AWS cli medium security documentation change

Service: cli · 2026-04-28 · Security-related medium

File: cli/latest/reference/opensearch/describe-domain.md

Summary

Added JwksUrl field to DomainStatus output

Security assessment

Added documentation for security feature in command output. The JwksUrl field shows the configured endpoint for JWT signature verification keys, improving authentication security visibility.

Diff

diff --git a/cli/latest/reference/opensearch/describe-domain.md b/cli/latest/reference/opensearch/describe-domain.md
index 95d19a705..c64ae1485 100644
--- a//cli/latest/reference/opensearch/describe-domain.md
+++ b//cli/latest/reference/opensearch/describe-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
@@ -1130,0 +1131,12 @@ DomainStatus -> (structure)
+>>> 
+>>> JwksUrl -> (string)
+>>>
+>>>> The configured JWKS URL endpoint from which the cluster retrieves public keys to verify JWT requests.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `^$|^https://(?!(?:10|127|169\.254|192\.168|172\.(?:1[6-9]|2[0-9]|3[01]))\.)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\.[a-zA-Z]{2,}(?::[0-9]{1,5})?(?:/[a-zA-Z0-9\-._~%!$&'()*+,;=:']*)?$`
+>>>> 
+
@@ -1528 +1540 @@ DomainStatus -> (structure)
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »