AWS cli documentation change
Summary
Added documentation for 'AssociationDispatchAssumeRole' field specifying the IAM role used by State Manager for dispatching configurations
Security assessment
Introduces documentation for specifying a custom IAM role to control permissions for association actions, improving security through least privilege access. No evidence of fixing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/ssm/describe-association.md b/cli/latest/reference/ssm/describe-association.md index e057d1866..12fad3a39 100644 --- a//cli/latest/reference/ssm/describe-association.md +++ b//cli/latest/reference/ssm/describe-association.md @@ -15 +15 @@ - * [AWS CLI 2.33.25 Command Reference](../../index.html) » + * [AWS CLI 2.33.27 Command Reference](../../index.html) » @@ -1125,0 +1126,12 @@ AssociationDescription -> (structure) +> +> AssociationDispatchAssumeRole -> (string) +> +>> A role used by association to take actions on your behalf. State Manager will assume this role and call required APIs when dispatching configurations to nodes. If not specified, [service-linked role for Systems Manager](https://docs.aws.amazon.com/systems-manager/latest/userguide/using-service-linked-roles.html) will be used by default. +>> +>> Constraints: +>> +>> * min: `1` +>> * max: `512` +>> * pattern: `arn:aws(-[^:]+)?:iam::[0-9]{12}:role/.+` +>> + @@ -1137 +1149 @@ AssociationDescription -> (structure) - * [AWS CLI 2.33.25 Command Reference](../../index.html) » + * [AWS CLI 2.33.27 Command Reference](../../index.html) »