AWS cli documentation change

Service: cli · 2026-04-04 · Documentation low

File: cli/latest/reference/configure/get.md

Summary

Added documentation for new --sso-session and --services parameters to the aws configure get command, including examples for retrieving SSO and service-specific configuration values

Security assessment

This change adds documentation for retrieving SSO (Single Sign-On) configuration values, which is a security feature for authentication. The documentation explains how to retrieve SSO session and service configuration values, which can help users properly configure and audit their authentication settings. However, there is no evidence this addresses a specific security vulnerability or incident.

Diff

diff --git a/cli/latest/reference/configure/get.md b/cli/latest/reference/configure/get.md
index 7f99ad021..0d2dd17db 100644
--- a//cli/latest/reference/configure/get.md
+++ b//cli/latest/reference/configure/get.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »
@@ -86,0 +87,4 @@ A qualified name is a name that has at least one `"."` character in the name. Th
+`--sso-session` (string) The name of the sub-section from which to retrieve a value.
+
+`--services` (string) The name of the sub-section from which to retrieve a value.
+
@@ -207,0 +212,17 @@ Suppose you had the following config file:
+    [profile my-dev-profile]
+    services = my-services
+    sso_session = my-sso
+    sso_account_id = 123456789011
+    sso_role_name = readOnly
+    region = us-west-2
+    output = json
+    
+    [sso-session my-sso]
+    sso_region = us-east-1
+    sso_start_url = https://my-sso-portal.awsapps.com/start
+    sso_registration_scopes = sso:account:access
+    
+    [services my-services]
+    ec2 =
+        endpoint_url = http://localhost:4567/
+    
@@ -228,0 +250,9 @@ The following commands would have the corresponding output:
+    $ aws configure get --profile my-dev-profile sso_account_id
+    123456789011
+    
+    $ aws configure get --sso-session my-sso-session sso_region
+    us-east-1
+    
+    $ aws configure get --services my-services ec2.endpoint_url
+    http://localhost:4567
+    
@@ -240 +270 @@ The following commands would have the corresponding output:
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »