AWS cli documentation change
Summary
Updated CLI version references from 2.33.29 to 2.34.0, added CSPM terminology throughout policy documentation, added --cli-error-format parameter, and clarified CSPM-specific control behavior
Security assessment
The changes explicitly document Security Hub CSPM configuration policies and control management behavior, improving clarity about security posture management features. No evidence of addressing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/securityhub/get-configuration-policy.md b/cli/latest/reference/securityhub/get-configuration-policy.md index 2546b55c2..442fe7b87 100644 --- a//cli/latest/reference/securityhub/get-configuration-policy.md +++ b//cli/latest/reference/securityhub/get-configuration-policy.md @@ -15 +15 @@ - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) » @@ -60 +60 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Provides information about a configuration policy. Only the Security Hub delegated administrator can invoke this operation from the home Region. +Provides information about a configuration policy. Only the Security Hub CSPM delegated administrator can invoke this operation from the home Region. @@ -88,0 +89 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi + [--cli-error-format <value>] @@ -133,0 +135 @@ The formatting style for command output. + * off @@ -199,0 +202,13 @@ Disable automatically prompt for CLI input parameters. +`--cli-error-format` (string) + +The formatting style for error output. By default, errors are displayed in enhanced format. + + * legacy + * json + * yaml + * text + * table + * enhanced + + + @@ -311 +326 @@ ConfigurationPolicy -> (tagged union structure) -> An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If the policy includes a list of security controls that are enabled, Security Hub disables all other controls (including newly released controls). If the policy includes a list of security controls that are disabled, Security Hub enables all other controls (including newly released controls). +> An object that defines how Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If the policy includes a list of security controls that are enabled, Security Hub CSPM disables all other controls (including newly released controls). If the policy includes a list of security controls that are disabled, Security Hub CSPM enables all other controls (including newly released controls). @@ -323 +338 @@ ConfigurationPolicy -> (tagged union structure) ->>> Indicates whether Security Hub is enabled in the policy. +>>> Indicates whether Security Hub CSPM is enabled in the policy. @@ -343 +358 @@ ConfigurationPolicy -> (tagged union structure) ->>>> A list of security controls that are enabled in the configuration policy. Security Hub disables all other controls (including newly released controls) other than the listed controls. +>>>> A list of security controls that are enabled in the configuration policy. Security Hub CSPM disables all other controls (including newly released controls) other than the listed controls. @@ -355 +370 @@ ConfigurationPolicy -> (tagged union structure) ->>>> A list of security controls that are disabled in the configuration policy. Security Hub enables all other controls (including newly released controls) other than the listed controls. +>>>> A list of security controls that are disabled in the configuration policy. Security Hub CSPM enables all other controls (including newly released controls) other than the listed controls. @@ -401 +416 @@ ConfigurationPolicy -> (tagged union structure) ->>>>>>>> Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub behavior. +>>>>>>>> Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub CSPM behavior. @@ -403 +418 @@ ConfigurationPolicy -> (tagged union structure) ->>>>>>>> When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub ignores user-provided input for the `Value` field. +>>>>>>>> When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field. @@ -494 +509 @@ ConfigurationPolicy -> (tagged union structure) - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) »