AWS cli medium security documentation change

Service: cli · 2026-01-16 · Security-related medium

File: cli/latest/reference/opensearchserverless/list-collections.md

Summary

Added collection group filtering and encryption key details in output

Security assessment

Added kmsKeyArn field in output to display encryption keys used for collections. This enhances security visibility by exposing encryption configuration details. Specific evidence: kmsKeyArn field added to collectionSummaries output.

Diff

diff --git a/cli/latest/reference/opensearchserverless/list-collections.md b/cli/latest/reference/opensearchserverless/list-collections.md
index b3f645c95..fa246f923 100644
--- a//cli/latest/reference/opensearchserverless/list-collections.md
+++ b//cli/latest/reference/opensearchserverless/list-collections.md
@@ -14,2 +14,2 @@
-  * [previous](list-access-policies.html "list-access-policies") |
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [previous](list-collection-groups.html "list-collection-groups") |
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »
@@ -22 +22 @@
-  * [← list-access-policies](list-access-policies.html "previous chapter \(use the left arrow\)") /
+  * [← list-collection-groups](list-collection-groups.html "previous chapter \(use the left arrow\)") /
@@ -125,0 +126,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/opense
+> 
+> collectionGroupName -> (string)
+>
+>> The name of the collection group to filter by.
+>> 
+>> Constraints:
+>> 
+>>   * min: `3`
+>>   * max: `32`
+>>   * pattern: `[a-z][a-z0-9-]+`
+>> 
+
@@ -130 +142 @@ Shorthand Syntax:
-    name=string,status=string
+    name=string,status=string,collectionGroupName=string
@@ -138 +150,2 @@ JSON Syntax:
-      "status": "CREATING"|"DELETING"|"ACTIVE"|"FAILED"
+      "status": "CREATING"|"DELETING"|"ACTIVE"|"FAILED",
+      "collectionGroupName": "string"
@@ -303,0 +317,16 @@ collectionSummaries -> (list)
+>> 
+>> kmsKeyArn -> (string)
+>>
+>>> The ARN of the Amazon Web Services Key Management Service key used to encrypt the collection.
+>> 
+>> collectionGroupName -> (string)
+>>
+>>> The name of the collection group that contains this collection.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `3`
+>>>   * max: `32`
+>>>   * pattern: `[a-z][a-z0-9-]+`
+>>> 
+
@@ -309 +338 @@ nextToken -> (string)
-  * [← list-access-policies](list-access-policies.html "previous chapter \(use the left arrow\)") /
+  * [← list-collection-groups](list-collection-groups.html "previous chapter \(use the left arrow\)") /
@@ -318,2 +347,2 @@ nextToken -> (string)
-  * [previous](list-access-policies.html "list-access-policies") |
-  * [AWS CLI 2.32.33 Command Reference](../../index.html) »
+  * [previous](list-collection-groups.html "list-collection-groups") |
+  * [AWS CLI 2.33.1 Command Reference](../../index.html) »