AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-12-25 · Documentation low

File: cli/latest/reference/configservice/list-discovered-resources.md

Summary

Updated AWS CLI version reference from 2.32.21 to 2.32.23 and added 91 new AWS resource types to the list of discoverable resources

Security assessment

The change adds multiple security-related resource types (e.g., GuardDuty::MalwareProtectionPlan, OpenSearchServerless::SecurityConfig, SecretsManager::ResourcePolicy, Route53::DNSSEC) but doesn't address any specific vulnerability. The update expands documentation of security features by including these resources in AWS Config's discovery capabilities, improving visibility of security configurations.

Diff

diff --git a/cli/latest/reference/configservice/list-discovered-resources.md b/cli/latest/reference/configservice/list-discovered-resources.md
index 0439daa7c..55cd4ba07 100644
--- a//cli/latest/reference/configservice/list-discovered-resources.md
+++ b//cli/latest/reference/configservice/list-discovered-resources.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.23 Command Reference](../../index.html) »
@@ -571,0 +572,91 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/config
+>   * `AWS::CloudFormation::StackSet`
+>   * `AWS::MediaPackageV2::Channel`
+>   * `AWS::S3::AccessGrantsLocation`
+>   * `AWS::S3::AccessGrant`
+>   * `AWS::S3::AccessGrantsInstance`
+>   * `AWS::EMRServerless::Application`
+>   * `AWS::Config::AggregationAuthorization`
+>   * `AWS::Bedrock::ApplicationInferenceProfile`
+>   * `AWS::ApiGatewayV2::Integration`
+>   * `AWS::SageMaker::MlflowTrackingServer`
+>   * `AWS::SageMaker::ModelBiasJobDefinition`
+>   * `AWS::SecretsManager::RotationSchedule`
+>   * `AWS::Deadline::QueueFleetAssociation`
+>   * `AWS::ECR::RepositoryCreationTemplate`
+>   * `AWS::CloudFormation::LambdaHook`
+>   * `AWS::EC2::SubnetNetworkAclAssociation`
+>   * `AWS::ApiGateway::UsagePlan`
+>   * `AWS::AppConfig::Extension`
+>   * `AWS::Deadline::Fleet`
+>   * `AWS::EMR::Studio`
+>   * `AWS::S3Tables::TableBucket`
+>   * `AWS::CloudFront::RealtimeLogConfig`
+>   * `AWS::BackupGateway::Hypervisor`
+>   * `AWS::BCMDataExports::Export`
+>   * `AWS::CloudFormation::GuardHook`
+>   * `AWS::CloudFront::PublicKey`
+>   * `AWS::CloudTrail::EventDataStore`
+>   * `AWS::EntityResolution::IdMappingWorkflow`
+>   * `AWS::EntityResolution::SchemaMapping`
+>   * `AWS::IoT::DomainConfiguration`
+>   * `AWS::PCAConnectorAD::DirectoryRegistration`
+>   * `AWS::RDS::Integration`
+>   * `AWS::Config::ConformancePack`
+>   * `AWS::RolesAnywhere::Profile`
+>   * `AWS::CodeArtifact::Domain`
+>   * `AWS::Backup::RestoreTestingPlan`
+>   * `AWS::Config::StoredQuery`
+>   * `AWS::SageMaker::DataQualityJobDefinition`
+>   * `AWS::SageMaker::ModelExplainabilityJobDefinition`
+>   * `AWS::SageMaker::ModelQualityJobDefinition`
+>   * `AWS::SageMaker::StudioLifecycleConfig`
+>   * `AWS::SES::DedicatedIpPool`
+>   * `AWS::SES::MailManagerTrafficPolicy`
+>   * `AWS::SSM::ResourceDataSync`
+>   * `AWS::BedrockAgentCore::Runtime`
+>   * `AWS::BedrockAgentCore::BrowserCustom`
+>   * `AWS::ElasticLoadBalancingV2::TargetGroup`
+>   * `AWS::EMRContainers::VirtualCluster`
+>   * `AWS::EntityResolution::MatchingWorkflow`
+>   * `AWS::IoTCoreDeviceAdvisor::SuiteDefinition`
+>   * `AWS::EC2::SecurityGroupVpcAssociation`
+>   * `AWS::EC2::VerifiedAccessInstance`
+>   * `AWS::KafkaConnect::CustomPlugin`
+>   * `AWS::NetworkManager::TransitGatewayPeering`
+>   * `AWS::OpenSearchServerless::SecurityConfig`
+>   * `AWS::Redshift::Integration`
+>   * `AWS::RolesAnywhere::TrustAnchor`
+>   * `AWS::Route53Profiles::ProfileAssociation`
+>   * `AWS::SSMIncidents::ResponsePlan`
+>   * `AWS::Transfer::Server`
+>   * `AWS::Glue::Database`
+>   * `AWS::Organizations::OrganizationalUnit`
+>   * `AWS::EC2::IPAMPoolCidr`
+>   * `AWS::EC2::VPCGatewayAttachment`
+>   * `AWS::Bedrock::Prompt`
+>   * `AWS::Comprehend::Flywheel`
+>   * `AWS::DataSync::Agent`
+>   * `AWS::MediaTailor::LiveSource`
+>   * `AWS::MSK::ServerlessCluster`
+>   * `AWS::IoTSiteWise::Asset`
+>   * `AWS::B2BI::Capability`
+>   * `AWS::CloudFront::KeyValueStore`
+>   * `AWS::Deadline::Monitor`
+>   * `AWS::GuardDuty::MalwareProtectionPlan`
+>   * `AWS::Location::APIKey`
+>   * `AWS::MediaPackageV2::OriginEndpoint`
+>   * `AWS::PCAConnectorAD::Connector`
+>   * `AWS::S3Tables::TableBucketPolicy`
+>   * `AWS::SecretsManager::ResourcePolicy`
+>   * `AWS::SSMContacts::Contact`
+>   * `AWS::IoT::ThingGroup`
+>   * `AWS::ImageBuilder::LifecyclePolicy`
+>   * `AWS::GameLift::Build`
+>   * `AWS::ECR::ReplicationConfiguration`
+>   * `AWS::EC2::SubnetCidrBlock`
+>   * `AWS::Connect::SecurityProfile`
+>   * `AWS::CleanRoomsML::TrainingDataset`
+>   * `AWS::AppStream::AppBlockBuilder`
+>   * `AWS::Route53::DNSSEC`
+>   * `AWS::SageMaker::UserProfile`
+>   * `AWS::ApiGateway::Method`
@@ -1211,0 +1303,91 @@ resourceIdentifiers -> (list)
+>>>   * `AWS::CloudFormation::StackSet`
+>>>   * `AWS::MediaPackageV2::Channel`
+>>>   * `AWS::S3::AccessGrantsLocation`
+>>>   * `AWS::S3::AccessGrant`
+>>>   * `AWS::S3::AccessGrantsInstance`
+>>>   * `AWS::EMRServerless::Application`
+>>>   * `AWS::Config::AggregationAuthorization`
+>>>   * `AWS::Bedrock::ApplicationInferenceProfile`
+>>>   * `AWS::ApiGatewayV2::Integration`
+>>>   * `AWS::SageMaker::MlflowTrackingServer`
+>>>   * `AWS::SageMaker::ModelBiasJobDefinition`
+>>>   * `AWS::SecretsManager::RotationSchedule`
+>>>   * `AWS::Deadline::QueueFleetAssociation`
+>>>   * `AWS::ECR::RepositoryCreationTemplate`
+>>>   * `AWS::CloudFormation::LambdaHook`
+>>>   * `AWS::EC2::SubnetNetworkAclAssociation`
+>>>   * `AWS::ApiGateway::UsagePlan`
+>>>   * `AWS::AppConfig::Extension`
+>>>   * `AWS::Deadline::Fleet`
+>>>   * `AWS::EMR::Studio`
+>>>   * `AWS::S3Tables::TableBucket`
+>>>   * `AWS::CloudFront::RealtimeLogConfig`
+>>>   * `AWS::BackupGateway::Hypervisor`
+>>>   * `AWS::BCMDataExports::Export`
+>>>   * `AWS::CloudFormation::GuardHook`
+>>>   * `AWS::CloudFront::PublicKey`
+>>>   * `AWS::CloudTrail::EventDataStore`
+>>>   * `AWS::EntityResolution::IdMappingWorkflow`
+>>>   * `AWS::EntityResolution::SchemaMapping`
+>>>   * `AWS::IoT::DomainConfiguration`
+>>>   * `AWS::PCAConnectorAD::DirectoryRegistration`
+>>>   * `AWS::RDS::Integration`
+>>>   * `AWS::Config::ConformancePack`
+>>>   * `AWS::RolesAnywhere::Profile`
+>>>   * `AWS::CodeArtifact::Domain`
+>>>   * `AWS::Backup::RestoreTestingPlan`
+>>>   * `AWS::Config::StoredQuery`
+>>>   * `AWS::SageMaker::DataQualityJobDefinition`
+>>>   * `AWS::SageMaker::ModelExplainabilityJobDefinition`
+>>>   * `AWS::SageMaker::ModelQualityJobDefinition`
+>>>   * `AWS::SageMaker::StudioLifecycleConfig`
+>>>   * `AWS::SES::DedicatedIpPool`
+>>>   * `AWS::SES::MailManagerTrafficPolicy`
+>>>   * `AWS::SSM::ResourceDataSync`
+>>>   * `AWS::BedrockAgentCore::Runtime`
+>>>   * `AWS::BedrockAgentCore::BrowserCustom`
+>>>   * `AWS::ElasticLoadBalancingV2::TargetGroup`
+>>>   * `AWS::EMRContainers::VirtualCluster`
+>>>   * `AWS::EntityResolution::MatchingWorkflow`
+>>>   * `AWS::IoTCoreDeviceAdvisor::SuiteDefinition`
+>>>   * `AWS::EC2::SecurityGroupVpcAssociation`
+>>>   * `AWS::EC2::VerifiedAccessInstance`
+>>>   * `AWS::KafkaConnect::CustomPlugin`
+>>>   * `AWS::NetworkManager::TransitGatewayPeering`
+>>>   * `AWS::OpenSearchServerless::SecurityConfig`
+>>>   * `AWS::Redshift::Integration`
+>>>   * `AWS::RolesAnywhere::TrustAnchor`
+>>>   * `AWS::Route53Profiles::ProfileAssociation`
+>>>   * `AWS::SSMIncidents::ResponsePlan`
+>>>   * `AWS::Transfer::Server`
+>>>   * `AWS::Glue::Database`
+>>>   * `AWS::Organizations::OrganizationalUnit`
+>>>   * `AWS::EC2::IPAMPoolCidr`
+>>>   * `AWS::EC2::VPCGatewayAttachment`
+>>>   * `AWS::Bedrock::Prompt`
+>>>   * `AWS::Comprehend::Flywheel`
+>>>   * `AWS::DataSync::Agent`
+>>>   * `AWS::MediaTailor::LiveSource`
+>>>   * `AWS::MSK::ServerlessCluster`
+>>>   * `AWS::IoTSiteWise::Asset`
+>>>   * `AWS::B2BI::Capability`
+>>>   * `AWS::CloudFront::KeyValueStore`
+>>>   * `AWS::Deadline::Monitor`
+>>>   * `AWS::GuardDuty::MalwareProtectionPlan`
+>>>   * `AWS::Location::APIKey`
+>>>   * `AWS::MediaPackageV2::OriginEndpoint`
+>>>   * `AWS::PCAConnectorAD::Connector`
+>>>   * `AWS::S3Tables::TableBucketPolicy`
+>>>   * `AWS::SecretsManager::ResourcePolicy`
+>>>   * `AWS::SSMContacts::Contact`
+>>>   * `AWS::IoT::ThingGroup`
+>>>   * `AWS::ImageBuilder::LifecyclePolicy`
+>>>   * `AWS::GameLift::Build`
+>>>   * `AWS::ECR::ReplicationConfiguration`
+>>>   * `AWS::EC2::SubnetCidrBlock`
+>>>   * `AWS::Connect::SecurityProfile`
+>>>   * `AWS::CleanRoomsML::TrainingDataset`
+>>>   * `AWS::AppStream::AppBlockBuilder`
+>>>   * `AWS::Route53::DNSSEC`
+>>>   * `AWS::SageMaker::UserProfile`
+>>>   * `AWS::ApiGateway::Method`
@@ -1248 +1430 @@ nextToken -> (string)
-  * [AWS CLI 2.32.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.23 Command Reference](../../index.html) »