AWS cli documentation change
Summary
Added support for secondary network interfaces in EC2 instances through new --secondary-interfaces parameter. Updated ResourceType enum with new network resource types and fixed documentation links for instance metadata tags.
Security assessment
The changes introduce new networking capabilities (secondary interfaces) and update documentation links. There is no evidence of security vulnerabilities being addressed. The metadata tag documentation update improves clarity but doesn't indicate a security fix.
Diff
diff --git a/cli/latest/reference/ec2/run-instances.md b/cli/latest/reference/ec2/run-instances.md index e2d760774..3e8cc5996 100644 --- a//cli/latest/reference/ec2/run-instances.md +++ b//cli/latest/reference/ec2/run-instances.md @@ -15 +15 @@ - * [AWS CLI 2.33.17 Command Reference](../../index.html) » + * [AWS CLI 2.33.18 Command Reference](../../index.html) » @@ -121,0 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/ec2-20 + [--secondary-interfaces <value>] @@ -1986,0 +1988,3 @@ JSON Syntax: +>>> * `secondary-interface` +>>> * `secondary-network` +>>> * `secondary-subnet` @@ -2023 +2027 @@ JSON Syntax: - "ResourceType": "capacity-reservation"|"client-vpn-endpoint"|"customer-gateway"|"carrier-gateway"|"coip-pool"|"declarative-policies-report"|"dedicated-host"|"dhcp-options"|"egress-only-internet-gateway"|"elastic-ip"|"elastic-gpu"|"export-image-task"|"export-instance-task"|"fleet"|"fpga-image"|"host-reservation"|"image"|"image-usage-report"|"import-image-task"|"import-snapshot-task"|"instance"|"instance-event-window"|"internet-gateway"|"ipam"|"ipam-pool"|"ipam-scope"|"ipv4pool-ec2"|"ipv6pool-ec2"|"key-pair"|"launch-template"|"local-gateway"|"local-gateway-route-table"|"local-gateway-virtual-interface"|"local-gateway-virtual-interface-group"|"local-gateway-route-table-vpc-association"|"local-gateway-route-table-virtual-interface-group-association"|"natgateway"|"network-acl"|"network-interface"|"network-insights-analysis"|"network-insights-path"|"network-insights-access-scope"|"network-insights-access-scope-analysis"|"outpost-lag"|"placement-group"|"prefix-list"|"replace-root-volume-task"|"reserved-instances"|"route-table"|"security-group"|"security-group-rule"|"service-link-virtual-interface"|"snapshot"|"spot-fleet-request"|"spot-instances-request"|"subnet"|"subnet-cidr-reservation"|"traffic-mirror-filter"|"traffic-mirror-session"|"traffic-mirror-target"|"transit-gateway"|"transit-gateway-attachment"|"transit-gateway-connect-peer"|"transit-gateway-multicast-domain"|"transit-gateway-policy-table"|"transit-gateway-metering-policy"|"transit-gateway-route-table"|"transit-gateway-route-table-announcement"|"volume"|"vpc"|"vpc-endpoint"|"vpc-endpoint-connection"|"vpc-endpoint-service"|"vpc-endpoint-service-permission"|"vpc-peering-connection"|"vpn-connection"|"vpn-gateway"|"vpc-flow-log"|"capacity-reservation-fleet"|"traffic-mirror-filter-rule"|"vpc-endpoint-connection-device-type"|"verified-access-instance"|"verified-access-group"|"verified-access-endpoint"|"verified-access-policy"|"verified-access-trust-provider"|"vpn-connection-device-type"|"vpc-block-public-access-exclusion"|"vpc-encryption-control"|"route-server"|"route-server-endpoint"|"route-server-peer"|"ipam-resource-discovery"|"ipam-resource-discovery-association"|"instance-connect-endpoint"|"verified-access-endpoint-target"|"ipam-external-resource-verification-token"|"capacity-block"|"mac-modification-task"|"ipam-prefix-list-resolver"|"ipam-policy"|"ipam-prefix-list-resolver-target"|"capacity-manager-data-export"|"vpn-concentrator", + "ResourceType": "capacity-reservation"|"client-vpn-endpoint"|"customer-gateway"|"carrier-gateway"|"coip-pool"|"declarative-policies-report"|"dedicated-host"|"dhcp-options"|"egress-only-internet-gateway"|"elastic-ip"|"elastic-gpu"|"export-image-task"|"export-instance-task"|"fleet"|"fpga-image"|"host-reservation"|"image"|"image-usage-report"|"import-image-task"|"import-snapshot-task"|"instance"|"instance-event-window"|"internet-gateway"|"ipam"|"ipam-pool"|"ipam-scope"|"ipv4pool-ec2"|"ipv6pool-ec2"|"key-pair"|"launch-template"|"local-gateway"|"local-gateway-route-table"|"local-gateway-virtual-interface"|"local-gateway-virtual-interface-group"|"local-gateway-route-table-vpc-association"|"local-gateway-route-table-virtual-interface-group-association"|"natgateway"|"network-acl"|"network-interface"|"network-insights-analysis"|"network-insights-path"|"network-insights-access-scope"|"network-insights-access-scope-analysis"|"outpost-lag"|"placement-group"|"prefix-list"|"replace-root-volume-task"|"reserved-instances"|"route-table"|"security-group"|"security-group-rule"|"service-link-virtual-interface"|"snapshot"|"spot-fleet-request"|"spot-instances-request"|"subnet"|"subnet-cidr-reservation"|"traffic-mirror-filter"|"traffic-mirror-session"|"traffic-mirror-target"|"transit-gateway"|"transit-gateway-attachment"|"transit-gateway-connect-peer"|"transit-gateway-multicast-domain"|"transit-gateway-policy-table"|"transit-gateway-metering-policy"|"transit-gateway-route-table"|"transit-gateway-route-table-announcement"|"volume"|"vpc"|"vpc-endpoint"|"vpc-endpoint-connection"|"vpc-endpoint-service"|"vpc-endpoint-service-permission"|"vpc-peering-connection"|"vpn-connection"|"vpn-gateway"|"vpc-flow-log"|"capacity-reservation-fleet"|"traffic-mirror-filter-rule"|"vpc-endpoint-connection-device-type"|"verified-access-instance"|"verified-access-group"|"verified-access-endpoint"|"verified-access-policy"|"verified-access-trust-provider"|"vpn-connection-device-type"|"vpc-block-public-access-exclusion"|"vpc-encryption-control"|"route-server"|"route-server-endpoint"|"route-server-peer"|"ipam-resource-discovery"|"ipam-resource-discovery-association"|"instance-connect-endpoint"|"verified-access-endpoint-target"|"ipam-external-resource-verification-token"|"capacity-block"|"mac-modification-task"|"ipam-prefix-list-resolver"|"ipam-policy"|"ipam-prefix-list-resolver-target"|"secondary-interface"|"secondary-network"|"secondary-subnet"|"capacity-manager-data-export"|"vpn-concentrator", @@ -2419 +2423 @@ JSON Syntax: ->> Set to `enabled` to allow access to instance tags from the instance metadata. Set to `disabled` to turn off access to instance tags from the instance metadata. For more information, see [Work with instance tags using the instance metadata](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#work-with-tags-in-IMDS) . +>> Set to `enabled` to allow access to instance tags from the instance metadata. Set to `disabled` to turn off access to instance tags from the instance metadata. For more information, see [View tags for your EC2 instances using instance metadata](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/work-with-tags-in-IMDS.html) . @@ -2611,0 +2616,80 @@ JSON Syntax: +`--secondary-interfaces` (list) + +> The secondary interfaces to associate with the instance. +> +> (structure) +> +>> Describes a secondary interface specification for launching an instance. +>> +>> DeleteOnTermination -> (boolean) +>> +>>> Indicates whether the secondary interface is deleted when the instance is terminated. +>>> +>>> The only supported value for this field is `true` . +>> +>> DeviceIndex -> (integer) +>> +>>> The device index for the secondary interface attachment. +>> +>> PrivateIpAddresses -> (list) +>> +>>> The private IPv4 addresses to assign to the secondary interface. +>>> +>>> (structure) +>>> +>>>> Describes a private IPv4 address for a secondary interface request. +>>>> +>>>> PrivateIpAddress -> (string) [required] +>>>> +>>>>> The private IPv4 address. +>> +>> PrivateIpAddressCount -> (integer) +>> +>>> The number of private IPv4 addresses to assign to the secondary interface. +>> +>> SecondarySubnetId -> (string) +>> +>>> The ID of the secondary subnet. +>> +>> InterfaceType -> (string) +>> +>>> The type of secondary interface. +>>> +>>> Possible values: +>>> +>>> * `secondary` +>>> + +>> +>> NetworkCardIndex -> (integer) +>> +>>> The index of the network card. The network card must support secondary interfaces. + +Shorthand Syntax: + + + DeleteOnTermination=boolean,DeviceIndex=integer,PrivateIpAddresses=[{PrivateIpAddress=string},{PrivateIpAddress=string}],PrivateIpAddressCount=integer,SecondarySubnetId=string,InterfaceType=string,NetworkCardIndex=integer ... + + +JSON Syntax: + + + [ + { + "DeleteOnTermination": true|false, + "DeviceIndex": integer, + "PrivateIpAddresses": [ + { + "PrivateIpAddress": "string" + } + ... + ], + "PrivateIpAddressCount": integer, + "SecondarySubnetId": "string", + "InterfaceType": "secondary", + "NetworkCardIndex": integer + } + ... + ] + + @@ -4048 +4132 @@ Instances -> (list) ->>>> Indicates whether access to instance tags from the instance metadata is enabled or disabled. For more information, see [Work with instance tags using the instance metadata](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/Using_Tags.html#work-with-tags-in-IMDS) . +>>>> Indicates whether access to instance tags from the instance metadata is enabled or disabled. For more information, see [View tags for your EC2 instances using instance metadata](https://docs.aws.amazon.com/AWSEC2/latest/UserGuide/work-with-tags-in-IMDS.html) . @@ -4196,0 +4281,104 @@ Instances -> (list) +>> +>> SecondaryInterfaces -> (list) +>> +>>> The secondary interfaces for the instance. +>>> +>>> (structure) +>>> +>>>> Describes a secondary interface attached to an instance. +>>>> +>>>> Attachment -> (structure) +>>>> +>>>>> The attachment information for the secondary interface. +>>>>> +>>>>> AttachTime -> (timestamp) +>>>>> +>>>>>> The timestamp when the attachment was created. +>>>>> +>>>>> AttachmentId -> (string) +>>>>> +>>>>>> The ID of the attachment. +>>>>> +>>>>> DeleteOnTermination -> (boolean) +>>>>> +>>>>>> Indicates whether the secondary interface is deleted when the instance is terminated. +>>>>>> +>>>>>> The only supported value for this field is `true` . +>>>>> +>>>>> DeviceIndex -> (integer) +>>>>> +>>>>>> The device index of the secondary interface. +>>>>> +>>>>> Status -> (string) +>>>>> +>>>>>> The attachment state. +>>>>>> +>>>>>> Possible values: +>>>>>> +>>>>>> * `attaching` +>>>>>> * `attached` +>>>>>> * `detaching` +>>>>>> * `detached` +>>>>>> + +>>>>> +>>>>> NetworkCardIndex -> (integer) +>>>>> +>>>>>> The index of the network card. +>>>> +>>>> MacAddress -> (string) +>>>> +>>>>> The MAC address of the secondary interface. +>>>> +>>>> SecondaryInterfaceId -> (string) +>>>> +>>>>> The ID of the secondary interface. +>>>> +>>>> OwnerId -> (string) +>>>> +>>>>> The Amazon Web Services account ID of the owner of the secondary interface. +>>>> +>>>> PrivateIpAddresses -> (list) +>>>> +>>>>> The private IPv4 addresses associated with the secondary interface. +>>>>> +>>>>> (structure) +>>>>> +>>>>>> Describes a private IPv4 address for a secondary interface. +>>>>>> +>>>>>> PrivateIpAddress -> (string) +>>>>>> +>>>>>>> The private IPv4 address. +>>>> +>>>> SourceDestCheck -> (boolean) +>>>> +>>>>> Indicates whether source/destination checking is enabled. +>>>> +>>>> Status -> (string) +>>>> +>>>>> The status of the secondary interface. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `available` +>>>>> * `in-use` +>>>>> + +>>>> +>>>> SecondarySubnetId -> (string) +>>>> +>>>>> The ID of the secondary subnet. +>>>> +>>>> SecondaryNetworkId -> (string) +>>>> +>>>>> The ID of the secondary network. +>>>> +>>>> InterfaceType -> (string)