AWS cli medium security documentation change

Service: cli · 2026-04-28 · Security-related medium

File: cli/latest/reference/opensearch/describe-domains.md

Summary

Added JwksUrl field to DomainStatusList output

Security assessment

Added documentation for security feature in command output. The JwksUrl field displays endpoints used for JWT signature verification across multiple domains, enhancing authentication security monitoring.

Diff

diff --git a/cli/latest/reference/opensearch/describe-domains.md b/cli/latest/reference/opensearch/describe-domains.md
index 91e12443b..7731b4250 100644
--- a//cli/latest/reference/opensearch/describe-domains.md
+++ b//cli/latest/reference/opensearch/describe-domains.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
@@ -1144,0 +1145,12 @@ DomainStatusList -> (list)
+>>>> 
+>>>> JwksUrl -> (string)
+>>>>
+>>>>> The configured JWKS URL endpoint from which the cluster retrieves public keys to verify JWT requests.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `^$|^https://(?!(?:10|127|169\.254|192\.168|172\.(?:1[6-9]|2[0-9]|3[01]))\.)[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?(\.[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?)*\.[a-zA-Z]{2,}(?::[0-9]{1,5})?(?:/[a-zA-Z0-9\-._~%!$&'()*+,;=:']*)?$`
+>>>>> 
+
@@ -1542 +1554 @@ DomainStatusList -> (list)
-  * [AWS CLI 2.34.37 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.38 Command Reference](../../index.html) »