AWS cli medium security documentation change

Service: cli · 2026-04-19 · Security-related medium

File: cli/latest/reference/datazone/put-environment-blueprint-configuration.md

Summary

Updated AWS CLI version from 2.34.29 to 2.34.32 and modified IAM role ARN pattern validation to be more restrictive and structured.

Security assessment

The change updates IAM role ARN pattern validation from a broader pattern to a more specific one that enforces proper path structure. This could prevent injection attacks or misconfigurations by ensuring only valid IAM role ARNs are accepted, which is a security improvement.

Diff

diff --git a/cli/latest/reference/datazone/put-environment-blueprint-configuration.md b/cli/latest/reference/datazone/put-environment-blueprint-configuration.md
index 412d431ab..68cc986d5 100644
--- a//cli/latest/reference/datazone/put-environment-blueprint-configuration.md
+++ b//cli/latest/reference/datazone/put-environment-blueprint-configuration.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.32 Command Reference](../../index.html) »
@@ -127 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+`
@@ -137 +137 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/datazo
->   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+`
@@ -254 +254 @@ JSON Syntax:
->>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+`
@@ -438 +438 @@ provisioningRoleArn -> (string)
->   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+`
@@ -458 +458 @@ manageAccessRoleArn -> (string)
->   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>   * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+`
@@ -532 +532 @@ provisioningConfigurations -> (list)
->>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*`
+>>>>   * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+`
@@ -567 +567 @@ provisioningConfigurations -> (list)
-  * [AWS CLI 2.34.29 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.32 Command Reference](../../index.html) »