AWS Security ChangesHomeSearch

AWS cli medium security documentation change

Service: cli · 2025-12-10 · Security-related medium

File: cli/latest/reference/mgn/update-replication-configuration.md

Summary

Updated command parameters for replication configuration, including reordering parameters, adding new options like --internet-protocol, modifying validation patterns, and restructuring documentation

Security assessment

The change adds explicit documentation for security-related parameters like --replication-servers-security-groups-ids with security group ID pattern validation (sg-[0-9a-fA-F]{8,}), which helps prevent misconfigurations. It also introduces security-focused parameter constraints and clarifies security group associations.

Diff

diff --git a/cli/latest/reference/mgn/update-replication-configuration.md b/cli/latest/reference/mgn/update-replication-configuration.md
index 92ce154e1..80ae86be2 100644
--- a//cli/latest/reference/mgn/update-replication-configuration.md
+++ b//cli/latest/reference/mgn/update-replication-configuration.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -67 +67,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-    [--account-id <value>]
+    --source-server-id <value>
+    [--name <value>]
+    [--staging-area-subnet-id <value>]
@@ -69,3 +71,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-    [--bandwidth-throttling <value>]
-    [--create-public-ip | --no-create-public-ip]
-    [--data-plane-routing <value>]
+    [--replication-servers-security-groups-ids <value>]
+    [--replication-server-instance-type <value>]
+    [--use-dedicated-replication-server | --no-use-dedicated-replication-server]
@@ -72,0 +75 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+    [--replicated-disks <value>]
@@ -75,6 +78,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-    [--name <value>]
-    [--replicated-disks <value>]
-    [--replication-server-instance-type <value>]
-    [--replication-servers-security-groups-ids <value>]
-    --source-server-id <value>
-    [--staging-area-subnet-id <value>]
+    [--bandwidth-throttling <value>]
+    [--data-plane-routing <value>]
+    [--create-public-ip | --no-create-public-ip]
@@ -82 +81,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-    [--use-dedicated-replication-server | --no-use-dedicated-replication-server]
@@ -83,0 +83,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+    [--account-id <value>]
+    [--internet-protocol <value>]
@@ -108 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--account-id` (string)
+`--source-server-id` (string) [required]
@@ -110 +111 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration Account ID request.
+> Update replication configuration Source Server ID request.
@@ -114,3 +115,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->   * min: `12`
->   * max: `12`
->   * pattern: `[0-9]{12,}`
+>   * min: `19`
+>   * max: `19`
+>   * pattern: `s-[0-9a-zA-Z]{17}`
@@ -120 +121 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--associate-default-security-group` | `--no-associate-default-security-group` (boolean)
+`--name` (string)
@@ -122 +123,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration associate default Application Migration Service Security group request.
+> Update replication configuration name request.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `128`
+> 
@@ -124 +130,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--bandwidth-throttling` (long)
@@ -126 +132,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration bandwidth throttling request.
+`--staging-area-subnet-id` (string)
+
+> Update replication configuration Staging Area subnet request.
@@ -131 +139,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->   * max: `10000`
+>   * max: `255`
+>   * pattern: `subnet-[0-9a-fA-F]{8,}`
@@ -135 +144 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--create-public-ip` | `--no-create-public-ip` (boolean)
+`--associate-default-security-group` | `--no-associate-default-security-group` (boolean)
@@ -137 +146 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration create Public IP request.
+> Update replication configuration associate default Application Migration Service Security group request.
@@ -139 +148 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--data-plane-routing` (string)
+`--replication-servers-security-groups-ids` (list)
@@ -141 +150 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration data plane routing request.
+> Update replication configuration Replication Server Security Groups IDs request.
@@ -143 +152 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Possible values:
+> Constraints:
@@ -145,2 +154,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->   * `PRIVATE_IP`
->   * `PUBLIC_IP`
+>   * min: `0`
+>   * max: `32`
@@ -149,4 +157,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-
-`--default-large-staging-disk-type` (string)
-
-> Update replication configuration use default large Staging Disk type request.
@@ -154,5 +159 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Possible values:
-> 
->   * `GP2`
->   * `ST1`
->   * `GP3`
+> (string)
@@ -159,0 +161,6 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `255`
+>>   * pattern: `sg-[0-9a-fA-F]{8,}`
+>> 
@@ -162 +169 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--ebs-encryption` (string)
+Syntax:
@@ -164,7 +170,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration EBS encryption request.
-> 
-> Possible values:
-> 
->   * `DEFAULT`
->   * `CUSTOM`
-> 
@@ -171,0 +172 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+    "string" "string" ...
@@ -173 +173,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--ebs-encryption-key-arn` (string)
@@ -175 +175,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration EBS encryption key ARN request.
+`--replication-server-instance-type` (string)
+
+> Update replication configuration Replication Server instance type request.
@@ -179,2 +181,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->   * min: `20`
->   * max: `2048`
+>   * min: `0`
+>   * max: `255`
@@ -184 +186 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-`--name` (string)
+`--use-dedicated-replication-server` | `--no-use-dedicated-replication-server` (boolean)
@@ -186 +188,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Update replication configuration name request.
+> Update replication configuration use dedicated Replication Server request.
+
+`--default-large-staging-disk-type` (string)
+
+> Update replication configuration use default large Staging Disk type request.
@@ -188 +194 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
-> Constraints:
+> Possible values:
@@ -190,2 +196,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->   * min: `0`
->   * max: `128`
+>   * `GP2`
+>   * `ST1`
+>   * `GP3`
@@ -220,10 +226,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
->> 
->> iops -> (long)
->>
->>> Replication Configuration replicated disk IOPs.
->>> 
->>> Constraints:
->>> 
->>>   * min: `0`
->>> 
-
@@ -250,0 +248,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/mgn-20
+>> 
+>> iops -> (long)
+>>
+>>> Replication Configuration replicated disk IOPs.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>> 
+
@@ -265 +272 @@ Shorthand Syntax:
-    deviceName=string,iops=long,isBootDisk=boolean,stagingDiskType=string,throughput=long ...
+    deviceName=string,isBootDisk=boolean,stagingDiskType=string,iops=long,throughput=long ...
@@ -274 +280,0 @@ JSON Syntax:
-        "iops": long,
@@ -276,0 +283 @@ JSON Syntax:
+        "iops": long,
@@ -283 +290 @@ JSON Syntax:
-`--replication-server-instance-type` (string)
+`--ebs-encryption` (string)
@@ -285 +292 @@ JSON Syntax:
-> Update replication configuration Replication Server instance type request.
+> Update replication configuration EBS encryption request.
@@ -287 +294 @@ JSON Syntax:
-> Constraints:
+> Possible values:
@@ -289,2 +296,2 @@ JSON Syntax:
->   * min: `0`
->   * max: `255`
+>   * `DEFAULT`
+>   * `CUSTOM`
@@ -294 +301 @@ JSON Syntax:
-`--replication-servers-security-groups-ids` (list)