AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-01 · Documentation low

File: cli/latest/reference/s3control/get-data-access.md

Summary

Added --audit-context parameter to GetDataAccess command documentation, which provides context for credential requests that will appear in CloudTrail logs.

Security assessment

This change adds security documentation for an audit logging feature that enhances security monitoring by allowing users to provide context for credential requests that will appear in CloudTrail logs. This improves audit trail capabilities but doesn't address a specific security vulnerability.

Diff

diff --git a/cli/latest/reference/s3control/get-data-access.md b/cli/latest/reference/s3control/get-data-access.md
index 18e7732b6..132f94612 100644
--- a//cli/latest/reference/s3control/get-data-access.md
+++ b//cli/latest/reference/s3control/get-data-access.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.20 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
@@ -80,0 +81 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3cont
+    [--audit-context <value>]
@@ -183,0 +185,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/s3cont
+`--audit-context` (string)
+
+> The context to identify the job or query associated with the credential request. This information will be displayed in CloudTrail log in your account.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `2048`
+>   * pattern: `[\u0020-\uD7FF\uE000-\uFFFD\uD800\uDC00-\uDBFF\uDFFF\t]*`
+> 
+
+
@@ -365 +378 @@ Grantee -> (structure)
-  * [AWS CLI 2.34.20 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.21 Command Reference](../../index.html) »