AWS cli medium security documentation change
Summary
Added documentation for 'VerificationStatus' and 'ExpectedResourceOwnerAccount' response parameters
Security assessment
New parameters explicitly document permission verification for S3 access and resource ownership validation. This addresses security gaps by enabling detection of misconfigured permissions (VERIFICATION_FAILED/NOT_VERIFIED states) and verifying cross-account resource ownership.
Diff
diff --git a/cli/latest/reference/lakeformation/list-resources.md b/cli/latest/reference/lakeformation/list-resources.md index 64d693c00..cd5b2e426 100644 --- a//cli/latest/reference/lakeformation/list-resources.md +++ b//cli/latest/reference/lakeformation/list-resources.md @@ -15 +15 @@ - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) » @@ -369,0 +370,28 @@ ResourceInfoList -> (list) +>> +>> VerificationStatus -> (string) +>> +>>> Indicates whether the registered role has sufficient permissions to access registered Amazon S3 location. Verification Status can be one of the following: +>>> +>>> * VERIFIED - Registered role has sufficient permissions to access registered Amazon S3 location. +>>> * NOT_VERIFIED - Registered role does not have sufficient permissions to access registered Amazon S3 location. +>>> * VERIFICATION_FAILED - Unable to verify if the registered role can access the registered Amazon S3 location. +>>> + +>>> +>>> Possible values: +>>> +>>> * `VERIFIED` +>>> * `VERIFICATION_FAILED` +>>> * `NOT_VERIFIED` +>>> + +>> +>> ExpectedResourceOwnerAccount -> (string) +>> +>>> The Amazon Web Services account that owns the Glue tables associated with specific Amazon S3 locations. +>>> +>>> Constraints: +>>> +>>> * pattern: `^\d{12}$` +>>> + @@ -385 +413 @@ NextToken -> (string) - * [AWS CLI 2.32.33 Command Reference](../../index.html) » + * [AWS CLI 2.33.1 Command Reference](../../index.html) »