AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/revoke-subscription.md

Summary

Updated AWS CLI version reference and restructured output parameters for the revoke-subscription command. Changes include: modified pattern validations (removed start/end anchors), reordered fields, added new tagged union structures for subscribedPrincipal, reorganized subscribedListing properties, and added detailed constraints.

Security assessment

The changes primarily involve documentation structure and parameter formatting. While pattern validations were modified (e.g., '^dzd[-_]' became 'dzd[-_]'), there's no evidence this addresses a specific vulnerability. The changes improve documentation clarity but don't reference security fixes or introduce security features.

Diff

diff --git a/cli/latest/reference/datazone/revoke-subscription.md b/cli/latest/reference/datazone/revoke-subscription.md
index aa78abdcf..ecc048244 100644
--- a//cli/latest/reference/datazone/revoke-subscription.md
+++ b//cli/latest/reference/datazone/revoke-subscription.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -110 +110 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
@@ -217 +217,8 @@ Disable automatically prompt for CLI input parameters.
-createdAt -> (timestamp)
+id -> (string)
+
+> The identifier of the revoked subscription.
+> 
+> Constraints:
+> 
+>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+> 
@@ -219 +225,0 @@ createdAt -> (timestamp)
-> The timestamp of when the subscription was revoked.
@@ -224,0 +231,4 @@ createdBy -> (string)
+updatedBy -> (string)
+
+> The Amazon DataZone user who revoked the subscription.
+
@@ -231 +241 @@ domainId -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -235 +245 @@ domainId -> (string)
-id -> (string)
+status -> (string)
@@ -237 +247 @@ id -> (string)
-> The identifier of the revoked subscription.
+> The status of the revoked subscription.
@@ -239 +249 @@ id -> (string)
-> Constraints:
+> Possible values:
@@ -241 +251,3 @@ id -> (string)
->   * pattern: `^[a-zA-Z0-9_-]{1,36}$`
+>   * `APPROVED`
+>   * `REVOKED`
+>   * `CANCELLED`
@@ -245 +257 @@ id -> (string)
-retainPermissions -> (boolean)
+createdAt -> (timestamp)
@@ -247 +259 @@ retainPermissions -> (boolean)
-> Specifies whether permissions are retained when the subscription is revoked.
+> The timestamp of when the subscription was revoked.
@@ -249 +261 @@ retainPermissions -> (boolean)
-status -> (string)
+updatedAt -> (timestamp)
@@ -251 +263,5 @@ status -> (string)
-> The status of the revoked subscription.
+> The timestamp of when the subscription was revoked.
+
+subscribedPrincipal -> (tagged union structure)
+
+> The subscribed principal of the revoked subscription.
@@ -253 +269 @@ status -> (string)
-> Possible values:
+> ### Note
@@ -255,3 +271,29 @@ status -> (string)
->   * `APPROVED`
->   * `REVOKED`
->   * `CANCELLED`
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `project`, `user`, `group`, `iam`.
+> 
+> project -> (structure)
+>
+>> The project that has the subscription grant.
+>> 
+>> id -> (string)
+>>
+>>> The identifier of the project that has the subscription grant.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `[a-zA-Z0-9_-]{1,36}`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the project that has the subscription grant.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `64`
+>>>   * pattern: `[\w -]+`
+>>> 
+
+> 
+> user -> (structure)
@@ -258,0 +301,96 @@ status -> (string)
+>> The subscribed user.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed user.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
+>>> 
+
+>> 
+>> details -> (tagged union structure)
+>>
+>>> The subscribed user details.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `iam`, `sso`.
+>>> 
+>>> iam -> (structure)
+>>>
+>>>> The IAM details of the user profile.
+>>>> 
+>>>> arn -> (string)
+>>>>
+>>>>> The ARN of the IAM user.
+>>>> 
+>>>> principalId -> (string)
+>>>>
+>>>>> The principal ID as part of the IAM user profile details.
+>>> 
+>>> sso -> (structure)
+>>>
+>>>> The SSO details of the user profile.
+>>>> 
+>>>> username -> (string)
+>>>>
+>>>>> The username as part of the SSO user profile detail.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>>   * pattern: `[a-zA-Z_0-9+=,.@-]+`
+>>>>> 
+
+>>>> 
+>>>> firstName -> (string)
+>>>>
+>>>>> The first name as part of the SSO user profile detail.
+>>>> 
+>>>> lastName -> (string)
+>>>>
+>>>>> The last name as part of the SSO user profile detail.
+> 
+> group -> (structure)
+>
+>> The subscribed group.
+>> 
+>> id -> (string)
+>>
+>>> The ID of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `([0-9a-f]{10}-|)[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}`
+>>> 
+
+>> 
+>> name -> (string)
+>>
+>>> The name of the subscribed group.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `1024`
+>>>   * pattern: `[a-zA-Z_0-9+=,.@-]+`
+>>> 
+
+> 
+> iam -> (structure)
+>
+>> The subscribed IAM principal.
+>> 
+>> principalArn -> (string)
+>>
+>>> The ARN of the subscribed IAM principal.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `255`
+>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|user)(/[\w+=,.@-]*)*/[\w+=,.@-]+`
+>>> 
@@ -265 +403 @@ subscribedListing -> (structure)
-> description -> (string) [required]
+> id -> (string) [required]
@@ -267 +405 @@ subscribedListing -> (structure)