AWS cli documentation change

Service: cli · 2026-04-19 · Documentation low

File: cli/latest/reference/datazone/create-project.md

Summary

Updated AWS CLI version from 2.34.29 to 2.34.32, added three new optional parameters: project-category, project-execution-role (with IAM role ARN pattern), and membership-assignments for assigning project roles

Security assessment

The change adds project-execution-role parameter with IAM role ARN pattern for accessing project resources, and membership-assignments for role-based access control (PROJECT_OWNER, PROJECT_CONTRIBUTOR, etc.). These are security features for access control and IAM role management, enhancing security documentation but not fixing a specific vulnerability.

Diff

diff --git a/cli/latest/reference/datazone/create-project.md b/cli/latest/reference/datazone/create-project.md
index 0b1d499ea..3b4d3bcb5 100644
--- a//cli/latest/reference/datazone/create-project.md
+++ b//cli/latest/reference/datazone/create-project.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
@@ -74,0 +75,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
+    [--project-category <value>]
+    [--project-execution-role <value>]
+    [--membership-assignments <value>]
@@ -333,0 +337,73 @@ JSON Syntax:
+`--project-category` (string)
+
+> The category of the project. Set to ‘ADMIN’ designates this as an administrative project for the Amazon DataZone domain.
+
+`--project-execution-role` (string)
+
+> The default project IAM role that is used to access project resources and run computes such as Glue and Sagemaker.
+> 
+> Constraints:
+> 
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+`
+> 
+
+
+`--membership-assignments` (list)
+
+> The members to be assigned to the project.
+> 
+> (structure)
+>
+>> A map of user or group profiles to designations that need to be assigned in the project.
+>> 
+>> member -> (tagged union structure) [required]
+>>
+>>> The details about a project member.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `userIdentifier`, `groupIdentifier`.
+>>> 
+>>> userIdentifier -> (string)
+>>>
+>>>> The user ID of a project member.
+>>> 
+>>> groupIdentifier -> (string)
+>>>
+>>>> The ID of the group of a project member.
+>> 
+>> designation -> (string) [required]
+>>
+>>> The designation of the project membership.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `PROJECT_OWNER`
+>>>   * `PROJECT_CONTRIBUTOR`
+>>>   * `PROJECT_CATALOG_VIEWER`
+>>>   * `PROJECT_CATALOG_CONSUMER`
+>>>   * `PROJECT_CATALOG_STEWARD`
+>>> 
+
+
+Shorthand Syntax:
+    
+    
+    member={userIdentifier=string,groupIdentifier=string},designation=string ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "member": {
+          "userIdentifier": "string",
+          "groupIdentifier": "string"
+        },
+        "designation": "PROJECT_OWNER"|"PROJECT_CONTRIBUTOR"|"PROJECT_CATALOG_VIEWER"|"PROJECT_CATALOG_CONSUMER"|"PROJECT_CATALOG_STEWARD"
+      }
+      ...
+    ]
+    
+
@@ -741,0 +818,4 @@ environmentDeploymentDetails -> (structure)
+projectCategory -> (string)
+
+> The category of the project.
+
@@ -752 +832 @@ environmentDeploymentDetails -> (structure)
-  * [AWS CLI 2.34.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.32 Command Reference](../../index.html) »