AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-28 · Documentation low

File: cli/latest/reference/connect/start-task-contact.md

Summary

Added new --attachments parameter for S3 presigned URLs with security constraints (min/max attachments, file name validation)

Security assessment

Introduces security constraints (min:1, max:5 attachments) and file name validation (pattern: ^\P{C}*$) to prevent potential abuse through excessive attachments or malicious filenames. No evidence of addressing existing vulnerability.

Diff

diff --git a/cli/latest/reference/connect/start-task-contact.md b/cli/latest/reference/connect/start-task-contact.md
index a807593af..9b2a82a81 100644
--- a//cli/latest/reference/connect/start-task-contact.md
+++ b//cli/latest/reference/connect/start-task-contact.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.8 Command Reference](../../index.html) »
@@ -95,0 +96 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/connec
+    [--attachments <value>]
@@ -289 +290 @@ Shorthand Syntax:
-    KeyName1=Value=string,Type=string,Status=string,Arn=string,StatusReason=string,KeyName2=Value=string,Type=string,Status=string,Arn=string,StatusReason=string
+    KeyName1={Value=string,Type=string,Status=string,Arn=string,StatusReason=string},KeyName2={Value=string,Type=string,Status=string,Arn=string,StatusReason=string}
@@ -564,0 +566,56 @@ JSON Syntax:
+`--attachments` (list)
+
+> List of S3 presigned URLs of task attachments and their file name. You can have a maximum of 5 attachments per task.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `5`
+> 
+
+> 
+> (structure)
+>
+>> Information about the task attachment files.
+>> 
+>> FileName -> (string) [required]
+>>
+>>> A case-sensitive name of the attached file being uploaded.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `256`
+>>>   * pattern: `^\P{C}*$`
+>>> 
+
+>> 
+>> S3Url -> (string) [required]
+>>
+>>> The pre-signed URLs for the S3 bucket where the task attachment is stored.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `2000`
+>>> 
+
+
+Shorthand Syntax:
+    
+    
+    FileName=string,S3Url=string ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "FileName": "string",
+        "S3Url": "string"
+      }
+      ...
+    ]
+    
+
@@ -685 +742 @@ ContactId -> (string)
-  * [AWS CLI 2.33.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.8 Command Reference](../../index.html) »