AWS cli medium security documentation change
Summary
Updated AWS CLI version references from 2.32.33 to 2.33.1, restructured the --client-token parameter position, modified domain identifier pattern validation by removing start/end anchors, and moved client-token documentation section.
Security assessment
The change to the domain identifier pattern (removing ^ and $ anchors) weakens input validation by allowing partial matches. This could enable injection attacks or processing of malformed domain identifiers, potentially leading to unauthorized domain deletion or other security vulnerabilities.
Diff
diff --git a/cli/latest/reference/datazone/delete-domain.md b/cli/latest/reference/datazone/delete-domain.md index c30decbfd..225d18ab1 100644 --- a//cli/latest/reference/datazone/delete-domain.md +++ b//cli/latest/reference/datazone/delete-domain.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -67 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--client-token <value>] @@ -68,0 +68 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--client-token <value>] @@ -94,4 +93,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--client-token` (string) - -> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request. - @@ -104 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$` +> * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}` @@ -107,0 +104,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo +`--client-token` (string) + +> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request. + @@ -236 +236 @@ status -> (string) - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) »