AWS cli medium security documentation change

Service: cli · 2026-06-07 · Security-related medium

File: cli/latest/reference/emr-serverless/update-application.md

Summary

Added 'applicationLevelDigestResolution' parameter to control when custom image digests are resolved (application vs workload level)

Security assessment

Introduces explicit control over image digest resolution timing, preventing potential workload-level image tampering by enforcing application-level digest resolution. This addresses container security risks by ensuring consistent image validation.

Diff

diff --git a/cli/latest/reference/emr-serverless/update-application.md b/cli/latest/reference/emr-serverless/update-application.md
index 5d2f4d803..a806eaa8d 100644
--- a//cli/latest/reference/emr-serverless/update-application.md
+++ b//cli/latest/reference/emr-serverless/update-application.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.61 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.63 Command Reference](../../index.html) »
@@ -441,0 +442,4 @@ JSON Syntax:
+> 
+> applicationLevelDigestResolution -> (boolean)
+>
+>> Boolean value indicating if the digest resolution is application level or workload level. If true, a custom image URI is resolved at application start time and all workloads submitted will use that image digest. If false, the custom image URI is resolved at the workload submission time.
@@ -446 +450 @@ Shorthand Syntax:
-    imageUri=string
+    imageUri=string,applicationLevelDigestResolution=boolean
@@ -453 +457,2 @@ JSON Syntax:
-      "imageUri": "string"
+      "imageUri": "string",
+      "applicationLevelDigestResolution": true|false
@@ -491,0 +497,4 @@ JSON Syntax:
+>>> 
+>>> applicationLevelDigestResolution -> (boolean)
+>>>
+>>>> Boolean value indicating if the digest resolution is application level or workload level. If true, a custom image URI is resolved at application start time and all workloads submitted will use that image digest. If false, the custom image URI is resolved at the workload submission time.
@@ -496 +505 @@ Shorthand Syntax:
-    KeyName1={imageConfiguration={imageUri=string}},KeyName2={imageConfiguration={imageUri=string}}
+    KeyName1={imageConfiguration={imageUri=string,applicationLevelDigestResolution=boolean}},KeyName2={imageConfiguration={imageUri=string,applicationLevelDigestResolution=boolean}}
@@ -504 +513,2 @@ JSON Syntax:
-            "imageUri": "string"
+            "imageUri": "string",
+            "applicationLevelDigestResolution": true|false
@@ -1503,0 +1514,4 @@ application -> (structure)
+>> 
+>> applicationLevelDigestResolution -> (boolean)
+>>
+>>> Boolean value indicating if the digest resolution is application level or workload level. If true, a custom image URI is resolved at application start time and all workloads submitted will use that image digest. If false, the custom image URI is resolved at the workload submission time.
@@ -1549,0 +1564,4 @@ application -> (structure)
+>>>> 
+>>>> applicationLevelDigestResolution -> (boolean)
+>>>>
+>>>>> Boolean value indicating if the digest resolution is application level or workload level. If true, a custom image URI is resolved at application start time and all workloads submitted will use that image digest. If false, the custom image URI is resolved at the workload submission time.
@@ -1949 +1967 @@ application -> (structure)
-  * [AWS CLI 2.34.61 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.63 Command Reference](../../index.html) »