AWS cli medium security documentation change
Summary
Added documentation for three new execution block types: AuroraServerlessScaling, AuroraProvisionedScaling, and NeptuneGlobalDatabase. This includes their configuration structures, parameters, and constraints.
Security assessment
The change introduces security-related parameters including 'crossAccountRole' with strict IAM ARN patterns, 'externalId' described as a secret key, and detailed access control constraints. These are security features for cross-account access management.
Diff
diff --git a/cli/latest/reference/arc-region-switch/create-plan.md b/cli/latest/reference/arc-region-switch/create-plan.md index 10d60c383..96d5b70e0 100644 --- a//cli/latest/reference/arc-region-switch/create-plan.md +++ b//cli/latest/reference/arc-region-switch/create-plan.md @@ -15 +15 @@ - * [AWS CLI 2.34.57 Command Reference](../../index.html) » + * [AWS CLI 2.34.61 Command Reference](../../index.html) » @@ -140 +140 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/arc-re ->>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. +>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`, `auroraServerlessScalingConfig`, `auroraProvisionedScalingConfig`, `neptuneGlobalDatabaseConfig`. @@ -479 +479 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/arc-re ->>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. +>>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`, `auroraServerlessScalingConfig`, `auroraProvisionedScalingConfig`, `neptuneGlobalDatabaseConfig`. @@ -1396,0 +1397,257 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/arc-re +>>>>>>>>> +>>>>>>>>> auroraServerlessScalingConfig -> (structure) +>>>>>>>>> +>>>>>>>>>> An Aurora Serverless scaling execution block. +>>>>>>>>>> +>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>> +>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>> +>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> externalId -> (string) +>>>>>>>>>> +>>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>>> +>>>>>>>>>> globalClusterIdentifier -> (string) [required] +>>>>>>>>>> +>>>>>>>>>>> The global cluster identifier for a global database. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `255` +>>>>>>>>>>> * pattern: `[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> regionDatabaseClusterArns -> (map) [required] +>>>>>>>>>> +>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database cluster ARN for scaling. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `2` +>>>>>>>>>>> * max: `2` +>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> key -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> value -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:cluster:[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> targetPercent -> (integer) +>>>>>>>>>> +>>>>>>>>>>> The target capacity percentage for Aurora Serverless scaling. +>>>>>>>>> +>>>>>>>>> auroraProvisionedScalingConfig -> (structure) +>>>>>>>>> +>>>>>>>>>> An Aurora provisioned cluster scaling execution block. +>>>>>>>>>> +>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>> +>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>> +>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> externalId -> (string) +>>>>>>>>>> +>>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>>> +>>>>>>>>>> globalClusterIdentifier -> (string) [required] +>>>>>>>>>> +>>>>>>>>>>> The global cluster identifier for a global database. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `255` +>>>>>>>>>>> * pattern: `[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> regionDatabaseClusterArns -> (map) [required] +>>>>>>>>>> +>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database cluster ARN for scaling. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `2` +>>>>>>>>>>> * max: `2` +>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> key -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> value -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:cluster:[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> instanceArns -> (map) [required] +>>>>>>>>>> +>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database instance ARN for scaling. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> * max: `2` +>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> key -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> value -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:db:[A-Za-z][0-9A-Za-z-]{0,62}` +>>>>>>>>>>>> + +>>>>>>>>> +>>>>>>>>> neptuneGlobalDatabaseConfig -> (structure) +>>>>>>>>> +>>>>>>>>>> A Neptune global database execution block. +>>>>>>>>>> +>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>> +>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>> +>>>>>>>>>>> * min: `1` +>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>> +>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> Constraints: +>>>>>>>>>>>