AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/get-subscription.md

Summary

Updated AWS CLI version reference from 2.32.33 to 2.33.1. Modified regex patterns by removing start/end anchors (^/$). Restructured subscription response fields: added new 'id' field, reordered fields, added detailed 'subscribedPrincipal' union structure, reorganized 'subscribedListing' structure, and updated field constraints.

Security assessment

The changes involve documentation restructuring, pattern syntax modifications, and field reorganization without explicit security context. No vulnerabilities, exploits, or security incidents are referenced. Pattern changes (removing ^/$ anchors) appear to be validation logic adjustments rather than security fixes.

Diff

diff --git a/cli/latest/reference/datazone/get-subscription.md b/cli/latest/reference/datazone/get-subscription.md
index ab547598e..6a6baebcd 100644
--- a//cli/latest/reference/datazone/get-subscription.md
+++ b//cli/latest/reference/datazone/get-subscription.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -99 +99 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -109 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -212 +212,8 @@ Disable automatically prompt for CLI input parameters.
-createdAt -> (timestamp)
+id -> (string)
+
+> The ID of the subscription.
+> 
+> Constraints:
+> 
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+> 
@@ -214 +220,0 @@ createdAt -> (timestamp)
-> The timestamp of when the subscription was created.
@@ -219,0 +226,4 @@ createdBy -> (string)
+updatedBy -> (string)
+
+> The Amazon DataZone user who updated the subscription.
+
@@ -226 +236 @@ domainId -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -230 +240 @@ domainId -> (string)
-id -> (string)
+status -> (string)
@@ -232 +242 @@ id -> (string)
-> The ID of the subscription.
+> The status of the subscription.
@@ -234 +244 @@ id -> (string)
-> Constraints:
+> Possible values:
@@ -236 +246,3 @@ id -> (string)
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * `APPROVED`
+>   * `REVOKED`
+>   * `CANCELLED`
@@ -240 +252 @@ id -> (string)
-retainPermissions -> (boolean)
+createdAt -> (timestamp)
@@ -242 +254 @@ retainPermissions -> (boolean)
-> The retain permissions of the subscription.
+> The timestamp of when the subscription was created.
@@ -244 +256 @@ retainPermissions -> (boolean)
-status -> (string)
+updatedAt -> (timestamp)
@@ -246 +258,5 @@ status -> (string)
-> The status of the subscription.
+> The timestamp of when the subscription was updated.
+
+subscribedPrincipal -> (tagged union structure)
+
+> The principal that owns the subscription.
@@ -248 +264 @@ status -> (string)
-> Possible values:
+> ### Note
@@ -250,3 +266,29 @@ status -> (string)
->   * `APPROVED`
->   * `REVOKED`
->   * `CANCELLED`
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`, `user`, `group`, `iam`.
+> 
+> project -> (structure)
+>
+>> The project that has the subscription grant.
+>> 
+>> id -> (string)
+>>
+>>> The identifier of the project that has the subscription grant.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the project that has the subscription grant.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `64`
+>>>   * pattern: `[\w -]+`
+>>> 
+
+> 
+> user -> (structure)
@@ -253,0 +296,96 @@ status -> (string)
+>> The subscribed user.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed user.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
+>>> 
+
+>> 
+>> details -> (tagged union structure)
+>>
+>>> The subscribed user details.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>> 
+>>> iam -> (structure)
+>>>
+>>>> The IAM details of the user profile.
+>>>> 
+>>>> arn -> (string)
+>>>>
+>>>>> The ARN of the IAM user.
+>>>> 
+>>>> principalId -> (string)
+>>>>
+>>>>> The principal ID as part of the IAM user profile details.
+>>> 
+>>> sso -> (structure)
+>>>
+>>>> The SSO details of the user profile.
+>>>> 
+>>>> username -> (string)
+>>>>
+>>>>> The username as part of the SSO user profile detail.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `[a-zA-Z_0-9+=,.@-]+`
+>>>>> 
+
+>>>> 
+>>>> firstName -> (string)
+>>>>
+>>>>> The first name as part of the SSO user profile detail.
+>>>> 
+>>>> lastName -> (string)
+>>>>
+>>>>> The last name as part of the SSO user profile detail.
+> 
+> group -> (structure)
+>
+>> The subscribed group.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `[a-zA-Z_0-9+=,.@-]+`
+>>> 
+
+> 
+> iam -> (structure)
+>
+>> The subscribed IAM principal.
+>> 
+>> principalArn -> (string)
+>>
+>>> The ARN of the subscribed IAM principal.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `255`
+>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|user)(/[\w+=,.@-]*)*/[\w+=,.@-]+`
+>>> 
@@ -260 +398 @@ subscribedListing -> (structure)
-> description -> (string) [required]
+> id -> (string) [required]
@@ -262 +400 @@ subscribedListing -> (structure)