AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-05-07 · Documentation low

File: cli/latest/reference/securityhub/get-resources-statistics-v2.md

Summary

Updated CLI version references, modified operator behavior documentation for CONTAINS/NOT_CONTAINS, and added new 'Comparison' parameter for date range filters with WITHIN/OLDER_THAN options

Security assessment

Changes document expanded operator capabilities and new date filtering parameters in Security Hub APIs. While related to security feature enhancements, there's no evidence of addressing a specific vulnerability or security incident.

Diff

diff --git a/cli/latest/reference/securityhub/get-resources-statistics-v2.md b/cli/latest/reference/securityhub/get-resources-statistics-v2.md
index dba0917ce..737164bfa 100644
--- a//cli/latest/reference/securityhub/get-resources-statistics-v2.md
+++ b//cli/latest/reference/securityhub/get-resources-statistics-v2.md
@@ -14,2 +14,2 @@
-  * [previous](get-members.html "get-members") |
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [previous](get-recommended-policy-v2.html "get-recommended-policy-v2") |
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »
@@ -22 +22 @@
-  * [← get-members](get-members.html "previous chapter \(use the left arrow\)") /
+  * [← get-recommended-policy-v2](get-recommended-policy-v2.html "previous chapter \(use the left arrow\)") /
@@ -210 +210 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
->>>>>>>>>> `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _Security Hub CSPM User Guide_ .
+>>>>>>>>> The `CONTAINS` operator works with automation rules V1 and V2. The `NOT_CONTAINS` operator works only with automation rules V1. The `CONTAINS_WORD` operator works only in the `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _Security Hub CSPM User Guide_ .
@@ -287,0 +288,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+>>>>>>>>> 
+>>>>>>>>> Comparison -> (string)
+>>>>>>>>>
+>>>>>>>>>> The condition to apply to a date range filter. If you specify `WITHIN` , Security Hub filters for dates within the specified date range. If you specify `OLDER_THAN` , Security Hub filters for dates before the specified date range. If you don’t specify a value, the default is `WITHIN` .
+>>>>>>>>>> 
+>>>>>>>>>> Possible values:
+>>>>>>>>>> 
+>>>>>>>>>>   * `WITHIN`
+>>>>>>>>>>   * `OLDER_THAN`
+>>>>>>>>>> 
+
@@ -503 +514 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
->>>>>>>>>>>> `CONTAINS` and `NOT_CONTAINS` operators can be used only with automation rules V1. `CONTAINS_WORD` operator is only supported in `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _Security Hub CSPM User Guide_ .
+>>>>>>>>>>> The `CONTAINS` operator works with automation rules V1 and V2. The `NOT_CONTAINS` operator works only with automation rules V1. The `CONTAINS_WORD` operator works only in the `GetFindingsV2` , `GetFindingStatisticsV2` , `GetResourcesV2` , and `GetResourcesStatisticsV2` APIs. For more information, see [Automation rules](https://docs.aws.amazon.com/securityhub/latest/userguide/automation-rules.html) in the _Security Hub CSPM User Guide_ .
@@ -580,0 +592,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+>>>>>>>>>>> 
+>>>>>>>>>>> Comparison -> (string)
+>>>>>>>>>>>
+>>>>>>>>>>>> The condition to apply to a date range filter. If you specify `WITHIN` , Security Hub filters for dates within the specified date range. If you specify `OLDER_THAN` , Security Hub filters for dates before the specified date range. If you don’t specify a value, the default is `WITHIN` .
+>>>>>>>>>>>> 
+>>>>>>>>>>>> Possible values:
+>>>>>>>>>>>> 
+>>>>>>>>>>>>   * `WITHIN`
+>>>>>>>>>>>>   * `OLDER_THAN`
+>>>>>>>>>>>> 
+
@@ -771 +793,2 @@ JSON Syntax:
-                      "Unit": "DAYS"
+                      "Unit": "DAYS",
+                      "Comparison": "WITHIN"|"OLDER_THAN"
@@ -821 +844,2 @@ JSON Syntax:
-                          "Unit": "DAYS"
+                          "Unit": "DAYS",
+                          "Comparison": "WITHIN"|"OLDER_THAN"
@@ -1102 +1126 @@ GroupByResults -> (list)
-  * [← get-members](get-members.html "previous chapter \(use the left arrow\)") /
+  * [← get-recommended-policy-v2](get-recommended-policy-v2.html "previous chapter \(use the left arrow\)") /
@@ -1111,2 +1135,2 @@ GroupByResults -> (list)
-  * [previous](get-members.html "get-members") |
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [previous](get-recommended-policy-v2.html "get-recommended-policy-v2") |
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »