>>
+>>>>>> The last name as part of the SSO user profile detail.
+>>>>> 
+>>>>> username -> (string)
+>>>>>
+>>>>>> The username as part of the SSO user profile detail.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>>   * max: `1024`
+>>>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>>>> 
+
+>>> 
+>>> id -> (string)
+>>>
+>>>> The ID of the subscribed user.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>>> 
+
@@ -678 +783 @@ updatedBy -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »