AWS cli documentation change
Summary
Updated AWS CLI version from 2.34.29 to 2.34.32, changed domain-execution-role from required to optional parameter, and updated IAM role ARN pattern validation regex
Security assessment
The change updates the IAM role ARN pattern regex from a more restrictive pattern to a more permissive one. While IAM roles are security-related, this appears to be a routine pattern update to accommodate more IAM role ARN formats rather than addressing a specific security issue. The pattern change expands allowed characters and structure but doesn't indicate a security fix.
Diff
diff --git a/cli/latest/reference/datazone/create-domain.md b/cli/latest/reference/datazone/create-domain.md index 89f97fd2e..3cc69ea6d 100644 --- a//cli/latest/reference/datazone/create-domain.md +++ b//cli/latest/reference/datazone/create-domain.md @@ -15 +15 @@ - * [AWS CLI 2.34.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.32 Command Reference](../../index.html) » @@ -70 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo - --domain-execution-role <value> + [--domain-execution-role <value>] @@ -161 +161 @@ JSON Syntax: -`--domain-execution-role` (string) [required] +`--domain-execution-role` (string) @@ -167 +167 @@ JSON Syntax: -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -237 +237 @@ JSON Syntax: -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -430 +430 @@ domainExecutionRole -> (string) -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -510 +510 @@ serviceRole -> (string) -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -524 +524 @@ serviceRole -> (string) - * [AWS CLI 2.34.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.32 Command Reference](../../index.html) »