AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/list-policy-grants.md

Summary

Updated AWS CLI version reference, reordered parameters, modified pattern validations by removing start/end anchors, restructured policy grant output documentation including reorganization of principal/detail fields and updated constraints.

Security assessment

The changes involve documentation restructuring, pattern validation updates (removing ^/$ anchors), and field reorganization without any evidence of addressing vulnerabilities. No security advisories, CVE references, or vulnerability fixes are mentioned. Pattern changes appear to be syntax adjustments rather than security fixes.

Diff

diff --git a/cli/latest/reference/datazone/list-policy-grants.md b/cli/latest/reference/datazone/list-policy-grants.md
index 8e4730e84..76cc4b18a 100644
--- a//cli/latest/reference/datazone/list-policy-grants.md
+++ b//cli/latest/reference/datazone/list-policy-grants.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -70 +69,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --entity-identifier <value>
@@ -71,0 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    --entity-identifier <value>
@@ -106 +106 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -110,4 +109,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--entity-identifier` (string) [required]
-
-> The ID of the entity for which you want to list policy grants.
-
@@ -126,0 +123,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+`--entity-identifier` (string) [required]
+
+> The ID of the entity for which you want to list policy grants.
+
@@ -275,9 +275 @@ grantList -> (list)
->> createdAt -> (timestamp)
->>
->>> Specifies the timestamp at which policy grant member was created.
->> 
->> createdBy -> (string)
->>
->>> Specifies the user who created the policy grant member.
->> 
->> detail -> (tagged union structure)
+>> principal -> (tagged union structure)
@@ -285 +277 @@ grantList -> (list)
->>> The details of the policy grant member.
+>>> The principal of the policy grant member.
@@ -289 +281 @@ grantList -> (list)
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `addToProjectMemberPool`, `createAssetType`, `createDomainUnit`, `createEnvironment`, `createEnvironmentFromBlueprint`, `createEnvironmentProfile`, `createFormType`, `createGlossary`, `createProject`, `createProjectFromProjectProfile`, `delegateCreateEnvironmentProfile`, `overrideDomainUnitOwners`, `overrideProjectOwners`, `useAssetType`.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `user`, `group`, `project`, `domainUnit`.
@@ -291 +283 @@ grantList -> (list)
->>> addToProjectMemberPool -> (structure)
+>>> user -> (tagged union structure)
@@ -293 +285 @@ grantList -> (list)
->>>> Specifies that the policy grant is to be added to the members of the project.
+>>>> The user of the policy grant principal.
@@ -295 +287 @@ grantList -> (list)
->>>> includeChildDomainUnits -> (boolean)
+>>>> ### Note
@@ -297,5 +289 @@ grantList -> (list)
->>>>> Specifies whether the policy grant is applied to child domain units.
->>> 
->>> createAssetType -> (structure)
->>>
->>>> Specifies that this is a create asset type policy.
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `userIdentifier`, `allUsersGrantFilter`.
@@ -303 +291 @@ grantList -> (list)
->>>> includeChildDomainUnits -> (boolean)
+>>>> userIdentifier -> (string)
@@ -305,5 +293,7 @@ grantList -> (list)
->>>>> Specifies whether the policy grant is applied to child domain units.
->>> 
->>> createDomainUnit -> (structure)
->>>
->>>> Specifies that this is a create domain unit policy.
+>>>>> The user ID of the user policy grant principal.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `.*(^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$|^[a-zA-Z_0-9+=,.@-]+$|^arn:aws:iam::\d{12}:.+$).*`
+>>>>> 
+
@@ -311 +301 @@ grantList -> (list)
->>>> includeChildDomainUnits -> (boolean)
+>>>> allUsersGrantFilter -> (structure)
@@ -313 +303 @@ grantList -> (list)
->>>>> Specifies whether the policy grant is applied to child domain units.
+>>>>> The all users grant filter of the user policy grant principal.
@@ -315 +305 @@ grantList -> (list)
->>> createEnvironment -> (structure)
+>>> group -> (tagged union structure)
@@ -317 +307,15 @@ grantList -> (list)
->>>> Specifies that this is a create environment policy.
+>>>> The group of the policy grant principal.
+>>>> 
+>>>> ### Note
+>>>> 
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `groupIdentifier`.
+>>>> 
+>>>> groupIdentifier -> (string)
+>>>>
+>>>>> The ID Of the group of the group principal.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `.*(^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$|[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+).*`
+>>>>> 
+
@@ -319 +323 @@ grantList -> (list)
->>> createEnvironmentFromBlueprint -> (structure)
+>>> project -> (structure)
@@ -321 +325,51 @@ grantList -> (list)
->>>> The details of the policy of creating an environment.
+>>>> The project of the policy grant principal.
+>>>> 
+>>>> projectDesignation -> (string) [required]
+>>>>
+>>>>> The project designation of the project policy grant principal.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `OWNER`
+>>>>>   * `CONTRIBUTOR`
+>>>>>   * `PROJECT_CATALOG_STEWARD`
+>>>>> 
+
+>>>> 
+>>>> projectIdentifier -> (string)
+>>>>
+>>>>> The project ID of the project policy grant principal.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+>>>>> 
+
+>>>> 
+>>>> projectGrantFilter -> (tagged union structure)
+>>>>
+>>>>> The project grant filter of the project policy grant principal.
+>>>>> 
+>>>>> ### Note
+>>>>> 
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `domainUnitFilter`.
+>>>>> 
+>>>>> domainUnitFilter -> (structure)
+>>>>>
+>>>>>> The domain unit filter of the project grant filter.
+>>>>>> 
+>>>>>> domainUnit -> (string) [required]
+>>>>>>
+>>>>>>> The domain unit ID to use in the filter.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * min: `1`
+>>>>>>>   * max: `256`
+>>>>>>>   * pattern: `[a-z0-9_\-]+`
+>>>>>>> 
+
+>>>>>> 
+>>>>>> includeChildDomainUnits -> (boolean)
+>>>>>>
+>>>>>>> Specifies whether to include child domain units.
@@ -323 +377 @@ grantList -> (list)
->>> createEnvironmentProfile -> (structure)
+>>> domainUnit -> (structure)
@@ -325 +379 @@ grantList -> (list)
->>>> Specifies that this is a create environment profile policy.
+>>>> The domain unit of the policy grant principal.
@@ -327 +381,11 @@ grantList -> (list)
->>>> domainUnitId -> (string)
+>>>> domainUnitDesignation -> (string) [required]
+>>>>
+>>>>> Specifes the designation of the domain unit users.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `OWNER`
+>>>>> 
+
+>>>> 
+>>>> domainUnitIdentifier -> (string)
@@ -335 +399 @@ grantList -> (list)
->>>>>   * pattern: `^[a-z0-9_\-]+$`
+>>>>>   * pattern: `[a-z0-9_\-]+`
@@ -337,0 +402,16 @@ grantList -> (list)
+>>>> 
+>>>> domainUnitGrantFilter -> (tagged union structure)
+>>>>
+>>>>> The grant filter for the domain unit.
+>>>>> 
+>>>>> ### Note
+>>>>> 
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `allDomainUnitsGrantFilter`.
+>>>>> 
+>>>>> allDomainUnitsGrantFilter -> (structure)
+>>>>>
+>>>>>> Specifies a grant filter containing all domain units.
+>> 
+>> detail -> (tagged union structure)
+>>
+>>> The details of the policy grant member.
@@ -339 +419 @@ grantList -> (list)
->>> createFormType -> (structure)
+>>> ### Note
@@ -341 +421,5 @@ grantList -> (list)
->>>> Specifies that this is a create form type policy.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `createDomainUnit`, `overrideDomainUnitOwners`, `addToProjectMemberPool`, `overrideProjectOwners`, `createGlossary`, `createFormType`, `createAssetType`, `createProject`, `createEnvironmentProfile`, `delegateCreateEnvironmentProfile`, `createEnvironment`, `createEnvironmentFromBlueprint`, `createProjectFromProjectProfile`, `useAssetType`.