AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/list-environment-blueprint-configurations.md

Summary

Updated CLI version reference, modified regex patterns by removing start/end anchors, reordered response fields, added new 'locationRegistrationRole' field, and adjusted field constraints

Security assessment

The changes primarily involve documentation structure updates and pattern relaxation (removing ^/$ anchors). The addition of 'locationRegistrationRole' field documents security-related IAM role usage for managing S3 bucket access in Data Lake environments, but there's no evidence of addressing a specific vulnerability. The pattern modifications appear to be syntax adjustments rather than security fixes.

Diff

diff --git a/cli/latest/reference/datazone/list-environment-blueprint-configurations.md b/cli/latest/reference/datazone/list-environment-blueprint-configurations.md
index baf3257a1..929087ad5 100644
--- a//cli/latest/reference/datazone/list-environment-blueprint-configurations.md
+++ b//cli/latest/reference/datazone/list-environment-blueprint-configurations.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -103 +103 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -232,4 +231,0 @@ items -> (list)
->> createdAt -> (timestamp)
->>
->>> The timestamp of when an environment blueprint was created.
->> 
@@ -242 +238 @@ items -> (list)
->>>   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>>>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -246 +242 @@ items -> (list)
->> enabledRegions -> (list)
+>> environmentBlueprintId -> (string) [required]
@@ -248 +244 @@ items -> (list)
->>> The enabled Amazon Web Services Regions specified in a blueprint configuration.
+>>> The identifier of the environment blueprint.
@@ -252,3 +248 @@ items -> (list)
->>>   * min: `0`
->>> 
-
+>>>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -256,8 +249,0 @@ items -> (list)
->>> (string)
->>>
->>>> Constraints:
->>>> 
->>>>   * min: `4`
->>>>   * max: `16`
->>>>   * pattern: `^[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]$`
->>>> 
@@ -266 +252 @@ items -> (list)
->> environmentBlueprintId -> (string) [required]
+>> provisioningRoleArn -> (string)
@@ -268 +254 @@ items -> (list)
->>> The identifier of the environment blueprint.
+>>> The ARN of the provisioning role specified in the environment blueprint configuration.
@@ -272 +258 @@ items -> (list)
->>>   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
@@ -282 +268 @@ items -> (list)
->>>   * pattern: `^arn:aws[^:]*:iam::(aws|\d{12}):policy/[\w+=,.@-]*$`
+>>>   * pattern: `arn:aws[^:]*:iam::(aws|\d{12}):policy/[\w+=,.@-]*`
@@ -292 +278 @@ items -> (list)
->>>   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
+>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
@@ -294,0 +281,48 @@ items -> (list)
+>> 
+>> enabledRegions -> (list)
+>>
+>>> The enabled Amazon Web Services Regions specified in a blueprint configuration.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>> 
+
+>>> 
+>>> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `4`
+>>>>   * max: `16`
+>>>>   * pattern: `[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]`
+>>>> 
+
+>> 
+>> regionalParameters -> (map)
+>>
+>>> The regional parameters of the environment blueprint.
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `4`
+>>>>   * max: `16`
+>>>>   * pattern: `[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]`
+>>>> 
+
+>>> 
+>>> value -> (map)
+>>>
+>>>> key -> (string)
+>>>> 
+>>>> value -> (string)
+>> 
+>> createdAt -> (timestamp)
+>>
+>>> The timestamp of when an environment blueprint was created.
+>> 
+>> updatedAt -> (timestamp)
+>>
+>>> The timestamp of when the environment blueprint was updated.
@@ -310,0 +345,10 @@ items -> (list)
+>>>>> 
+>>>>> locationRegistrationRole -> (string)
+>>>>>
+>>>>>> The role that is used to manage read/write access to the chosen Amazon S3 bucket(s) for Data Lake using Amazon Web Services Lake Formation hybrid access mode.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>>>>>> 
+
@@ -329 +373 @@ items -> (list)
->>>>>>>   * pattern: `^s3://.+$`
+>>>>>>>   * pattern: `s3://.+`
@@ -332,44 +375,0 @@ items -> (list)
->>>>> 
->>>>> locationRegistrationRole -> (string)
->>>>>
->>>>>> The role that is used to manage read/write access to the chosen Amazon S3 bucket(s) for Data Lake using Amazon Web Services Lake Formation hybrid access mode.
->>>>>> 
->>>>>> Constraints:
->>>>>> 
->>>>>>   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
->>>>>> 
-
->> 
->> provisioningRoleArn -> (string)
->>
->>> The ARN of the provisioning role specified in the environment blueprint configuration.
->>> 
->>> Constraints:
->>> 
->>>   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
->>> 
-
->> 
->> regionalParameters -> (map)
->>
->>> The regional parameters of the environment blueprint.
->>> 
->>> key -> (string)
->>>
->>>> Constraints:
->>>> 
->>>>   * min: `4`
->>>>   * max: `16`
->>>>   * pattern: `^[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]$`
->>>> 
-
->>> 
->>> value -> (map)
->>>
->>>> key -> (string)
->>>> 
->>>> value -> (string)
->> 
->> updatedAt -> (timestamp)
->>
->>> The timestamp of when the environment blueprint was updated.
@@ -398 +398 @@ nextToken -> (string)
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »