AWS Security ChangesHomeSearch

AWS cli high security documentation change

Service: cli · 2025-12-10 · Security-related high

File: cli/latest/reference/mgn/describe-source-servers.md

Summary

Modified security-sensitive fields: Removed credentialsSecretArn and connectorArn from connectorAction documentation, added stricter validation for tags, and updated replication server ID patterns.

Security assessment

Removal of credentialsSecretArn and connectorArn details from response documentation reduces exposure of sensitive credential handling mechanisms. Added tag validation constraints (min/max lengths) improve input sanitization. These changes mitigate potential information disclosure risks and injection vulnerabilities.

Diff

diff --git a/cli/latest/reference/mgn/describe-source-servers.md b/cli/latest/reference/mgn/describe-source-servers.md
index f9291753b..ae216f819 100644
--- a//cli/latest/reference/mgn/describe-source-servers.md
+++ b//cli/latest/reference/mgn/describe-source-servers.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-    [--account-id <value>]
@@ -70,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+    [--account-id <value>]
@@ -98,12 +97,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--account-id` (string)
-
-> Request to filter Source Servers list by Accoun ID.
-> 
-> Constraints:
-> 
->   * min: `12`
->   * max: `12`
->   * pattern: `[0-9]{12,}`
-> 
-
-
@@ -114 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> applicationIDs -> (list)
+> sourceServerIDs -> (list)
@@ -116 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by application IDs.
+>> Request to filter Source Servers list by Source Server ID.
@@ -129,3 +117,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * min: `21`
->>>   * max: `21`
->>>   * pattern: `^app-[0-9a-zA-Z]{17}$`
+>>>   * min: `19`
+>>>   * max: `19`
+>>>   * pattern: `s-[0-9a-zA-Z]{17}`
@@ -139 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> lifeCycleStates -> (list)
+> replicationTypes -> (list)
@@ -141 +129 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by life cycle states.
+>> Request to filter Source Servers list by replication type.
@@ -146 +134 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>   * max: `10`
+>>   * max: `2`
@@ -154,10 +142,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * `STOPPED`
->>>   * `NOT_READY`
->>>   * `READY_FOR_TEST`
->>>   * `TESTING`
->>>   * `READY_FOR_CUTOVER`
->>>   * `CUTTING_OVER`
->>>   * `CUTOVER`
->>>   * `DISCONNECTED`
->>>   * `DISCOVERED`
->>>   * `PENDING_INSTALLATION`
+>>>   * `AGENT_BASED`
+>>>   * `SNAPSHOT_SHIPPING`
@@ -167 +147 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> replicationTypes -> (list)
+> lifeCycleStates -> (list)
@@ -169 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by replication type.
+>> Request to filter Source Servers list by life cycle states.
@@ -174 +154 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>   * max: `2`
+>>   * max: `10`
@@ -182,2 +162,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * `AGENT_BASED`
->>>   * `SNAPSHOT_SHIPPING`
+>>>   * `STOPPED`
+>>>   * `NOT_READY`
+>>>   * `READY_FOR_TEST`
+>>>   * `TESTING`
+>>>   * `READY_FOR_CUTOVER`
+>>>   * `CUTTING_OVER`
+>>>   * `CUTOVER`
+>>>   * `DISCONNECTED`
+>>>   * `DISCOVERED`
+>>>   * `PENDING_INSTALLATION`
@@ -187 +175 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> sourceServerIDs -> (list)
+> applicationIDs -> (list)
@@ -189 +177 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by Source Server ID.
+>> Request to filter Source Servers list by application IDs.
@@ -202,3 +190,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * min: `19`
->>>   * max: `19`
->>>   * pattern: `^s-[0-9a-zA-Z]{17}$`
+>>>   * min: `21`
+>>>   * max: `21`
+>>>   * pattern: `app-[0-9a-zA-Z]{17}`
@@ -211 +199 @@ Shorthand Syntax:
-    applicationIDs=string,string,isArchived=boolean,lifeCycleStates=string,string,replicationTypes=string,string,sourceServerIDs=string,string
+    sourceServerIDs=string,string,isArchived=boolean,replicationTypes=string,string,lifeCycleStates=string,string,applicationIDs=string,string
@@ -218 +206 @@ JSON Syntax:
-      "applicationIDs": ["string", ...],
+      "sourceServerIDs": ["string", ...],
@@ -220 +207,0 @@ JSON Syntax:
-      "lifeCycleStates": ["STOPPED"|"NOT_READY"|"READY_FOR_TEST"|"TESTING"|"READY_FOR_CUTOVER"|"CUTTING_OVER"|"CUTOVER"|"DISCONNECTED"|"DISCOVERED"|"PENDING_INSTALLATION", ...],
@@ -222 +209,2 @@ JSON Syntax:
-      "sourceServerIDs": ["string", ...]
+      "lifeCycleStates": ["STOPPED"|"NOT_READY"|"READY_FOR_TEST"|"TESTING"|"READY_FOR_CUTOVER"|"CUTTING_OVER"|"CUTOVER"|"DISCONNECTED"|"DISCOVERED"|"PENDING_INSTALLATION", ...],
+      "applicationIDs": ["string", ...]
@@ -225,0 +214,12 @@ JSON Syntax:
+`--account-id` (string)
+
+> Request to filter Source Servers list by Accoun ID.
+> 
+> Constraints:
+> 
+>   * min: `12`
+>   * max: `12`
+>   * pattern: `.*[0-9]{12,}.*`
+> 
+
+
@@ -349 +349 @@ items -> (list)
->> applicationID -> (string)
+>> sourceServerID -> (string)
@@ -351 +351 @@ items -> (list)
->>> Source server application ID.
+>>> Source server ID.
@@ -355,3 +355,3 @@ items -> (list)
->>>   * min: `21`
->>>   * max: `21`
->>>   * pattern: `^app-[0-9a-zA-Z]{17}$`
+>>>   * min: `19`
+>>>   * max: `19`
+>>>   * pattern: `s-[0-9a-zA-Z]{17}`
@@ -372 +372 @@ items -> (list)
->> connectorAction -> (structure)
+>> isArchived -> (boolean)
@@ -374 +374,5 @@ items -> (list)
->>> Source Server connector action.
+>>> Source server archived status.
+>> 
+>> tags -> (map)
+>>
+>>> Source server Tags.
@@ -376 +380 @@ items -> (list)
->>> connectorArn -> (string)
+>>> Constraints:
@@ -378 +382,11 @@ items -> (list)
->>>> Source Server connector action connector arn.
+>>>   * min: `0`
+>>>   * max: `50`
+>>> 
+
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `256`
@@ -379,0 +394,4 @@ items -> (list)
+
+>>> 
+>>> value -> (string)
+>>>
@@ -382,3 +400,2 @@ items -> (list)
->>>>   * min: `27`
->>>>   * max: `100`
->>>>   * pattern: `^arn:[\w-]+:mgn:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:connector\/(connector-[0-9a-zA-Z]{17})$`
+>>>>   * min: `0`
+>>>>   * max: `256`
@@ -386,0 +404,4 @@ items -> (list)
+>> 
+>> launchedInstance -> (structure)
+>>
+>>> Source server launched instance.
@@ -388 +409 @@ items -> (list)
->>> credentialsSecretArn -> (string)
+>>> ec2InstanceID -> (string)
@@ -390 +411 @@ items -> (list)
->>>> Source Server connector action credentials secret arn.
+>>>> Launched instance EC2 ID.
@@ -394,3 +415,28 @@ items -> (list)
->>>>   * min: `20`
->>>>   * max: `100`
->>>>   * pattern: `^arn:[\w-]+:secretsmanager:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:secret:(.+)$`
+>>>>   * min: `0`
+>>>>   * max: `255`
+>>>>   * pattern: `i-[0-9a-fA-F]{8,}`
+>>>> 
+
+>>> 
+>>> jobID -> (string)
+>>>
+>>>> Launched instance Job ID.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `24`
+>>>>   * max: `24`
+>>>>   * pattern: `mgnjob-[0-9a-zA-Z]{17}`
+>>>>