AWS cli medium security documentation change
Summary
Added required permission note, URL encoding requirement for client IDs, and clarified session/LWT handling parameters.
Security assessment
Documents URL encoding requirement to prevent HTTP request manipulation vulnerabilities when special characters are used in client IDs. Clarifies session persistence security controls.
Diff
diff --git a/cli/latest/reference/iot-data/delete-connection.md b/cli/latest/reference/iot-data/delete-connection.md index a208e293c..fbcfceedc 100644 --- a//cli/latest/reference/iot-data/delete-connection.md +++ b//cli/latest/reference/iot-data/delete-connection.md @@ -15 +15 @@ - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) » @@ -60,0 +61,2 @@ Disconnects a connected MQTT client from Amazon Web Services IoT Core. When you +Requires permission to access the [DeleteConnection](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsiot.html#awsiot-actions-as-permissions) action. + @@ -102,0 +105,2 @@ For production code it is strongly recommended to use the custom endpoint for yo +> MQTT client IDs must be URL encoded (percent-encoded) when they contain characters that are not valid in HTTP requests, such as spaces, forward slashes (/), and UTF-8 characters. +> @@ -113 +117 @@ For production code it is strongly recommended to use the custom endpoint for yo -> Specifies whether to remove the client’s session state when disconnecting. Set to `TRUE` to delete all session information, including subscriptions and queued messages. Set to `FALSE` to preserve the session state. By default, this is set to `FALSE` (preserves the session state). +> Specifies whether to remove the client’s persistent session state when disconnecting. Set to `TRUE` to delete all session information, including subscriptions and queued messages. Set to `FALSE` to preserve the session state for [persistent sessions](https://docs.aws.amazon.com/iot/latest/developerguide/mqtt.html#mqtt-persistent-sessions) . For clean sessions this parameter will be ignored. By default, this is set to `FALSE` (preserves the session state). @@ -117 +121 @@ For production code it is strongly recommended to use the custom endpoint for yo -> Controls if Amazon Web Services IoT Core publishes the client’s Last Will and Testament (LWT) message upon disconnection. Set to `TRUE` to prevent publishing the LWT message. Set to `FALSE` to allow publishing. By default, this is set to `FALSE` (allows publishing the LWT message). +> Controls if Amazon Web Services IoT Core publishes the client’s Last Will and Testament (LWT) message upon disconnection. Set to `TRUE` to prevent publishing the LWT message. Set to `FALSE` to ensure that LWT is published. By default, this is set to `FALSE` (LWT message is published). @@ -244 +248 @@ None - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) »