AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/cancel-subscription.md

Summary

Updated AWS CLI version reference from 2.32.33 to 2.33.1. Modified pattern constraints by removing start/end anchors. Restructured output fields: added 'id' field, reordered fields, expanded 'subscribedPrincipal' with detailed IAM/SSO structures, and reorganized 'subscribedListing' fields.

Security assessment

Changes add detailed documentation about security principals (IAM/SSO structures) and authentication patterns, but there's no evidence of addressing a specific vulnerability. Pattern constraint modifications (removing ^/$ anchors) might relax validation but don't directly indicate a security fix.

Diff

diff --git a/cli/latest/reference/datazone/cancel-subscription.md b/cli/latest/reference/datazone/cancel-subscription.md
index a039920f3..bfaa4d437 100644
--- a//cli/latest/reference/datazone/cancel-subscription.md
+++ b//cli/latest/reference/datazone/cancel-subscription.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -99 +99 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -109 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -212 +212,8 @@ Disable automatically prompt for CLI input parameters.
-createdAt -> (timestamp)
+id -> (string)
+
+> The identifier of the subscription.
+> 
+> Constraints:
+> 
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+> 
@@ -214 +220,0 @@ createdAt -> (timestamp)
-> The timestamp that specifies when the request to cancel the subscription was created.
@@ -219,0 +226,4 @@ createdBy -> (string)
+updatedBy -> (string)
+
+> The Amazon DataZone user that cancelled the subscription.
+
@@ -226 +236 @@ domainId -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -230 +240 @@ domainId -> (string)
-id -> (string)
+status -> (string)
@@ -232 +242 @@ id -> (string)
-> The identifier of the subscription.
+> The status of the request to cancel the subscription.
@@ -234 +244 @@ id -> (string)
-> Constraints:
+> Possible values:
@@ -236 +246,3 @@ id -> (string)
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * `APPROVED`
+>   * `REVOKED`
+>   * `CANCELLED`
@@ -240 +252 @@ id -> (string)
-retainPermissions -> (boolean)
+createdAt -> (timestamp)
@@ -242 +254 @@ retainPermissions -> (boolean)
-> Specifies whether the permissions to the asset are retained after the subscription is cancelled.
+> The timestamp that specifies when the request to cancel the subscription was created.
@@ -244 +256 @@ retainPermissions -> (boolean)
-status -> (string)
+updatedAt -> (timestamp)
@@ -246 +258,5 @@ status -> (string)
-> The status of the request to cancel the subscription.
+> The timestamp that specifies when the subscription was cancelled.
+
+subscribedPrincipal -> (tagged union structure)
+
+> The Amazon DataZone user who is made a subscriber to the specified asset by the subscription that is being cancelled.
@@ -248 +264 @@ status -> (string)
-> Possible values:
+> ### Note
@@ -250,3 +266,29 @@ status -> (string)
->   * `APPROVED`
->   * `REVOKED`
->   * `CANCELLED`
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`, `user`, `group`, `iam`.
+> 
+> project -> (structure)
+>
+>> The project that has the subscription grant.
+>> 
+>> id -> (string)
+>>
+>>> The identifier of the project that has the subscription grant.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the project that has the subscription grant.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `64`
+>>>   * pattern: `[\w -]+`
+>>> 
+
+> 
+> user -> (structure)
@@ -253,0 +296,96 @@ status -> (string)
+>> The subscribed user.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed user.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
+>>> 
+
+>> 
+>> details -> (tagged union structure)
+>>
+>>> The subscribed user details.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>> 
+>>> iam -> (structure)
+>>>
+>>>> The IAM details of the user profile.
+>>>> 
+>>>> arn -> (string)
+>>>>
+>>>>> The ARN of the IAM user.
+>>>> 
+>>>> principalId -> (string)
+>>>>
+>>>>> The principal ID as part of the IAM user profile details.
+>>> 
+>>> sso -> (structure)
+>>>
+>>>> The SSO details of the user profile.
+>>>> 
+>>>> username -> (string)
+>>>>
+>>>>> The username as part of the SSO user profile detail.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `[a-zA-Z_0-9+=,.@-]+`
+>>>>> 
+
+>>>> 
+>>>> firstName -> (string)
+>>>>
+>>>>> The first name as part of the SSO user profile detail.
+>>>> 
+>>>> lastName -> (string)
+>>>>
+>>>>> The last name as part of the SSO user profile detail.
+> 
+> group -> (structure)
+>
+>> The subscribed group.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `[a-zA-Z_0-9+=,.@-]+`
+>>> 
+
+> 
+> iam -> (structure)
+>
+>> The subscribed IAM principal.
+>> 
+>> principalArn -> (string)
+>>
+>>> The ARN of the subscribed IAM principal.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `255`
+>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|user)(/[\w+=,.@-]*)*/[\w+=,.@-]+`
+>>> 
@@ -260 +398 @@ subscribedListing -> (structure)
-> description -> (string) [required]
+> id -> (string) [required]
@@ -262 +400 @@ subscribedListing -> (structure)