AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-03-10 · Documentation medium

File: cli/latest/reference/opensearch/create-application.md

Summary

Added documentation for 'iamRoleForDataSourceArn' parameter with constraints for cross-account/region data source association.

Security assessment

Documents a new IAM role ARN parameter for secure cross-account data source access. This enhances security documentation but does not indicate a vulnerability fix.

Diff

diff --git a/cli/latest/reference/opensearch/create-application.md b/cli/latest/reference/opensearch/create-application.md
index 5f804b2a5..da99e1989 100644
--- a//cli/latest/reference/opensearch/create-application.md
+++ b//cli/latest/reference/opensearch/create-application.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.4 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.5 Command Reference](../../index.html) »
@@ -151,0 +152,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/opense
+>> 
+>> iamRoleForDataSourceArn -> (string)
+>>
+>>> The ARN of the IAM role to be used for cross account/region data source association.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `20`
+>>>   * max: `2048`
+>>>   * pattern: `arn:(aws|aws\-cn|aws\-us\-gov|aws\-iso|aws\-iso\-b):iam::[0-9]+:role\/.*`
+>>> 
+
@@ -156 +168 @@ Shorthand Syntax:
-    dataSourceArn=string,dataSourceDescription=string ...
+    dataSourceArn=string,dataSourceDescription=string,iamRoleForDataSourceArn=string ...
@@ -165 +177,2 @@ JSON Syntax:
-        "dataSourceDescription": "string"
+        "dataSourceDescription": "string",
+        "iamRoleForDataSourceArn": "string"
@@ -511,0 +525,12 @@ dataSources -> (list)
+>> 
+>> iamRoleForDataSourceArn -> (string)
+>>
+>>> The ARN of the IAM role to be used for cross account/region data source association.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `20`
+>>>   * max: `2048`
+>>>   * pattern: `arn:(aws|aws\-cn|aws\-us\-gov|aws\-iso|aws\-iso\-b):iam::[0-9]+:role\/.*`
+>>> 
+
@@ -651 +676 @@ kmsKeyArn -> (string)
-  * [AWS CLI 2.34.4 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.5 Command Reference](../../index.html) »