AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-12-10 · Documentation low

File: cli/latest/reference/rolesanywhere/update-crl.md

Summary

Updated AWS CLI version reference, reorganized parameters, modified pattern constraints for trustAnchorArn/trustAnchorId, and restructured CRL output fields.

Security assessment

Changes involve documentation reorganization and relaxed pattern constraints (e.g., allowing any characters around UUIDs). No evidence of addressing a specific vulnerability. CRL documentation exists but wasn't added in this change.

Diff

diff --git a/cli/latest/reference/rolesanywhere/update-crl.md b/cli/latest/reference/rolesanywhere/update-crl.md
index 616575742..b696fed5a 100644
--- a//cli/latest/reference/rolesanywhere/update-crl.md
+++ b//cli/latest/reference/rolesanywhere/update-crl.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »
@@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa
-    [--crl-data <value>]
@@ -71,0 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa
+    [--crl-data <value>]
@@ -96,11 +95,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa
-`--crl-data` (blob)
-
-> The x509 v3 specified certificate revocation list (CRL).
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `300000`
-> 
-
-
@@ -115 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa
->   * pattern: `[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}`
+>   * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*`
@@ -127 +116,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa
->   * pattern: `^[ a-zA-Z0-9-_]*$`
+>   * pattern: `[ a-zA-Z0-9-_]*`
+> 
+
+
+`--crl-data` (blob)
+
+> The x509 v3 specified certificate revocation list (CRL).
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `300000`
@@ -234,12 +233,0 @@ crl -> (structure)
-> createdAt -> (timestamp)
->
->> The ISO-8601 timestamp when the certificate revocation list (CRL) was created.
-> 
-> crlArn -> (string)
->
->> The ARN of the certificate revocation list (CRL).
-> 
-> crlData -> (blob)
->
->> The state of the certificate revocation list (CRL) after a read or write operation.
-> 
@@ -254 +242 @@ crl -> (structure)
->>   * pattern: `[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}`
+>>   * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*`
@@ -258 +246 @@ crl -> (structure)
-> enabled -> (boolean)
+> crlArn -> (string)
@@ -260 +248 @@ crl -> (structure)
->> Indicates whether the certificate revocation list (CRL) is enabled.
+>> The ARN of the certificate revocation list (CRL).
@@ -265,0 +254,8 @@ crl -> (structure)
+> enabled -> (boolean)
+>
+>> Indicates whether the certificate revocation list (CRL) is enabled.
+> 
+> crlData -> (blob)
+>
+>> The state of the certificate revocation list (CRL) after a read or write operation.
+> 
@@ -269,0 +266,4 @@ crl -> (structure)
+> createdAt -> (timestamp)
+>
+>> The ISO-8601 timestamp when the certificate revocation list (CRL) was created.
+> 
@@ -284 +284 @@ crl -> (structure)
-  * [AWS CLI 2.32.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.13 Command Reference](../../index.html) »