AWS cli documentation change
Summary
Added documentation for three new configuration types in the region switch plan: Aurora Serverless scaling, Aurora Provisioned scaling, and Neptune global database. Updated AWS CLI version reference.
Security assessment
The changes add security documentation for cross-account access patterns including 'crossAccountRole' and 'externalId' fields, which are security best practices for assuming roles across accounts. However, there is no evidence these changes address a specific security vulnerability or incident.
Diff
diff --git a/cli/latest/reference/arc-region-switch/get-plan-in-region.md b/cli/latest/reference/arc-region-switch/get-plan-in-region.md index 48a675c23..0446bb596 100644 --- a//cli/latest/reference/arc-region-switch/get-plan-in-region.md +++ b//cli/latest/reference/arc-region-switch/get-plan-in-region.md @@ -15 +15 @@ - * [AWS CLI 2.34.57 Command Reference](../../index.html) » + * [AWS CLI 2.34.61 Command Reference](../../index.html) » @@ -264 +264 @@ plan -> (structure) ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`, `auroraServerlessScalingConfig`, `auroraProvisionedScalingConfig`, `neptuneGlobalDatabaseConfig`. @@ -603 +603 @@ plan -> (structure) ->>>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. +>>>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`, `auroraServerlessScalingConfig`, `auroraProvisionedScalingConfig`, `neptuneGlobalDatabaseConfig`. @@ -1520,0 +1521,257 @@ plan -> (structure) +>>>>>>>>>> +>>>>>>>>>> auroraServerlessScalingConfig -> (structure) +>>>>>>>>>> +>>>>>>>>>>> An Aurora Serverless scaling execution block. +>>>>>>>>>>> +>>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> externalId -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> globalClusterIdentifier -> (string) [required] +>>>>>>>>>>> +>>>>>>>>>>>> The global cluster identifier for a global database. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `255` +>>>>>>>>>>>> * pattern: `[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> regionDatabaseClusterArns -> (map) [required] +>>>>>>>>>>> +>>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database cluster ARN for scaling. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `2` +>>>>>>>>>>>> * max: `2` +>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> key -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> value -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:cluster:[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> targetPercent -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The target capacity percentage for Aurora Serverless scaling. +>>>>>>>>>> +>>>>>>>>>> auroraProvisionedScalingConfig -> (structure) +>>>>>>>>>> +>>>>>>>>>>> An Aurora provisioned cluster scaling execution block. +>>>>>>>>>>> +>>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> externalId -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> globalClusterIdentifier -> (string) [required] +>>>>>>>>>>> +>>>>>>>>>>>> The global cluster identifier for a global database. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `255` +>>>>>>>>>>>> * pattern: `[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> regionDatabaseClusterArns -> (map) [required] +>>>>>>>>>>> +>>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database cluster ARN for scaling. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `2` +>>>>>>>>>>>> * max: `2` +>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> key -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> value -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:cluster:[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> instanceArns -> (map) [required] +>>>>>>>>>>> +>>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database instance ARN for scaling. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `2` +>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> key -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> value -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:db:[A-Za-z][0-9A-Za-z-]{0,62}` +>>>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> neptuneGlobalDatabaseConfig -> (structure) +>>>>>>>>>> +>>>>>>>>>>> A Neptune global database execution block. +>>>>>>>>>>> +>>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>