AWS cli documentation change
Summary
Updated Security Hub references to Security Hub CSPM, added --cli-error-format option, updated CLI version references, and expanded documentation about configuration policy behavior
Security assessment
The changes clarify that configuration policies specifically apply to Security Hub's Cloud Security Posture Management (CSPM) component. While this adds specificity to security-related documentation (CSPM being a security feature), there is no evidence of addressing a specific vulnerability or security incident. The updates appear to be documentation refinements rather than security fixes.
Diff
diff --git a/cli/latest/reference/securityhub/update-configuration-policy.md b/cli/latest/reference/securityhub/update-configuration-policy.md index d427ed0d9..cffd0cd38 100644 --- a//cli/latest/reference/securityhub/update-configuration-policy.md +++ b//cli/latest/reference/securityhub/update-configuration-policy.md @@ -15 +15 @@ - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) » @@ -60 +60 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Updates a configuration policy. Only the Security Hub delegated administrator can invoke this operation from the home Region. +Updates a configuration policy. Only the Security Hub CSPM delegated administrator can invoke this operation from the home Region. @@ -92,0 +93 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi + [--cli-error-format <value>] @@ -139 +140 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi -> An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls). +> An object that defines how Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If you provide a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If you provide a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls). @@ -153 +154 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>> Indicates whether Security Hub is enabled in the policy. +>>> Indicates whether Security Hub CSPM is enabled in the policy. @@ -173 +174 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>> A list of security controls that are enabled in the configuration policy. Security Hub disables all other controls (including newly released controls) other than the listed controls. +>>>> A list of security controls that are enabled in the configuration policy. Security Hub CSPM disables all other controls (including newly released controls) other than the listed controls. @@ -185 +186 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>> A list of security controls that are disabled in the configuration policy. Security Hub enables all other controls (including newly released controls) other than the listed controls. +>>>> A list of security controls that are disabled in the configuration policy. Security Hub CSPM enables all other controls (including newly released controls) other than the listed controls. @@ -231 +232 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>>>>>> Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub behavior. +>>>>>>>> Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub CSPM behavior. @@ -233 +234 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>>>>>> When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub ignores user-provided input for the `Value` field. +>>>>>>>> When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field. @@ -379,0 +381 @@ The formatting style for command output. + * off @@ -445,0 +448,13 @@ Disable automatically prompt for CLI input parameters. +`--cli-error-format` (string) + +The formatting style for error output. By default, errors are displayed in enhanced format. + + * legacy + * json + * yaml + * text + * table + * enhanced + + + @@ -561 +576 @@ ConfigurationPolicy -> (tagged union structure) -> An object that defines how Security Hub is configured. It includes whether Security Hub is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If the request included a list of security controls that are enabled in the configuration policy, Security Hub disables all other controls (including newly released controls). If the request included a list of security controls that are disabled in the configuration policy, Security Hub enables all other controls (including newly released controls). +> An object that defines how Security Hub CSPM is configured. It includes whether Security Hub CSPM is enabled or disabled, a list of enabled security standards, a list of enabled or disabled security controls, and a list of custom parameter values for specified controls. If the request included a list of security controls that are enabled in the configuration policy, Security Hub CSPM disables all other controls (including newly released controls). If the request included a list of security controls that are disabled in the configuration policy, Security Hub CSPM enables all other controls (including newly released controls). @@ -573 +588 @@ ConfigurationPolicy -> (tagged union structure) ->>> Indicates whether Security Hub is enabled in the policy. +>>> Indicates whether Security Hub CSPM is enabled in the policy. @@ -593 +608 @@ ConfigurationPolicy -> (tagged union structure) ->>>> A list of security controls that are enabled in the configuration policy. Security Hub disables all other controls (including newly released controls) other than the listed controls. +>>>> A list of security controls that are enabled in the configuration policy. Security Hub CSPM disables all other controls (including newly released controls) other than the listed controls. @@ -605 +620 @@ ConfigurationPolicy -> (tagged union structure) ->>>> A list of security controls that are disabled in the configuration policy. Security Hub enables all other controls (including newly released controls) other than the listed controls. +>>>> A list of security controls that are disabled in the configuration policy. Security Hub CSPM enables all other controls (including newly released controls) other than the listed controls. @@ -651 +666 @@ ConfigurationPolicy -> (tagged union structure) ->>>>>>>> Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub behavior. +>>>>>>>> Identifies whether a control parameter uses a custom user-defined value or subscribes to the default Security Hub CSPM behavior. @@ -653 +668 @@ ConfigurationPolicy -> (tagged union structure) ->>>>>>>> When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub ignores user-provided input for the `Value` field. +>>>>>>>> When `ValueType` is set equal to `DEFAULT` , the default behavior can be a specific Security Hub CSPM default value, or the default behavior can be to ignore a specific parameter. When `ValueType` is set equal to `DEFAULT` , Security Hub CSPM ignores user-provided input for the `Value` field. @@ -744 +759 @@ ConfigurationPolicy -> (tagged union structure) - * [AWS CLI 2.33.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.0 Command Reference](../../index.html) »