AWS m2 high security documentation change

Service: m2 · 2026-03-10 · Security-related high

File: m2/latest/userguide/ba-endpoints-bac.md

Summary

Updated endpoint parameters, role requirements, pagination limits, and added PostgreSQL multi-schema configuration checks

Security assessment

Changed authentication requirement from ROLE_USER to ROLE_ADMIN for endpoints (security hardening). Added mask parameters for data operations (security through data obfuscation). Introduced PostgreSQL multi-schema checks (security configuration validation).

Diff

diff --git a/m2/latest/userguide/ba-endpoints-bac.md b/m2/latest/userguide/ba-endpoints-bac.md
index 6fcdfc6bc..dff711a53 100644
--- a//m2/latest/userguide/ba-endpoints-bac.md
+++ b//m2/latest/userguide/ba-endpoints-bac.md
@@ -240 +240 @@ name
-name
+listcatFileOrDatasetName
@@ -245 +245 @@ name
-dataset file
+datasetFile
@@ -349 +349 @@ name
-(required, string): the name of the data set to clear. 
+(required, string): the name of the data set to clear. When using the GET method, the parameter name is `datasetName`.
@@ -437 +437 @@ Use the following endpoints to create or manage multiple data sets at once.
-  * Requires authentication and the ROLE_USER role.
+  * Requires authentication and the ROLE_ADMIN role.
@@ -570 +570 @@ cacheEnable
-datasetName
+name
@@ -573 +573 @@ datasetName
-(required, string): the name of the data set.
+(required, string): the name of the data set. Defaults to `%` (all data sets) if not specified.
@@ -575 +575 @@ datasetName
-pageNumber
+page
@@ -578 +578 @@ pageNumber
-(required, int): the page number.
+(required, int): the page number (minimum 0).
@@ -583 +583 @@ pageSize
-(required, int): the page size.
+(required, int): the page size (minimum 1, maximum 500).
@@ -820,0 +821,5 @@ record
+mask
+    
+
+(optional, Mask): the mask object to apply during the update.
+
@@ -847,0 +853,5 @@ record
+mask
+    
+
+(optional, Mask): the mask object to apply during the save.
+
@@ -869,0 +880,10 @@ dataset
+record
+    
+
+(optional, Record): the record to validate.
+
+mask
+    
+
+(optional, Mask): the mask object to apply during validation.
+
@@ -896,0 +917,5 @@ record
+mask
+    
+
+(optional, Mask): the mask object.
+
@@ -993 +1018,6 @@ mask
-(required, Mask): the data set object
+(required, Mask): the mask object
+
+filter
+    
+
+(required, Filter): the filter object to apply.
@@ -1019,0 +1050,2 @@ Use the following endpoints to manage cache for a data set or check data set cha
+  * Check PostgreSQL multi-schema configuration
+
@@ -1076,0 +1109,5 @@ enable
+dataset
+    
+
+(required, DataSet): the data set object.
+
@@ -1141,0 +1179,17 @@ You can use this endpoint to retrieve the allocated RAM cache memory.
+### Check PostgreSQL multi-schema configuration
+
+Checks whether the PostgreSQL multi-schema configuration is enabled.
+
+  * Supported methods: GET
+
+  * Requires authentication and the ROLE_USER role.
+
+  * Path: `/api/services/rest/bluesamservice/isPostgresMultiSchema`
+
+  * Arguments: None
+
+  * Returns: true if the PostgreSQL multi-schema configuration is enabled and false otherwise.
+
+
+
+