AWS cli medium security documentation change

Service: cli · 2026-05-19 · Security-related medium

File: cli/latest/reference/ec2/get-ipam-pool-allocations.md

Summary

Added documentation for tags in IPAM pool allocations including key/value constraints

Security assessment

The change explicitly documents security constraints for tags (case-sensitivity, character limits, and prohibition of 'aws:' prefix) which helps prevent privilege escalation through tag impersonation.

Diff

diff --git a/cli/latest/reference/ec2/get-ipam-pool-allocations.md b/cli/latest/reference/ec2/get-ipam-pool-allocations.md
index 18b4de0b1..ac4e21758 100644
--- a//cli/latest/reference/ec2/get-ipam-pool-allocations.md
+++ b//cli/latest/reference/ec2/get-ipam-pool-allocations.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.48 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.49 Command Reference](../../index.html) »
@@ -378,0 +379,20 @@ IpamPoolAllocations -> (list)
+>> 
+>> Tags -> (list)
+>>
+>>> The tags for the IPAM pool allocation.
+>>> 
+>>> (structure)
+>>>
+>>>> Describes a tag.
+>>>> 
+>>>> Key -> (string)
+>>>>
+>>>>> The key of the tag.
+>>>>> 
+>>>>> Constraints: Tag keys are case-sensitive and accept a maximum of 127 Unicode characters. May not begin with `aws:` .
+>>>> 
+>>>> Value -> (string)
+>>>>
+>>>>> The value of the tag.
+>>>>> 
+>>>>> Constraints: Tag values are case-sensitive and accept a maximum of 256 Unicode characters.
@@ -394 +414 @@ NextToken -> (string)
-  * [AWS CLI 2.34.48 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.49 Command Reference](../../index.html) »