AWS cloudhsm medium security documentation change
Summary
Added security warning about password exposure in command history and reorganized parameter documentation
Security assessment
Explicit warning about credentials appearing in shell history addresses credential exposure risk. The note recommends secure alternatives like interactive prompts, directly mitigating potential security vulnerabilities.
Diff
diff --git a/cloudhsm/latest/userguide/cloudhsm_cli-login.md b/cloudhsm/latest/userguide/cloudhsm_cli-login.md index 6e2ced599..d08305d03 100644 --- a//cloudhsm/latest/userguide/cloudhsm_cli-login.md +++ b//cloudhsm/latest/userguide/cloudhsm_cli-login.md @@ -105 +105 @@ Required: Yes -Specifies the role assigned to this user. This parameter is required. Valid values are **admin** , **crypto-user**. +Specifies the role assigned to this user. Valid values are **admin** , **crypto-user**. @@ -107 +107,3 @@ Specifies the role assigned to this user. This parameter is required. Valid valu -To get the user’s role, use the **user list** command. For detailed information about the user types on an HSM, see [Understanding HSM users](./manage-hsm-users.html). +To get the user's role, use the **user list** command. For detailed information about the user types on an HSM, see [Understanding HSM users](./manage-hsm-users.html). + +Required: Yes @@ -113,0 +116,6 @@ Specifies the password of the user who is logging in to the HSMs. +Required: Customers must provide the password either via the `--password` command line argument or omit it to be prompted interactively. + +###### Note + +Using the `--password` argument on the command line may expose credentials in your shell history. Consider prompting the password interactively or clear your shell history after use. +