AWS cli documentation change
Summary
Updated AWS CLI version reference, restructured parameters and response fields, modified field constraints, and reorganized documentation sections.
Security assessment
The changes primarily involve documentation restructuring, field reordering, and constraint adjustments (e.g., increased max length for x509CertificateData from 8000 to 16000). There is no evidence of security vulnerabilities being patched or security incidents addressed. The pattern changes for name fields (removing anchors) appear to be syntax relaxations without security implications.
Diff
diff --git a/cli/latest/reference/rolesanywhere/update-trust-anchor.md b/cli/latest/reference/rolesanywhere/update-trust-anchor.md index 106c3f792..1f722cdc4 100644 --- a//cli/latest/reference/rolesanywhere/update-trust-anchor.md +++ b//cli/latest/reference/rolesanywhere/update-trust-anchor.md @@ -15 +15 @@ - * [AWS CLI 2.32.11 Command Reference](../../index.html) » + * [AWS CLI 2.32.13 Command Reference](../../index.html) » @@ -68,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa + --trust-anchor-id <value> @@ -71 +71,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa - --trust-anchor-id <value> @@ -95,0 +96,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa +`--trust-anchor-id` (string) [required] + +> The unique identifier of the trust anchor. +> +> Constraints: +> +> * min: `36` +> * max: `36` +> * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*` +> + + @@ -104 +116 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa -> * pattern: `^[ a-zA-Z0-9-_]*$` +> * pattern: `[ a-zA-Z0-9-_]*` @@ -110,0 +123,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa +> +> sourceType -> (string) +> +>> The type of the trust anchor. +>> +>> Possible values: +>> +>> * `AWS_ACM_PCA` +>> * `CERTIFICATE_BUNDLE` +>> * `SELF_SIGNED_REPOSITORY` +>> + @@ -118,5 +142 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `acmPcaArn`, `x509CertificateData`. ->> ->> acmPcaArn -> (string) ->> ->>> The root certificate of the Private Certificate Authority specified by this ARN is used in trust validation for temporary credential requests. Included for trust anchors of type `AWS_ACM_PCA` . +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `x509CertificateData`, `acmPcaArn`. @@ -131 +151 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->>> * max: `8000` +>>> * max: `16000` @@ -134,4 +153,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa -> -> sourceType -> (string) -> ->> The type of the trust anchor. @@ -139,5 +155 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa ->> Possible values: ->> ->> * `AWS_ACM_PCA` ->> * `CERTIFICATE_BUNDLE` ->> * `SELF_SIGNED_REPOSITORY` +>> acmPcaArn -> (string) @@ -145 +157 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rolesa - +>>> The root certificate of the Private Certificate Authority specified by this ARN is used in trust validation for temporary credential requests. Included for trust anchors of type `AWS_ACM_PCA` . @@ -150 +162 @@ Shorthand Syntax: - sourceData={acmPcaArn=string,x509CertificateData=string},sourceType=string + sourceType=string,sourceData={x509CertificateData=string,acmPcaArn=string} @@ -156,0 +169 @@ JSON Syntax: + "sourceType": "AWS_ACM_PCA"|"CERTIFICATE_BUNDLE"|"SELF_SIGNED_REPOSITORY", @@ -158,4 +171,3 @@ JSON Syntax: - "acmPcaArn": "string", - "x509CertificateData": "string" - }, - "sourceType": "AWS_ACM_PCA"|"CERTIFICATE_BUNDLE"|"SELF_SIGNED_REPOSITORY" + "x509CertificateData": "string", + "acmPcaArn": "string" + } @@ -163,12 +174,0 @@ JSON Syntax: - - -`--trust-anchor-id` (string) [required] - -> The unique identifier of the trust anchor. -> -> Constraints: -> -> * min: `36` -> * max: `36` -> * pattern: `[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}` -> @@ -280 +280 @@ trustAnchor -> (structure) -> createdAt -> (timestamp) +> trustAnchorId -> (string) @@ -282 +282,9 @@ trustAnchor -> (structure) ->> The ISO-8601 timestamp when the trust anchor was created. +>> The unique identifier of the trust anchor. +>> +>> Constraints: +>> +>> * min: `36` +>> * max: `36` +>> * pattern: `.*[a-f0-9]{8}-([a-z0-9]{4}-){3}[a-z0-9]{12}.*` +>> + @@ -284 +292 @@ trustAnchor -> (structure) -> enabled -> (boolean) +> trustAnchorArn -> (string) @@ -286 +294 @@ trustAnchor -> (structure) ->> Indicates whether the trust anchor is enabled. +>> The ARN of the trust anchor. @@ -296 +304 @@ trustAnchor -> (structure) ->> * pattern: `^[ a-zA-Z0-9-_]*$` +>> * pattern: `[ a-zA-Z0-9-_]*` @@ -300 +308 @@ trustAnchor -> (structure) -> notificationSettings -> (list) +> source -> (structure) @@ -302,3 +310 @@ trustAnchor -> (structure) ->> A list of notification settings to be associated to the trust anchor. ->> ->> Constraints: +>> The trust anchor type and its related certificate data. @@ -306,2 +312 @@ trustAnchor -> (structure) ->> * min: `0` ->> * max: `50` +>> sourceType -> (string) @@ -308,0 +314,8 @@ trustAnchor -> (structure) +>>> The type of the trust anchor. +>>> +>>> Possible values: +>>> +>>> * `AWS_ACM_PCA` +>>> * `CERTIFICATE_BUNDLE` +>>> * `SELF_SIGNED_REPOSITORY` +>>> @@ -311 +324 @@ trustAnchor -> (structure) ->> (structure) +>> sourceData -> (tagged union structure) @@ -313 +326 @@ trustAnchor -> (structure) ->>> The state of a notification setting. +>>> The data field of the trust anchor depending on its type. @@ -315 +328 @@ trustAnchor -> (structure) ->>> A notification setting includes information such as event name, threshold, status of the notification setting, and the channel to notify. +>>> ### Note @@ -317 +330 @@ trustAnchor -> (structure) ->>> channel -> (string) +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `x509CertificateData`, `acmPcaArn`. @@ -319,13 +332 @@ trustAnchor -> (structure) ->>>> The specified channel of notification. IAM Roles Anywhere uses CloudWatch metrics, EventBridge, and Health Dashboard to notify for an event. ->>>> ->>>> ### Note ->>>> ->>>> In the absence of a specific channel, IAM Roles Anywhere applies this setting to ‘ALL’ channels. ->>>> ->>>> Possible values: ->>>> ->>>> * `ALL` ->>>> - ->>> ->>> configuredBy -> (string) +>>> x509CertificateData -> (string) @@ -333 +334 @@ trustAnchor -> (structure) ->>>> The principal that configured the notification setting. For default settings configured by IAM Roles Anywhere, the value is `rolesanywhere.amazonaws.com` , and for customized notifications settings, it is the respective account ID. +>>>> The PEM-encoded data for the certificate anchor. Included for trust anchors of type `CERTIFICATE_BUNDLE` . @@ -338 +339 @@ trustAnchor -> (structure) ->>>> * max: `200` +>>>> * max: `16000` @@ -340,0 +342,33 @@ trustAnchor -> (structure) +>>> +>>> acmPcaArn -> (string) +>>> +>>>> The root certificate of the Private Certificate Authority specified by this ARN is used in trust validation for temporary credential requests. Included for trust anchors of type `AWS_ACM_PCA` . +> +> enabled -> (boolean) +> +>> Indicates whether the trust anchor is enabled. +> +> createdAt -> (timestamp) +> +>> The ISO-8601 timestamp when the trust anchor was created. +> +> updatedAt -> (timestamp) +> +>> The ISO-8601 timestamp when the trust anchor was last updated. +> +> notificationSettings -> (list) +> +>> A list of notification settings to be associated to the trust anchor. +>> +>> Constraints: +>> +>> * min: `0` +>> * max: `50` +>> + +>> +>> (structure) +>> +>>> The state of a notification setting.