AWS cli documentation change
Summary
Updated AWS CLI version reference, reordered parameters, added new parameters (provisioning-role-arn, manage-access-role-arn, regional-parameters), modified pattern constraints by removing regex anchors (^ and $), restructured parameter documentation, and reorganized output fields.
Security assessment
The changes add documentation for security features like IAM roles (provisioning-role-arn, manage-access-role-arn) and permission boundaries (environment-role-permission-boundary) with specific ARN patterns. While these are security-related features, there's no evidence in the diff that this change addresses a specific security vulnerability or incident. The pattern modifications appear to be syntax adjustments rather than security fixes.
Diff
diff --git a/cli/latest/reference/datazone/put-environment-blueprint-configuration.md b/cli/latest/reference/datazone/put-environment-blueprint-configuration.md index 59ec639ce..a8e52b79a 100644 --- a//cli/latest/reference/datazone/put-environment-blueprint-configuration.md +++ b//cli/latest/reference/datazone/put-environment-blueprint-configuration.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -68 +67,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - --enabled-regions <value> @@ -69,0 +69,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--provisioning-role-arn <value>] + [--manage-access-role-arn <value>] @@ -70,0 +72,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + --enabled-regions <value> + [--regional-parameters <value>] @@ -72 +74,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--manage-access-role-arn <value>] @@ -74,2 +75,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--provisioning-role-arn <value>] - [--regional-parameters <value>] @@ -106 +106,41 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo -> * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$` +> * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}` +> + + +`--environment-blueprint-identifier` (string) [required] + +> The identifier of the environment blueprint. +> +> Constraints: +> +> * pattern: `[a-zA-Z0-9_-]{1,36}` +> + + +`--provisioning-role-arn` (string) + +> The ARN of the provisioning role. +> +> Constraints: +> +> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> + + +`--manage-access-role-arn` (string) + +> The ARN of the manage access role. +> +> Constraints: +> +> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> + + +`--environment-role-permission-boundary` (string) + +> The environment role permissions boundary. +> +> Constraints: +> +> * pattern: `arn:aws[^:]*:iam::(aws|\d{12}):policy/[\w+=,.@-]*` @@ -126 +166 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo ->> * pattern: `^[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]$` +>> * pattern: `[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]` @@ -136 +176 @@ Syntax: -`--environment-blueprint-identifier` (string) [required] +`--regional-parameters` (map) @@ -138 +178 @@ Syntax: -> The identifier of the environment blueprint. +> The regional parameters in the environment blueprint. @@ -140 +180 @@ Syntax: -> Constraints: +> key -> (string) @@ -142 +182,9 @@ Syntax: -> * pattern: `^[a-zA-Z0-9_-]{1,36}$` +>> Constraints: +>> +>> * min: `4` +>> * max: `16` +>> * pattern: `[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]` +>> + +> +> value -> (map) @@ -143,0 +192,3 @@ Syntax: +>> key -> (string) +>> +>> value -> (string) @@ -144,0 +196 @@ Syntax: +Shorthand Syntax: @@ -146 +197,0 @@ Syntax: -`--environment-role-permission-boundary` (string) @@ -148,6 +199,9 @@ Syntax: -> The environment role permissions boundary. -> -> Constraints: -> -> * pattern: `^arn:aws[^:]*:iam::(aws|\d{12}):policy/[\w+=,.@-]*$` -> + KeyName1=KeyName1=string,KeyName2=string,KeyName2=KeyName1=string,KeyName2=string + + +JSON Syntax: + + + {"string": {"string": "string" + ...} + ...} @@ -177,10 +230,0 @@ JSON Syntax: -`--manage-access-role-arn` (string) - -> The ARN of the manage access role. -> -> Constraints: -> -> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` -> - - @@ -201,0 +246,10 @@ JSON Syntax: +>>> +>>> locationRegistrationRole -> (string) +>>> +>>>> The role that is used to manage read/write access to the chosen Amazon S3 bucket(s) for Data Lake using Amazon Web Services Lake Formation hybrid access mode. +>>>> +>>>> Constraints: +>>>> +>>>> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +>>>> + @@ -220 +274 @@ JSON Syntax: ->>>>> * pattern: `^s3://.+$` +>>>>> * pattern: `s3://.+` @@ -223,10 +276,0 @@ JSON Syntax: ->>> ->>> locationRegistrationRole -> (string) ->>> ->>>> The role that is used to manage read/write access to the chosen Amazon S3 bucket(s) for Data Lake using Amazon Web Services Lake Formation hybrid access mode. ->>>> ->>>> Constraints: ->>>> ->>>> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` ->>>> - @@ -237 +281 @@ Shorthand Syntax: - lakeFormationConfiguration={locationRegistrationExcludeS3Locations=[string,string],locationRegistrationRole=string} ... + lakeFormationConfiguration={locationRegistrationRole=string,locationRegistrationExcludeS3Locations=[string,string]} ... @@ -246,2 +290,2 @@ JSON Syntax: - "locationRegistrationExcludeS3Locations": ["string", ...], - "locationRegistrationRole": "string" + "locationRegistrationRole": "string", + "locationRegistrationExcludeS3Locations": ["string", ...] @@ -254,44 +297,0 @@ JSON Syntax: -`--provisioning-role-arn` (string) - -> The ARN of the provisioning role. -> -> Constraints: -> -> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` -> - - -`--regional-parameters` (map) - -> The regional parameters in the environment blueprint. -> -> key -> (string) -> ->> Constraints: ->> ->> * min: `4` ->> * max: `16` ->> * pattern: `^[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]$` ->> - -> -> value -> (map) -> ->> key -> (string) ->> ->> value -> (string) - -Shorthand Syntax: - - - KeyName1=KeyName1=string,KeyName2=string,KeyName2=KeyName1=string,KeyName2=string - - -JSON Syntax: - - - {"string": {"string": "string" - ...} - ...} - - @@ -397,4 +396,0 @@ Disable automatically prompt for CLI input parameters.