AWS cli medium security documentation change
Summary
Updated AWS CLI version from 2.34.29 to 2.34.32 and modified IAM role ARN pattern validation to be more restrictive and structured.
Security assessment
The change updates IAM role ARN pattern validation from a broader pattern to a more specific one that enforces proper path structure. This could prevent injection attacks or misconfigurations by ensuring only valid IAM role ARNs are accepted, which is a security improvement.
Diff
diff --git a/cli/latest/reference/datazone/update-domain.md b/cli/latest/reference/datazone/update-domain.md index 60f64490a..c0444d6d4 100644 --- a//cli/latest/reference/datazone/update-domain.md +++ b//cli/latest/reference/datazone/update-domain.md @@ -15 +15 @@ - * [AWS CLI 2.34.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.32 Command Reference](../../index.html) » @@ -171 +171 @@ JSON Syntax: -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -181 +181 @@ JSON Syntax: -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -374 +374 @@ domainExecutionRole -> (string) -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -384 +384 @@ serviceRole -> (string) -> * pattern: `arn:aws[^:]*:iam::\d{12}:(role|role/service-role)/[\w+=,.@-]*` +> * pattern: `arn:aws[^:]*:iam::\d{12}:role(/[a-zA-Z0-9+=,.@_-]+)*/[a-zA-Z0-9+=,.@_-]+` @@ -406 +406 @@ lastUpdatedAt -> (timestamp) - * [AWS CLI 2.34.29 Command Reference](../../index.html) » + * [AWS CLI 2.34.32 Command Reference](../../index.html) »