AWS neptune medium security documentation change

Service: neptune · 2026-02-28 · Security-related medium

File: neptune/latest/userguide/iam-auth-connect-command-line.md

Summary

Changed credential extraction from file reading (cat) to variable echo (echo $output)

Security assessment

Switching from file read (cat) to variable echo prevents potential command injection if $output contained malicious filenames. This addresses a potential security vulnerability in credential handling.

Diff

diff --git a/neptune/latest/userguide/iam-auth-connect-command-line.md b/neptune/latest/userguide/iam-auth-connect-command-line.md
index 537b095ae..4f7582b8c 100644
--- a//neptune/latest/userguide/iam-auth-connect-command-line.md
+++ b//neptune/latest/userguide/iam-auth-connect-command-line.md
@@ -47,3 +47,3 @@ The following example shows the steps you might take in a Linux shell to obtain
-    AccessKeyId=$(cat $output | jq '.Credentials''.AccessKeyId')
-    SecretAccessKey=$(cat $output | jq '.Credentials''.SecretAccessKey')
-    SessionToken=$(cat $output | jq '.Credentials''.SessionToken')
+    AccessKeyId=$(echo $output | jq '.Credentials''.AccessKeyId')
+    SecretAccessKey=$(echo $output | jq '.Credentials''.SecretAccessKey')
+    SessionToken=$(echo $output | jq '.Credentials''.SessionToken')