AWS cli medium security documentation change
Summary
Updated AWS CLI command reference for DataZone's list-subscriptions command. Changes include: reordered parameters, added new parameters (--subscription-request-identifier, --status, --subscribed-listing-id, --owning-iam-principal-arn), modified parameter patterns, restructured output format with expanded subscription details including IAM principal support, and updated field constraints.
Security assessment
Added IAM principal authentication support (--owning-iam-principal-arn) with strict ARN pattern validation. Introduced granular subscription status filtering (APPROVED/REVOKED/CANCELLED) for access control auditing. Enhanced output includes IAM principal details and subscription ownership information, improving security visibility. These changes directly impact authentication and authorization mechanisms.
Diff
diff --git a/cli/latest/reference/datazone/list-subscriptions.md b/cli/latest/reference/datazone/list-subscriptions.md index 0572bb2a0..ae2acc5ae 100644 --- a//cli/latest/reference/datazone/list-subscriptions.md +++ b//cli/latest/reference/datazone/list-subscriptions.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -69 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--approver-project-id <value>] @@ -71 +70,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--owning-group-id <value>] + [--subscription-request-identifier <value>] + [--status <value>] + [--subscribed-listing-id <value>] @@ -72,0 +74 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--owning-iam-principal-arn <value>] @@ -73,0 +76,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--owning-group-id <value>] + [--approver-project-id <value>] @@ -76,3 +79,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--status <value>] - [--subscribed-listing-id <value>] - [--subscription-request-identifier <value>] @@ -106 +107 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--approver-project-id` (string) +`--domain-identifier` (string) [required] @@ -108 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> The identifier of the project for the subscription’s approver. +> The identifier of the Amazon DataZone domain. @@ -112 +113 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^[a-zA-Z0-9_-]{1,36}$` +> * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}` @@ -116 +117 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--domain-identifier` (string) [required] +`--subscription-request-identifier` (string) @@ -118 +119 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> The identifier of the Amazon DataZone domain. +> The identifier of the subscription request for the subscriptions that you want to list. @@ -122 +123 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$` +> * pattern: `[a-zA-Z0-9_-]{1,36}` @@ -126 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--owning-group-id` (string) +`--status` (string) @@ -128 +129,17 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> The ID of the owning group. +> The status of the subscriptions that you want to list. +> +> ### Note +> +> This is not a required parameter, but if not provided, by default, Amazon DataZone returns only `APPROVED` subscriptions. +> +> Possible values: +> +> * `APPROVED` +> * `REVOKED` +> * `CANCELLED` +> + + +`--subscribed-listing-id` (string) + +> The identifier of the subscribed listing for the subscriptions that you want to list. @@ -132 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$` +> * pattern: `[a-zA-Z0-9_-]{1,36}` @@ -142 +159 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^[a-zA-Z0-9_-]{1,36}$` +> * pattern: `[a-zA-Z0-9_-]{1,36}` @@ -146 +163 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--owning-user-id` (string) +`--owning-iam-principal-arn` (string) @@ -148 +165 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> The ID of the owning user. +> The ARN of the owning IAM principal. @@ -152 +169,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}$` +> * min: `1` +> * max: `255` +> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|user)(/[\w+=,.@-]*)*/[\w+=,.@-]+` @@ -156 +175 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--sort-by` (string) +`--owning-user-id` (string) @@ -158 +177 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> Specifies the way in which the results of this action are to be sorted. +> The ID of the owning user. @@ -160 +179 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> Possible values: +> Constraints: @@ -162,2 +181 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * `CREATED_AT` -> * `UPDATED_AT` +> * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}` @@ -167 +185 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--sort-order` (string) +`--owning-group-id` (string) @@ -169 +187 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> Specifies the sort order for the results of this action. +> The ID of the owning group. @@ -171 +189 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> Possible values: +> Constraints: @@ -173,2 +191 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * `ASCENDING` -> * `DESCENDING` +> * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}` @@ -178 +195 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--status` (string) +`--approver-project-id` (string) @@ -180,5 +197 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> The status of the subscriptions that you want to list. -> -> ### Note -> -> This is not a required parameter, but if not provided, by default, Amazon DataZone returns only `APPROVED` subscriptions. +> The identifier of the project for the subscription’s approver. @@ -186 +199 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> Possible values: +> Constraints: @@ -188,3 +201 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * `APPROVED` -> * `REVOKED` -> * `CANCELLED` +> * pattern: `[a-zA-Z0-9_-]{1,36}` @@ -194 +205 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--subscribed-listing-id` (string) +`--sort-by` (string) @@ -196 +207 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> The identifier of the subscribed listing for the subscriptions that you want to list. +> Specifies the way in which the results of this action are to be sorted. @@ -198 +209 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> Constraints: +> Possible values: @@ -200 +211,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^[a-zA-Z0-9_-]{1,36}$` +> * `CREATED_AT` +> * `UPDATED_AT` @@ -204 +216 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -`--subscription-request-identifier` (string) +`--sort-order` (string) @@ -206 +218 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> The identifier of the subscription request for the subscriptions that you want to list. +> Specifies the sort order for the results of this action. @@ -208 +220 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> Constraints: +> Possible values: @@ -210 +222,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^[a-zA-Z0-9_-]{1,36}$` +> * `ASCENDING` +> * `DESCENDING` @@ -339 +352 @@ items -> (list) ->> createdAt -> (timestamp) [required] +>> id -> (string) [required] @@ -341 +354,7 @@ items -> (list) ->>> The timestamp of when the subscription was created. +>>> The identifier of the subscription. +>>> +>>> Constraints: +>>> +>>> * pattern: `[a-zA-Z0-9_-]{1,36}` +>>> + @@ -347 +366 @@ items -> (list) ->> domainId -> (string) [required] +>> updatedBy -> (string) @@ -349,7 +368 @@ items -> (list) ->>> The identifier of the Amazon DataZone domain in which a subscription exists. ->>> ->>> Constraints: ->>> ->>> * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$` ->>> - +>>> The Amazon DataZone user who updated the subscription. @@ -357 +370 @@ items -> (list) ->> id -> (string) [required] +>> domainId -> (string) [required] @@ -359 +372 @@ items -> (list) ->>> The identifier of the subscription. +>>> The identifier of the Amazon DataZone domain in which a subscription exists. @@ -363 +376 @@ items -> (list) ->>> * pattern: `^[a-zA-Z0-9_-]{1,36}$` +>>> * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}` @@ -366,4 +378,0 @@ items -> (list) ->> ->> retainPermissions -> (boolean) ->> ->>> The retain permissions included in the subscription. @@ -383 +392 @@ items -> (list) ->> subscribedListing -> (structure) [required] +>> createdAt -> (timestamp) [required] @@ -385 +394,9 @@ items -> (list) ->>> The listing included in the subscription. +>>> The timestamp of when the subscription was created. +>> +>> updatedAt -> (timestamp) [required] +>> +>>> The timestamp of when the subscription was updated. +>> +>> subscribedPrincipal -> (tagged union structure) [required]