AWS cli documentation change
Summary
Added new configuration options for Aurora Serverless scaling, Aurora Provisioned scaling, and Neptune Global Database to the region switch plan documentation. Updated CLI version reference.
Security assessment
The change introduces new configuration blocks containing security-sensitive parameters: 1) 'crossAccountRole' with IAM role ARN pattern, 2) 'externalId' described as 'secret key', and 3) ARN patterns for database resources. While these document security features (cross-account access with external ID, resource ARN validation), there's no evidence this addresses a specific vulnerability. The changes appear to be routine feature expansion.
Diff
diff --git a/cli/latest/reference/arc-region-switch/get-plan.md b/cli/latest/reference/arc-region-switch/get-plan.md index 0fc1ac5c3..5fc0069a8 100644 --- a//cli/latest/reference/arc-region-switch/get-plan.md +++ b//cli/latest/reference/arc-region-switch/get-plan.md @@ -15 +15 @@ - * [AWS CLI 2.34.57 Command Reference](../../index.html) » + * [AWS CLI 2.34.61 Command Reference](../../index.html) » @@ -264 +264 @@ plan -> (structure) ->>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. +>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`, `auroraServerlessScalingConfig`, `auroraProvisionedScalingConfig`, `neptuneGlobalDatabaseConfig`. @@ -603 +603 @@ plan -> (structure) ->>>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`. +>>>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `customActionLambdaConfig`, `ec2AsgCapacityIncreaseConfig`, `executionApprovalConfig`, `arcRoutingControlConfig`, `globalAuroraConfig`, `parallelConfig`, `regionSwitchPlanConfig`, `ecsCapacityIncreaseConfig`, `eksResourceScalingConfig`, `route53HealthCheckConfig`, `documentDbConfig`, `rdsPromoteReadReplicaConfig`, `rdsCreateCrossRegionReadReplicaConfig`, `lambdaEventSourceMappingConfig`, `auroraServerlessScalingConfig`, `auroraProvisionedScalingConfig`, `neptuneGlobalDatabaseConfig`. @@ -1520,0 +1521,257 @@ plan -> (structure) +>>>>>>>>>> +>>>>>>>>>> auroraServerlessScalingConfig -> (structure) +>>>>>>>>>> +>>>>>>>>>>> An Aurora Serverless scaling execution block. +>>>>>>>>>>> +>>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> externalId -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> globalClusterIdentifier -> (string) [required] +>>>>>>>>>>> +>>>>>>>>>>>> The global cluster identifier for a global database. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `255` +>>>>>>>>>>>> * pattern: `[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> regionDatabaseClusterArns -> (map) [required] +>>>>>>>>>>> +>>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database cluster ARN for scaling. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `2` +>>>>>>>>>>>> * max: `2` +>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> key -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> value -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:cluster:[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> targetPercent -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The target capacity percentage for Aurora Serverless scaling. +>>>>>>>>>> +>>>>>>>>>> auroraProvisionedScalingConfig -> (structure) +>>>>>>>>>> +>>>>>>>>>>> An Aurora provisioned cluster scaling execution block. +>>>>>>>>>>> +>>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z0-9-]*:iam::[0-9]{12}:role/.+` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> externalId -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The external ID (secret key) for the configuration. +>>>>>>>>>>> +>>>>>>>>>>> globalClusterIdentifier -> (string) [required] +>>>>>>>>>>> +>>>>>>>>>>>> The global cluster identifier for a global database. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `255` +>>>>>>>>>>>> * pattern: `[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> regionDatabaseClusterArns -> (map) [required] +>>>>>>>>>>> +>>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database cluster ARN for scaling. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `2` +>>>>>>>>>>>> * max: `2` +>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> key -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> value -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:cluster:[A-Za-z][0-9A-Za-z-:._]*` +>>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> instanceArns -> (map) [required] +>>>>>>>>>>> +>>>>>>>>>>>> Per-Region configuration that maps each Region to the Aurora database instance ARN for scaling. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> * max: `2` +>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> key -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `[a-z]{2}-[a-z-]+-\d+` +>>>>>>>>>>>>> + +>>>>>>>>>>>> +>>>>>>>>>>>> value -> (string) +>>>>>>>>>>>> +>>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>> +>>>>>>>>>>>>> * pattern: `arn:aws[a-zA-Z-]*:rds:[a-z0-9-]+:\d{12}:db:[A-Za-z][0-9A-Za-z-]{0,62}` +>>>>>>>>>>>>> + +>>>>>>>>>> +>>>>>>>>>> neptuneGlobalDatabaseConfig -> (structure) +>>>>>>>>>> +>>>>>>>>>>> A Neptune global database execution block. +>>>>>>>>>>> +>>>>>>>>>>> timeoutMinutes -> (integer) +>>>>>>>>>>> +>>>>>>>>>>>> The timeout value specified for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>> +>>>>>>>>>>>> * min: `1` +>>>>>>>>>>>> + +>>>>>>>>>>> +>>>>>>>>>>> crossAccountRole -> (string) +>>>>>>>>>>> +>>>>>>>>>>>> The cross account role for the configuration. +>>>>>>>>>>>> +>>>>>>>>>>>> Constraints: +>>>>>>>>>>>>