AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/create-account-pool.md

Summary

Updated AWS CLI version reference from 2.32.33 to 2.33.1. Restructured command parameters and options, including reordering of flags and reorganization of JSON syntax documentation. Modified pattern constraints by removing start/end anchors (^/$) from regex patterns for account IDs, regions, ARNs, and domain identifiers. Swapped positions of 'lambdaFunctionArn' and 'lambdaExecutionRoleArn' fields with updated pattern constraints.

Security assessment

The changes primarily involve documentation restructuring, version updates, and pattern constraint modifications without explicit security context. The removal of regex anchors could potentially allow broader input validation, but there's no evidence this addresses a specific vulnerability. No security advisories, CVE references, or vulnerability fixes are mentioned in the diff.

Diff

diff --git a/cli/latest/reference/datazone/create-account-pool.md b/cli/latest/reference/datazone/create-account-pool.md
index d9ae1404f..71a13a404 100644
--- a//cli/latest/reference/datazone/create-account-pool.md
+++ b//cli/latest/reference/datazone/create-account-pool.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -67,2 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --account-source <value>
-    [--description <value>]
@@ -70,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--description <value>]
@@ -71,0 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    --account-source <value>
@@ -95,0 +96,43 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--domain-identifier` (string) [required]
+
+> The ID of the domain where the account pool is created.
+> 
+> Constraints:
+> 
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
+> 
+
+
+`--name` (string) [required]
+
+> The name of the account pool.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `64`
+>   * pattern: `[\w -]+`
+> 
+
+
+`--description` (string)
+
+> The description of the account pool.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `2048`
+> 
+
+
+`--resolution-strategy` (string) [required]
+
+> The mechanism used to resolve the account selection from the account pool.
+> 
+> Possible values:
+> 
+>   * `MANUAL`
+> 
+
+
@@ -125,12 +168 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->>>>   * pattern: `^\d{12}$`
->>>> 
-
->>> 
->>> awsAccountName -> (string)
->>>
->>>> The account name.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * min: `1`
->>>>   * max: `256`
+>>>>   * pattern: `\d{12}`
@@ -155 +187 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->>>>>   * pattern: `^[a-z]{2}-[a-z]{4,10}-\d$`
+>>>>>   * pattern: `[a-z]{2}-[a-z]{4,10}-\d`
@@ -157,0 +190,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+>>> 
+>>> awsAccountName -> (string)
+>>>
+>>>> The account name.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `256`
+>>>> 
+
@@ -163 +206 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->> lambdaExecutionRoleArn -> (string)
+>> lambdaFunctionArn -> (string) [required]
@@ -165 +208 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->>> The ARN of the IAM role that enables Amazon SageMaker Unified Studio to invoke the Amazon Web Services Lambda funtion if the account source is the custom account pool handler.
+>>> The ARN of the Amazon Web Services Lambda function for the custom Amazon Web Services Lambda handler.
@@ -169 +212 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->>>   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
+>>>   * pattern: `arn:(?:aws|aws-cn|aws-us-gov):lambda:(?:[a-z]{2}(?:-gov)?-[a-z]+-\d{1,}):(\d{12}):function:[a-zA-Z0-9-_]+(?::[a-zA-Z0-9-_]+)?(?:\$[\w-]+)?`
@@ -173 +216 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->> lambdaFunctionArn -> (string) [required]
+>> lambdaExecutionRoleArn -> (string)
@@ -175 +218 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->>> The ARN of the Amazon Web Services Lambda function for the custom Amazon Web Services Lambda handler.
+>>> The ARN of the IAM role that enables Amazon SageMaker Unified Studio to invoke the Amazon Web Services Lambda funtion if the account source is the custom account pool handler.
@@ -179 +222 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->>>   * pattern: `^arn:(?:aws|aws-cn|aws-us-gov):lambda:(?:[a-z]{2}(?:-gov)?-[a-z]+-\d{1,}):(\d{12}):function:[a-zA-Z0-9-_]+(?::[a-zA-Z0-9-_]+)?(?:\$[\w-]+)?$`
+>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
@@ -190,2 +233,2 @@ JSON Syntax:
-          "awsAccountName": "string",
-          "supportedRegions": ["string", ...]
+          "supportedRegions": ["string", ...],
+          "awsAccountName": "string"
@@ -196,2 +239,2 @@ JSON Syntax:
-        "lambdaExecutionRoleArn": "string",
-        "lambdaFunctionArn": "string"
+        "lambdaFunctionArn": "string",
+        "lambdaExecutionRoleArn": "string"
@@ -202,43 +244,0 @@ JSON Syntax:
-`--description` (string)
-
-> The description of the account pool.
-> 
-> Constraints:
-> 
->   * min: `0`
->   * max: `2048`
-> 
-
-
-`--domain-identifier` (string) [required]
-
-> The ID of the domain where the account pool is created.
-> 
-> Constraints:
-> 
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
-> 
-
-
-`--name` (string) [required]
-
-> The name of the account pool.
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `64`
->   * pattern: `^[\w -]+$`
-> 
-
-
-`--resolution-strategy` (string) [required]
-
-> The mechanism used to resolve the account selection from the account pool.
-> 
-> Possible values:
-> 
->   * `MANUAL`
-> 
-
-
@@ -343,0 +344,53 @@ Disable automatically prompt for CLI input parameters.
+domainId -> (string)
+
+> The ID of the domain where the account pool is created.
+> 
+> Constraints:
+> 
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
+> 
+
+
+name -> (string)
+
+> The name of the account pool.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `64`
+>   * pattern: `[\w -]+`
+> 
+
+
+id -> (string)
+
+> The ID of the account pool.
+> 
+> Constraints:
+> 
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+> 
+
+
+description -> (string)
+
+> The description of the account pool.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `2048`