AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/put-environment-blueprint-configuration.md

Summary

Updated AWS CLI version reference, reordered parameters, added new parameters (provisioning-role-arn, manage-access-role-arn, regional-parameters), modified pattern constraints by removing regex anchors (^ and $), restructured parameter documentation, and reorganized output fields.

Security assessment

The changes add documentation for security features like IAM roles (provisioning-role-arn, manage-access-role-arn) and permission boundaries (environment-role-permission-boundary) with specific ARN patterns. While these are security-related features, there's no evidence in the diff that this change addresses a specific security vulnerability or incident. The pattern modifications appear to be syntax adjustments rather than security fixes.

Diff

diff --git a/cli/latest/reference/datazone/put-environment-blueprint-configuration.md b/cli/latest/reference/datazone/put-environment-blueprint-configuration.md
index 59ec639ce..a8e52b79a 100644
--- a//cli/latest/reference/datazone/put-environment-blueprint-configuration.md
+++ b//cli/latest/reference/datazone/put-environment-blueprint-configuration.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -68 +67,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --enabled-regions <value>
@@ -69,0 +69,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--provisioning-role-arn <value>]
+    [--manage-access-role-arn <value>]
@@ -70,0 +72,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    --enabled-regions <value>
+    [--regional-parameters <value>]
@@ -72 +74,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--manage-access-role-arn <value>]
@@ -74,2 +75,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--provisioning-role-arn <value>]
-    [--regional-parameters <value>]
@@ -106 +106,41 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
+> 
+
+
+`--environment-blueprint-identifier` (string) [required]
+
+> The identifier of the environment blueprint.
+> 
+> Constraints:
+> 
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+> 
+
+
+`--provisioning-role-arn` (string)
+
+> The ARN of the provisioning role.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
+`--manage-access-role-arn` (string)
+
+> The ARN of the manage access role.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
+`--environment-role-permission-boundary` (string)
+
+> The environment role permissions boundary.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::(aws|\d{12}):policy/[\w+=,.@-]*`
@@ -126 +166 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->>   * pattern: `^[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]$`
+>>   * pattern: `[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]`
@@ -136 +176 @@ Syntax:
-`--environment-blueprint-identifier` (string) [required]
+`--regional-parameters` (map)
@@ -138 +178 @@ Syntax:
-> The identifier of the environment blueprint.
+> The regional parameters in the environment blueprint.
@@ -140 +180 @@ Syntax:
-> Constraints:
+> key -> (string)
@@ -142 +182,9 @@ Syntax:
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>> Constraints:
+>> 
+>>   * min: `4`
+>>   * max: `16`
+>>   * pattern: `[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]`
+>> 
+
+> 
+> value -> (map)
@@ -143,0 +192,3 @@ Syntax:
+>> key -> (string)
+>> 
+>> value -> (string)
@@ -144,0 +196 @@ Syntax:
+Shorthand Syntax:
@@ -146 +197,0 @@ Syntax:
-`--environment-role-permission-boundary` (string)
@@ -148,6 +199,9 @@ Syntax:
-> The environment role permissions boundary.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::(aws|\d{12}):policy/[\w+=,.@-]*$`
-> 
+    KeyName1=KeyName1=string,KeyName2=string,KeyName2=KeyName1=string,KeyName2=string
+    
+
+JSON Syntax:
+    
+    
+    {"string": {"string": "string"
+          ...}
+      ...}
@@ -177,10 +230,0 @@ JSON Syntax:
-`--manage-access-role-arn` (string)
-
-> The ARN of the manage access role.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
-
-
@@ -201,0 +246,10 @@ JSON Syntax:
+>>> 
+>>> locationRegistrationRole -> (string)
+>>>
+>>>> The role that is used to manage read/write access to the chosen Amazon S3 bucket(s) for Data Lake using Amazon Web Services Lake Formation hybrid access mode.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>>>> 
+
@@ -220 +274 @@ JSON Syntax:
->>>>>   * pattern: `^s3://.+$`
+>>>>>   * pattern: `s3://.+`
@@ -223,10 +276,0 @@ JSON Syntax:
->>> 
->>> locationRegistrationRole -> (string)
->>>
->>>> The role that is used to manage read/write access to the chosen Amazon S3 bucket(s) for Data Lake using Amazon Web Services Lake Formation hybrid access mode.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
->>>> 
-
@@ -237 +281 @@ Shorthand Syntax:
-    lakeFormationConfiguration={locationRegistrationExcludeS3Locations=[string,string],locationRegistrationRole=string} ...
+    lakeFormationConfiguration={locationRegistrationRole=string,locationRegistrationExcludeS3Locations=[string,string]} ...
@@ -246,2 +290,2 @@ JSON Syntax:
-          "locationRegistrationExcludeS3Locations": ["string", ...],
-          "locationRegistrationRole": "string"
+          "locationRegistrationRole": "string",
+          "locationRegistrationExcludeS3Locations": ["string", ...]
@@ -254,44 +297,0 @@ JSON Syntax:
-`--provisioning-role-arn` (string)
-
-> The ARN of the provisioning role.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
-
-
-`--regional-parameters` (map)
-
-> The regional parameters in the environment blueprint.
-> 
-> key -> (string)
->
->> Constraints:
->> 
->>   * min: `4`
->>   * max: `16`
->>   * pattern: `^[a-z]{2}-?(iso|gov)?-{1}[a-z]*-{1}[0-9]$`
->> 
-
-> 
-> value -> (map)
->
->> key -> (string)
->> 
->> value -> (string)
-
-Shorthand Syntax:
-    
-    
-    KeyName1=KeyName1=string,KeyName2=string,KeyName2=KeyName1=string,KeyName2=string
-    
-
-JSON Syntax:
-    
-    
-    {"string": {"string": "string"
-          ...}
-      ...}
-    
-
@@ -397,4 +396,0 @@ Disable automatically prompt for CLI input parameters.