AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-01-28 · Documentation low

File: cli/latest/reference/groundstation/get-config.md

Summary

Added 'telemetry-sink' config type and telemetrySinkConfig structure with Kinesis Data Stream delivery details including IAM role and stream ARN constraints

Security assessment

Added IAM role constraints (pattern/length validation) and explicit security requirements for telemetry delivery. While not fixing a vulnerability, it enhances security documentation by specifying required resource patterns.

Diff

diff --git a/cli/latest/reference/groundstation/get-config.md b/cli/latest/reference/groundstation/get-config.md
index 83d4ec435..ab57bcccb 100644
--- a//cli/latest/reference/groundstation/get-config.md
+++ b//cli/latest/reference/groundstation/get-config.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.8 Command Reference](../../index.html) »
@@ -119,0 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ground
+>   * `telemetry-sink`
@@ -254,0 +256 @@ configType -> (string)
+>   * `telemetry-sink`
@@ -264 +266 @@ configData -> (tagged union structure)
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `antennaDownlinkConfig`, `trackingConfig`, `dataflowEndpointConfig`, `antennaDownlinkDemodDecodeConfig`, `antennaUplinkConfig`, `uplinkEchoConfig`, `s3RecordingConfig`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `antennaDownlinkConfig`, `trackingConfig`, `dataflowEndpointConfig`, `antennaDownlinkDemodDecodeConfig`, `antennaUplinkConfig`, `uplinkEchoConfig`, `s3RecordingConfig`, `telemetrySinkConfig`.
@@ -564,0 +567,8 @@ configData -> (tagged union structure)
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `30`
+>>>   * max: `165`
+>>>   * pattern: `arn:[a-z0-9-.]{1,63}:iam::[0-9]{12}:role/[\w+=,.@-]{1,64}`
+>>> 
+
@@ -576,0 +587,50 @@ configData -> (tagged union structure)
+> 
+> telemetrySinkConfig -> (structure)
+>
+>> Information about a telemetry sink `Config` .
+>> 
+>> telemetrySinkType -> (string) [required]
+>>
+>>> The type of telemetry sink.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `KINESIS_DATA_STREAM`
+>>> 
+
+>> 
+>> telemetrySinkData -> (tagged union structure) [required]
+>>
+>>> Information about the telemetry sink specified by the `telemetrySinkType` .
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `kinesisDataStreamData`.
+>>> 
+>>> kinesisDataStreamData -> (structure)
+>>>
+>>>> Information about a telemetry sink of type `KINESIS_DATA_STREAM` .
+>>>> 
+>>>> kinesisRoleArn -> (string) [required]
+>>>>
+>>>>> ARN of the IAM Role used by AWS Ground Station to deliver telemetry.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `30`
+>>>>>   * max: `165`
+>>>>>   * pattern: `arn:[a-z0-9-.]{1,63}:iam::[0-9]{12}:role/[\w+=,.@-]{1,64}`
+>>>>> 
+
+>>>> 
+>>>> kinesisDataStreamArn -> (string) [required]
+>>>>
+>>>>> ARN of the Kinesis Data Stream to deliver telemetry to.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `37`
+>>>>>   * max: `275`
+>>>>>   * pattern: `arn:[a-z0-9-.]{1,63}:kinesis:[-a-z0-9]{1,50}:[0-9]{12}:stream/[a-zA-Z0-9_.-]{1,128}`
+>>>>> 
+
@@ -596 +656 @@ tags -> (map)
-  * [AWS CLI 2.33.6 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.8 Command Reference](../../index.html) »