AWS cli medium security documentation change

Service: cli · 2026-05-04 · Security-related medium

File: cli/latest/reference/quicksight/describe-data-source.md

Summary

Added documentation for 'IdentityProviderCACertificatesBundleS3Uri' parameter across multiple sections. This parameter specifies an S3 URI for a custom CA certificates bundle used with identity providers when the default trust store is insufficient.

Security assessment

The change explicitly addresses certificate validation security by allowing custom CA bundles for identity providers. This mitigates risks of untrusted connections when default trust stores lack required certificates, preventing potential man-in-the-middle attacks.

Diff

diff --git a/cli/latest/reference/quicksight/describe-data-source.md b/cli/latest/reference/quicksight/describe-data-source.md
index 8dda247ec..475416eb8 100644
--- a//cli/latest/reference/quicksight/describe-data-source.md
+++ b//cli/latest/reference/quicksight/describe-data-source.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
@@ -1018,0 +1019,12 @@ DataSource -> (structure)
+>>>> 
+>>>> IdentityProviderCACertificatesBundleS3Uri -> (string)
+>>>>
+>>>>> The S3 URI of the identity provider’s CA certificates bundle in PEM format. Use this parameter to provide a custom CA certificate bundle for the identity provider when the default trust store does not include the required certificates.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `^s3://.+/.+`
+>>>>> 
+
@@ -1336,0 +1349,12 @@ DataSource -> (structure)
+>>>> 
+>>>> IdentityProviderCACertificatesBundleS3Uri -> (string)
+>>>>
+>>>>> The S3 URI of the identity provider’s CA certificates bundle in PEM format. Use this parameter to provide a custom CA certificate bundle for the identity provider when the default trust store does not include the required certificates.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `^s3://.+/.+`
+>>>>> 
+
@@ -2300,0 +2325,12 @@ DataSource -> (structure)
+>>>>> 
+>>>>> IdentityProviderCACertificatesBundleS3Uri -> (string)
+>>>>>
+>>>>>> The S3 URI of the identity provider’s CA certificates bundle in PEM format. Use this parameter to provide a custom CA certificate bundle for the identity provider when the default trust store does not include the required certificates.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>>   * max: `2048`
+>>>>>>   * pattern: `^s3://.+/.+`
+>>>>>> 
+
@@ -2618,0 +2655,12 @@ DataSource -> (structure)
+>>>>> 
+>>>>> IdentityProviderCACertificatesBundleS3Uri -> (string)
+>>>>>
+>>>>>> The S3 URI of the identity provider’s CA certificates bundle in PEM format. Use this parameter to provide a custom CA certificate bundle for the identity provider when the default trust store does not include the required certificates.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>>   * max: `2048`
+>>>>>>   * pattern: `^s3://.+/.+`
+>>>>>> 
+
@@ -2941 +2989 @@ Status -> (integer)
-  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.41 Command Reference](../../index.html) »