AWS cli medium security documentation change

Service: cli · 2025-12-10 · Security-related medium

File: cli/latest/reference/mgn/describe-source-servers.md

Summary

Updated AWS CLI version from 2.32.11 to 2.32.13, restructured parameters (--account-id position changed), modified validation patterns for account-id, applicationIDs, sourceServerIDs, and other fields. Swapped order of parameters in syntax sections and updated response structure documentation.

Security assessment

The change to the --account-id pattern (from strict 12-digit validation to a more permissive pattern) could introduce validation weaknesses, potentially allowing unintended account ID formats. However, there's no explicit mention of a security vulnerability being addressed. Other parameter pattern changes (e.g., applicationIDs/sourceServerIDs regex updates) appear to be documentation corrections rather than security fixes.

Diff

diff --git a/cli/latest/reference/mgn/describe-source-servers.md b/cli/latest/reference/mgn/describe-source-servers.md
index f9291753b..ae216f819 100644
--- a//cli/latest/reference/mgn/describe-source-servers.md
+++ b//cli/latest/reference/mgn/describe-source-servers.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-    [--account-id <value>]
@@ -70,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+    [--account-id <value>]
@@ -98,12 +97,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--account-id` (string)
-
-> Request to filter Source Servers list by Accoun ID.
-> 
-> Constraints:
-> 
->   * min: `12`
->   * max: `12`
->   * pattern: `[0-9]{12,}`
-> 
-
-
@@ -114 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> applicationIDs -> (list)
+> sourceServerIDs -> (list)
@@ -116 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by application IDs.
+>> Request to filter Source Servers list by Source Server ID.
@@ -129,3 +117,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * min: `21`
->>>   * max: `21`
->>>   * pattern: `^app-[0-9a-zA-Z]{17}$`
+>>>   * min: `19`
+>>>   * max: `19`
+>>>   * pattern: `s-[0-9a-zA-Z]{17}`
@@ -139 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> lifeCycleStates -> (list)
+> replicationTypes -> (list)
@@ -141 +129 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by life cycle states.
+>> Request to filter Source Servers list by replication type.
@@ -146 +134 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>   * max: `10`
+>>   * max: `2`
@@ -154,10 +142,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * `STOPPED`
->>>   * `NOT_READY`
->>>   * `READY_FOR_TEST`
->>>   * `TESTING`
->>>   * `READY_FOR_CUTOVER`
->>>   * `CUTTING_OVER`
->>>   * `CUTOVER`
->>>   * `DISCONNECTED`
->>>   * `DISCOVERED`
->>>   * `PENDING_INSTALLATION`
+>>>   * `AGENT_BASED`
+>>>   * `SNAPSHOT_SHIPPING`
@@ -167 +147 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> replicationTypes -> (list)
+> lifeCycleStates -> (list)
@@ -169 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by replication type.
+>> Request to filter Source Servers list by life cycle states.
@@ -174 +154 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>   * max: `2`
+>>   * max: `10`
@@ -182,2 +162,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * `AGENT_BASED`
->>>   * `SNAPSHOT_SHIPPING`
+>>>   * `STOPPED`
+>>>   * `NOT_READY`
+>>>   * `READY_FOR_TEST`
+>>>   * `TESTING`
+>>>   * `READY_FOR_CUTOVER`
+>>>   * `CUTTING_OVER`
+>>>   * `CUTOVER`
+>>>   * `DISCONNECTED`
+>>>   * `DISCOVERED`
+>>>   * `PENDING_INSTALLATION`
@@ -187 +175 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> sourceServerIDs -> (list)
+> applicationIDs -> (list)
@@ -189 +177 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by Source Server ID.
+>> Request to filter Source Servers list by application IDs.
@@ -202,3 +190,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * min: `19`
->>>   * max: `19`
->>>   * pattern: `^s-[0-9a-zA-Z]{17}$`
+>>>   * min: `21`
+>>>   * max: `21`
+>>>   * pattern: `app-[0-9a-zA-Z]{17}`
@@ -211 +199 @@ Shorthand Syntax:
-    applicationIDs=string,string,isArchived=boolean,lifeCycleStates=string,string,replicationTypes=string,string,sourceServerIDs=string,string
+    sourceServerIDs=string,string,isArchived=boolean,replicationTypes=string,string,lifeCycleStates=string,string,applicationIDs=string,string
@@ -218 +206 @@ JSON Syntax:
-      "applicationIDs": ["string", ...],
+      "sourceServerIDs": ["string", ...],
@@ -220 +207,0 @@ JSON Syntax:
-      "lifeCycleStates": ["STOPPED"|"NOT_READY"|"READY_FOR_TEST"|"TESTING"|"READY_FOR_CUTOVER"|"CUTTING_OVER"|"CUTOVER"|"DISCONNECTED"|"DISCOVERED"|"PENDING_INSTALLATION", ...],
@@ -222 +209,2 @@ JSON Syntax:
-      "sourceServerIDs": ["string", ...]
+      "lifeCycleStates": ["STOPPED"|"NOT_READY"|"READY_FOR_TEST"|"TESTING"|"READY_FOR_CUTOVER"|"CUTTING_OVER"|"CUTOVER"|"DISCONNECTED"|"DISCOVERED"|"PENDING_INSTALLATION", ...],
+      "applicationIDs": ["string", ...]
@@ -225,0 +214,12 @@ JSON Syntax:
+`--account-id` (string)
+
+> Request to filter Source Servers list by Accoun ID.
+> 
+> Constraints:
+> 
+>   * min: `12`
+>   * max: `12`
+>   * pattern: `.*[0-9]{12,}.*`
+> 
+
+
@@ -349 +349 @@ items -> (list)
->> applicationID -> (string)
+>> sourceServerID -> (string)
@@ -351 +351 @@ items -> (list)
->>> Source server application ID.
+>>> Source server ID.
@@ -355,3 +355,3 @@ items -> (list)
->>>   * min: `21`
->>>   * max: `21`
->>>   * pattern: `^app-[0-9a-zA-Z]{17}$`
+>>>   * min: `19`
+>>>   * max: `19`
+>>>   * pattern: `s-[0-9a-zA-Z]{17}`
@@ -372 +372 @@ items -> (list)
->> connectorAction -> (structure)
+>> isArchived -> (boolean)
@@ -374 +374,5 @@ items -> (list)
->>> Source Server connector action.
+>>> Source server archived status.
+>> 
+>> tags -> (map)
+>>
+>>> Source server Tags.
@@ -376 +380 @@ items -> (list)
->>> connectorArn -> (string)
+>>> Constraints:
@@ -378 +382,11 @@ items -> (list)
->>>> Source Server connector action connector arn.
+>>>   * min: `0`
+>>>   * max: `50`
+>>> 
+
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `256`
@@ -379,0 +394,4 @@ items -> (list)
+
+>>> 
+>>> value -> (string)
+>>>
@@ -382,3 +400,2 @@ items -> (list)
->>>>   * min: `27`
->>>>   * max: `100`
->>>>   * pattern: `^arn:[\w-]+:mgn:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:connector\/(connector-[0-9a-zA-Z]{17})$`
+>>>>   * min: `0`
+>>>>   * max: `256`
@@ -386,0 +404,4 @@ items -> (list)
+>> 
+>> launchedInstance -> (structure)
+>>
+>>> Source server launched instance.
@@ -388 +409 @@ items -> (list)
->>> credentialsSecretArn -> (string)
+>>> ec2InstanceID -> (string)
@@ -390 +411 @@ items -> (list)
->>>> Source Server connector action credentials secret arn.
+>>>> Launched instance EC2 ID.
@@ -394,3 +415,28 @@ items -> (list)
->>>>   * min: `20`
->>>>   * max: `100`
->>>>   * pattern: `^arn:[\w-]+:secretsmanager:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:secret:(.+)$`
+>>>>   * min: `0`
+>>>>   * max: `255`
+>>>>   * pattern: `i-[0-9a-fA-F]{8,}`
+>>>> 
+
+>>> 
+>>> jobID -> (string)
+>>>
+>>>> Launched instance Job ID.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `24`
+>>>>   * max: `24`
+>>>>   * pattern: `mgnjob-[0-9a-zA-Z]{17}`
+>>>>