AWS cli documentation change
Summary
Updated service-specific credentials documentation with generalized service references and added IAM User Guide links
Security assessment
Added documentation links to IAM security features (credentials management). Generalizes credential expiration to all services supporting long-term API keys. No evidence of security vulnerability being addressed.
Diff
diff --git a/cli/latest/reference/iam/create-service-specific-credential.md b/cli/latest/reference/iam/create-service-specific-credential.md index ad2cc87f7..500982539 100644 --- a//cli/latest/reference/iam/create-service-specific-credential.md +++ b//cli/latest/reference/iam/create-service-specific-credential.md @@ -15 +15 @@ - * [AWS CLI 2.35.3 Command Reference](../../index.html) » + * [AWS CLI 2.35.5 Command Reference](../../index.html) » @@ -64,2 +63,0 @@ You can have a maximum of two sets of service-specific credentials for each supp -You can create service-specific credentials for Amazon Bedrock, Amazon CloudWatch Logs, CodeCommit and Amazon Keyspaces (for Apache Cassandra). - @@ -68 +66,7 @@ You can reset the password to a new service-generated value by calling [ResetSer -For more information about service-specific credentials, see [Service-specific credentials for IAM users](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_bedrock.html) in the _IAM User Guide_ . +For more information about using service-specific credentials to authenticate to an Amazon Web Services service, refer to the following docs: + + * For service-specific credentials with CodeCommit, refer to [IAM credentials for CodeCommit: Git credentials, SSH keys, and Amazon Web Services access keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_ssh-keys.html) in the _IAM User Guide_ . + * For service-specific credentials with Amazon Keyspaces (for Apache Cassandra), refer to [Use IAM with Amazon Keyspaces (for Apache Cassandra)](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_keyspaces.html) in the _IAM User Guide_ . + * For services that support long-term API keys, refer to [API keys for Amazon Web Services services](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_api_keys_for_aws_services.html) in the _IAM User Guide_ . + + @@ -124 +128,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/iam-20 -> The number of days until the service specific credential expires. This field is only valid for Bedrock and CloudWatch Logs API keys and must be a positive integer. When not specified, the credential will not expire. +> The number of days until the service specific credential expires. This field is only valid for services that support long-term API keys and must be a positive integer. When not specified, the credential will not expire. +> +> To see which services support long-term API keys, refer to [API keys for Amazon Web Services services](https://docs.aws.amazon.com/IAM/latest/UserGuide/id_credentials_api_keys_for_aws_services.html) in the _IAM User Guide_ . @@ -380 +386 @@ ServiceSpecificCredential -> (structure) - * [AWS CLI 2.35.3 Command Reference](../../index.html) » + * [AWS CLI 2.35.5 Command Reference](../../index.html) »