AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-16 · Documentation low

File: cli/latest/reference/datazone/update-domain.md

Summary

Updated AWS CLI version reference, reordered parameters, modified regex patterns for identifier/ARN validation, restructured parameter documentation, and adjusted single-sign-on configuration syntax.

Security assessment

The changes primarily involve documentation formatting, parameter reordering, and regex pattern adjustments without explicit security context. The pattern changes (removing ^/$ anchors) slightly loosen validation but don't indicate a security fix. While IAM role patterns were modified, there's no evidence this addresses a specific vulnerability.

Diff

diff --git a/cli/latest/reference/datazone/update-domain.md b/cli/latest/reference/datazone/update-domain.md
index 079b7c947..b580e39d7 100644
--- a//cli/latest/reference/datazone/update-domain.md
+++ b//cli/latest/reference/datazone/update-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -67 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--client-token <value>]
+    --identifier <value>
@@ -68,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--single-sign-on <value>]
@@ -70,2 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    --identifier <value>
-    [--name <value>]
@@ -73 +72,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-    [--single-sign-on <value>]
+    [--name <value>]
+    [--client-token <value>]
@@ -98,18 +97,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--client-token` (string)
-
-> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.
-
-`--description` (string)
-
-> The description to be updated as part of the `UpdateDomain` action.
-
-`--domain-execution-role` (string)
-
-> The domain execution role to be updated as part of the `UpdateDomain` action.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
-
-
@@ -122 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -126,12 +108 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-`--name` (string)
-
-> The name to be updated as part of the `UpdateDomain` action.
-
-`--service-role` (string)
-
-> The service role of the domain.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
+`--description` (string)
@@ -138,0 +110 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+> The description to be updated as part of the `UpdateDomain` action.
@@ -143,10 +114,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
-> 
-> idcInstanceArn -> (string)
->
->> The ARN of the IDC instance.
->> 
->> Constraints:
->> 
->>   * pattern: `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}`
->> 
-
@@ -174,0 +137,10 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+> 
+> idcInstanceArn -> (string)
+>
+>> The ARN of the IDC instance.
+>> 
+>> Constraints:
+>> 
+>>   * pattern: `.*arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}.*`
+>> 
+
@@ -179 +151 @@ Shorthand Syntax:
-    idcInstanceArn=string,type=string,userAssignment=string
+    type=string,userAssignment=string,idcInstanceArn=string
@@ -186 +157,0 @@ JSON Syntax:
-      "idcInstanceArn": "string",
@@ -188 +159,2 @@ JSON Syntax:
-      "userAssignment": "AUTOMATIC"|"MANUAL"
+      "userAssignment": "AUTOMATIC"|"MANUAL",
+      "idcInstanceArn": "string"
@@ -191,0 +164,28 @@ JSON Syntax:
+`--domain-execution-role` (string)
+
+> The domain execution role to be updated as part of the `UpdateDomain` action.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
+`--service-role` (string)
+
+> The service role of the domain.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
+`--name` (string)
+
+> The name to be updated as part of the `UpdateDomain` action.
+
+`--client-token` (string)
+
+> A unique, case-sensitive identifier that is provided to ensure the idempotency of the request.
+
@@ -291,14 +290,0 @@ Disable automatically prompt for CLI input parameters.
-description -> (string)
-
-> The description to be updated as part of the `UpdateDomain` action.
-
-domainExecutionRole -> (string)
-
-> The domain execution role to be updated as part of the `UpdateDomain` action.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
-
-
@@ -311 +297 @@ id -> (string)
->   * pattern: `^dzd[-_][a-zA-Z0-9_-]{1,36}$`
+>   * pattern: `dzd[-_][a-zA-Z0-9_-]{1,36}`
@@ -315,8 +300,0 @@ id -> (string)
-lastUpdatedAt -> (timestamp)
-
-> Specifies the timestamp of when the domain was last updated.
-
-name -> (string)
-
-> The name to be updated as part of the `UpdateDomain` action.
-
@@ -331 +309 @@ rootDomainUnitId -> (string)
->   * pattern: `^[a-z0-9_\-]+$`
+>   * pattern: `[a-z0-9_\-]+`
@@ -335,8 +313 @@ rootDomainUnitId -> (string)
-serviceRole -> (string)
-
-> The service role of the domain.
-> 
-> Constraints:
-> 
->   * pattern: `^arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*$`
-> 
+description -> (string)
@@ -343,0 +315 @@ serviceRole -> (string)
+> The description to be updated as part of the `UpdateDomain` action.
@@ -348,10 +319,0 @@ singleSignOn -> (structure)
-> 
-> idcInstanceArn -> (string)
->
->> The ARN of the IDC instance.
->> 
->> Constraints:
->> 
->>   * pattern: `arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}`
->> 
-
@@ -379,0 +342,38 @@ singleSignOn -> (structure)
+> 
+> idcInstanceArn -> (string)
+>
+>> The ARN of the IDC instance.
+>> 
+>> Constraints:
+>> 
+>>   * pattern: `.*arn:(aws|aws-us-gov|aws-cn|aws-iso|aws-iso-b):sso:::instance/(sso)?ins-[a-zA-Z0-9-.]{16}.*`
+>> 
+
+
+domainExecutionRole -> (string)
+
+> The domain execution role to be updated as part of the `UpdateDomain` action.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+> 
+
+
+serviceRole -> (string)
+
+> The service role of the domain.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>