AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/reject-subscription-request.md

Summary

Updated AWS CLI version reference and restructured command parameters/output documentation. Major changes include: reordered parameters, updated field patterns/constraints, restructured 'subscribedPrincipals' as tagged union, expanded IAM/SSO details, reorganized subscription request object fields, and added new field descriptions.

Security assessment

The changes involve documentation restructuring, parameter reordering, and pattern constraint updates without evidence of addressing security vulnerabilities. No security advisories, vulnerability fixes, or security incident references are present. Pattern constraint changes appear to be syntax normalization (e.g., removing regex anchors) rather than security fixes.

Diff

diff --git a/cli/latest/reference/datazone/reject-subscription-request.md b/cli/latest/reference/datazone/reject-subscription-request.md
index 0d40748d3..5077ff999 100644
--- a//cli/latest/reference/datazone/reject-subscription-request.md
+++ b//cli/latest/reference/datazone/reject-subscription-request.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -67 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--decision-comment <value>]
@@ -69,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--decision-comment <value>]
@@ -94 +94 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--decision-comment` (string)
+`--domain-identifier` (string) [required]
@@ -96 +96 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-> The decision comment of the rejected subscription request.
+> The identifier of the Amazon DataZone domain in which the subscription request was rejected.
@@ -100,2 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * min: `1`
->   * max: `4096`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -105 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--domain-identifier` (string) [required]
+`--identifier` (string) [required]
@@ -107 +106 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-> The identifier of the Amazon DataZone domain in which the subscription request was rejected.
+> The identifier of the subscription request that was rejected.
@@ -111 +110 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -115 +114 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--identifier` (string) [required]
+`--decision-comment` (string)
@@ -117 +116 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-> The identifier of the subscription request that was rejected.
+> The decision comment of the rejected subscription request.
@@ -121 +120,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * min: `1`
+>   * max: `4096`
@@ -224 +224,8 @@ Disable automatically prompt for CLI input parameters.
-createdAt -> (timestamp)
+id -> (string)
+
+> The identifier of the subscription request that was rejected.
+> 
+> Constraints:
+> 
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+> 
@@ -226 +232,0 @@ createdAt -> (timestamp)
-> The timestamp of when the subscription request was rejected.
@@ -232 +238 @@ createdBy -> (string)
-decisionComment -> (string)
+updatedBy -> (string)
@@ -234 +240,5 @@ decisionComment -> (string)
-> The decision comment of the rejected subscription request.
+> The Amazon DataZone user who updated the subscription request.
+
+domainId -> (string)
+
+> The identifier of the Amazon DataZone domain in which the subscription request was rejected.
@@ -238,2 +248 @@ decisionComment -> (string)
->   * min: `1`
->   * max: `4096`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -243 +252 @@ decisionComment -> (string)
-domainId -> (string)
+status -> (string)
@@ -245 +254 @@ domainId -> (string)
-> The identifier of the Amazon DataZone domain in which the subscription request was rejected.
+> The status of the subscription request.
@@ -247 +256 @@ domainId -> (string)
-> Constraints:
+> Possible values:
@@ -249 +258,3 @@ domainId -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * `PENDING`
+>   * `ACCEPTED`
+>   * `REJECTED`
@@ -253 +264 @@ domainId -> (string)
-existingSubscriptionId -> (string)
+createdAt -> (timestamp)
@@ -255 +266,9 @@ existingSubscriptionId -> (string)
-> The ID of the existing subscription.
+> The timestamp of when the subscription request was rejected.
+
+updatedAt -> (timestamp)
+
+> The timestamp of when the subscription request was updated.
+
+requestReason -> (string)
+
+> The reason for the subscription request.
@@ -259 +278,2 @@ existingSubscriptionId -> (string)
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * min: `1`
+>   * max: `4096`
@@ -263 +283 @@ existingSubscriptionId -> (string)
-id -> (string)
+subscribedPrincipals -> (list)
@@ -265 +285 @@ id -> (string)
-> The identifier of the subscription request that was rejected.
+> The subscribed principals of the subscription request.
@@ -269 +289,2 @@ id -> (string)
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * min: `1`
+>   * max: `1`
@@ -272,4 +292,0 @@ id -> (string)
-
-metadataForms -> (list)
-
-> Metadata forms included in the subscription request.
@@ -277 +294 @@ metadataForms -> (list)
-> (structure)
+> (tagged union structure)
@@ -279 +296 @@ metadataForms -> (list)
->> The details of a metadata form.
+>> The principal that has the subscription grant for the asset.
@@ -281 +298 @@ metadataForms -> (list)
->> content -> (string)
+>> ### Note
@@ -283 +300 @@ metadataForms -> (list)
->>> The content of the metadata form.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`, `user`, `group`, `iam`.
@@ -285 +302 @@ metadataForms -> (list)
->> formName -> (string) [required]
+>> project -> (structure)
@@ -287 +304 @@ metadataForms -> (list)
->>> The name of the metadata form.
+>>> The project that has the subscription grant.
@@ -289 +306 @@ metadataForms -> (list)
->>> Constraints:
+>>> id -> (string)
@@ -291,3 +308,9 @@ metadataForms -> (list)
->>>   * min: `1`
->>>   * max: `128`
->>>   * pattern: `^(?![0-9_])\w+$|^_\w*[a-zA-Z0-9]\w*$`
+>>>> The identifier of the project that has the subscription grant.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+>>>> 
+
+>>> 
+>>> name -> (string)
@@ -294,0 +318,8 @@ metadataForms -> (list)
+>>>> The name of the project that has the subscription grant.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `64`
+>>>>   * pattern: `[\w -]+`
+>>>> 
@@ -297 +328 @@ metadataForms -> (list)
->> typeName -> (string)
+>> user -> (structure)
@@ -299 +330 @@ metadataForms -> (list)
->>> The name of the metadata form type.
+>>> The subscribed user.
@@ -301 +332 @@ metadataForms -> (list)
->>> Constraints:
+>>> id -> (string)
@@ -303,3 +334,9 @@ metadataForms -> (list)
->>>   * min: `1`
->>>   * max: `128`
->>>   * pattern: `^(amazon.datazone.)?(?![0-9_])\w+$|^_\w*[a-zA-Z0-9]\w*$`
+>>>> The ID of the subscribed user.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
+>>>> 
+
+>>> 
+>>> details -> (tagged union structure)
@@ -306,0 +344,32 @@ metadataForms -> (list)
+>>>> The subscribed user details.
+>>>> 
+>>>> ### Note
+>>>> 
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>>> 
+>>>> iam -> (structure)
+>>>>
+>>>>> The IAM details of the user profile.
+>>>>> 
+>>>>> arn -> (string)
+>>>>>
+>>>>>> The ARN of the IAM user.
+>>>>> 
+>>>>> principalId -> (string)
+>>>>>
+>>>>>> The principal ID as part of the IAM user profile details.
+>>>> 
+>>>> sso -> (structure)
+>>>>
+>>>>> The SSO details of the user profile.