AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/create-user-profile.md

Summary

Updated AWS CLI version reference, restructured command parameters, modified pattern constraints for domainId and user-identifier fields, reorganized output structure details, and adjusted pattern validation rules.

Security assessment

The changes involve documentation restructuring and pattern constraint modifications (e.g., domainId pattern changed from anchored '^dzd...$' to non-anchored 'dzd...', user-identifier pattern now allows surrounding characters). These appear to be documentation refinements rather than security fixes. No vulnerabilities, exploits, or security incidents are referenced. The client-token parameter remains unchanged in functionality.

Diff

diff --git a/cli/latest/reference/datazone/create-user-profile.md b/cli/latest/reference/datazone/create-user-profile.md
index 62ad754dd..f0e1ab72e 100644
--- a//cli/latest/reference/datazone/create-user-profile.md
+++ b//cli/latest/reference/datazone/create-user-profile.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -67 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--client-token <value>]
@@ -70,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--client-token <value>]
@@ -95,4 +94,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--client-token` (string)
-
-> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.
-
@@ -105 +101 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -115 +111 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `(^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$|^[a-zA-Z_0-9+=,.@-]+$|^arn:aws:iam::\d{12}:.+$)`
+>   * pattern: `.*(^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$|^[a-zA-Z_0-9+=,.@-]+$|^arn:aws:iam::\d{12}:.+$).*`
@@ -130,0 +127,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--client-token` (string)
+
+> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.
+
@@ -230 +230 @@ Disable automatically prompt for CLI input parameters.
-details -> (tagged union structure)
+domainId -> (string)
@@ -232,7 +232 @@ details -> (tagged union structure)
-> The user profile details.
-> 
-> ### Note
-> 
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
-> 
-> iam -> (structure)
+> The identifier of the Amazon DataZone domain in which a user profile is created.
@@ -240,9 +234 @@ details -> (tagged union structure)
->> The IAM details of the user profile.
->> 
->> arn -> (string)
->>
->>> The ARN of the IAM user.
->> 
->> principalId -> (string)
->>
->>> The principal ID as part of the IAM user profile details.
+> Constraints:
@@ -250 +236 @@ details -> (tagged union structure)
-> sso -> (structure)
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -252,20 +237,0 @@ details -> (tagged union structure)
->> The SSO details of the user profile.
->> 
->> firstName -> (string)
->>
->>> The first name as part of the SSO user profile detail.
->> 
->> lastName -> (string)
->>
->>> The last name as part of the SSO user profile detail.
->> 
->> username -> (string)
->>
->>> The username as part of the SSO user profile detail.
->>> 
->>> Constraints:
->>> 
->>>   * min: `1`
->>>   * max: `1024`
->>>   * pattern: `^[a-zA-Z_0-9+=,.@-]+$`
->>> 
@@ -274 +240 @@ details -> (tagged union structure)
-domainId -> (string)
+id -> (string)
@@ -276 +242 @@ domainId -> (string)
-> The identifier of the Amazon DataZone domain in which a user profile is created.
+> The identifier of the user profile.
@@ -280 +246 @@ domainId -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
@@ -284 +250 @@ domainId -> (string)
-id -> (string)
+type -> (string)
@@ -286 +252 @@ id -> (string)
-> The identifier of the user profile.
+> The type of the user profile.
@@ -288 +254 @@ id -> (string)
-> Constraints:
+> Possible values:
@@ -290 +256,2 @@ id -> (string)
->   * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$`
+>   * `IAM`
+>   * `SSO`
@@ -307 +274 @@ status -> (string)
-type -> (string)
+details -> (tagged union structure)
@@ -309 +276 @@ type -> (string)
-> The type of the user profile.
+> The user profile details.
@@ -311 +278 @@ type -> (string)
-> Possible values:
+> ### Note
@@ -313,2 +280,15 @@ type -> (string)
->   * `IAM`
->   * `SSO`
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+> 
+> iam -> (structure)
+>
+>> The IAM details of the user profile.
+>> 
+>> arn -> (string)
+>>
+>>> The ARN of the IAM user.
+>> 
+>> principalId -> (string)
+>>
+>>> The principal ID as part of the IAM user profile details.
+> 
+> sso -> (structure)
@@ -315,0 +296,12 @@ type -> (string)
+>> The SSO details of the user profile.
+>> 
+>> username -> (string)
+>>
+>>> The username as part of the SSO user profile detail.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `[a-zA-Z_0-9+=,.@-]+`
+>>> 
@@ -316,0 +309,8 @@ type -> (string)
+>> 
+>> firstName -> (string)
+>>
+>>> The first name as part of the SSO user profile detail.
+>> 
+>> lastName -> (string)
+>>
+>>> The last name as part of the SSO user profile detail.
@@ -328 +328 @@ type -> (string)
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »