AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/get-domain.md

Summary

Updated AWS CLI version reference, modified regex patterns by removing start/end anchors, reorganized field order, and adjusted pattern constraints for various parameters including domain identifiers, KMS keys, and tags.

Security assessment

The changes primarily involve documentation formatting, pattern adjustments (removing ^/$ anchors), and field reorganization. No security vulnerabilities, incidents, or explicit security improvements are referenced. The KMS key pattern modification maintains encryption requirements without altering security posture. Pattern changes appear to be syntax corrections rather than security fixes.

Diff

diff --git a/cli/latest/reference/datazone/get-domain.md b/cli/latest/reference/datazone/get-domain.md
index a89fcc871..92f82863e 100644
--- a//cli/latest/reference/datazone/get-domain.md
+++ b//cli/latest/reference/datazone/get-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -98 +98 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -201,33 +200,0 @@ Disable automatically prompt for CLI input parameters.
-arn -> (string)
-
-> The ARN of the specified Amazon DataZone domain.
-
-createdAt -> (timestamp)
-
-> The timestamp of when the Amazon DataZone domain was created.
-
-description -> (string)
-
-> The description of the Amazon DataZone domain.
-
-domainExecutionRole -> (string)
-
-> The domain execution role with which the Amazon DataZone domain is created.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
-
-
-domainVersion -> (string)
-
-> The version of the domain.
-> 
-> Possible values:
-> 
->   * `V1`
->   * `V2`
-> 
-
-
@@ -240,13 +207 @@ id -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
-> 
-
-
-kmsKeyIdentifier -> (string)
-
-> The identifier of the Amazon Web Services Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data.
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `1024`
->   * pattern: `^arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -256,12 +210,0 @@ kmsKeyIdentifier -> (string)
-lastUpdatedAt -> (timestamp)
-
-> The timestamp of when the Amazon DataZone domain was last updated.
-
-name -> (string)
-
-> The name of the Amazon DataZone domain.
-
-portalUrl -> (string)
-
-> The URL of the data portal for this Amazon DataZone domain.
-
@@ -276 +219 @@ rootDomainUnitId -> (string)
->   * pattern: `^[a-z0-9_\-]+$`
+>   * pattern: `[a-z0-9_\-]+`
@@ -280 +223 @@ rootDomainUnitId -> (string)
-serviceRole -> (string)
+name -> (string)
@@ -282,6 +225,3 @@ serviceRole -> (string)
-> The service role of the domain.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
+> The name of the Amazon DataZone domain.
+
+description -> (string)
@@ -288,0 +229 @@ serviceRole -> (string)
+> The description of the Amazon DataZone domain.
@@ -293,10 +233,0 @@ singleSignOn -> (structure)
-> 
-> idcInstanceArn -> (string)
->
->> The ARN of the IDC instance.
->> 
->> Constraints:
->> 
->>   * pattern: `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}`
->> 
-
@@ -324,0 +256,36 @@ singleSignOn -> (structure)
+> 
+> idcInstanceArn -> (string)
+>
+>> The ARN of the IDC instance.
+>> 
+>> Constraints:
+>> 
+>>   * pattern: `.*arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}.*`
+>> 
+
+
+domainExecutionRole -> (string)
+
+> The domain execution role with which the Amazon DataZone domain is created.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
+arn -> (string)
+
+> The ARN of the specified Amazon DataZone domain.
+
+kmsKeyIdentifier -> (string)
+
+> The identifier of the Amazon Web Services Key Management Service (KMS) key that is used to encrypt the Amazon DataZone domain, metadata, and reporting data.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `1024`
+>   * pattern: `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}`
+> 
+
@@ -340,0 +308,12 @@ status -> (string)
+portalUrl -> (string)
+
+> The URL of the data portal for this Amazon DataZone domain.
+
+createdAt -> (timestamp)
+
+> The timestamp of when the Amazon DataZone domain was created.
+
+lastUpdatedAt -> (timestamp)
+
+> The timestamp of when the Amazon DataZone domain was last updated.
+
@@ -351 +330 @@ tags -> (map)
->>   * pattern: `^[\w \.:/=+@-]+$`
+>>   * pattern: `[\w \.:/=+@-]+`
@@ -361 +340 @@ tags -> (map)
->>   * pattern: `^[\w \.:/=+@-]*$`
+>>   * pattern: `[\w \.:/=+@-]*`
@@ -364,0 +344,21 @@ tags -> (map)
+domainVersion -> (string)
+
+> The version of the domain.
+> 
+> Possible values:
+> 
+>   * `V1`
+>   * `V2`
+> 
+
+
+serviceRole -> (string)
+
+> The service role of the domain.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
@@ -375 +375 @@ tags -> (map)
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »