AWS cli documentation change
Summary
Added automated snapshot pause options with security warnings
Security assessment
Added documentation for --automated-snapshot-pause-options feature with explicit warnings about reduced data protection during suspension periods. Includes security implications but doesn't address a specific vulnerability.
Diff
diff --git a/cli/latest/reference/es/create-elasticsearch-domain.md b/cli/latest/reference/es/create-elasticsearch-domain.md index 7d9d42dd6..c155326c1 100644 --- a//cli/latest/reference/es/create-elasticsearch-domain.md +++ b//cli/latest/reference/es/create-elasticsearch-domain.md @@ -15 +15 @@ - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) » @@ -84,0 +85 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/es-201 + [--automated-snapshot-pause-options <value>] @@ -1024,0 +1026,38 @@ JSON Syntax: +`--automated-snapshot-pause-options` (structure) + +> Specifies the automated snapshot pause options for the domain. +> +> ### Warning +> +> Suspending snapshots reduces data protection. You cannot restore your domain to points in time when snapshots are suspended. Use this feature only for short-term operational needs such as migrations or maintenance windows. +> +> Maximum suspension duration: 3 days. +> +> Enabled -> (boolean) [required] +> +>> Whether to enable or disable automated snapshot pause for the domain. +> +> StartTime -> (timestamp) +> +>> The timestamp at which the automated snapshot pause should begin. +> +> EndTime -> (timestamp) +> +>> The timestamp at which the automated snapshot pause should end. The maximum allowed duration between `StartTime` and `EndTime` is 3 days. + +Shorthand Syntax: + + + Enabled=boolean,StartTime=timestamp,EndTime=timestamp + + +JSON Syntax: + + + { + "Enabled": true|false, + "StartTime": timestamp, + "EndTime": timestamp + } + + @@ -1974,0 +2014,29 @@ DomainStatus -> (structure) +> +> AutomatedSnapshotPauseOptions -> (structure) +> +>> The current status of the Elasticsearch domain’s automated snapshot pause options. +>> +>> Enabled -> (boolean) [required] +>> +>>> Whether automated snapshot pause is enabled for the domain. +>> +>> StartTime -> (timestamp) +>> +>>> The timestamp at which the automated snapshot pause begins. +>> +>> EndTime -> (timestamp) +>> +>>> The timestamp at which the automated snapshot pause ends. +>> +>> State -> (string) +>> +>>> The current state of the automated snapshot pause. Valid values are `Active` , `Completed` , `Scheduled` , and `Disabled` . +>>> +>>> Possible values: +>>> +>>> * `Active` +>>> * `Completed` +>>> * `Scheduled` +>>> * `Disabled` +>>> + @@ -1986 +2054 @@ DomainStatus -> (structure) - * [AWS CLI 2.34.45 Command Reference](../../index.html) » + * [AWS CLI 2.34.48 Command Reference](../../index.html) »