AWS cli documentation change

Service: cli · 2026-03-22 · Documentation low

File: cli/latest/reference/opensearch/list-direct-query-data-sources.md

Summary

Added Prometheus support to list response documentation including IAM role validation patterns and workspace ARN constraints.

Security assessment

Includes documentation about required permissions and ARN formats for Prometheus data sources when listing resources, but shows no evidence of addressing a specific security vulnerability. The security aspects are part of standard feature documentation.

Diff

diff --git a/cli/latest/reference/opensearch/list-direct-query-data-sources.md b/cli/latest/reference/opensearch/list-direct-query-data-sources.md
index 38434cbe4..15e388548 100644
--- a//cli/latest/reference/opensearch/list-direct-query-data-sources.md
+++ b//cli/latest/reference/opensearch/list-direct-query-data-sources.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »
@@ -240 +240 @@ DirectQueryDataSources -> (list)
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `CloudWatchLog`, `SecurityLake`.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `CloudWatchLog`, `SecurityLake`, `Prometheus`.
@@ -272,0 +273,26 @@ DirectQueryDataSources -> (list)
+>>> 
+>>> Prometheus -> (structure)
+>>>
+>>>> Specifies Prometheus as a type of data source for direct queries.
+>>>> 
+>>>> RoleArn -> (string) [required]
+>>>>
+>>>>> The unique identifier of the IAM role that grants OpenSearch Service permission to access the specified data source.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `32`
+>>>>>   * max: `200`
+>>>>>   * pattern: `^arn:aws[a-zA-Z-]*:iam::\d{12}:role(\/service-role)?\/[A-Za-z0-9+=,.@\-_]{1,64}$`
+>>>>> 
+
+>>>> 
+>>>> WorkspaceArn -> (string) [required]
+>>>>
+>>>>> The unique identifier of the Amazon Managed Prometheus Workspace that is associated with the specified data source.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `^arn:aws[a-zA-Z-]*:aps:[a-z0-9-]+:[0-9]{12}:workspace\/ws-[a-z0-9-]*$`
+>>>>> 
+
@@ -347 +373 @@ DirectQueryDataSources -> (list)
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »