AWS cli medium security documentation change

Service: cli · 2026-05-01 · Security-related medium

File: cli/latest/reference/iam/update-open-id-connect-provider-thumbprint.md

Summary

Added security guidance for OIDC providers with multiple certificates and updated CLI version

Security assessment

Added explicit security documentation about handling multiple certificates for OIDC endpoints. This addresses potential authentication failures when discovery/JWKS endpoints use different certificates, preventing security misconfigurations.

Diff

diff --git a/cli/latest/reference/iam/update-open-id-connect-provider-thumbprint.md b/cli/latest/reference/iam/update-open-id-connect-provider-thumbprint.md
index e40d30dab..c89f1f97c 100644
--- a//cli/latest/reference/iam/update-open-id-connect-provider-thumbprint.md
+++ b//cli/latest/reference/iam/update-open-id-connect-provider-thumbprint.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
@@ -271,0 +272,2 @@ This example updates the certificate thumbprint list for the OIDC provider whose
+If your OIDC provider’s discovery and JWKS endpoints use different certificates, include thumbprints for both endpoints in the `--thumbprint-list` value.
+
@@ -290 +292 @@ None
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »