AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-04-04 · Documentation medium

File: cli/latest/reference/es/update-elasticsearch-domain-config.md

Summary

Added new TLS security policy 'Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08' that supports TLS version 1.3 with FIPS, and updated AWS CLI version references

Security assessment

This change adds documentation for a new TLS security policy option that supports TLS 1.3 with FIPS compliance. While this is a security feature enhancement (adding stronger encryption options), there's no evidence in the diff that it addresses a specific security vulnerability or incident. It appears to be a routine feature addition providing customers with more secure TLS policy options.

Diff

diff --git a/cli/latest/reference/es/update-elasticsearch-domain-config.md b/cli/latest/reference/es/update-elasticsearch-domain-config.md
index df1e83686..deb6f8b72 100644
--- a//cli/latest/reference/es/update-elasticsearch-domain-config.md
+++ b//cli/latest/reference/es/update-elasticsearch-domain-config.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »
@@ -603,0 +604 @@ JSON Syntax:
+>>   * **Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08:** TLS security policy that supports TLS version 1.3 with FIPS
@@ -611,0 +613 @@ JSON Syntax:
+>>   * `Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08`
@@ -646 +648 @@ JSON Syntax:
-      "TLSSecurityPolicy": "Policy-Min-TLS-1-0-2019-07"|"Policy-Min-TLS-1-2-2019-07"|"Policy-Min-TLS-1-2-PFS-2023-10",
+      "TLSSecurityPolicy": "Policy-Min-TLS-1-0-2019-07"|"Policy-Min-TLS-1-2-2019-07"|"Policy-Min-TLS-1-2-PFS-2023-10"|"Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08",
@@ -1965,0 +1968 @@ DomainConfig -> (structure)
+>>>>   * **Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08:** TLS security policy that supports TLS version 1.3 with FIPS
@@ -1973,0 +1977 @@ DomainConfig -> (structure)
+>>>>   * `Policy-Min-TLS-1-2-RFC9151-FIPS-2024-08`
@@ -2458 +2462 @@ DryRunResults -> (structure)
-  * [AWS CLI 2.34.21 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.23 Command Reference](../../index.html) »