AWS cli documentation change

Service: cli · 2025-12-16 · Documentation medium

File: cli/latest/reference/entityresolution/create-id-mapping-workflow.md

Summary

Swapped order of KMSArn and outputS3Path parameters, updated validation patterns, and clarified encryption key management

Security assessment

The changes better document encryption-at-rest options by clarifying KMS key usage patterns and requirements. While this improves security documentation, there's no evidence of addressing a specific vulnerability. The update emphasizes customer-managed KMS keys vs service-managed keys for encryption, which is a security feature documentation improvement.

Diff

diff --git a/cli/latest/reference/entityresolution/create-id-mapping-workflow.md b/cli/latest/reference/entityresolution/create-id-mapping-workflow.md
index 5f0241e83..4fc32216d 100644
--- a//cli/latest/reference/entityresolution/create-id-mapping-workflow.md
+++ b//cli/latest/reference/entityresolution/create-id-mapping-workflow.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.17 Command Reference](../../index.html) »
@@ -214 +214 @@ JSON Syntax:
->> outputS3Path -> (string) [required]
+>> KMSArn -> (string)
@@ -216 +216 @@ JSON Syntax:
->>> The S3 path to which Entity Resolution will write the output table.
+>>> Customer KMS ARN for encryption at rest. If not provided, system will use an Entity Resolution managed KMS key.
@@ -220,3 +220 @@ JSON Syntax:
->>>   * min: `1`
->>>   * max: `1024`
->>>   * pattern: `s3://[a-z0-9][\.\-a-z0-9]{1,61}[a-z0-9](/.*)?`
+>>>   * pattern: `arn:aws:kms:.*:[0-9]+:.*`
@@ -226 +224 @@ JSON Syntax:
->> KMSArn -> (string)
+>> outputS3Path -> (string) [required]
@@ -228 +226 @@ JSON Syntax:
->>> Customer KMS ARN for encryption at rest. If not provided, system will use an Entity Resolution managed KMS key.
+>>> The S3 path to which Entity Resolution will write the output table.
@@ -232 +230,3 @@ JSON Syntax:
->>>   * pattern: `arn:aws:kms:.*:[0-9]+:.*`
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `s3://[a-z0-9][\.\-a-z0-9]{1,61}[a-z0-9](/.*)?`
@@ -239 +239 @@ Shorthand Syntax:
-    outputS3Path=string,KMSArn=string ...
+    KMSArn=string,outputS3Path=string ...
@@ -247,2 +247,2 @@ JSON Syntax:
-        "outputS3Path": "string",
-        "KMSArn": "string"
+        "KMSArn": "string",
+        "outputS3Path": "string"
@@ -708 +708 @@ outputSourceConfig -> (list)
->> outputS3Path -> (string) [required]
+>> KMSArn -> (string)
@@ -710 +710 @@ outputSourceConfig -> (list)
->>> The S3 path to which Entity Resolution will write the output table.
+>>> Customer KMS ARN for encryption at rest. If not provided, system will use an Entity Resolution managed KMS key.
@@ -714,3 +714 @@ outputSourceConfig -> (list)
->>>   * min: `1`
->>>   * max: `1024`
->>>   * pattern: `s3://[a-z0-9][\.\-a-z0-9]{1,61}[a-z0-9](/.*)?`
+>>>   * pattern: `arn:aws:kms:.*:[0-9]+:.*`
@@ -720 +718 @@ outputSourceConfig -> (list)
->> KMSArn -> (string)
+>> outputS3Path -> (string) [required]
@@ -722 +720 @@ outputSourceConfig -> (list)
->>> Customer KMS ARN for encryption at rest. If not provided, system will use an Entity Resolution managed KMS key.
+>>> The S3 path to which Entity Resolution will write the output table.
@@ -726 +724,3 @@ outputSourceConfig -> (list)
->>>   * pattern: `arn:aws:kms:.*:[0-9]+:.*`
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `s3://[a-z0-9][\.\-a-z0-9]{1,61}[a-z0-9](/.*)?`
@@ -912 +912 @@ roleArn -> (string)
-  * [AWS CLI 2.32.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.17 Command Reference](../../index.html) »