AWS cli medium security documentation change
Summary
Updated CLI version references, increased parameter max value from 100 to 570, added Linux shell escaping note for secret ARNs, and clarified that all array fields can contain null values
Security assessment
The change adds explicit guidance for securely handling secret ARNs containing special characters (!) to prevent shell expansion vulnerabilities. This addresses potential command injection risks when secrets contain special characters in Linux environments.
Diff
diff --git a/cli/latest/reference/rds-data/execute-statement.md b/cli/latest/reference/rds-data/execute-statement.md index 947e5c4f8..242c6dc83 100644 --- a//cli/latest/reference/rds-data/execute-statement.md +++ b//cli/latest/reference/rds-data/execute-statement.md @@ -15 +15 @@ - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) » @@ -117 +117 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da -> * max: `100` +> * max: `570` @@ -126,0 +127,6 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da +> ### Note +> +> When you use the CLI on Linux to reference a secret created in the RDS console, the ARN might include special characters like `rds!cluster` . If you enclose the ARN in double quotes, the `!` character might trigger a shell expansion error, such as `-bash: !cluster: event not found` . To avoid this, escape the exclamation mark (!) in the ARN or enclose the entire ARN in single quotes (’) instead of double quotes. +> +> Alternatively, disable shell history expansion by running `set +H` before you execute the command. +> @@ -130 +136 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da -> * max: `100` +> * max: `570` @@ -229 +235 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>> An array of Boolean values. +>>>>> An array of Boolean values. Can contain null values. @@ -235 +241 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>> An array of integers. +>>>>> An array of integers. Can contain null values. @@ -241 +247 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>> An array of floating-point numbers. +>>>>> An array of floating-point numbers. Can contain null values. @@ -247 +253 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>> An array of strings. +>>>>> An array of strings. Can contain null values. @@ -253 +259 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>> An array of arrays. +>>>>> An array of arrays. Can contain null values. @@ -265 +271 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>>>> An array of Boolean values. +>>>>>>> An array of Boolean values. Can contain null values. @@ -271 +277 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>>>> An array of integers. +>>>>>>> An array of integers. Can contain null values. @@ -277 +283 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>>>> An array of floating-point numbers. +>>>>>>> An array of floating-point numbers. Can contain null values. @@ -283 +289 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>>>> An array of strings. +>>>>>>> An array of strings. Can contain null values. @@ -289 +295 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/rds-da ->>>>>>> An array of arrays. +>>>>>>> An array of arrays. Can contain null values. @@ -652 +658 @@ records -> (list) ->>>>> An array of Boolean values. +>>>>> An array of Boolean values. Can contain null values. @@ -658 +664 @@ records -> (list) ->>>>> An array of integers. +>>>>> An array of integers. Can contain null values. @@ -664 +670 @@ records -> (list) ->>>>> An array of floating-point numbers. +>>>>> An array of floating-point numbers. Can contain null values. @@ -670 +676 @@ records -> (list) ->>>>> An array of strings. +>>>>> An array of strings. Can contain null values. @@ -676 +682 @@ records -> (list) ->>>>> An array of arrays. +>>>>> An array of arrays. Can contain null values. @@ -688 +694 @@ records -> (list) ->>>>>>> An array of Boolean values. +>>>>>>> An array of Boolean values. Can contain null values. @@ -694 +700 @@ records -> (list) ->>>>>>> An array of integers. +>>>>>>> An array of integers. Can contain null values. @@ -700 +706 @@ records -> (list) ->>>>>>> An array of floating-point numbers. +>>>>>>> An array of floating-point numbers. Can contain null values. @@ -706 +712 @@ records -> (list) ->>>>>>> An array of strings. +>>>>>>> An array of strings. Can contain null values. @@ -712 +718 @@ records -> (list) ->>>>>>> An array of arrays. +>>>>>>> An array of arrays. Can contain null values. @@ -834 +840 @@ generatedFields -> (list) ->>>> An array of Boolean values. +>>>> An array of Boolean values. Can contain null values. @@ -840 +846 @@ generatedFields -> (list) ->>>> An array of integers. +>>>> An array of integers. Can contain null values. @@ -846 +852 @@ generatedFields -> (list) ->>>> An array of floating-point numbers. +>>>> An array of floating-point numbers. Can contain null values. @@ -852 +858 @@ generatedFields -> (list) ->>>> An array of strings. +>>>> An array of strings. Can contain null values. @@ -858 +864 @@ generatedFields -> (list) ->>>> An array of arrays. +>>>> An array of arrays. Can contain null values. @@ -870 +876 @@ generatedFields -> (list) ->>>>>> An array of Boolean values. +>>>>>> An array of Boolean values. Can contain null values. @@ -876 +882 @@ generatedFields -> (list) ->>>>>> An array of integers. +>>>>>> An array of integers. Can contain null values. @@ -882 +888 @@ generatedFields -> (list) ->>>>>> An array of floating-point numbers. +>>>>>> An array of floating-point numbers. Can contain null values. @@ -888 +894 @@ generatedFields -> (list) ->>>>>> An array of strings. +>>>>>> An array of strings. Can contain null values. @@ -894 +900 @@ generatedFields -> (list) ->>>>>> An array of arrays. +>>>>>> An array of arrays. Can contain null values. @@ -914 +920 @@ formattedRecords -> (string) - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) »