AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/get-subscription-grant.md

Summary

Updated AWS CLI version reference, modified regex patterns (removed ^/$ anchors), restructured 'assets' field into 'id' with new constraints, added/updated fields like 'createdBy', 'updatedBy', 'domainId', 'environmentId', and reorganized subscription grant details.

Security assessment

The changes primarily involve documentation corrections (e.g., regex pattern updates without start/end anchors) and structural reorganization of parameters. While regex pattern changes (e.g., `^dzd[-_]` to `dzd[-_]`) could theoretically relax input validation, there is no explicit evidence in the diff linking this to a resolved security vulnerability or exploit. The restructuring of fields like 'assets' and permissions documentation does not directly address security features or vulnerabilities.

Diff

diff --git a/cli/latest/reference/datazone/get-subscription-grant.md b/cli/latest/reference/datazone/get-subscription-grant.md
index 448a0786a..8f0378807 100644
--- a//cli/latest/reference/datazone/get-subscription-grant.md
+++ b//cli/latest/reference/datazone/get-subscription-grant.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -99 +99 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -109 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -212 +212 @@ Disable automatically prompt for CLI input parameters.
-assets -> (list)
+id -> (string)
@@ -214 +214 @@ assets -> (list)
-> The assets for which the subscription grant is created.
+> The ID of the subscription grant.
@@ -216 +216,3 @@ assets -> (list)
-> (structure)
+> Constraints:
+> 
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -218,10 +219,0 @@ assets -> (list)
->> The details of the asset for which the subscription grant is created.
->> 
->> assetId -> (string) [required]
->>
->>> The identifier of the asset for which the subscription grant is created.
->>> 
->>> Constraints:
->>> 
->>>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
->>> 
@@ -229,10 +220,0 @@ assets -> (list)
->> 
->> assetRevision -> (string) [required]
->>
->>> The revision of the asset for which the subscription grant is created.
->>> 
->>> Constraints:
->>> 
->>>   * min: `1`
->>>   * max: `64`
->>> 
@@ -240,13 +222 @@ assets -> (list)
->> 
->> assetScope -> (structure)
->>
->>> The asset scope of the subscribed asset.
->>> 
->>> assetId -> (string) [required]
->>>
->>>> The asset ID of the asset scope.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
->>>> 
+createdBy -> (string)
@@ -254,15 +224 @@ assets -> (list)
->>> 
->>> errorMessage -> (string)
->>>
->>>> The error message of the asset scope.
->>> 
->>> filterIds -> (list) [required]
->>>
->>>> The filter IDs of the asset scope.
->>>> 
->>>> (string)
->>>>
->>>>> Constraints:
->>>>> 
->>>>>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
->>>>> 
+> The Amazon DataZone user who created the subscription grant.
@@ -270,40 +226 @@ assets -> (list)
->>> 
->>> status -> (string) [required]
->>>
->>>> The status of the asset scope.
->> 
->> failureCause -> (structure)
->>
->>> The failure cause included in the details of the asset for which the subscription grant is created.
->>> 
->>> message -> (string)
->>>
->>>> The description of the error message.
->> 
->> failureTimestamp -> (timestamp)
->>
->>> The failure timestamp included in the details of the asset for which the subscription grant is created.
->> 
->> grantedTimestamp -> (timestamp)
->>
->>> The timestamp of when the subscription grant to the asset is created.
->> 
->> permissions -> (tagged union structure)
->>
->>> The asset permissions.
->>> 
->>> ### Note
->>> 
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
->>> 
->>> s3 -> (list)
->>>
->>>> The S3 details of the asset permissions.
->>>> 
->>>> (string)
->>>>
->>>>> Possible values:
->>>>> 
->>>>>   * `READ`
->>>>>   * `WRITE`
->>>>> 
+updatedBy -> (string)
@@ -311,16 +228,10 @@ assets -> (list)
->> 
->> status -> (string) [required]
->>
->>> The status of the asset for which the subscription grant is created.
->>> 
->>> Possible values:
->>> 
->>>   * `GRANT_PENDING`
->>>   * `REVOKE_PENDING`
->>>   * `GRANT_IN_PROGRESS`
->>>   * `REVOKE_IN_PROGRESS`
->>>   * `GRANTED`
->>>   * `REVOKED`
->>>   * `GRANT_FAILED`
->>>   * `REVOKE_FAILED`
->>> 
+> The Amazon DataZone user who updated the subscription grant.
+
+domainId -> (string)
+
+> The ID of the Amazon DataZone domain in which the subscription grant exists.
+> 
+> Constraints:
+> 
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
+> 
@@ -328,4 +238,0 @@ assets -> (list)
->> 
->> targetName -> (string)
->>
->>> The target name of the asset for which the subscription grant is created.
@@ -337 +244 @@ createdAt -> (timestamp)
-createdBy -> (string)
+updatedAt -> (timestamp)
@@ -339 +246 @@ createdBy -> (string)
-> The Amazon DataZone user who created the subscription grant.
+> The timestamp of when the subscription grant was upated.
@@ -341 +248 @@ createdBy -> (string)
-domainId -> (string)
+environmentId -> (string)
@@ -343 +250 @@ domainId -> (string)
-> The ID of the Amazon DataZone domain in which the subscription grant exists.
+> The environment ID of the subscription grant.
@@ -347 +254 @@ domainId -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -351 +258 @@ domainId -> (string)
-environmentId -> (string)
+subscriptionTargetId -> (string)
@@ -353 +260 @@ environmentId -> (string)
-> The environment ID of the subscription grant.
+> The subscription target ID associated with the subscription grant.
@@ -357 +264 @@ environmentId -> (string)
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -379 +286 @@ grantedEntity -> (tagged union structure)
->>>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>>>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -394,10 +300,0 @@ grantedEntity -> (tagged union structure)
-id -> (string)
-
-> The ID of the subscription grant.
-> 
-> Constraints:
-> 
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
-> 
-
-
@@ -420 +317 @@ status -> (string)
-subscriptionId -> (string)
+assets -> (list)
@@ -422,3 +319 @@ subscriptionId -> (string)
-> The identifier of the subscription.
-> 
-> Constraints:
+> The assets for which the subscription grant is created.
@@ -426 +321 @@ subscriptionId -> (string)
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`