AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/create-subscription-target.md

Summary

Updated AWS CLI version reference, reordered parameters, added new 'subscription-grant-creation-mode' parameter, modified pattern constraints, restructured output fields, and added documentation for new grant creation mode feature.

Security assessment

The change introduces a new 'subscription-grant-creation-mode' parameter that controls how subscription grants are created (AUTOMATIC vs MANUAL), which is a security feature for access control management. However, there's no evidence this addresses a specific vulnerability. Pattern constraints were modified but without security impact context.

Diff

diff --git a/cli/latest/reference/datazone/create-subscription-target.md b/cli/latest/reference/datazone/create-subscription-target.md
index cc499fb53..408599d6d 100644
--- a//cli/latest/reference/datazone/create-subscription-target.md
+++ b//cli/latest/reference/datazone/create-subscription-target.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -67,3 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --applicable-asset-types <value>
-    --authorized-principals <value>
-    [--client-token <value>]
@@ -72 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --manage-access-role <value>
@@ -74,2 +69,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--provider <value>]
-    --subscription-target-config <value>
@@ -76,0 +71,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    --subscription-target-config <value>
+    --authorized-principals <value>
+    --manage-access-role <value>
+    --applicable-asset-types <value>
+    [--provider <value>]
+    [--client-token <value>]
+    [--subscription-grant-creation-mode <value>]
@@ -101,49 +101,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--applicable-asset-types` (list) [required]
-
-> The asset types that can be included in the subscription target.
-> 
-> (string)
->
->> Constraints:
->> 
->>   * min: `1`
->>   * max: `256`
->>   * pattern: `^[^\.]*`
->> 
-
-
-Syntax:
-    
-    
-    "string" "string" ...
-    
-
-`--authorized-principals` (list) [required]
-
-> The authorized principals of the subscription target.
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `20`
-> 
-
-> 
-> (string)
->
->> Constraints:
->> 
->>   * pattern: `^[a-zA-Z0-9:/._-]*$`
->> 
-
-
-Syntax:
-    
-    
-    "string" "string" ...
-    
-
-`--client-token` (string)
-
-> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.
-
@@ -156 +108 @@ Syntax:
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -166,11 +118 @@ Syntax:
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
-> 
-
-
-`--manage-access-role` (string) [required]
-
-> The manage access role that is used to create the subscription target.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws(|-cn|-us-gov):iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -191 +133 @@ Syntax:
-`--provider` (string)
+`--type` (string) [required]
@@ -193 +135 @@ Syntax:
-> The provider of the subscription target.
+> The type of the subscription target.
@@ -203,4 +144,0 @@ Syntax:
->> content -> (string) [required]
->>
->>> The content of the subscription target configuration.
->> 
@@ -215 +153 @@ Syntax:
->>>   * pattern: `^(?![0-9_])\w+$|^_\w*[a-zA-Z0-9]\w*$`
+>>>   * pattern: `(?![0-9_])\w+$|^_\w*[a-zA-Z0-9]\w*`
@@ -217,0 +156,4 @@ Syntax:
+>> 
+>> content -> (string) [required]
+>>
+>>> The content of the subscription target configuration.
@@ -222 +164 @@ Shorthand Syntax:
-    content=string,formName=string ...
+    formName=string,content=string ...
@@ -230,2 +172,2 @@ JSON Syntax:
-        "content": "string",
-        "formName": "string"
+        "formName": "string",
+        "content": "string"
@@ -237 +179,72 @@ JSON Syntax:
-`--type` (string) [required]
+`--authorized-principals` (list) [required]
+
+> The authorized principals of the subscription target.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `20`
+> 
+
+> 
+> (string)
+>
+>> Constraints:
+>> 
+>>   * pattern: `[a-zA-Z0-9:/._-]*`
+>> 
+
+
+Syntax:
+    
+    
+    "string" "string" ...
+    
+
+`--manage-access-role` (string) [required]
+
+> The manage access role that is used to create the subscription target.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws(|-cn|-us-gov):iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
+`--applicable-asset-types` (list) [required]
+
+> The asset types that can be included in the subscription target.
+> 
+> (string)
+>
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `256`
+>>   * pattern: `[^\.]*.*`
+>> 
+
+
+Syntax:
+    
+    
+    "string" "string" ...
+    
+
+`--provider` (string)
+
+> The provider of the subscription target.
+
+`--client-token` (string)
+
+> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.
+
+`--subscription-grant-creation-mode` (string)
+
+> Determines the subscription grant creation mode for this target, defining if grants are auto-created upon subscription approval or managed manually.
+> 
+> Possible values:
+> 
+>   * `AUTOMATIC`
+>   * `MANUAL`
+> 
@@ -239 +251,0 @@ JSON Syntax:
-> The type of the subscription target.
@@ -340 +352 @@ Disable automatically prompt for CLI input parameters.
-applicableAssetTypes -> (list)
+id -> (string)
@@ -342 +354 @@ applicableAssetTypes -> (list)
-> The asset types that can be included in the subscription target.
+> The ID of the subscription target.
@@ -344 +356,3 @@ applicableAssetTypes -> (list)