AWS cli documentation change
Summary
Updated AWS CLI version reference, restructured parameters and properties documentation for the create-connection command. Major reorganization of glueProperties structure including renamed fields, added new properties, and modified pattern validations. Added documentation for hyperPodProperties, iamProperties, redshiftProperties, sparkEmrProperties, s3Properties, amazonQProperties, and mlflowProperties. Updated pattern validations to remove start/end anchors (^/$).
Security assessment
The changes add documentation for security features like IAM roles (iamProperties), KMS keys (kmsKeyArn), secret ARNs (secretArn), authentication configurations (authenticationConfiguration), and trusted identity propagation (enable-trusted-identity-propagation). However, there's no concrete evidence of addressing a specific security vulnerability. The pattern changes (removing ^/$) might impact input validation but aren't explicitly security fixes.
Diff
diff --git a/cli/latest/reference/datazone/create-connection.md b/cli/latest/reference/datazone/create-connection.md index de9787f52..eeadd2c43 100644 --- a//cli/latest/reference/datazone/create-connection.md +++ b//cli/latest/reference/datazone/create-connection.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -71 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--enable-trusted-identity-propagation | --no-enable-trusted-identity-propagation] @@ -74,0 +74 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--enable-trusted-identity-propagation | --no-enable-trusted-identity-propagation] @@ -110 +110 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo ->> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` +>> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` @@ -120 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo ->> * pattern: `^\d{12}$` +>> * pattern: `\d{12}` @@ -130 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo ->> * pattern: `^[a-z]{2}-[a-z]{4,10}-\d$` +>> * pattern: `[a-z]{2}-[a-z]{4,10}-\d` @@ -183 +183 @@ JSON Syntax: -> * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$` +> * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}` @@ -187,4 +186,0 @@ JSON Syntax: -`--enable-trusted-identity-propagation` | `--no-enable-trusted-identity-propagation` (boolean) - -> Specifies whether the trusted identity propagation is enabled. - @@ -197 +193 @@ JSON Syntax: -> * pattern: `^[a-zA-Z0-9_-]{1,36}$` +> * pattern: `[a-zA-Z0-9_-]{1,36}` @@ -218,32 +214 @@ JSON Syntax: -> This is a Tagged Union structure. Only one of the following top level keys can be set: `amazonQProperties`, `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `mlflowProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`, `sparkGlueProperties`. -> -> amazonQProperties -> (structure) -> ->> The Amazon Q properties of the connection. ->> ->> authMode -> (string) ->> ->>> The authentication mode of the connection’s Amazon Q properties. ->>> ->>> Constraints: ->>> ->>> * min: `0` ->>> * max: `128` ->>> - ->> ->> isEnabled -> (boolean) [required] ->> ->>> Specifies whether Amazon Q is enabled for the connection. ->> ->> profileArn -> (string) ->> ->>> The profile ARN of the connection’s Amazon Q properties. ->>> ->>> Constraints: ->>> ->>> * min: `0` ->>> * max: `2048` ->>> * pattern: `^arn:aws[a-z\-]*:[a-z0-9\-]+:[a-z0-9\-]*:[0-9]*:.*` ->>> - +> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`. @@ -274 +239 @@ JSON Syntax: ->>> athenaProperties -> (map) +>>> connectionProperties -> (map) @@ -276 +241 @@ JSON Syntax: ->>>> The Amazon Athena properties of the Amazon Web Services Glue connection. +>>>> The connection properties of the Amazon Web Services Glue connection. @@ -279,7 +243,0 @@ JSON Syntax: ->>>> ->>>>> Constraints: ->>>>> ->>>>> * min: `1` ->>>>> * max: `128` ->>>>> - @@ -296 +254 @@ JSON Syntax: ->>> authenticationConfiguration -> (structure) +>>> physicalConnectionRequirements -> (structure) @@ -298 +256 @@ JSON Syntax: ->>>> The authentication configuration of the Amazon Web Services Glue connection. +>>>> The physical connection requirements for the Amazon Web Services Glue connection. @@ -300 +258 @@ JSON Syntax: ->>>> authenticationType -> (string) +>>>> subnetId -> (string) @@ -302 +260 @@ JSON Syntax: ->>>>> The authentication type of a connection. +>>>>> The subnet ID of the physical connection requirements of a connection. @@ -304 +262 @@ JSON Syntax: ->>>>> Possible values: +>>>>> Constraints: @@ -306,3 +264,3 @@ JSON Syntax: ->>>>> * `BASIC` ->>>>> * `OAUTH2` ->>>>> * `CUSTOM` +>>>>> * min: `0` +>>>>> * max: `32` +>>>>> * pattern: `subnet-[a-z0-9]+` @@ -312 +270 @@ JSON Syntax: ->>>> basicAuthenticationCredentials -> (structure) +>>>> subnetIdList -> (list) @@ -314 +272 @@ JSON Syntax: ->>>>> The basic authentication credentials of a connection. +>>>>> The subnet ID list of the physical connection requirements of a connection. @@ -316 +274,4 @@ JSON Syntax: ->>>>> password -> (string) +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `50` @@ -318,8 +278,0 @@ JSON Syntax: ->>>>>> The password for a connection. ->>>>>> ->>>>>> Constraints: ->>>>>> ->>>>>> * min: `0` ->>>>>> * max: `512` ->>>>>> * pattern: `^.*$` ->>>>>> @@ -328 +281 @@ JSON Syntax: ->>>>> userName -> (string) +>>>>> (string) @@ -330,2 +282,0 @@ JSON Syntax: ->>>>>> The user name for the connecion. ->>>>>> @@ -335,2 +286,2 @@ JSON Syntax: ->>>>>> * max: `512` ->>>>>> * pattern: `^\S+$` +>>>>>> * max: `32` +>>>>>> * pattern: `subnet-[a-z0-9]+` @@ -340 +291 @@ JSON Syntax: ->>>> customAuthenticationCredentials -> (map) +>>>> securityGroupIdList -> (list) @@ -342 +293 @@ JSON Syntax: ->>>>> The custom authentication credentials of a connection. +>>>>> The group ID list of the physical connection requirements of a connection. @@ -344 +295,4 @@ JSON Syntax: ->>>>> key -> (string) +>>>>> Constraints: +>>>>> +>>>>> * min: `0` +>>>>> * max: `50` @@ -346,5 +299,0 @@ JSON Syntax: ->>>>>> Constraints: ->>>>>> ->>>>>> * min: `1` ->>>>>> * max: `128` ->>>>>> @@ -353 +302 @@ JSON Syntax: ->>>>> value -> (string) +>>>>> (string) @@ -358 +307 @@ JSON Syntax: ->>>>>> * max: `2048` +>>>>>> * max: `255` @@ -362 +311 @@ JSON Syntax: ->>>> kmsKeyArn -> (string) +>>>> availabilityZone -> (string) @@ -364 +313 @@ JSON Syntax: ->>>>> The KMS key ARN of a connection. +>>>>> The availability zone of the physical connection requirements of a connection. @@ -368 +317,2 @@ JSON Syntax: ->>>>> * pattern: `^$|arn:aws[a-z0-9-]*:kms:.*$` +>>>>> * min: `1` +>>>>> * max: `255` @@ -370,0 +321,4 @@ JSON Syntax: +>>> +>>> name -> (string) +>>> +>>>> The name of the Amazon Web Services Glue connection. @@ -372 +326,4 @@ JSON Syntax: ->>>> oAuth2Properties -> (structure) +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `255` @@ -374,15 +330,0 @@ JSON Syntax: ->>>>> The oAuth2 properties of a connection. ->>>>> ->>>>> authorizationCodeProperties -> (structure) ->>>>> ->>>>>> The authorization code properties of the OAuth2 properties. ->>>>>> ->>>>>> authorizationCode -> (string) ->>>>>> ->>>>>>> The authorization code of a connection. ->>>>>>> ->>>>>>> Constraints: ->>>>>>> ->>>>>>> * min: `1` ->>>>>>> * max: `4096` ->>>>>>> @@ -390,10 +332,51 @@ JSON Syntax: ->>>>>> ->>>>>> redirectUri -> (string) ->>>>>> ->>>>>>> The redirect URI of a connection. ->>>>>>>