AWS cli medium security documentation change
Summary
Updated documentation for updating target domain verification. Added new verification method option (PRIVATE_VPC), enhanced parameter descriptions, added verificationStatusReason field, and improved clarity of verification details.
Security assessment
The changes explicitly document security controls for domain ownership verification, including new PRIVATE_VPC method and verification token handling. The addition of verificationStatusReason provides security transparency, and the enhanced token/routing details directly relate to preventing domain takeover attacks.
Diff
diff --git a/cli/latest/reference/securityagent/update-target-domain.md b/cli/latest/reference/securityagent/update-target-domain.md index cdf1210c0..1c4115a53 100644 --- a//cli/latest/reference/securityagent/update-target-domain.md +++ b//cli/latest/reference/securityagent/update-target-domain.md @@ -15 +15 @@ - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Updates a target domain record +Updates the verification method for a target domain. @@ -96 +96 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi -> Unique identifier of the target domain to update +> The unique identifier of the target domain to update. @@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi -> Verification method for the target domain +> The updated verification method for the target domain. @@ -105,0 +106 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi +> * `PRIVATE_VPC` @@ -224 +225 @@ targetDomainId -> (string) -> Unique identifier of the target domain +> The unique identifier of the target domain. @@ -228 +229 @@ domainName -> (string) -> Name of the target domain +> The domain name of the target domain. @@ -232 +233 @@ verificationStatus -> (string) -> Current verification status of the registered target domain +> The current verification status of the target domain. @@ -242,0 +244,4 @@ verificationStatus -> (string) +verificationStatusReason -> (string) + +> The reason for the current target domain verification status. + @@ -245 +250 @@ verificationDetails -> (structure) -> Verification details to verify registered target domain +> The updated verification details for the target domain. @@ -249 +254 @@ verificationDetails -> (structure) ->> Type of domain ownership verification method +>> The verification method used for the target domain. @@ -254,0 +260 @@ verificationDetails -> (structure) +>> * `PRIVATE_VPC` @@ -260 +266 @@ verificationDetails -> (structure) ->> Represents dns txt verification details +>> The DNS TXT verification details. @@ -264 +270 @@ verificationDetails -> (structure) ->>> Token used to verify domain ownership +>>> The verification token to include in the DNS record value. @@ -268 +274 @@ verificationDetails -> (structure) ->>> Record name to be added in DNS for target domain +>>> The name of the DNS record to create for verification. @@ -272 +278 @@ verificationDetails -> (structure) ->>> Type of record to be added in DNS for target domain +>>> The type of DNS record to create. Currently, only TXT is supported. @@ -282 +288 @@ verificationDetails -> (structure) ->> Represents http route verification details +>> The HTTP route verification details. @@ -286 +292 @@ verificationDetails -> (structure) ->>> Token used to verify domain ownership +>>> The verification token to serve at the specified route path. @@ -290 +296 @@ verificationDetails -> (structure) ->>> Route path where verification token should be placed +>>> The HTTP route path where the verification token must be served. @@ -294 +300 @@ createdAt -> (timestamp) -> Timestamp when the target domain was registered +> The date and time the target domain was created, in UTC format. @@ -298 +304 @@ verifiedAt -> (timestamp) -> Timestamp when the target domain was last successfully verified +> The date and time the target domain was verified, in UTC format. @@ -310 +316 @@ verifiedAt -> (timestamp) - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) »