AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-04 · Documentation low

File: cli/latest/reference/identitystore/create-user.md

Summary

Added new --roles parameter for assigning roles during user creation, including role structure documentation

Security assessment

Added documentation for role assignment feature which relates to access control. This enhances security documentation but doesn't address a specific vulnerability.

Diff

diff --git a/cli/latest/reference/identitystore/create-user.md b/cli/latest/reference/identitystore/create-user.md
index 677bed446..0e53c6b35 100644
--- a//cli/latest/reference/identitystore/create-user.md
+++ b//cli/latest/reference/identitystore/create-user.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.28 Command Reference](../../index.html) »
@@ -85,0 +86 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/identi
+    [--roles <value>]
@@ -675,0 +677,62 @@ JSON Syntax:
+`--roles` (list)
+
+> A list of `Role` objects containing roles associated with the user.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `1`
+> 
+
+> 
+> (structure)
+>
+>> The role associated with the user.
+>> 
+>> Value -> (string)
+>>
+>>> A string containing a role name. For example, “Researcher.”
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+`
+>>> 
+
+>> 
+>> Type -> (string)
+>>
+>>> A string representing the type of role. For example, “Work.”
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+`
+>>> 
+
+>> 
+>> Primary -> (boolean)
+>>
+>>> A Boolean value representing whether this is the primary role for the associated resource.
+
+Shorthand Syntax:
+    
+    
+    Value=string,Type=string,Primary=boolean ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "Value": "string",
+        "Type": "string",
+        "Primary": true|false
+      }
+      ...
+    ]
+    
+
@@ -841 +904 @@ UserId -> (string)
-  * [AWS CLI 2.32.26 Command Reference](../../index.html) »
+  * [AWS CLI 2.32.28 Command Reference](../../index.html) »
@@ -848 +911 @@ UserId -> (string)
-© Copyright 2025, Amazon Web Services. Created using [Sphinx](https://www.sphinx-doc.org/). 
+© Copyright 2026, Amazon Web Services. Created using [Sphinx](https://www.sphinx-doc.org/).