AWS cli documentation change
Summary
Updated AWS CLI command reference for 'datazone update-connection' to version 2.33.1. Restructured parameters, added required parameters (domain-identifier, identifier), updated constraints and regex patterns, reorganized JSON syntax for connection properties, and expanded documentation for security-related fields including secret ARNs, IAM roles, and trusted certificates.
Security assessment
The changes add documentation for security features including secret ARNs (pattern updated to `arn:aws[^:]*:secretsmanager:.*`), IAM roles (pattern updated to `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`), and trusted certificates (trustedCertificatesS3Uri). However, there's no evidence of a specific security vulnerability being addressed.
Diff
diff --git a/cli/latest/reference/datazone/update-connection.md b/cli/latest/reference/datazone/update-connection.md index e6cbef9a6..09f34d658 100644 --- a//cli/latest/reference/datazone/update-connection.md +++ b//cli/latest/reference/datazone/update-connection.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -67,2 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - [--aws-location <value>] - [--description <value>] @@ -70,0 +69,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--description <value>] + [--aws-location <value>] @@ -95,0 +96,32 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo +`--domain-identifier` (string) [required] + +> The ID of the domain where a connection is to be updated. +> +> Constraints: +> +> * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}` +> + + +`--identifier` (string) [required] + +> The ID of the connection to be updated. +> +> Constraints: +> +> * min: `0` +> * max: `128` +> + + +`--description` (string) + +> The description of a connection. +> +> Constraints: +> +> * min: `1` +> * max: `128` +> + + @@ -106 +138 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo ->> * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$` +>> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` @@ -116 +148 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo ->> * pattern: `^\d{12}$` +>> * pattern: `\d{12}` @@ -126 +158 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo ->> * pattern: `^[a-z]{2}-[a-z]{4,10}-\d$` +>> * pattern: `[a-z]{2}-[a-z]{4,10}-\d` @@ -158,32 +189,0 @@ JSON Syntax: -`--description` (string) - -> The description of a connection. -> -> Constraints: -> -> * min: `1` -> * max: `128` -> - - -`--domain-identifier` (string) [required] - -> The ID of the domain where a connection is to be updated. -> -> Constraints: -> -> * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$` -> - - -`--identifier` (string) [required] - -> The ID of the connection to be updated. -> -> Constraints: -> -> * min: `0` -> * max: `128` -> - - @@ -196,32 +196 @@ JSON Syntax: -> This is a Tagged Union structure. Only one of the following top level keys can be set: `amazonQProperties`, `athenaProperties`, `glueProperties`, `iamProperties`, `mlflowProperties`, `redshiftProperties`, `s3Properties`, `sparkEmrProperties`. -> -> amazonQProperties -> (structure) -> ->> The Amazon Q properties of the connection. ->> ->> authMode -> (string) ->> ->>> The authentication mode of the connection’s Amazon Q properties. ->>> ->>> Constraints: ->>> ->>> * min: `0` ->>> * max: `128` ->>> - ->> ->> isEnabled -> (boolean) [required] ->> ->>> Specifies whether Amazon Q is enabled for the connection. ->> ->> profileArn -> (string) ->> ->>> The profile ARN of the connection’s Amazon Q properties. ->>> ->>> Constraints: ->>> ->>> * min: `0` ->>> * max: `2048` ->>> * pattern: `^arn:aws[a-z\-]*:[a-z0-9\-]+:[a-z0-9\-]*:[0-9]*:.*` ->>> - +> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`. @@ -250,0 +220,19 @@ JSON Syntax: +>>> +>>> description -> (string) +>>> +>>>> The description of the Amazon Web Services Glue connection patch. +>>> +>>> connectionProperties -> (map) +>>> +>>>> The properties of the Amazon Web Services Glue connection patch. +>>>> +>>>> key -> (string) +>>>> +>>>> value -> (string) +>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `2048` +>>>>> + @@ -254,0 +243,10 @@ JSON Syntax: +>>>> +>>>> secretArn -> (string) +>>>> +>>>>> The secret ARN of a connection. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * pattern: `arn:aws(-(cn|us-gov|iso(-[bef])?))?:secretsmanager:.*` +>>>>> + @@ -260 +258 @@ JSON Syntax: ->>>>> password -> (string) +>>>>> userName -> (string) @@ -262 +260 @@ JSON Syntax: ->>>>>> The password for a connection. +>>>>>> The user name for the connecion. @@ -268 +266 @@ JSON Syntax: ->>>>>> * pattern: `^.*$` +>>>>>> * pattern: `\S+` @@ -272 +270 @@ JSON Syntax: ->>>>> userName -> (string) +>>>>> password -> (string) @@ -274 +272 @@ JSON Syntax: ->>>>>> The user name for the connecion. +>>>>>> The password for a connection. @@ -280 +278 @@ JSON Syntax: ->>>>>> * pattern: `^\S+$` +>>>>>> * pattern: `.*` @@ -282,0 +281,24 @@ JSON Syntax: +> +> iamProperties -> (structure) +> +>> The IAM properties of a connection properties patch. +>> +>> glueLineageSyncEnabled -> (boolean) +>> +>>> Specifies whether Amazon Web Services Glue lineage sync is enabled for a connection. +> +> redshiftProperties -> (structure) +> +>> The Amazon Redshift properties of a connection properties patch. +>> +>> storage -> (tagged union structure) +>> +>>> The storage in the Amazon Redshift properties patch. +>>> +>>> ### Note +>>> +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `clusterName`, `workgroupName`. +>>> +>>> clusterName -> (string) +>>> +>>>> The cluster name in the Amazon Redshift storage properties. @@ -284 +306,4 @@ JSON Syntax: ->>>> secretArn -> (string) +>>>> Constraints: +>>>>