AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/add-policy-grant.md

Summary

Updated AWS CLI version reference from 2.32.33 to 2.33.1. Reordered command parameters and restructured tagged union documentation for --detail and --principal arguments. Modified pattern constraints for multiple parameters by removing start/end anchors and adjusting character requirements.

Security assessment

The changes involve documentation restructuring, parameter reordering, and pattern constraint relaxations (e.g., removing ^/$ anchors). No evidence of addressing specific vulnerabilities or security incidents. Pattern changes appear to broaden allowed inputs but don't explicitly address security weaknesses.

Diff

diff --git a/cli/latest/reference/datazone/add-policy-grant.md b/cli/latest/reference/datazone/add-policy-grant.md
index 870d106e1..646932ebf 100644
--- a//cli/latest/reference/datazone/add-policy-grant.md
+++ b//cli/latest/reference/datazone/add-policy-grant.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -67,2 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--client-token <value>]
-    --detail <value>
@@ -70 +67,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --entity-identifier <value>
@@ -71,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    --entity-identifier <value>
@@ -73,0 +72,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    --detail <value>
+    [--client-token <value>]
@@ -98,198 +97,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--client-token` (string)
-
-> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `128`
->   * pattern: `^[\x21-\x7E]+$`
-> 
-
-
-`--detail` (tagged union structure) [required]
-
-> The details of the policy grant.
-> 
-> ### Note
-> 
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `addToProjectMemberPool`, `createAssetType`, `createDomainUnit`, `createEnvironment`, `createEnvironmentFromBlueprint`, `createEnvironmentProfile`, `createFormType`, `createGlossary`, `createProject`, `createProjectFromProjectProfile`, `delegateCreateEnvironmentProfile`, `overrideDomainUnitOwners`, `overrideProjectOwners`, `useAssetType`.
-> 
-> addToProjectMemberPool -> (structure)
->
->> Specifies that the policy grant is to be added to the members of the project.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy grant is applied to child domain units.
-> 
-> createAssetType -> (structure)
->
->> Specifies that this is a create asset type policy.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy grant is applied to child domain units.
-> 
-> createDomainUnit -> (structure)
->
->> Specifies that this is a create domain unit policy.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy grant is applied to child domain units.
-> 
-> createEnvironment -> (structure)
->
->> Specifies that this is a create environment policy.
-> 
-> createEnvironmentFromBlueprint -> (structure)
->
->> The details of the policy of creating an environment.
-> 
-> createEnvironmentProfile -> (structure)
->
->> Specifies that this is a create environment profile policy.
->> 
->> domainUnitId -> (string)
->>
->>> The ID of the domain unit.
->>> 
->>> Constraints:
->>> 
->>>   * min: `1`
->>>   * max: `256`
->>>   * pattern: `^[a-z0-9_\-]+$`
->>> 
-
-> 
-> createFormType -> (structure)
->
->> Specifies that this is a create form type policy.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy grant is applied to child domain units.
-> 
-> createGlossary -> (structure)
->
->> Specifies that this is a create glossary policy.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy grant is applied to child domain units.
-> 
-> createProject -> (structure)
->
->> Specifies that this is a create project policy.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy grant is applied to child domain units.
-> 
-> createProjectFromProjectProfile -> (structure)
->
->> Specifies whether to create a project from project profile.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether to include child domain units when creating a project from project profile policy grant details
->> 
->> projectProfiles -> (list)
->>
->>> Specifies project profiles when creating a project from project profile policy grant details
->>> 
->>> (string)
-> 
-> delegateCreateEnvironmentProfile -> (structure)
->
->> Specifies that this is the delegation of the create environment profile policy.
-> 
-> overrideDomainUnitOwners -> (structure)
->
->> Specifies whether to override domain unit owners.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy is inherited by child domain units.
-> 
-> overrideProjectOwners -> (structure)
->
->> Specifies whether to override project owners.
->> 
->> includeChildDomainUnits -> (boolean)
->>
->>> Specifies whether the policy is inherited by child domain units.
-> 
-> useAssetType -> (structure)
->
->> Specifies the domain unit(s) whose projects can use this asset type while creating asset or asset revisions.
->> 
->> domainUnitId -> (string)
->>
->>> The ID of the domain unit.
->>> 
->>> Constraints:
->>> 
->>>   * min: `1`
->>>   * max: `256`
->>>   * pattern: `^[a-z0-9_\-]+$`
->>> 
-
-
-Shorthand Syntax:
-    
-    
-    addToProjectMemberPool={includeChildDomainUnits=boolean},createAssetType={includeChildDomainUnits=boolean},createDomainUnit={includeChildDomainUnits=boolean},createEnvironment={},createEnvironmentFromBlueprint={},createEnvironmentProfile={domainUnitId=string},createFormType={includeChildDomainUnits=boolean},createGlossary={includeChildDomainUnits=boolean},createProject={includeChildDomainUnits=boolean},createProjectFromProjectProfile={includeChildDomainUnits=boolean,projectProfiles=[string,string]},delegateCreateEnvironmentProfile={},overrideDomainUnitOwners={includeChildDomainUnits=boolean},overrideProjectOwners={includeChildDomainUnits=boolean},useAssetType={domainUnitId=string}
-    
-
-JSON Syntax:
-    
-    
-    {
-      "addToProjectMemberPool": {
-        "includeChildDomainUnits": true|false
-      },
-      "createAssetType": {
-        "includeChildDomainUnits": true|false
-      },
-      "createDomainUnit": {
-        "includeChildDomainUnits": true|false
-      },
-      "createEnvironment": {
-    
-      },
-      "createEnvironmentFromBlueprint": {
-    
-      },
-      "createEnvironmentProfile": {
-        "domainUnitId": "string"
-      },
-      "createFormType": {
-        "includeChildDomainUnits": true|false
-      },
-      "createGlossary": {
-        "includeChildDomainUnits": true|false
-      },
-      "createProject": {
-        "includeChildDomainUnits": true|false
-      },
-      "createProjectFromProjectProfile": {
-        "includeChildDomainUnits": true|false,
-        "projectProfiles": ["string", ...]