AWS cli documentation change
Summary
Added CloudWatch Logs support for service-specific credentials and updated expiration documentation
Security assessment
Expanded credential expiration documentation to include CloudWatch Logs API keys, reinforcing security best practices for credential lifecycle management.
Diff
diff --git a/cli/latest/reference/iam/create-service-specific-credential.md b/cli/latest/reference/iam/create-service-specific-credential.md index c45aa90ad..da17aa60b 100644 --- a//cli/latest/reference/iam/create-service-specific-credential.md +++ b//cli/latest/reference/iam/create-service-specific-credential.md @@ -15 +15 @@ - * [AWS CLI 2.34.4 Command Reference](../../index.html) » + * [AWS CLI 2.34.5 Command Reference](../../index.html) » @@ -64 +64 @@ You can have a maximum of two sets of service-specific credentials for each supp -You can create service-specific credentials for Amazon Bedrock, CodeCommit and Amazon Keyspaces (for Apache Cassandra). +You can create service-specific credentials for Amazon Bedrock, Amazon CloudWatch Logs, CodeCommit and Amazon Keyspaces (for Apache Cassandra). @@ -124 +124 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/iam-20 -> The number of days until the service specific credential expires. This field is only valid for Bedrock API keys and must be a positive integer. When not specified, the credential will not expire. +> The number of days until the service specific credential expires. This field is only valid for Bedrock and CloudWatch Logs API keys and must be a positive integer. When not specified, the credential will not expire. @@ -296 +296 @@ ServiceSpecificCredential -> (structure) ->> The date and time when the service specific credential expires. This field is only present for Bedrock API keys that were created with an expiration period. +>> The date and time when the service specific credential expires. This field is only present for Bedrock API keys and CloudWatch Logs API keys that were created with an expiration period. @@ -320 +320 @@ ServiceSpecificCredential -> (structure) ->> For Bedrock API keys, this is the public portion of the credential that includes the IAM user name and a suffix containing version and creation information. +>> For Bedrock API keys and CloudWatch Logs API keys, this is the public portion of the credential that includes the IAM user name and a suffix containing version and creation information. @@ -332 +332 @@ ServiceSpecificCredential -> (structure) ->> For Bedrock API keys, this is the secret portion of the credential that should be used to authenticate API calls. This value is returned only when the credential is created. +>> For Bedrock API keys and CloudWatch Logs API keys, this is the secret portion of the credential that should be used to authenticate API calls. This value is returned only when the credential is created. @@ -380 +380 @@ ServiceSpecificCredential -> (structure) - * [AWS CLI 2.34.4 Command Reference](../../index.html) » + * [AWS CLI 2.34.5 Command Reference](../../index.html) »