AWS cli medium security documentation change

Service: cli · 2026-06-10 · Security-related medium

File: cli/latest/reference/devops-agent/update-private-connection-certificate.md

Summary

Added DNS resolution mode (PUBLIC/IN_VPC) and failure message field with constraints.

Security assessment

The DNS resolution mode (IN_VPC option) enhances network security by controlling DNS resolution scope. Input constraints on failure messages prevent potential information leakage vulnerabilities.

Diff

diff --git a/cli/latest/reference/devops-agent/update-private-connection-certificate.md b/cli/latest/reference/devops-agent/update-private-connection-certificate.md
index a069980c6..4099d2c8f 100644
--- a//cli/latest/reference/devops-agent/update-private-connection-certificate.md
+++ b//cli/latest/reference/devops-agent/update-private-connection-certificate.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.1 Command Reference](../../index.html) »
@@ -318,0 +319,22 @@ certificateExpiryTime -> (timestamp)
+dnsResolution -> (string)
+
+> DNS resolution mode for the Private Connection’s resource gateway.
+> 
+> Possible values:
+> 
+>   * `PUBLIC`
+>   * `IN_VPC`
+> 
+
+
+failureMessage -> (string)
+
+> Message describing the reason for a failed Private Connection update, if applicable.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `1000`
+> 
+
+
@@ -329 +351 @@ certificateExpiryTime -> (timestamp)
-  * [AWS CLI 2.34.63 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.1 Command Reference](../../index.html) »