AWS cli documentation change
Summary
Added new 'lambdaEventSourceMappingConfig' option to the Tagged Union structure, documented its parameters including security-related 'externalId' field, added default value (100) for target percentage configurations, and updated AWS CLI version references.
Security assessment
The change introduces a new 'lambdaEventSourceMappingConfig' option that includes an 'externalId' field described as a 'secret key' for cross-account access. This documents security best practices for handling cross-account credentials but doesn't indicate a specific security vulnerability being fixed. No evidence of a security incident or vulnerability remediation exists in the diff.
Diff
diff --git a/cli/latest/reference/arc-region-switch/get-plan-in-region.md b/cli/latest/reference/arc-region-switch/get-plan-in-region.md index d0e7f35b4..21bf6efef 100644 --- a//cli/latest/reference/arc-region-switch/get-plan-in-region.md +++ b//cli/latest/reference/arc-region-switch/get-plan-in-region.md @@ -15 +15 @@ - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) » @@ -264 +264 @@ plan -> (structure) ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. @@ -414 +414 @@ plan -> (structure) ->>>>>>>> The target percentage that you specify for EC2 Auto Scaling groups. +>>>>>>>> The target percentage that you specify for EC2 Auto Scaling groups. The default is 100. @@ -603 +603 @@ plan -> (structure) ->>>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`. +>>>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. @@ -753 +753 @@ plan -> (structure) ->>>>>>>>>>>> The target percentage that you specify for EC2 Auto Scaling groups. +>>>>>>>>>>>> The target percentage that you specify for EC2 Auto Scaling groups. The default is 100. @@ -1028 +1028 @@ plan -> (structure) ->>>>>>>>>>>> The target percentage specified for the configuration. +>>>>>>>>>>>> The target percentage specified for the configuration. The default is 100. @@ -1168 +1168 @@ plan -> (structure) ->>>>>>>>>>>> The target percentage for the configuration. +>>>>>>>>>>>> The target percentage for the configuration. The default is 100. @@ -1434,0 +1435,86 @@ plan -> (structure) +>>>>>>>>>> +>>>>>>>>>> lambdaEventSourceMappingConfig -> (structure) +>>>>>>>>>> +>>>>>>>>>>> A Lambda event source mapping execution block. +>>>>>>>>>>> +>>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> action -> (string) [required] +>>>>>>>>>>> +>>>>>>>>>>>> The action to take - whether to `enable` or `disable` an event source mapping. +>>>>>>>>>>>> +>>>>>>>>>>>> Possible values: +>>>>>>>>>>>> +>>>>>>>>>>>> * `enable` +>>>>>>>>>>>> * `disable` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> regionEventSourceMappings -> (map) [required] +>>>>>>>>>>> +>>>>>>>>>>>> Per-region configuration for which Lambda event source mapping to enable or disable when activating or deactivating a region. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `2` +>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> key -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> value -> (structure) +>>>>>>>>>>>> +>>>>>>>>>>>>> The Amazon Web Services Lambda event source mapping configuration, containing the resource ARN and optional cross-account configuration. +>>>>>>>>>>>>> +>>>>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>>>>> +>>>>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>>>>> +>>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>>> +>>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>>>>>> + +>>>>>>>>>>>>> +>>>>>>>>>>>>> externalId -> (string) +>>>>>>>>>>>>> +>>>>>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>>>>>> +>>>>>>>>>>>>> arn -> (string) [required] +>>>>>>>>>>>>> +>>>>>>>>>>>>>> The Amazon Resource Name (ARN) of the Lambda event source mapping. +>>>>>>>>>>>>>> +>>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>>> +>>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:lambda:[a-z0-9-]+:\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}` +>>>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> ungraceful -> (structure) +>>>>>>>>>>> +>>>>>>>>>>>> The settings for ungraceful execution. +>>>>>>>>>>>> +>>>>>>>>>>>> behavior -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Set to `skip` to skip executing this event source mapping step during an ungraceful execution. +>>>>>>>>>>>>> +>>>>>>>>>>>>> Possible values: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * `skip` +>>>>>>>>>>>>> + @@ -1454,0 +1541 @@ plan -> (structure) +>>>>>>>>>> * `LambdaEventSourceMapping` @@ -1566 +1653 @@ plan -> (structure) ->>>>>>>> The target percentage specified for the configuration. +>>>>>>>> The target percentage specified for the configuration. The default is 100. @@ -1706 +1793 @@ plan -> (structure) ->>>>>>>> The target percentage for the configuration. +>>>>>>>> The target percentage for the configuration. The default is 100. @@ -1972,0 +2060,86 @@ plan -> (structure) +>>>>>> +>>>>>> lambdaEventSourceMappingConfig -> (structure) +>>>>>> +>>>>>>> A Lambda event source mapping execution block. +>>>>>>> +>>>>>>> timeoutMinutes -> (integer) +>>>>>>> +>>>>>>>> The timeout value specified for the configuration. +>>>>>>>> +>>>>>>>> Constraints: +>>>>>>>> +>>>>>>>> * min: `1` +>>>>>>>> + +>>>>>>> +>>>>>>> action -> (string) [required] +>>>>>>> +>>>>>>>> The action to take - whether to `enable` or `disable` an event source mapping. +>>>>>>>> +>>>>>>>> Possible values: +>>>>>>>> +>>>>>>>> * `enable` +>>>>>>>> * `disable` +>>>>>>>> + +>>>>>>> +>>>>>>> regionEventSourceMappings -> (map) [required] +>>>>>>> +>>>>>>>> Per-region configuration for which Lambda event source mapping to enable or disable when activating or deactivating a region. +>>>>>>>> +>>>>>>>> Constraints: +>>>>>>>> +>>>>>>>> * min: `1` +>>>>>>>> * max: `2` +>>>>>>>> + +>>>>>>>> +>>>>>>>> key -> (string) +>>>>>>>> +>>>>>>>>> Constraints: +>>>>>>>>> +>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>> + +>>>>>>>> +>>>>>>>> value -> (structure) +>>>>>>>> +>>>>>>>>> The Amazon Web Services Lambda event source mapping configuration, containing the resource ARN and optional cross-account configuration. +>>>>>>>>> +>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>> +>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>> + +>>>>>>>>> +>>>>>>>>> externalId -> (string) +>>>>>>>>> +>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>> +>>>>>>>>> arn -> (string) [required] +>>>>>>>>> +>>>>>>>>>> The Amazon Resource Name (ARN) of the Lambda event source mapping. +>>>>>>>>>> +>>>>>>>>>> Constraints: +>>>>>>>>>> +>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:lambda:[a-z0-9-]+:\d{12}:event-source-mapping:[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}` +>>>>>>>>>> + +>>>>>>> +>>>>>>> ungraceful -> (structure) +>>>>>>> +>>>>>>>> The settings for ungraceful execution. +>>>>>>>> +>>>>>>>> behavior -> (string) +>>>>>>>>