AWS cli documentation change
Summary
Added --session-name parameter for IAM role sessions with constraints (min:2, max:64) and added sessionName and groupProfileId fields to output structure
Security assessment
The change adds documentation for session names in IAM role sessions, which is a security best practice for role assumption and auditing. However, there's no evidence this addresses a specific security vulnerability.
Diff
diff --git a/cli/latest/reference/datazone/create-user-profile.md b/cli/latest/reference/datazone/create-user-profile.md index c46894f27..006b5debd 100644 --- a//cli/latest/reference/datazone/create-user-profile.md +++ b//cli/latest/reference/datazone/create-user-profile.md @@ -15 +15 @@ - * [AWS CLI 2.34.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.32 Command Reference](../../index.html) » @@ -69,0 +70 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo + [--session-name <value>] @@ -124,0 +126,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo +> * `IAM_ROLE_SESSION` +> + + +`--session-name` (string) + +> The session name for IAM role sessions. +> +> Constraints: +> +> * min: `2` +> * max: `64` @@ -307,0 +321,8 @@ details -> (tagged union structure) +>> +>> sessionName -> (string) +>> +>>> The session name for IAM role sessions. +>> +>> groupProfileId -> (string) +>> +>>> The identifier of the group profile associated with the IAM user profile. This links the user to a specific group profile within the Amazon DataZone domain. @@ -343 +364 @@ details -> (tagged union structure) - * [AWS CLI 2.34.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.32 Command Reference](../../index.html) »