AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-03-28 · Documentation low

File: cli/latest/reference/logs/update-scheduled-query.md

Summary

Updated AWS CLI version from 2.34.16 to 2.34.19 and added two new parameters (ownerAccountId and kmsKeyId) to the s3Configuration for the update-scheduled-query command.

Security assessment

The change adds parameters for specifying bucket owner account and KMS encryption key, enhancing security controls for data storage. No evidence of a security vulnerability being fixed; this is a feature update to support encryption and cross-account bucket ownership.

Diff

diff --git a/cli/latest/reference/logs/update-scheduled-query.md b/cli/latest/reference/logs/update-scheduled-query.md
index d6d1434e6..6b65d39f9 100644
--- a//cli/latest/reference/logs/update-scheduled-query.md
+++ b//cli/latest/reference/logs/update-scheduled-query.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.19 Command Reference](../../index.html) »
@@ -226,0 +227,22 @@ Syntax:
+>> 
+>> ownerAccountId -> (string)
+>>
+>>> The AWS accountId for the bucket owning account.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `12`
+>>>   * max: `12`
+>>>   * pattern: `^\d{12}$`
+>>> 
+
+>> 
+>> kmsKeyId -> (string)
+>>
+>>> The Amazon Resource Name (ARN) of the KMS encryption key. Must belong to the same AWS Region as the destination Amazon S3 bucket.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * max: `256`
+>>> 
+
@@ -231 +253 @@ Shorthand Syntax:
-    s3Configuration={destinationIdentifier=string,roleArn=string}
+    s3Configuration={destinationIdentifier=string,roleArn=string,ownerAccountId=string,kmsKeyId=string}
@@ -240 +262,3 @@ JSON Syntax:
-        "roleArn": "string"
+        "roleArn": "string",
+        "ownerAccountId": "string",
+        "kmsKeyId": "string"
@@ -520,0 +545,22 @@ destinationConfiguration -> (structure)
+>> 
+>> ownerAccountId -> (string)
+>>
+>>> The AWS accountId for the bucket owning account.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `12`
+>>>   * max: `12`
+>>>   * pattern: `^\d{12}$`
+>>> 
+
+>> 
+>> kmsKeyId -> (string)
+>>
+>>> The Amazon Resource Name (ARN) of the KMS encryption key. Must belong to the same AWS Region as the destination Amazon S3 bucket.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * max: `256`
+>>> 
+
@@ -617 +663 @@ lastUpdatedTime -> (long)
-  * [AWS CLI 2.34.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.19 Command Reference](../../index.html) »