AWS cli medium security documentation change

Service: cli · 2026-01-22 · Security-related medium

File: cli/latest/reference/odb/list-cloud-autonomous-vm-clusters.md

Summary

Added documentation for 'iamRoles' field showing IAM service roles associated with Autonomous VM clusters, including role ARN, status, status reason, and AWS integration settings.

Security assessment

Documents IAM roles which control access permissions. Explicitly mentions IAM role statuses like 'FAILED' and integration settings like 'KmsTde' (Key Management Service Transparent Data Encryption), which are security-critical components. This helps users monitor and audit role configurations.

Diff

diff --git a/cli/latest/reference/odb/list-cloud-autonomous-vm-clusters.md b/cli/latest/reference/odb/list-cloud-autonomous-vm-clusters.md
index 7c9b81379..b5f82574b 100644
--- a//cli/latest/reference/odb/list-cloud-autonomous-vm-clusters.md
+++ b//cli/latest/reference/odb/list-cloud-autonomous-vm-clusters.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.4 Command Reference](../../index.html) »
@@ -640,0 +641,50 @@ cloudAutonomousVmClusters -> (list)
+>> 
+>> iamRoles -> (list)
+>>
+>>> The Amazon Web Services Identity and Access Management (IAM) service roles associated with the Autonomous VM cluster in the summary information.
+>>> 
+>>> (structure)
+>>>
+>>>> Information about an Amazon Web Services Identity and Access Management (IAM) service role associated with a resource.
+>>>> 
+>>>> iamRoleArn -> (string)
+>>>>
+>>>>> The Amazon Resource Name (ARN) of the Amazon Web Services Identity and Access Management (IAM) service role.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `20`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `arn:(?:aws|aws-cn|aws-us-gov|aws-iso-{0,1}[a-z]{0,1}):iam::[0-9]{12}:role/.+`
+>>>>> 
+
+>>>> 
+>>>> status -> (string)
+>>>>
+>>>>> The current status of the Amazon Web Services Identity and Access Management (IAM) service role.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `ASSOCIATING`
+>>>>>   * `DISASSOCIATING`
+>>>>>   * `FAILED`
+>>>>>   * `CONNECTED`
+>>>>>   * `DISCONNECTED`
+>>>>>   * `PARTIALLY_CONNECTED`
+>>>>>   * `UNKNOWN`
+>>>>> 
+
+>>>> 
+>>>> statusReason -> (string)
+>>>>
+>>>>> Additional information about the current status of the Amazon Web Services Identity and Access Management (IAM) service role, if applicable.
+>>>> 
+>>>> awsIntegration -> (string)
+>>>>
+>>>>> The Amazon Web Services integration configuration settings for the Amazon Web Services Identity and Access Management (IAM) service role.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `KmsTde`
+>>>>> 
+
@@ -652 +702 @@ cloudAutonomousVmClusters -> (list)
-  * [AWS CLI 2.33.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.4 Command Reference](../../index.html) »