AWS cli medium security documentation change

Service: cli · 2025-12-10 · Security-related medium

File: cli/latest/reference/mgn/describe-launch-configuration-templates.md

Summary

Updated CLI version reference, modified regex patterns by removing start/end anchors, restructured parameters documentation, added new encryption-related fields, and reorganized sections.

Security assessment

Added 'enableParametersEncryption' boolean and 'parametersEncryptionKey' field with constraints, which directly relate to data encryption configuration. Introduced 'SECURE_STRING' as a possible value for SSM parameter types, indicating handling of sensitive data. These changes explicitly document security controls for parameter encryption.

Diff

diff --git a/cli/latest/reference/mgn/describe-launch-configuration-templates.md b/cli/latest/reference/mgn/describe-launch-configuration-templates.md
index e71ec9b6e..7cca2df9a 100644
--- a//cli/latest/reference/mgn/describe-launch-configuration-templates.md
+++ b//cli/latest/reference/mgn/describe-launch-configuration-templates.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -114 +114 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>   * pattern: `^lct-[0-9a-zA-Z]{17}$`
+>>   * pattern: `lct-[0-9a-zA-Z]{17}`
@@ -254,93 +253,0 @@ items -> (list)
->> arn -> (string)
->>
->>> ARN of the Launch Configuration Template.
->>> 
->>> Constraints:
->>> 
->>>   * min: `20`
->>>   * max: `2048`
->>> 
-
->> 
->> associatePublicIpAddress -> (boolean)
->>
->>> Associate public Ip address.
->> 
->> bootMode -> (string)
->>
->>> Launch configuration template boot mode.
->>> 
->>> Possible values:
->>> 
->>>   * `LEGACY_BIOS`
->>>   * `UEFI`
->>>   * `USE_SOURCE`
->>> 
-
->> 
->> copyPrivateIp -> (boolean)
->>
->>> Copy private Ip.
->> 
->> copyTags -> (boolean)
->>
->>> Copy tags.
->> 
->> ec2LaunchTemplateID -> (string)
->>
->>> EC2 launch template ID.
->>> 
->>> Constraints:
->>> 
->>>   * min: `20`
->>>   * max: `20`
->>>   * pattern: `^lt-[0-9a-z]{17}$`
->>> 
-
->> 
->> enableMapAutoTagging -> (boolean)
->>
->>> Enable map auto tagging.
->> 
->> largeVolumeConf -> (structure)
->>
->>> Large volume config.
->>> 
->>> iops -> (long)
->>>
->>>> Launch template disk iops configuration.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * min: `100`
->>>>   * max: `64000`
->>>> 
-
->>> 
->>> throughput -> (long)
->>>
->>>> Launch template disk throughput configuration.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * min: `125`
->>>>   * max: `1000`
->>>> 
-
->>> 
->>> volumeType -> (string)
->>>
->>>> Launch template disk volume type configuration.
->>>> 
->>>> Possible values:
->>>> 
->>>>   * `io1`
->>>>   * `io2`
->>>>   * `gp3`
->>>>   * `gp2`
->>>>   * `st1`
->>>>   * `sc1`
->>>>   * `standard`
->>>> 
-
->> 
@@ -355,12 +262 @@ items -> (list)
->>>   * pattern: `^lct-[0-9a-zA-Z]{17}$`
->>> 
-
->> 
->> launchDisposition -> (string)
->>
->>> Launch disposition.
->>> 
->>> Possible values:
->>> 
->>>   * `STOPPED`
->>>   * `STARTED`
+>>>   * pattern: `lct-[0-9a-zA-Z]{17}`
@@ -370,9 +266 @@ items -> (list)
->> licensing -> (structure)
->>
->>> Configure Licensing.
->>> 
->>> osByol -> (boolean)
->>>
->>>> Configure BYOL OS licensing.
->> 
->> mapAutoTaggingMpeID -> (string)
+>> arn -> (string)
@@ -380 +268 @@ items -> (list)
->>> Launch configuration template map auto tagging MPE ID.
+>>> ARN of the Launch Configuration Template.
@@ -384,2 +272,2 @@ items -> (list)
->>>   * min: `0`
->>>   * max: `256`
+>>>   * min: `20`
+>>>   * max: `2048`
@@ -392,12 +279,0 @@ items -> (list)
->>> 
->>> cloudWatchLogGroupName -> (string)
->>>
->>>> AWS Systems Manager Command’s CloudWatch log group name.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * min: `1`
->>>>   * max: `512`
->>>>   * pattern: `^[\.\-_/#A-Za-z0-9]+$`
->>>> 
-
@@ -437,0 +314,12 @@ items -> (list)
+>>> 
+>>> cloudWatchLogGroupName -> (string)
+>>>
+>>>> AWS Systems Manager Command’s CloudWatch log group name.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `512`
+>>>>   * pattern: `[\.\-_/#A-Za-z0-9]+`
+>>>> 
+
@@ -465 +353 @@ items -> (list)
->>>>> externalParameters -> (map)
+>>>>> ssmDocumentName -> (string) [required]
@@ -467 +355 @@ items -> (list)
->>>>>> AWS Systems Manager Document external parameters.
+>>>>>> AWS Systems Manager Document name or full ARN.
@@ -471,2 +359,3 @@ items -> (list)
->>>>>>   * min: `0`
->>>>>>   * max: `20`
+>>>>>>   * min: `3`
+>>>>>>   * max: `172`
+>>>>>>   * pattern: `([A-Za-z0-9/:_\.-])+`
@@ -474,0 +364,4 @@ items -> (list)
+>>>>> 
+>>>>> timeoutSeconds -> (integer)
+>>>>>
+>>>>>> AWS Systems Manager Document timeout seconds.
@@ -476,9 +369 @@ items -> (list)
->>>>>> key -> (string)
->>>>>>
->>>>>>> Constraints:
->>>>>>> 
->>>>>>>   * min: `1`
->>>>>>>   * max: `1011`
->>>>>>>   * pattern: `^([A-Za-z0-9])+$`
->>>>>>> 
-
+>>>>>> Constraints:
@@ -486 +371 @@ items -> (list)
->>>>>> value -> (tagged union structure)
+>>>>>>   * min: `1`
@@ -488,16 +372,0 @@ items -> (list)
->>>>>>> AWS Systems Manager Document external parameter.
->>>>>>> 
->>>>>>> ### Note
->>>>>>> 
->>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `dynamicPath`.