AWS cli medium security documentation change
Summary
Updated documentation for the 'create-agent-space' command with improved descriptions, clarified parameter definitions, and explicit security context. Changes include: enhanced command description mentioning security purpose, clarified VPC configuration for pentesting, standardized resource descriptions with ARN references, and added explicit security context for IAM roles and encryption.
Security assessment
The changes explicitly link the agent space to security purposes ('dedicated workspace for securing a specific application') and pentesting activities. They clarify security-sensitive configurations including IAM roles for resource access, Secrets Manager for credential storage, and KMS for encryption. The VPC configuration now explicitly references pentesting security groups and subnets. These changes document security features more transparently but don't indicate a specific vulnerability fix.
Diff
diff --git a/cli/latest/reference/securityagent/create-agent-space.md b/cli/latest/reference/securityagent/create-agent-space.md index 9c52a5519..72185ceb8 100644 --- a//cli/latest/reference/securityagent/create-agent-space.md +++ b//cli/latest/reference/securityagent/create-agent-space.md @@ -15 +15 @@ - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Creates an agent space record +Creates a new agent space. An agent space is a dedicated workspace for securing a specific application. @@ -101 +101 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi -> Name of the agent space +> The name of the agent space. @@ -105 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi -> Description of the agent space +> A description of the agent space. @@ -109 +109 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi -> AWS resource configurations associated with the agent space +> The AWS resources to associate with the agent space. @@ -113 +113 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->> VPC configurations that the Security Agent accesses in the customer environment +>> The VPC configurations associated with the agent space. @@ -117 +117 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>> Customer VPC configuration that the Security Agent accesses +>>> The VPC configuration for a pentest, specifying the VPC, security groups, and subnets to use during testing. @@ -121 +121 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>> ARN or ID of the customer VPC +>>>> The Amazon Resource Name (ARN) of the VPC. @@ -125 +125 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>> List of security group ARNs or IDs in the customer VPC +>>>> The Amazon Resource Names (ARNs) of the security groups for the VPC configuration. @@ -129 +129 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>>> ARN or ID of a security group +>>>>> ARN or ID of a security group. @@ -133 +133 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>> List of subnet ARNs or IDs in the customer VPC +>>>> The Amazon Resource Names (ARNs) of the subnets for the VPC configuration. @@ -137 +137 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>>>> ARN or ID of a subnet +>>>>> ARN or ID of a subnet. @@ -141 +141 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->> CloudWatch log group ARNs or names used to store Security Agent logs +>> The Amazon Resource Names (ARNs) of the CloudWatch log groups associated with the agent space. @@ -145 +145 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>> Log group ARN or name for agent space AWS resources +>>> Log group ARN or name for agent space AWS resources. @@ -149 +149 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->> S3 bucket ARNs or names used to store Security Agent artifacts +>> The Amazon Resource Names (ARNs) of the S3 buckets associated with the agent space. @@ -153 +153 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>> S3 bucket ARN or name for agent space AWS resources +>>> S3 bucket ARN or name for agent space AWS resources. @@ -157 +157 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->> SecretsManager secret ARNs or names used to store tester credentials for pentests +>> The Amazon Resource Names (ARNs) of the Secrets Manager secrets associated with the agent space. @@ -161 +161 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>> Secret ARN or name for agent space AWS resources +>>> Secret ARN or name for agent space AWS resources. @@ -165 +165 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->> Lambda function ARNs or names used to retrieve tester credentials for pentests +>> The Amazon Resource Names (ARNs) of the Lambda functions associated with the agent space. @@ -169 +169 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>> Lambda function ARN or name for agent space AWS resources +>>> Lambda function ARN or name for agent space AWS resources. @@ -173 +173 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->> IAM role ARNs that the Security Agent can assume to access customer resources +>> The IAM roles associated with the agent space. @@ -177 +177 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi ->>> ARN of an IAM role that the service can assume to access customer resources +>>> ARN of an IAM role that the service can assume to access customer resources. @@ -201 +201 @@ JSON Syntax: -> Target domain IDs to associate with the agent space +> The list of target domain identifiers to associate with the agent space. @@ -213 +213 @@ Syntax: -> Configuration for code review analysis, including controls scanning and general purpose scanning settings +> The code review settings for the agent space. @@ -217 +217 @@ Syntax: ->> Whether Controls are utilized for code review analysis +>> Indicates whether controls scanning is enabled for code reviews. @@ -221 +221 @@ Syntax: ->> Whether general purpose analysis is performed for code review +>> Indicates whether general-purpose scanning is enabled for code reviews. @@ -240 +240 @@ JSON Syntax: -> Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used. +> The identifier of the AWS KMS key to use for encrypting data in the agent space. @@ -244 +244 @@ JSON Syntax: -> Tags to associate with the agent space +> The tags to associate with the agent space. @@ -248 +248 @@ JSON Syntax: ->> Key for a resource tag +>> Key for a resource tag. @@ -252 +252 @@ JSON Syntax: ->> Value for a resource tag +>> Value for a resource tag. @@ -382 +382 @@ agentSpaceId -> (string) -> Unique identifier of the created agent space +> The unique identifier of the created agent space. @@ -386 +386 @@ name -> (string) -> Name of the created agent space +> The name of the agent space. @@ -390 +390 @@ description -> (string) -> Description of the created agent space +> The description of the agent space. @@ -394 +394 @@ awsResources -> (structure) -> AWS resource configurations associated with the agent space +> The AWS resources associated with the agent space. @@ -398 +398 @@ awsResources -> (structure) ->> VPC configurations that the Security Agent accesses in the customer environment +>> The VPC configurations associated with the agent space. @@ -402 +402 @@ awsResources -> (structure) ->>> Customer VPC configuration that the Security Agent accesses +>>> The VPC configuration for a pentest, specifying the VPC, security groups, and subnets to use during testing. @@ -406 +406 @@ awsResources -> (structure) ->>>> ARN or ID of the customer VPC +>>>> The Amazon Resource Name (ARN) of the VPC. @@ -410 +410 @@ awsResources -> (structure) ->>>> List of security group ARNs or IDs in the customer VPC +>>>> The Amazon Resource Names (ARNs) of the security groups for the VPC configuration. @@ -414 +414 @@ awsResources -> (structure) ->>>>> ARN or ID of a security group +>>>>> ARN or ID of a security group. @@ -418 +418 @@ awsResources -> (structure) ->>>> List of subnet ARNs or IDs in the customer VPC +>>>> The Amazon Resource Names (ARNs) of the subnets for the VPC configuration. @@ -422 +422 @@ awsResources -> (structure) ->>>>> ARN or ID of a subnet +>>>>> ARN or ID of a subnet. @@ -426 +426 @@ awsResources -> (structure) ->> CloudWatch log group ARNs or names used to store Security Agent logs +>> The Amazon Resource Names (ARNs) of the CloudWatch log groups associated with the agent space. @@ -430 +430 @@ awsResources -> (structure) ->>> Log group ARN or name for agent space AWS resources +>>> Log group ARN or name for agent space AWS resources. @@ -434 +434 @@ awsResources -> (structure) ->> S3 bucket ARNs or names used to store Security Agent artifacts +>> The Amazon Resource Names (ARNs) of the S3 buckets associated with the agent space. @@ -438 +438 @@ awsResources -> (structure) ->>> S3 bucket ARN or name for agent space AWS resources +>>> S3 bucket ARN or name for agent space AWS resources. @@ -442 +442 @@ awsResources -> (structure) ->> SecretsManager secret ARNs or names used to store tester credentials for pentests +>> The Amazon Resource Names (ARNs) of the Secrets Manager secrets associated with the agent space. @@ -446 +446 @@ awsResources -> (structure) ->>> Secret ARN or name for agent space AWS resources +>>> Secret ARN or name for agent space AWS resources. @@ -450 +450 @@ awsResources -> (structure) ->> Lambda function ARNs or names used to retrieve tester credentials for pentests +>> The Amazon Resource Names (ARNs) of the Lambda functions associated with the agent space. @@ -454 +454 @@ awsResources -> (structure) ->>> Lambda function ARN or name for agent space AWS resources +>>> Lambda function ARN or name for agent space AWS resources. @@ -458 +458 @@ awsResources -> (structure) ->> IAM role ARNs that the Security Agent can assume to access customer resources +>> The IAM roles associated with the agent space. @@ -462 +462 @@ awsResources -> (structure) ->>> ARN of an IAM role that the service can assume to access customer resources +>>> ARN of an IAM role that the service can assume to access customer resources. @@ -466 +466 @@ targetDomainIds -> (list) -> List of target domain IDs registered with the agent space +> The list of target domain identifiers associated with the agent space. @@ -472 +472 @@ codeReviewSettings -> (structure) -> Configuration for code review analysis, including controls scanning and general purpose scanning settings +> The code review settings for the agent space. @@ -476 +476 @@ codeReviewSettings -> (structure) ->> Whether Controls are utilized for code review analysis +>> Indicates whether controls scanning is enabled for code reviews. @@ -480 +480 @@ codeReviewSettings -> (structure) ->> Whether general purpose analysis is performed for code review +>> Indicates whether general-purpose scanning is enabled for code reviews. @@ -484 +484 @@ kmsKeyId -> (string) -> Identifier of the KMS key used to encrypt data. Can be a key ID, key ARN, alias name, or alias ARN. If not specified, an AWS managed key is used. +> The identifier of the AWS KMS key used to encrypt data in the agent space. @@ -488 +488 @@ createdAt -> (timestamp) -> Timestamp when the agent space was created +> The date and time the agent space was created, in UTC format. @@ -492 +492 @@ updatedAt -> (timestamp) -> Timestamp when the agent space was last updated +> The date and time the agent space was last updated, in UTC format. @@ -504 +504 @@ updatedAt -> (timestamp) - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) »