AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-05-16 · Documentation medium

File: cli/latest/reference/es/create-elasticsearch-domain.md

Summary

Added automated snapshot pause options with security warnings

Security assessment

Added documentation for --automated-snapshot-pause-options feature with explicit warnings about reduced data protection during suspension periods. Includes security implications but doesn't address a specific vulnerability.

Diff

diff --git a/cli/latest/reference/es/create-elasticsearch-domain.md b/cli/latest/reference/es/create-elasticsearch-domain.md
index 7d9d42dd6..c155326c1 100644
--- a//cli/latest/reference/es/create-elasticsearch-domain.md
+++ b//cli/latest/reference/es/create-elasticsearch-domain.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.48 Command Reference](../../index.html) »
@@ -84,0 +85 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/es-201
+    [--automated-snapshot-pause-options <value>]
@@ -1024,0 +1026,38 @@ JSON Syntax:
+`--automated-snapshot-pause-options` (structure)
+
+> Specifies the automated snapshot pause options for the domain.
+> 
+> ### Warning
+> 
+> Suspending snapshots reduces data protection. You cannot restore your domain to points in time when snapshots are suspended. Use this feature only for short-term operational needs such as migrations or maintenance windows.
+> 
+> Maximum suspension duration: 3 days.
+> 
+> Enabled -> (boolean) [required]
+>
+>> Whether to enable or disable automated snapshot pause for the domain.
+> 
+> StartTime -> (timestamp)
+>
+>> The timestamp at which the automated snapshot pause should begin.
+> 
+> EndTime -> (timestamp)
+>
+>> The timestamp at which the automated snapshot pause should end. The maximum allowed duration between `StartTime` and `EndTime` is 3 days.
+
+Shorthand Syntax:
+    
+    
+    Enabled=boolean,StartTime=timestamp,EndTime=timestamp
+    
+
+JSON Syntax:
+    
+    
+    {
+      "Enabled": true|false,
+      "StartTime": timestamp,
+      "EndTime": timestamp
+    }
+    
+
@@ -1974,0 +2014,29 @@ DomainStatus -> (structure)
+> 
+> AutomatedSnapshotPauseOptions -> (structure)
+>
+>> The current status of the Elasticsearch domain’s automated snapshot pause options.
+>> 
+>> Enabled -> (boolean) [required]
+>>
+>>> Whether automated snapshot pause is enabled for the domain.
+>> 
+>> StartTime -> (timestamp)
+>>
+>>> The timestamp at which the automated snapshot pause begins.
+>> 
+>> EndTime -> (timestamp)
+>>
+>>> The timestamp at which the automated snapshot pause ends.
+>> 
+>> State -> (string)
+>>
+>>> The current state of the automated snapshot pause. Valid values are `Active` , `Completed` , `Scheduled` , and `Disabled` .
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `Active`
+>>>   * `Completed`
+>>>   * `Scheduled`
+>>>   * `Disabled`
+>>> 
+
@@ -1986 +2054 @@ DomainStatus -> (structure)
-  * [AWS CLI 2.34.45 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.48 Command Reference](../../index.html) »