AWS cli documentation change
Summary
Updated CLI version reference, restructured notification settings parameters, added trust anchor ID requirements, and reorganized trust anchor structure documentation.
Security assessment
The changes include documentation updates for certificate expiry notification events (CA_CERTIFICATE_EXPIRY and END_ENTITY_CERTIFICATE_EXPIRY) which are security-related features, but there's no evidence of addressing a specific vulnerability. Structural changes to parameters and constraints don't indicate security fixes.
Diff
diff --git a/cli/latest/reference/rolesanywhere/reset-notification-settings.md b/cli/latest/reference/rolesanywhere/reset-notification-settings.md index 9e7a6673d..ad10dedd0 100644 --- a//cli/latest/reference/rolesanywhere/reset-notification-settings.md +++ b//cli/latest/reference/rolesanywhere/reset-notification-settings.md @@ -15 +15 @@ - * [AWS CLI 2.32.11 Command Reference](../../index.html) » + * [AWS CLI 2.32.13 Command Reference](../../index.html) » @@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa - --notification-setting-keys <value> @@ -70,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa + --notification-setting-keys <value> @@ -94,0 +95,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa +`--trust-anchor-id` (string) [required] + +> The unique identifier of the trust anchor. +> +> Constraints: +> +> * min: `36` +> * max: `36` +> * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*` +> + + @@ -110 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->> channel -> (string) +>> event -> (string) [required] @@ -112 +124 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->>> The specified channel of notification. +>>> The notification setting event to reset. @@ -116 +128,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->>> * `ALL` +>>> * `CA_CERTIFICATE_EXPIRY` +>>> * `END_ENTITY_CERTIFICATE_EXPIRY` @@ -120 +133 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->> event -> (string) [required] +>> channel -> (string) @@ -122 +135 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->>> The notification setting event to reset. +>>> The specified channel of notification. @@ -126,2 +139 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->>> * `CA_CERTIFICATE_EXPIRY` ->>> * `END_ENTITY_CERTIFICATE_EXPIRY` +>>> * `ALL` @@ -134 +146 @@ Shorthand Syntax: - channel=string,event=string ... + event=string,channel=string ... @@ -142,2 +154,2 @@ JSON Syntax: - "channel": "ALL", - "event": "CA_CERTIFICATE_EXPIRY"|"END_ENTITY_CERTIFICATE_EXPIRY" + "event": "CA_CERTIFICATE_EXPIRY"|"END_ENTITY_CERTIFICATE_EXPIRY", + "channel": "ALL" @@ -149,12 +160,0 @@ JSON Syntax: -`--trust-anchor-id` (string) [required] - -> The unique identifier of the trust anchor. -> -> Constraints: -> -> * min: `36` -> * max: `36` -> * pattern: `[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}` -> - - @@ -264 +264 @@ trustAnchor -> (structure) -> createdAt -> (timestamp) +> trustAnchorId -> (string) @@ -266 +266,9 @@ trustAnchor -> (structure) ->> The ISO-8601 timestamp when the trust anchor was created. +>> The unique identifier of the trust anchor. +>> +>> Constraints: +>> +>> * min: `36` +>> * max: `36` +>> * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*` +>> + @@ -268 +276 @@ trustAnchor -> (structure) -> enabled -> (boolean) +> trustAnchorArn -> (string) @@ -270 +278 @@ trustAnchor -> (structure) ->> Indicates whether the trust anchor is enabled. +>> The ARN of the trust anchor. @@ -280 +288 @@ trustAnchor -> (structure) ->> * pattern: `^[ a-zA-Z0-9-_]*$` +>> * pattern: `[ a-zA-Z0-9-_]*` @@ -284 +292 @@ trustAnchor -> (structure) -> notificationSettings -> (list) +> source -> (structure) @@ -286,3 +294 @@ trustAnchor -> (structure) ->> A list of notification settings to be associated to the trust anchor. ->> ->> Constraints: +>> The trust anchor type and its related certificate data. @@ -290,2 +296 @@ trustAnchor -> (structure) ->> * min: `0` ->> * max: `50` +>> sourceType -> (string) @@ -292,0 +298,8 @@ trustAnchor -> (structure) +>>> The type of the trust anchor. +>>> +>>> Possible values: +>>> +>>> * `AWS_ACM_PCA` +>>> * `CERTIFICATE_BUNDLE` +>>> * `SELF_SIGNED_REPOSITORY` +>>> @@ -295 +308 @@ trustAnchor -> (structure) ->> (structure) +>> sourceData -> (tagged union structure) @@ -297 +310 @@ trustAnchor -> (structure) ->>> The state of a notification setting. +>>> The data field of the trust anchor depending on its type. @@ -299 +312 @@ trustAnchor -> (structure) ->>> A notification setting includes information such as event name, threshold, status of the notification setting, and the channel to notify. +>>> ### Note @@ -301 +314 @@ trustAnchor -> (structure) ->>> channel -> (string) +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `x509CertificateData`, `acmPcaArn`. @@ -303,13 +316 @@ trustAnchor -> (structure) ->>>> The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and Health Dashboard to notify for an event. ->>>> ->>>> ### Note ->>>> ->>>> In the absence of a specific channel, IAM Roles Anywhere applies this setting to ‘ALL’ channels. ->>>> ->>>> Possible values: ->>>> ->>>> * `ALL` ->>>> - ->>> ->>> configuredBy -> (string) +>>> x509CertificateData -> (string) @@ -317 +318 @@ trustAnchor -> (structure) ->>>> The principal that configured the notification setting. For default settings configured by IAM Roles Anywhere, the value is `rolesanywhere.amazonaws.com` , and for customized notifications settings, it is the respective account ID. +>>>> The PEM-encoded data for the certificate anchor. Included for trust anchors of type `CERTIFICATE_BUNDLE` . @@ -322 +323 @@ trustAnchor -> (structure) ->>>> * max: `200` +>>>> * max: `16000` @@ -324,0 +326,33 @@ trustAnchor -> (structure) +>>> +>>> acmPcaArn -> (string) +>>> +>>>> The root certificate of the Private Certificate Authority specified by this ARN is used in trust validation for temporary credential requests. Included for trust anchors of type `AWS_ACM_PCA` . +> +> enabled -> (boolean) +> +>> Indicates whether the trust anchor is enabled. +> +> createdAt -> (timestamp) +> +>> The ISO-8601 timestamp when the trust anchor was created. +> +> updatedAt -> (timestamp) +> +>> The ISO-8601 timestamp when the trust anchor was last updated. +> +> notificationSettings -> (list) +> +>> A list of notification settings to be associated to the trust anchor. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `50` +>> + +>> +>> (structure) +>> +>>> The state of a notification setting. +>>> +>>> A notification setting includes information such as event name, threshold, status of the notification setting, and the channel to notify. @@ -351,8 +384,0 @@ trustAnchor -> (structure) -> -> source -> (structure) -> ->> The trust anchor type and its related certificate data. ->> ->> sourceData -> (tagged union structure) ->> ->>> The data field of the trust anchor depending on its type. @@ -360,5 +386 @@ trustAnchor -> (structure) ->>> ### Note ->>> ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `acmPcaArn`, `x509CertificateData`. ->>> ->>> acmPcaArn -> (string) +>>> channel -> (string) @@ -366 +388,11 @@ trustAnchor -> (structure) ->>>> The root certificate of the Private Certificate Authority specified by this ARN is used in trust validation for temporary credential requests. Included for trust anchors of type `AWS_ACM_PCA` . +>>>> The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and Health Dashboard to notify for an event. +>>>> +>>>> ### Note +>>>> +>>>> In the absence of a specific channel, IAM Roles Anywhere applies this setting to ‘ALL’ channels. +>>>>