AWS cli documentation change
Summary
Updated AWS CLI version reference from 2.32.33 to 2.33.1. Reorganized command parameters, modified pattern validations by removing start/end anchors (^/$), added wildcards (.*) to some patterns, and restructured parameter documentation order. Changed the position of parameters like --name, --single-sign-on, --domain-version, --service-role, and --client-token in both syntax and output sections.
Security assessment
The changes involve documentation reorganization and pattern validation updates without explicit security context. While pattern modifications (like removing ^/$ anchors) could theoretically impact input validation, there's no evidence this addresses a specific vulnerability. Security-related parameters like KMS keys and IAM roles remain documented but weren't added as new security features.
Diff
diff --git a/cli/latest/reference/datazone/create-domain.md b/cli/latest/reference/datazone/create-domain.md index dbf21c158..b6839125d 100644 --- a//cli/latest/reference/datazone/create-domain.md +++ b//cli/latest/reference/datazone/create-domain.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -67 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--client-token <value>] + --name <value> @@ -68,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--single-sign-on <value>] @@ -70 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--domain-version <value>] @@ -72,3 +71,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - --name <value> - [--service-role <value>] - [--single-sign-on <value>] @@ -75,0 +73,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--domain-version <value>] + [--service-role <value>] + [--client-token <value>] @@ -100,41 +99,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--client-token` (string) - -> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request. - -`--description` (string) - -> The description of the Amazon DataZone domain. - -`--domain-execution-role` (string) [required] - -> The domain execution role that is created when an Amazon DataZone domain is created. The domain execution role is created in the Amazon Web Services account that houses the Amazon DataZone domain. -> -> Constraints: -> -> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` -> - - -`--domain-version` (string) - -> The version of the domain that is created. -> -> Possible values: -> -> * `V1` -> * `V2` -> - - -`--kms-key-identifier` (string) - -> The identifier of the Amazon Web Services Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data. -> -> Constraints: -> -> * min: `1` -> * max: `1024` -> * pattern: `^arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}$` -> - - @@ -145,8 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--service-role` (string) - -> The service role of the domain that is created. -> -> Constraints: -> -> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` -> +`--description` (string) @@ -153,0 +106 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo +> The description of the Amazon DataZone domain. @@ -158,10 +110,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> -> idcInstanceArn -> (string) -> ->> The ARN of the IDC instance. ->> ->> Constraints: ->> ->> * pattern: `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}` ->> - @@ -189,0 +133,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo +> +> idcInstanceArn -> (string) +> +>> The ARN of the IDC instance. +>> +>> Constraints: +>> +>> * pattern: `.*arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}.*` +>> + @@ -194 +147 @@ Shorthand Syntax: - idcInstanceArn=string,type=string,userAssignment=string + type=string,userAssignment=string,idcInstanceArn=string @@ -201 +153,0 @@ JSON Syntax: - "idcInstanceArn": "string", @@ -203 +155,2 @@ JSON Syntax: - "userAssignment": "AUTOMATIC"|"MANUAL" + "userAssignment": "AUTOMATIC"|"MANUAL", + "idcInstanceArn": "string" @@ -206,0 +160,22 @@ JSON Syntax: +`--domain-execution-role` (string) [required] + +> The domain execution role that is created when an Amazon DataZone domain is created. The domain execution role is created in the Amazon Web Services account that houses the Amazon DataZone domain. +> +> Constraints: +> +> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> + + +`--kms-key-identifier` (string) + +> The identifier of the Amazon Web Services Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data. +> +> Constraints: +> +> * min: `1` +> * max: `1024` +> * pattern: `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}` +> + + @@ -217 +192 @@ JSON Syntax: ->> * pattern: `^[\w \.:/=+@-]+$` +>> * pattern: `[\w \.:/=+@-]+` @@ -227 +202 @@ JSON Syntax: ->> * pattern: `^[\w \.:/=+@-]*$` +>> * pattern: `[\w \.:/=+@-]*` @@ -243,0 +219,25 @@ JSON Syntax: +`--domain-version` (string) + +> The version of the domain that is created. +> +> Possible values: +> +> * `V1` +> * `V2` +> + + +`--service-role` (string) + +> The service role of the domain that is created. +> +> Constraints: +> +> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> + + +`--client-token` (string) + +> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request. + @@ -343,29 +342,0 @@ Disable automatically prompt for CLI input parameters. -arn -> (string) - -> The ARN of the Amazon DataZone domain. - -description -> (string) - -> The description of the Amazon DataZone domain. - -domainExecutionRole -> (string) - -> The domain execution role that is created when an Amazon DataZone domain is created. The domain execution role is created in the Amazon Web Services account that houses the Amazon DataZone domain. -> -> Constraints: -> -> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` -> - - -domainVersion -> (string) - -> The version of the domain that is created. -> -> Possible values: -> -> * `V1` -> * `V2` -> - - @@ -378 +349 @@ id -> (string) -> * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$` +> * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}` @@ -382,20 +352,0 @@ id -> (string) -kmsKeyIdentifier -> (string) - -> The identifier of the Amazon Web Services Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data. ->