AWS cli documentation change
Summary
Updated CLI version reference, restructured notification settings parameters, added trust-anchor-id documentation with pattern constraints, reordered JSON syntax fields, and reorganized trustAnchor structure documentation.
Security assessment
The changes primarily involve documentation restructuring and parameter ordering adjustments. The added trust-anchor-id pattern constraints (36-character UUID format) and notification channel documentation improve clarity but don't address specific disclosed vulnerabilities. Enhanced documentation of security-related fields like notification settings and certificate validation parameters constitutes added security documentation without indicating a specific security fix.
Diff
diff --git a/cli/latest/reference/rolesanywhere/put-notification-settings.md b/cli/latest/reference/rolesanywhere/put-notification-settings.md index 3c7488b30..195d0149e 100644 --- a//cli/latest/reference/rolesanywhere/put-notification-settings.md +++ b//cli/latest/reference/rolesanywhere/put-notification-settings.md @@ -15 +15 @@ - * [AWS CLI 2.32.11 Command Reference](../../index.html) » + * [AWS CLI 2.32.13 Command Reference](../../index.html) » @@ -71 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa - --notification-settings <value> @@ -72,0 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa + --notification-settings <value> @@ -96,0 +97,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa +`--trust-anchor-id` (string) [required] + +> The unique identifier of the trust anchor. +> +> Constraints: +> +> * min: `36` +> * max: `36` +> * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*` +> + + @@ -111,14 +122,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->> ->> channel -> (string) ->> ->>> The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and Health Dashboard to notify for an event. ->>> ->>> ### Note ->>> ->>> In the absence of a specific channel, IAM Roles Anywhere applies this setting to ‘ALL’ channels. ->>> ->>> Possible values: ->>> ->>> * `ALL` ->>> - @@ -150,0 +149,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa +>> +>> channel -> (string) +>> +>>> The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and Health Dashboard to notify for an event. +>>> +>>> ### Note +>>> +>>> In the absence of a specific channel, IAM Roles Anywhere applies this setting to ‘ALL’ channels. +>>> +>>> Possible values: +>>> +>>> * `ALL` +>>> + @@ -155 +167 @@ Shorthand Syntax: - channel=string,enabled=boolean,event=string,threshold=integer ... + enabled=boolean,event=string,threshold=integer,channel=string ... @@ -163 +174,0 @@ JSON Syntax: - "channel": "ALL", @@ -166 +177,2 @@ JSON Syntax: - "threshold": integer + "threshold": integer, + "channel": "ALL" @@ -172,12 +183,0 @@ JSON Syntax: -`--trust-anchor-id` (string) [required] - -> The unique identifier of the trust anchor. -> -> Constraints: -> -> * min: `36` -> * max: `36` -> * pattern: `[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}` -> - - @@ -287 +287 @@ trustAnchor -> (structure) -> createdAt -> (timestamp) +> trustAnchorId -> (string) @@ -289 +289,9 @@ trustAnchor -> (structure) ->> The ISO-8601 timestamp when the trust anchor was created. +>> The unique identifier of the trust anchor. +>> +>> Constraints: +>> +>> * min: `36` +>> * max: `36` +>> * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*` +>> + @@ -291 +299 @@ trustAnchor -> (structure) -> enabled -> (boolean) +> trustAnchorArn -> (string) @@ -293 +301 @@ trustAnchor -> (structure) ->> Indicates whether the trust anchor is enabled. +>> The ARN of the trust anchor. @@ -303 +311 @@ trustAnchor -> (structure) ->> * pattern: `^[ a-zA-Z0-9-_]*$` +>> * pattern: `[ a-zA-Z0-9-_]*` @@ -307 +315 @@ trustAnchor -> (structure) -> notificationSettings -> (list) +> source -> (structure) @@ -309,3 +317 @@ trustAnchor -> (structure) ->> A list of notification settings to be associated to the trust anchor. ->> ->> Constraints: +>> The trust anchor type and its related certificate data. @@ -313,2 +319 @@ trustAnchor -> (structure) ->> * min: `0` ->> * max: `50` +>> sourceType -> (string) @@ -315,0 +321,8 @@ trustAnchor -> (structure) +>>> The type of the trust anchor. +>>> +>>> Possible values: +>>> +>>> * `AWS_ACM_PCA` +>>> * `CERTIFICATE_BUNDLE` +>>> * `SELF_SIGNED_REPOSITORY` +>>> @@ -318 +331 @@ trustAnchor -> (structure) ->> (structure) +>> sourceData -> (tagged union structure) @@ -320,3 +333 @@ trustAnchor -> (structure) ->>> The state of a notification setting. ->>> ->>> A notification setting includes information such as event name, threshold, status of the notification setting, and the channel to notify. +>>> The data field of the trust anchor depending on its type. @@ -324 +335 @@ trustAnchor -> (structure) ->>> channel -> (string) +>>> ### Note @@ -326,11 +337 @@ trustAnchor -> (structure) ->>>> The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and Health Dashboard to notify for an event. ->>>> ->>>> ### Note ->>>> ->>>> In the absence of a specific channel, IAM Roles Anywhere applies this setting to ‘ALL’ channels. ->>>> ->>>> Possible values: ->>>> ->>>> * `ALL` ->>>> - +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `x509CertificateData`, `acmPcaArn`. @@ -338 +339 @@ trustAnchor -> (structure) ->>> configuredBy -> (string) +>>> x509CertificateData -> (string) @@ -340 +341 @@ trustAnchor -> (structure) ->>>> The principal that configured the notification setting. For default settings configured by IAM Roles Anywhere, the value is `rolesanywhere.amazonaws.com` , and for customized notifications settings, it is the respective account ID. +>>>> The PEM-encoded data for the certificate anchor. Included for trust anchors of type `CERTIFICATE_BUNDLE` . @@ -345 +346 @@ trustAnchor -> (structure) ->>>> * max: `200` +>>>> * max: `16000` @@ -347,0 +349,33 @@ trustAnchor -> (structure) +>>> +>>> acmPcaArn -> (string) +>>> +>>>> The root certificate of the Private Certificate Authority specified by this ARN is used in trust validation for temporary credential requests. Included for trust anchors of type `AWS_ACM_PCA` . +> +> enabled -> (boolean) +> +>> Indicates whether the trust anchor is enabled. +> +> createdAt -> (timestamp) +> +>> The ISO-8601 timestamp when the trust anchor was created. +> +> updatedAt -> (timestamp) +> +>> The ISO-8601 timestamp when the trust anchor was last updated. +> +> notificationSettings -> (list) +> +>> A list of notification settings to be associated to the trust anchor. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `50` +>> + +>> +>> (structure) +>> +>>> The state of a notification setting. +>>> +>>> A notification setting includes information such as event name, threshold, status of the notification setting, and the channel to notify. @@ -374,12 +407,0 @@ trustAnchor -> (structure) -> -> source -> (structure) -> ->> The trust anchor type and its related certificate data. ->> ->> sourceData -> (tagged union structure) ->> ->>> The data field of the trust anchor depending on its type. ->>> ->>> ### Note ->>> ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `acmPcaArn`, `x509CertificateData`.