AWS cli high security documentation change
Summary
Added new parameters (--staging-area-subnet-id, --replication-servers-security-groups-ids, --internet-protocol), reordered parameters, updated validation constraints, and added FIPS endpoint support for replication configuration templates
Security assessment
Added security group ID validation (pattern: sg-[0-9a-fA-F]{8,}) and subnet ID validation to prevent misconfigurations. Introduced --replication-servers-security-groups-ids to explicitly configure security groups for replication servers, which directly impacts network security controls. Added --use-fips-endpoint parameter to support FIPS compliance requirements.
Diff
diff --git a/cli/latest/reference/mgn/create-replication-configuration-template.md b/cli/latest/reference/mgn/create-replication-configuration-template.md index 7fa81bd38..9c547f2dc 100644 --- a//cli/latest/reference/mgn/create-replication-configuration-template.md +++ b//cli/latest/reference/mgn/create-replication-configuration-template.md @@ -15 +15 @@ - * [AWS CLI 2.32.11 Command Reference](../../index.html) » + * [AWS CLI 2.32.13 Command Reference](../../index.html) » @@ -66,0 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 + --staging-area-subnet-id <value> @@ -68,3 +69,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 - --bandwidth-throttling <value> - --create-public-ip | --no-create-public-ip - --data-plane-routing <value> + --replication-servers-security-groups-ids <value> + --replication-server-instance-type <value> + --use-dedicated-replication-server | --no-use-dedicated-replication-server @@ -74,3 +75,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 - --replication-server-instance-type <value> - --replication-servers-security-groups-ids <value> - --staging-area-subnet-id <value> + --bandwidth-throttling <value> + --data-plane-routing <value> + --create-public-ip | --no-create-public-ip @@ -78,2 +78,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 - [--tags <value>] - --use-dedicated-replication-server | --no-use-dedicated-replication-server @@ -80,0 +80,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 + [--tags <value>] + [--internet-protocol <value>] @@ -104,0 +106,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 +`--staging-area-subnet-id` (string) [required] + +> Request to configure the Staging Area subnet ID during Replication Settings template creation. +> +> Constraints: +> +> * min: `0` +> * max: `255` +> * pattern: `subnet-[0-9a-fA-F]{8,}` +> + + @@ -109 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -`--bandwidth-throttling` (long) [required] +`--replication-servers-security-groups-ids` (list) [required] @@ -111 +124 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Request to configure bandwidth throttling during Replication Settings template creation. +> Request to configure the Replication Server Security group ID during Replication Settings template creation. @@ -116 +129 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> * max: `10000` +> * max: `32` @@ -118,0 +132,9 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 +> +> (string) +> +>> Constraints: +>> +>> * min: `0` +>> * max: `255` +>> * pattern: `sg-[0-9a-fA-F]{8,}` +>> @@ -120 +141,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -`--create-public-ip` | `--no-create-public-ip` (boolean) [required] @@ -122 +143 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Request to create Public IP during Replication Settings template creation. +Syntax: @@ -124 +144,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -`--data-plane-routing` (string) [required] @@ -126 +146,6 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Request to configure data plane routing during Replication Settings template creation. + "string" "string" ... + + +`--replication-server-instance-type` (string) [required] + +> Request to configure the Replication Server instance type during Replication Settings template creation. @@ -128 +153 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Possible values: +> Constraints: @@ -130,2 +155,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> * `PRIVATE_IP` -> * `PUBLIC_IP` +> * min: `0` +> * max: `255` @@ -134,0 +160,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 +`--use-dedicated-replication-server` | `--no-use-dedicated-replication-server` (boolean) [required] + +> Request to use Dedicated Replication Servers during Replication Settings template creation. + @@ -169 +198 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -`--replication-server-instance-type` (string) [required] +`--bandwidth-throttling` (long) [required] @@ -171 +200 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Request to configure the Replication Server instance type during Replication Settings template creation. +> Request to configure bandwidth throttling during Replication Settings template creation. @@ -176 +205 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> * max: `255` +> * max: `10000` @@ -180 +209 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -`--replication-servers-security-groups-ids` (list) [required] +`--data-plane-routing` (string) [required] @@ -182,6 +211 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Request to configure the Replication Server Security group ID during Replication Settings template creation. -> -> Constraints: -> -> * min: `0` -> * max: `32` +> Request to configure data plane routing during Replication Settings template creation. @@ -189 +213 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 - +> Possible values: @@ -191 +215,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> (string) +> * `PRIVATE_IP` +> * `PUBLIC_IP` @@ -193,6 +217,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 ->> Constraints: ->> ->> * min: `0` ->> * max: `255` ->> * pattern: `^sg-[0-9a-fA-F]{8,}$` ->> @@ -201,16 +220 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -Syntax: - - - "string" "string" ... - - -`--staging-area-subnet-id` (string) [required] - -> Request to configure the Staging Area subnet ID during Replication Settings template creation. -> -> Constraints: -> -> * min: `0` -> * max: `255` -> * pattern: `^subnet-[0-9a-fA-F]{8,}$` -> +`--create-public-ip` | `--no-create-public-ip` (boolean) [required] @@ -217,0 +222 @@ Syntax: +> Request to create Public IP during Replication Settings template creation. @@ -260,0 +266,4 @@ JSON Syntax: +`--use-fips-endpoint` | `--no-use-fips-endpoint` (boolean) + +> Request to use Fips Endpoint during Replication Settings template creation. + @@ -303,3 +312 @@ JSON Syntax: -`--use-dedicated-replication-server` | `--no-use-dedicated-replication-server` (boolean) [required] - -> Request to use Dedicated Replication Servers during Replication Settings template creation. +`--internet-protocol` (string) @@ -307 +314,7 @@ JSON Syntax: -`--use-fips-endpoint` | `--no-use-fips-endpoint` (boolean) +> Request to configure the internet protocol to IPv4 or IPv6. +> +> Possible values: +> +> * `IPV4` +> * `IPV6` +> @@ -309 +321,0 @@ JSON Syntax: -> Request to use Fips Endpoint during Replication Settings template creation. @@ -409,0 +422,12 @@ Disable automatically prompt for CLI input parameters. +replicationConfigurationTemplateID -> (string) + +> Replication Configuration template ID. +> +> Constraints: +> +> * min: `21` +> * max: `21` +> * pattern: `rct-[0-9a-zA-Z]{17}` +> + + @@ -420,0 +445,12 @@ arn -> (string) +stagingAreaSubnetId -> (string) + +> Replication Configuration template Staging Area subnet ID. +> +> Constraints: +> +> * min: `0` +> * max: `255` +> * pattern: `subnet-[0-9a-fA-F]{8,}` +> + + @@ -425 +461 @@ associateDefaultSecurityGroup -> (boolean) -bandwidthThrottling -> (long) +replicationServersSecurityGroupsIDs -> (list) @@ -427 +463 @@ bandwidthThrottling -> (long) -> Replication Configuration template bandwidth throttling. +> Replication Configuration template server Security Groups IDs. @@ -432 +468 @@ bandwidthThrottling -> (long) -> * max: `10000` +> * max: `32` @@ -434,0 +471,9 @@ bandwidthThrottling -> (long)