AWS cli documentation change
Summary
Updated outputSourceConfig parameters to swap KMSArn and outputS3Path order, added customerProfilesIntegrationConfig structure for Customer Profiles integration, and modified validation patterns
Security assessment
The change adds documentation about KMS encryption at rest options (customer-managed vs service-managed keys), which is a security feature. However, there's no indication this addresses a specific security vulnerability - it appears to be routine documentation of encryption capabilities.
Diff
diff --git a/cli/latest/reference/entityresolution/get-matching-workflow.md b/cli/latest/reference/entityresolution/get-matching-workflow.md index 85eee21da..cdbe66d4b 100644 --- a//cli/latest/reference/entityresolution/get-matching-workflow.md +++ b//cli/latest/reference/entityresolution/get-matching-workflow.md @@ -15 +15 @@ - * [AWS CLI 2.32.16 Command Reference](../../index.html) » + * [AWS CLI 2.32.17 Command Reference](../../index.html) » @@ -294 +294 @@ outputSourceConfig -> (list) ->> outputS3Path -> (string) [required] +>> KMSArn -> (string) @@ -296 +296 @@ outputSourceConfig -> (list) ->>> The S3 path to which Entity Resolution will write the output table. +>>> Customer KMS ARN for encryption at rest. If not provided, system will use an Entity Resolution managed KMS key. @@ -300,3 +300 @@ outputSourceConfig -> (list) ->>> * min: `1` ->>> * max: `1024` ->>> * pattern: `s3://[a-z0-9][\.\-a-z0-9]{1,61}[a-z0-9](/.*)?` +>>> * pattern: `arn:aws:kms:.*:[0-9]+:.*` @@ -306 +304 @@ outputSourceConfig -> (list) ->> KMSArn -> (string) +>> outputS3Path -> (string) @@ -308 +306 @@ outputSourceConfig -> (list) ->>> Customer KMS ARN for encryption at rest. If not provided, system will use an Entity Resolution managed KMS key. +>>> The S3 path to which Entity Resolution will write the output table. @@ -312 +310,3 @@ outputSourceConfig -> (list) ->>> * pattern: `arn:aws:kms:.*:[0-9]+:.*` +>>> * min: `0` +>>> * max: `1024` +>>> * pattern: `$|^s3://[a-z0-9][\.\-a-z0-9]{1,61}[a-z0-9](/.*)?` @@ -349,0 +350,24 @@ outputSourceConfig -> (list) +>> +>> customerProfilesIntegrationConfig -> (structure) +>> +>>> Specifies the Customer Profiles integration configuration for sending matched output directly to Customer Profiles. When configured, Entity Resolution automatically creates and updates customer profiles based on match clusters, eliminating the need for manual Amazon S3 integration setup. +>>> +>>> domainArn -> (string) [required] +>>> +>>>> The Amazon Resource Name (ARN) of the Customer Profiles domain where the matched output will be sent. +>>>> +>>>> Constraints: +>>>> +>>>> * pattern: `arn:(aws|aws-us-gov|aws-cn):profile:[a-z]{2}-[a-z]{1,10}-[0-9]:[0-9]{12}:(domains/[a-zA-Z_0-9-]{1,255})` +>>>> + +>>> +>>> objectTypeArn -> (string) [required] +>>> +>>>> The Amazon Resource Name (ARN) of the Customer Profiles object type that defines the structure for the matched customer data. +>>>> +>>>> Constraints: +>>>> +>>>> * pattern: `arn:(aws|aws-us-gov|aws-cn):profile:[a-z]{2}-[a-z]{1,10}-[0-9]:[0-9]{12}:(domains/[a-zA-Z_0-9-]{1,255}/object-types/[a-zA-Z_0-9-]{1,255})` +>>>> + @@ -612 +636 @@ tags -> (map) - * [AWS CLI 2.32.16 Command Reference](../../index.html) » + * [AWS CLI 2.32.17 Command Reference](../../index.html) »