AWS cli documentation change
Summary
Updated attribute pattern regex to allow whitespace characters, added eventual consistency note, and --cli-error-format option
Security assessment
The regex pattern change (adding \t\n\r and space) appears to expand allowed characters in user attributes, but there's no explicit reference to security fixes. The documentation update about older user pools being migrated to the new pattern suggests a backend change, but no concrete security context is provided. The change improves data validation documentation without security-specific implications.
Diff
diff --git a/cli/latest/reference/cognito-idp/list-users.md b/cli/latest/reference/cognito-idp/list-users.md index 28ed840ff..1ede02d85 100644 --- a//cli/latest/reference/cognito-idp/list-users.md +++ b//cli/latest/reference/cognito-idp/list-users.md @@ -15 +15 @@ - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) » @@ -61,0 +62,2 @@ Given a user pool ID, returns a list of users and their basic details in a user +This operation is eventually consistent. You might experience a delay before results are up-to-date. To validate the existence or configuration of an individual user, use `AdminGetUser` . + @@ -106,0 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit + [--cli-error-format <value>] @@ -135 +138 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cognit ->> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}]+` +>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` @@ -236,0 +240 @@ The formatting style for command output. + * off @@ -302,0 +307,13 @@ Disable automatically prompt for CLI input parameters. +`--cli-error-format` (string) + +The formatting style for error output. By default, errors are displayed in enhanced format. + + * legacy + * json + * yaml + * text + * table + * enhanced + + + @@ -422 +439 @@ Users -> (list) -> An array of user pool users who match your query, and their attributes. +> An array of user pool users who match your query, and their attributes. Between different requests, you might observe variations in the sequence that users in this response object are sorted into. The sort order of users isn’t guaranteed to follow a single pattern, but the paginated list from a single chain of requests won’t return duplicates. @@ -450 +467,3 @@ Users -> (list) ->>>>> The name of the attribute. +>>>>> The name of the attribute, for example `email` or `custom:department` . +>>>>> +>>>>> In some older user pools, the regex pattern for acceptable values of this parameter is `[\p{L}\p{M}\p{S}\p{N}\p{P}]+` . Older pools will eventually be updated to use the new pattern. Affected user pools are those created before May 2024 in US East (N. Virginia), US East (Ohio), US West (N. California), US West (Oregon), Asia Pacific (Mumbai), Asia Pacific (Tokyo), Asia Pacific (Seoul), Asia Pacific (Singapore), Asia Pacific (Sydney), Canada (Central), Europe (Frankfurt), Europe (Ireland), Europe (London), Europe (Paris), Europe (Stockholm), Middle East (Bahrain), and South America (São Paulo). @@ -456 +475 @@ Users -> (list) ->>>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}]+` +>>>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` @@ -536 +555 @@ Users -> (list) ->>>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}]+` +>>>>> * pattern: `[\p{L}\p{M}\p{S}\p{N}\p{P}\t\n\r ]+` @@ -561 +580 @@ PaginationToken -> (string) - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) »