AWS cli low security documentation change
Summary
1. Updated AWS CLI version reference 2. Added AccountState field to output 3. Modified pattern validations for account ID and account name 4. Updated command description to include account state
Security assessment
Added AccountState field provides security-relevant information about account lifecycle states (PENDING_ACTIVATION, ACTIVE, SUSPENDED, CLOSED). However, account ID pattern validation was relaxed from '^\d{12}$' to '\d{12}', weakening input specifications.
Diff
diff --git a/cli/latest/reference/account/get-account-information.md b/cli/latest/reference/account/get-account-information.md index d5d31c388..3467f1380 100644 --- a//cli/latest/reference/account/get-account-information.md +++ b//cli/latest/reference/account/get-account-information.md @@ -15 +15 @@ - * [AWS CLI 2.34.38 Command Reference](../../index.html) » + * [AWS CLI 2.34.40 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Retrieves information about the specified account including its account name, account ID, and account creation date and time. To use this API, an IAM user or role must have the `account:GetAccountInformation` IAM permission. +Retrieves information about the specified account including its account name, account ID, account creation date and time, and account state. To use this API, an IAM user or role must have the `account:GetAccountInformation` IAM permission. @@ -109 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/accoun -> * pattern: `^\d{12}$` +> * pattern: `\d{12}` @@ -226,4 +225,0 @@ The formatting style for error output. By default, errors are displayed in enhan -AccountCreatedDate -> (timestamp) - -> The date and time the account was created. - @@ -242 +238 @@ AccountId -> (string) -> * pattern: `^\d{12}$` +> * pattern: `\d{12}` @@ -254 +250,20 @@ AccountName -> (string) -> * pattern: `^[ -;=?-~]+$` +> * pattern: `[ -;=?-~]+` +> + + +AccountCreatedDate -> (timestamp) + +> The date and time the account was created. + +AccountState -> (string) + +> The state of the account. Each account state represents a specific phase in the account lifecycle. Use this information to manage account access, automate workflows, or trigger actions based on account state changes. +> +> Valid values: `PENDING_ACTIVATION | ACTIVE | SUSPENDED | CLOSED` +> +> Possible values: +> +> * `PENDING_ACTIVATION` +> * `ACTIVE` +> * `SUSPENDED` +> * `CLOSED` @@ -268 +283 @@ AccountName -> (string) - * [AWS CLI 2.34.38 Command Reference](../../index.html) » + * [AWS CLI 2.34.40 Command Reference](../../index.html) »