AWS cli documentation change
Summary
Added parameters for upgrade inclusion, IAM group access patterns, role assignments, auto-upgrade settings, and version EOL dates
Security assessment
The changes document new IAM Identity Center group pattern controls (AssignedGroupPatterns/RoleGroupAssignments) for granular access management and auto-upgrade capabilities. While these enhance security configuration options, there's no evidence they address a specific existing vulnerability. The documentation improves security feature visibility but doesn't patch a known issue.
Diff
diff --git a/cli/latest/reference/sagemaker/describe-partner-app.md b/cli/latest/reference/sagemaker/describe-partner-app.md index 13cfd36fd..5818fe005 100644 --- a//cli/latest/reference/sagemaker/describe-partner-app.md +++ b//cli/latest/reference/sagemaker/describe-partner-app.md @@ -15 +15 @@ - * [AWS CLI 2.31.35 Command Reference](../../index.html) » + * [AWS CLI 2.31.37 Command Reference](../../index.html) » @@ -67,0 +68 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema + [--include-available-upgrade | --no-include-available-upgrade] @@ -103,0 +105,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/sagema +`--include-available-upgrade` | `--no-include-available-upgrade` (boolean) + +> When set to `TRUE` , the response includes available upgrade information for the SageMaker Partner AI App. Default is `FALSE` . + @@ -402,0 +408,69 @@ ApplicationConfig -> (structure) +> +> AssignedGroupPatterns -> (list) +> +>> A list of Amazon Web Services IAM Identity Center group patterns that can access the SageMaker Partner AI App. Group names support wildcard matching using `*` . An empty list indicates the app will not use Identity Center group features. All groups specified in `RoleGroupAssignments` must match patterns in this list. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `10` +>> + +>> +>> (string) +>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `128` +>>> * pattern: `[\w+=,.@*-]+` +>>> + +> +> RoleGroupAssignments -> (list) +> +>> A map of in-app roles to Amazon Web Services IAM Identity Center group patterns. Groups assigned to specific roles receive those permissions, while groups in `AssignedGroupPatterns` but not in this map receive default in-app role depending on app type. Group patterns support wildcard matching using `*` . Currently supported by Fiddler version 1.3 and later with roles: `ORG_MEMBER` (default) and `ORG_ADMIN` . +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `10` +>> + +>> +>> (structure) +>> +>>> Defines the mapping between an in-app role and the AWS IAM Identity Center group patterns that should be assigned to that role within the SageMaker Partner AI App. +>>> +>>> RoleName -> (string) [required] +>>> +>>>> The name of the in-app role within the SageMaker Partner AI App. The specific roles available depend on the app type and version. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `256` +>>>> * pattern: `(?!\s*$).+` +>>>> + +>>> +>>> GroupPatterns -> (list) [required] +>>> +>>>> A list of AWS IAM Identity Center group patterns that should be assigned to the specified role. Group patterns support wildcard matching using `*` . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `10` +>>>> + +>>>> +>>>> (string) +>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `128` +>>>>> * pattern: `[\w+=,.@*-]+` +>>>>> + @@ -445,0 +520,44 @@ Error -> (structure) +EnableAutoMinorVersionUpgrade -> (boolean) + +> Indicates whether the SageMaker Partner AI App is configured for automatic minor version upgrades during scheduled maintenance windows. + +CurrentVersionEolDate -> (timestamp) + +> The end-of-life date for the current version of the SageMaker Partner AI App. + +AvailableUpgrade -> (structure) + +> A map of available minor version upgrades for the SageMaker Partner AI App. The key is the semantic version number, and the value is a list of release notes for that version. A null value indicates no upgrades are available. +> +> Version -> (string) +> +>> The semantic version number of the available upgrade for the SageMaker Partner AI App. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `64` +>> * pattern: `\d+\.\d+` +>> + +> +> ReleaseNotes -> (list) +> +>> A list of release notes describing the changes and improvements included in the available upgrade version. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `10` +>> + +>> +>> (string) +>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `1024` +>>> + + @@ -456 +574 @@ Error -> (structure) - * [AWS CLI 2.31.35 Command Reference](../../index.html) » + * [AWS CLI 2.31.37 Command Reference](../../index.html) »