AWS cli documentation change
Summary
Updated AWS CLI version reference from 2.34.19 to 2.34.20 and added documentation for the SET_SOURCE_IDENTITY parameter that enables tracking of IAM role identifiers in S3 data event CloudTrail logs
Security assessment
The change adds documentation for a new security feature (SET_SOURCE_IDENTITY parameter) that enhances auditability by including IAM role identifiers in CloudTrail logs for s3:GetObject calls, improving security monitoring and forensics capabilities. No evidence of addressing a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/lakeformation/put-data-lake-settings.md b/cli/latest/reference/lakeformation/put-data-lake-settings.md index 4aaf79b21..f804b88e8 100644 --- a//cli/latest/reference/lakeformation/put-data-lake-settings.md +++ b//cli/latest/reference/lakeformation/put-data-lake-settings.md @@ -15 +15 @@ - * [AWS CLI 2.34.19 Command Reference](../../index.html) » + * [AWS CLI 2.34.20 Command Reference](../../index.html) » @@ -279 +279,6 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lakefo ->> A key-value map that provides an additional configuration on your data lake. CROSS_ACCOUNT_VERSION is the key you can configure in the Parameters field. Accepted values for the CrossAccountVersion key are 1, 2, 3, 4 and 5. +>> A key-value map that provides an additional configuration on your data lake. The following key-value pairs are supported: +>> +>> * `CROSS_ACCOUNT_VERSION` \- Accepted values are 1, 2, 3, 4, and 5. +>> * `SET_SOURCE_IDENTITY` \- Accepted values are `TRUE` and `FALSE` . When set to `TRUE` , Lake Formation includes the IAM role identifier that was used to query in the S3 data event CloudTrail logs for `s3:GetObject` calls. For more information, see [Tracking query engine IAM roles in S3 data events](https://docs.aws.amazon.com/lake-formation/latest/dg/cloudtrail-logging.html#source-identity-cloudtrail) . +>> + @@ -585 +590 @@ None - * [AWS CLI 2.34.19 Command Reference](../../index.html) » + * [AWS CLI 2.34.20 Command Reference](../../index.html) »