AWS cli medium security documentation change
Summary
Removed credentialsSecretArn and connectorArn field documentation from connectorAction structure, replacing them with generic key/value tag constraints.
Security assessment
Removal of credentialsSecretArn (which referenced Secrets Manager ARNs) reduces exposure of sensitive credential storage details. This could mitigate information disclosure risks if these fields were unnecessarily exposed.
Diff
diff --git a/cli/latest/reference/mgn/stop-replication.md b/cli/latest/reference/mgn/stop-replication.md index 4e2b26001..5eaf18923 100644 --- a//cli/latest/reference/mgn/stop-replication.md +++ b//cli/latest/reference/mgn/stop-replication.md @@ -15 +15 @@ - * [AWS CLI 2.32.11 Command Reference](../../index.html) » + * [AWS CLI 2.32.13 Command Reference](../../index.html) » @@ -67 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 - [--account-id <value>] @@ -68,0 +68 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 + [--account-id <value>] @@ -93 +93 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -`--account-id` (string) +`--source-server-id` (string) [required] @@ -95 +95 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Stop Replication Request account ID. +> Stop Replication Request source server ID. @@ -99,3 +99,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> * min: `12` -> * max: `12` -> * pattern: `[0-9]{12,}` +> * min: `19` +> * max: `19` +> * pattern: `s-[0-9a-zA-Z]{17}` @@ -105 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -`--source-server-id` (string) [required] +`--account-id` (string) @@ -107 +107 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> Stop Replication Request source server ID. +> Stop Replication Request account ID. @@ -111,3 +111,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20 -> * min: `19` -> * max: `19` -> * pattern: `^s-[0-9a-zA-Z]{17}$` +> * min: `12` +> * max: `12` +> * pattern: `.*[0-9]{12,}.*` @@ -216 +216 @@ Disable automatically prompt for CLI input parameters. -applicationID -> (string) +sourceServerID -> (string) @@ -218 +218 @@ applicationID -> (string) -> Source server application ID. +> Source server ID. @@ -222,3 +222,3 @@ applicationID -> (string) -> * min: `21` -> * max: `21` -> * pattern: `^app-[0-9a-zA-Z]{17}$` +> * min: `19` +> * max: `19` +> * pattern: `s-[0-9a-zA-Z]{17}` @@ -239 +239 @@ arn -> (string) -connectorAction -> (structure) +isArchived -> (boolean) @@ -241 +241,5 @@ connectorAction -> (structure) -> Source Server connector action. +> Source server archived status. + +tags -> (map) + +> Source server Tags. @@ -243 +247,8 @@ connectorAction -> (structure) -> connectorArn -> (string) +> Constraints: +> +> * min: `0` +> * max: `50` +> + +> +> key -> (string) @@ -245,2 +255,0 @@ connectorAction -> (structure) ->> Source Server connector action connector arn. ->> @@ -249,3 +258,2 @@ connectorAction -> (structure) ->> * min: `27` ->> * max: `100` ->> * pattern: `^arn:[\w-]+:mgn:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:connector\/(connector-[0-9a-zA-Z]{17})$` +>> * min: `0` +>> * max: `256` @@ -255 +263 @@ connectorAction -> (structure) -> credentialsSecretArn -> (string) +> value -> (string) @@ -257,2 +264,0 @@ connectorAction -> (structure) ->> Source Server connector action credentials secret arn. ->> @@ -261,3 +267,2 @@ connectorAction -> (structure) ->> * min: `20` ->> * max: `100` ->> * pattern: `^arn:[\w-]+:secretsmanager:([a-z]{2}-(gov-)?[a-z]+-\d{1})?:(\d{12})?:secret:(.+)$` +>> * min: `0` +>> * max: `256` @@ -267 +272 @@ connectorAction -> (structure) -dataReplicationInfo -> (structure) +launchedInstance -> (structure) @@ -269 +274 @@ dataReplicationInfo -> (structure) -> Source server data replication info. +> Source server launched instance. @@ -271 +276 @@ dataReplicationInfo -> (structure) -> dataReplicationError -> (structure) +> ec2InstanceID -> (string) @@ -273,3 +278 @@ dataReplicationInfo -> (structure) ->> Error in obtaining data replication info. ->> ->> error -> (string) +>> Launched instance EC2 ID. @@ -277,22 +280 @@ dataReplicationInfo -> (structure) ->>> Error in data replication. ->>> ->>> Possible values: ->>> ->>> * `AGENT_NOT_SEEN` ->>> * `SNAPSHOTS_FAILURE` ->>> * `NOT_CONVERGING` ->>> * `UNSTABLE_NETWORK` ->>> * `FAILED_TO_CREATE_SECURITY_GROUP` ->>> * `FAILED_TO_LAUNCH_REPLICATION_SERVER` ->>> * `FAILED_TO_BOOT_REPLICATION_SERVER` ->>> * `FAILED_TO_AUTHENTICATE_WITH_SERVICE` ->>> * `FAILED_TO_DOWNLOAD_REPLICATION_SOFTWARE` ->>> * `FAILED_TO_CREATE_STAGING_DISKS` ->>> * `FAILED_TO_ATTACH_STAGING_DISKS` ->>> * `FAILED_TO_PAIR_REPLICATION_SERVER_WITH_AGENT` ->>> * `FAILED_TO_CONNECT_AGENT_TO_REPLICATION_SERVER` ->>> * `FAILED_TO_START_DATA_TRANSFER` ->>> * `UNSUPPORTED_VM_CONFIGURATION` ->>> * `LAST_SNAPSHOT_JOB_FAILED` ->>> - +>> Constraints: @@ -300 +282,3 @@ dataReplicationInfo -> (structure) ->> rawError -> (string) +>> * min: `0` +>> * max: `255` +>> * pattern: `i-[0-9a-fA-F]{8,}` @@ -302,7 +285,0 @@ dataReplicationInfo -> (structure) ->>> Error in data replication. ->>> ->>> Constraints: ->>> ->>> * min: `0` ->>> * max: `65536` ->>> @@ -311 +288 @@ dataReplicationInfo -> (structure) -> dataReplicationInitiation -> (structure) +> jobID -> (string) @@ -313,15 +290 @@ dataReplicationInfo -> (structure) ->> Request to query whether data replication has been initiated. ->> ->> nextAttemptDateTime -> (string) ->> ->>> Request to query next data initiation date and time. ->>> ->>> Constraints: ->>> ->>> * min: `19` ->>> * max: `32` ->>> * pattern: `^[1-9][0-9]*-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])T([0-1][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9](\.[0-9]+)?Z$` ->>> - ->> ->> startDateTime -> (string) +>> Launched instance Job ID. @@ -329,9 +292 @@ dataReplicationInfo -> (structure) ->>> Request to query data initiation start date and time. ->>> ->>> Constraints: ->>> ->>> * min: `19` ->>> * max: `32` ->>> * pattern: `^[1-9][0-9]*-(0[1-9]|1[0-2])-(0[1-9]|[12][0-9]|3[01])T([0-1][0-9]|2[0-3]):[0-5][0-9]:[0-5][0-9](\.[0-9]+)?Z$` ->>> - +>> Constraints: @@ -339 +294,3 @@ dataReplicationInfo -> (structure) ->> steps -> (list) +>> * min: `24` +>> * max: `24` +>> * pattern: `mgnjob-[0-9a-zA-Z]{17}` @@ -341,38 +297,0 @@ dataReplicationInfo -> (structure) ->>> Request to query data initiation steps. ->>> ->>> (structure) ->>> ->>>> Data replication initiation step. ->>>> ->>>> name -> (string) ->>>> ->>>>> Request to query data initiation step name. ->>>>> ->>>>> Possible values: ->>>>> ->>>>> * `WAIT` ->>>>> * `CREATE_SECURITY_GROUP` ->>>>> * `LAUNCH_REPLICATION_SERVER` ->>>>> * `BOOT_REPLICATION_SERVER` ->>>>> * `AUTHENTICATE_WITH_SERVICE` ->>>>> * `DOWNLOAD_REPLICATION_SOFTWARE` ->>>>> * `CREATE_STAGING_DISKS` ->>>>> * `ATTACH_STAGING_DISKS` ->>>>> * `PAIR_REPLICATION_SERVER_WITH_AGENT`