AWS cli medium security documentation change
Summary
Added VerificationStatus and ExpectedResourceOwnerAccount fields to ResourceInfo structure
Security assessment
Added VerificationStatus field which explicitly checks for sufficient permissions to access S3 locations, directly addressing permission misconfiguration risks. Also added ExpectedResourceOwnerAccount for resource ownership validation, both security enhancements.
Diff
diff --git a/cli/latest/reference/lakeformation/describe-resource.md b/cli/latest/reference/lakeformation/describe-resource.md index 26b74bdfa..eb7636033 100644 --- a//cli/latest/reference/lakeformation/describe-resource.md +++ b//cli/latest/reference/lakeformation/describe-resource.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -227,0 +228,28 @@ ResourceInfo -> (structure) +> +> VerificationStatus -> (string) +> +>> Indicates whether the registered role has sufficient permissions to access registered Amazon S3 location. Verification Status can be one of the following: +>> +>> * VERIFIED - Registered role has sufficient permissions to access registered Amazon S3 location. +>> * NOT_VERIFIED - Registered role does not have sufficient permissions to access registered Amazon S3 location. +>> * VERIFICATION_FAILED - Unable to verify if the registered role can access the registered Amazon S3 location. +>> + +>> +>> Possible values: +>> +>> * `VERIFIED` +>> * `VERIFICATION_FAILED` +>> * `NOT_VERIFIED` +>> + +> +> ExpectedResourceOwnerAccount -> (string) +> +>> The Amazon Web Services account that owns the Glue tables associated with specific Amazon S3 locations. +>> +>> Constraints: +>> +>> * pattern: `^\d{12}$` +>> + @@ -239 +267 @@ ResourceInfo -> (structure) - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) »