AWS cli documentation change

Service: cli · 2025-11-16 · Documentation low

File: cli/latest/reference/datazone/revoke-subscription.md

Summary

Updated CLI version reference and expanded documentation for subscribedPrincipal structure to include group/user details and permissions structure with S3 access controls

Security assessment

Added documentation for S3 permissions (READ/WRITE) and expanded principal types (group/user) with IAM/SSO details. While these relate to access control mechanisms, there's no evidence of addressing a specific vulnerability. The changes document existing security features rather than patching issues.

Diff

diff --git a/cli/latest/reference/datazone/revoke-subscription.md b/cli/latest/reference/datazone/revoke-subscription.md
index 898044f86..b6f8bd6ab 100644
--- a//cli/latest/reference/datazone/revoke-subscription.md
+++ b//cli/latest/reference/datazone/revoke-subscription.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »
@@ -397,0 +398,21 @@ subscribedListing -> (structure)
+>>> 
+>>> permissions -> (tagged union structure)
+>>>
+>>>> The asset permissions.
+>>>> 
+>>>> ### Note
+>>>> 
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>>> 
+>>>> s3 -> (list)
+>>>>
+>>>>> The S3 details of the asset permissions.
+>>>>> 
+>>>>> (string)
+>>>>>
+>>>>>> Possible values:
+>>>>>> 
+>>>>>>   * `READ`
+>>>>>>   * `WRITE`
+>>>>>> 
+
@@ -524 +545,27 @@ subscribedPrincipal -> (tagged union structure)
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `group`, `project`, `user`.
+> 
+> group -> (structure)
+>
+>> The subscribed group.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>> 
+
@@ -550,0 +598,58 @@ subscribedPrincipal -> (tagged union structure)
+> 
+> user -> (structure)
+>
+>> The subscribed user.
+>> 
+>> details -> (tagged union structure)
+>>
+>>> The subscribed user details.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>> 
+>>> iam -> (structure)
+>>>
+>>>> The IAM details of the user profile.
+>>>> 
+>>>> arn -> (string)
+>>>>
+>>>>> The ARN of the IAM user.
+>>>> 
+>>>> principalId -> (string)
+>>>>
+>>>>> The principal ID as part of the IAM user profile details.
+>>> 
+>>> sso -> (structure)
+>>>
+>>>> The SSO details of the user profile.
+>>>> 
+>>>> firstName -> (string)
+>>>>
+>>>>> The first name as part of the SSO user profile detail.
+>>>> 
+>>>> lastName -> (string)
+>>>>
+>>>>> The last name as part of the SSO user profile detail.
+>>>> 
+>>>> username -> (string)
+>>>>
+>>>>> The username as part of the SSO user profile detail.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
+>>>>> 
+
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed user.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>>> 
+
@@ -580 +685 @@ updatedBy -> (string)
-  * [AWS CLI 2.31.35 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.37 Command Reference](../../index.html) »