AWS cli medium security documentation change

Service: cli · 2026-05-25 · Security-related medium

File: cli/latest/reference/datazone/create-connection.md

Summary

Added VPC connection support including security group configuration and network isolation features

Security assessment

Added new vpcProperties with securityGroupId field and network isolation features (VPC, subnets). This documents security controls for network segmentation and access control. Specific security patterns include security group validation (pattern: `sg-[a-z0-9]+`) and VPC isolation capabilities.

Diff

diff --git a/cli/latest/reference/datazone/create-connection.md b/cli/latest/reference/datazone/create-connection.md
index b82f0cf99..1a44100ed 100644
--- a//cli/latest/reference/datazone/create-connection.md
+++ b//cli/latest/reference/datazone/create-connection.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.52 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.53 Command Reference](../../index.html) »
@@ -277 +277 @@ JSON Syntax:
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`, `vpcProperties`.
@@ -1191,0 +1192,49 @@ JSON Syntax:
+> 
+> vpcProperties -> (structure)
+>
+>> The VPC properties of a connection.
+>> 
+>> vpcId -> (string) [required]
+>>
+>>> The identifier of the VPC. Must match the pattern `^vpc-[a-z0-9]+$` . Maximum length of 32.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `32`
+>>>   * pattern: `vpc-[a-z0-9]+`
+>>> 
+
+>> 
+>> subnetIds -> (list) [required]
+>>
+>>> The subnet IDs of the VPC connection. You can specify between 1 and 16 subnet IDs.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `16`
+>>> 
+
+>>> 
+>>> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `32`
+>>>>   * pattern: `subnet-[a-z0-9]+`
+>>>> 
+
+>> 
+>> securityGroupId -> (string)
+>>
+>>> The security group ID of the VPC connection. Must match the pattern `^sg-[a-z0-9]+$` . Maximum length of 32.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `32`
+>>>   * pattern: `sg-[a-z0-9]+`
+>>> 
+
@@ -1326,0 +1376,5 @@ JSON Syntax:
+      },
+      "vpcProperties": {
+        "vpcId": "string",
+        "subnetIds": ["string", ...],
+        "securityGroupId": "string"
@@ -1689,0 +1744 @@ physicalEndpoints -> (list)
+>>>>   * `VPC`
@@ -2161 +2216 @@ props -> (tagged union structure)
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`, `vpcProperties`.
@@ -2660,0 +2716,86 @@ props -> (tagged union structure)
+> 
+> vpcProperties -> (structure)
+>
+>> The VPC properties of a connection.
+>> 
+>> vpcId -> (string) [required]
+>>
+>>> The identifier of the VPC.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `32`
+>>>   * pattern: `vpc-[a-z0-9]+`
+>>> 
+
+>> 
+>> subnetIds -> (list) [required]
+>>
+>>> The subnet IDs of the VPC connection.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `16`
+>>> 
+
+>>> 
+>>> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `32`
+>>>>   * pattern: `subnet-[a-z0-9]+`
+>>>> 
+
+>> 
+>> status -> (string) [required]
+>>
+>>> The status of the VPC connection.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `CREATING`
+>>>   * `CREATE_FAILED`
+>>>   * `DELETING`
+>>>   * `DELETE_FAILED`
+>>>   * `READY`
+>>>   * `UPDATING`
+>>>   * `UPDATE_FAILED`
+>>>   * `DELETED`
+>>> 
+
+>> 
+>> securityGroupId -> (string)
+>>
+>>> The security group ID of the VPC connection.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `0`
+>>>   * max: `32`
+>>>   * pattern: `sg-[a-z0-9]+`
+>>> 
+
+>> 
+>> glueConnectionNames -> (list)
+>>
+>>> The Amazon Web Services Glue connection names associated with the VPC connection.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `16`
+>>> 
+
+>>> 
+>>> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `64`
+>>>> 
+
@@ -2689,0 +2831 @@ type -> (string)
+>   * `VPC`
@@ -2714 +2856 @@ scope -> (string)
-  * [AWS CLI 2.34.52 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.53 Command Reference](../../index.html) »