AWS cli medium security documentation change

Service: cli · 2025-12-10 · Security-related medium

File: cli/latest/reference/rolesanywhere/list-crls.md

Summary

Updated CLI version, added nextToken field, modified UUID pattern in response structure, and reordered CRL field documentation.

Security assessment

The UUID pattern change from '[a-f0-9]{8}-...' to '.*[a-f0-9]{8}-...*' relaxes validation by allowing arbitrary prefixes/suffixes. This could impact security if clients rely on strict UUID validation for CRL identification, potentially enabling injection or spoofing if not properly handled.

Diff

diff --git a/cli/latest/reference/rolesanywhere/list-crls.md b/cli/latest/reference/rolesanywhere/list-crls.md
index 52e1583fa..304d945b3 100644
--- a//cli/latest/reference/rolesanywhere/list-crls.md
+++ b//cli/latest/reference/rolesanywhere/list-crls.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -212,0 +213,4 @@ Disable automatically prompt for CLI input parameters.
+nextToken -> (string)
+
+> A token that indicates where the output should continue from, if a previous request did not show all results. To get the next results, make the request again with this value.
+
@@ -221,12 +224,0 @@ crls -> (list)
->> createdAt -> (timestamp)
->>
->>> The ISO-8601 timestamp when the certificate revocation list (CRL) was created.
->> 
->> crlArn -> (string)
->>
->>> The ARN of the certificate revocation list (CRL).
->> 
->> crlData -> (blob)
->>
->>> The state of the certificate revocation list (CRL) after a read or write operation.
->> 
@@ -241 +233 @@ crls -> (list)
->>>   * pattern: `[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}`
+>>>   * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*`
@@ -245 +237 @@ crls -> (list)
->> enabled -> (boolean)
+>> crlArn -> (string)
@@ -247 +239 @@ crls -> (list)
->>> Indicates whether the certificate revocation list (CRL) is enabled.
+>>> The ARN of the certificate revocation list (CRL).
@@ -252,0 +245,8 @@ crls -> (list)
+>> enabled -> (boolean)
+>>
+>>> Indicates whether the certificate revocation list (CRL) is enabled.
+>> 
+>> crlData -> (blob)
+>>
+>>> The state of the certificate revocation list (CRL) after a read or write operation.
+>> 
@@ -256,0 +257,4 @@ crls -> (list)
+>> createdAt -> (timestamp)
+>>
+>>> The ISO-8601 timestamp when the certificate revocation list (CRL) was created.
+>> 
@@ -261,4 +264,0 @@ crls -> (list)
-nextToken -> (string)
-
-> A token that indicates where the output should continue from, if a previous request did not show all results. To get the next results, make the request again with this value.
-
@@ -275 +275 @@ nextToken -> (string)
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »