AWS Security ChangesHomeSearch

AWS cli medium security documentation change

Service: cli · 2025-12-10 · Security-related medium

File: cli/latest/reference/mgn/describe-source-servers.md

Summary

Added pattern validation for replicatorId (instance ID format) and updated ARN patterns for credentialsSecretArn/connectorArn without start/end anchors.

Security assessment

The relaxed ARN patterns (removing ^/$ anchors) could allow invalid ARN formats if not properly validated elsewhere, potentially leading to misconfigurations. However, this might also indicate backend validation improvements. The replicatorId pattern ensures correct instance ID formats, reducing error-prone inputs.

Diff

diff --git a/cli/latest/reference/mgn/describe-source-servers.md b/cli/latest/reference/mgn/describe-source-servers.md
index f9291753b..ae216f819 100644
--- a//cli/latest/reference/mgn/describe-source-servers.md
+++ b//cli/latest/reference/mgn/describe-source-servers.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-    [--account-id <value>]
@@ -70,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+    [--account-id <value>]
@@ -98,12 +97,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--account-id` (string)
-
-> Request to filter Source Servers list by Accoun ID.
-> 
-> Constraints:
-> 
->   * min: `12`
->   * max: `12`
->   * pattern: `[0-9]{12,}`
-> 
-
-
@@ -114 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> applicationIDs -> (list)
+> sourceServerIDs -> (list)
@@ -116 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by application IDs.
+>> Request to filter Source Servers list by Source Server ID.
@@ -129,3 +117,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * min: `21`
->>>   * max: `21`
->>>   * pattern: `^app-[0-9a-zA-Z]{17}$`
+>>>   * min: `19`
+>>>   * max: `19`
+>>>   * pattern: `s-[0-9a-zA-Z]{17}`
@@ -139 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> lifeCycleStates -> (list)
+> replicationTypes -> (list)
@@ -141 +129 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by life cycle states.
+>> Request to filter Source Servers list by replication type.
@@ -146 +134 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>   * max: `10`
+>>   * max: `2`
@@ -154,10 +142,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * `STOPPED`
->>>   * `NOT_READY`
->>>   * `READY_FOR_TEST`
->>>   * `TESTING`
->>>   * `READY_FOR_CUTOVER`
->>>   * `CUTTING_OVER`
->>>   * `CUTOVER`
->>>   * `DISCONNECTED`
->>>   * `DISCOVERED`
->>>   * `PENDING_INSTALLATION`
+>>>   * `AGENT_BASED`
+>>>   * `SNAPSHOT_SHIPPING`
@@ -167 +147 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> replicationTypes -> (list)
+> lifeCycleStates -> (list)
@@ -169 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by replication type.
+>> Request to filter Source Servers list by life cycle states.
@@ -174 +154 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>   * max: `2`
+>>   * max: `10`
@@ -182,2 +162,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * `AGENT_BASED`
->>>   * `SNAPSHOT_SHIPPING`
+>>>   * `STOPPED`
+>>>   * `NOT_READY`
+>>>   * `READY_FOR_TEST`
+>>>   * `TESTING`
+>>>   * `READY_FOR_CUTOVER`
+>>>   * `CUTTING_OVER`
+>>>   * `CUTOVER`
+>>>   * `DISCONNECTED`
+>>>   * `DISCOVERED`
+>>>   * `PENDING_INSTALLATION`
@@ -187 +175 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> sourceServerIDs -> (list)
+> applicationIDs -> (list)
@@ -189 +177 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> Request to filter Source Servers list by Source Server ID.
+>> Request to filter Source Servers list by application IDs.
@@ -202,3 +190,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->>>   * min: `19`
->>>   * max: `19`
->>>   * pattern: `^s-[0-9a-zA-Z]{17}$`
+>>>   * min: `21`
+>>>   * max: `21`
+>>>   * pattern: `app-[0-9a-zA-Z]{17}`
@@ -211 +199 @@ Shorthand Syntax:
-    applicationIDs=string,string,isArchived=boolean,lifeCycleStates=string,string,replicationTypes=string,string,sourceServerIDs=string,string
+    sourceServerIDs=string,string,isArchived=boolean,replicationTypes=string,string,lifeCycleStates=string,string,applicationIDs=string,string
@@ -218 +206 @@ JSON Syntax:
-      "applicationIDs": ["string", ...],
+      "sourceServerIDs": ["string", ...],
@@ -220 +207,0 @@ JSON Syntax:
-      "lifeCycleStates": ["STOPPED"|"NOT_READY"|"READY_FOR_TEST"|"TESTING"|"READY_FOR_CUTOVER"|"CUTTING_OVER"|"CUTOVER"|"DISCONNECTED"|"DISCOVERED"|"PENDING_INSTALLATION", ...],
@@ -222 +209,2 @@ JSON Syntax:
-      "sourceServerIDs": ["string", ...]
+      "lifeCycleStates": ["STOPPED"|"NOT_READY"|"READY_FOR_TEST"|"TESTING"|"READY_FOR_CUTOVER"|"CUTTING_OVER"|"CUTOVER"|"DISCONNECTED"|"DISCOVERED"|"PENDING_INSTALLATION", ...],
+      "applicationIDs": ["string", ...]
@@ -225,0 +214,12 @@ JSON Syntax:
+`--account-id` (string)
+
+> Request to filter Source Servers list by Accoun ID.
+> 
+> Constraints:
+> 
+>   * min: `12`
+>   * max: `12`
+>   * pattern: `.*[0-9]{12,}.*`
+> 
+
+
@@ -349 +349 @@ items -> (list)
->> applicationID -> (string)
+>> sourceServerID -> (string)
@@ -351 +351 @@ items -> (list)
->>> Source server application ID.
+>>> Source server ID.
@@ -355,3 +355,3 @@ items -> (list)
->>>   * min: `21`
->>>   * max: `21`
->>>   * pattern: `^app-[0-9a-zA-Z]{17}$`
+>>>   * min: `19`
+>>>   * max: `19`
+>>>   * pattern: `s-[0-9a-zA-Z]{17}`
@@ -372 +372 @@ items -> (list)
->> connectorAction -> (structure)
+>> isArchived -> (boolean)
@@ -374 +374,5 @@ items -> (list)
->>> Source Server connector action.
+>>> Source server archived status.
+>> 
+>> tags -> (map)
+>>
+>>> Source server Tags.
@@ -376 +380 @@ items -> (list)
->>> connectorArn -> (string)
+>>> Constraints:
@@ -378 +382,11 @@ items -> (list)
->>>> Source Server connector action connector arn.
+>>>   * min: `0`
+>>>   * max: `50`
+>>> 
+
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `256`
@@ -379,0 +394,4 @@ items -> (list)
+
+>>> 
+>>> value -> (string)
+>>>
@@ -382,3 +400,2 @@ items -> (list)
->>>>   * min: `27`
->>>>   * max: `100`
->>>>   * pattern: `^arn:[\w-]+:mgn:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:connector\/(connector-[0-9a-zA-Z]{17})$`
+>>>>   * min: `0`
+>>>>   * max: `256`
@@ -386,0 +404,4 @@ items -> (list)
+>> 
+>> launchedInstance -> (structure)
+>>
+>>> Source server launched instance.
@@ -388 +409 @@ items -> (list)
->>> credentialsSecretArn -> (string)
+>>> ec2InstanceID -> (string)
@@ -390 +411 @@ items -> (list)
->>>> Source Server connector action credentials secret arn.
+>>>> Launched instance EC2 ID.
@@ -394,3 +415,28 @@ items -> (list)
->>>>   * min: `20`
->>>>   * max: `100`
->>>>   * pattern: `^arn:[\w-]+:secretsmanager:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:secret:(.+)$`
+>>>>   * min: `0`
+>>>>   * max: `255`
+>>>>   * pattern: `i-[0-9a-fA-F]{8,}`
+>>>> 
+
+>>> 
+>>> jobID -> (string)
+>>>
+>>>> Launched instance Job ID.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `24`
+>>>>   * max: `24`
+>>>>   * pattern: `mgnjob-[0-9a-zA-Z]{17}`
+>>>>