AWS cli medium security documentation change

Service: cli · 2026-04-28 · Security-related medium

File: cli/latest/reference/opensearch/describe-domain-config.md

Summary

Added JwksUrl field to DomainConfig output

Security assessment

Added documentation for security feature in command output. The JwksUrl field displays the endpoint used for retrieving public keys to verify JWT signatures, enhancing security configuration visibility.

Diff

diff --git a/cli/latest/reference/opensearch/describe-domain-config.md b/cli/latest/reference/opensearch/describe-domain-config.md
index 6cae76b45..0f775964b 100644
--- a//cli/latest/reference/opensearch/describe-domain-config.md
+++ b//cli/latest/reference/opensearch/describe-domain-config.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
@@ -1556,0 +1557,12 @@ DomainConfig -> (structure)
+>>>> 
+>>>> JwksUrl -> (string)
+>>>>
+>>>>> The configured JWKS URL endpoint from which the cluster retrieves public keys to verify JWT requests.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `^$|^https://(?!(?:10|127|169\.254|192\.168|172\.(?:1[6-9]|2[0-9]|3[01]))\.)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\.[a-zA-Z]{2,}(?::[0-9]{1,5})?(?:/[a-zA-Z0-9\-._~%!$&'()*+,;=:']*)?$`
+>>>>> 
+
@@ -2291 +2303 @@ DomainConfig -> (structure)
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »