AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-19 · Documentation low

File: cli/latest/reference/lambda/add-permission.md

Summary

Updated AWS CLI version reference from 2.35.5 to 2.35.8. Modified pattern validation for function names and source ARNs to include new 'eusc-' region prefix. Added min/max length constraints for StatementId, Principal, and SourceArn parameters. Reordered and maintained documentation for function URL authentication parameters.

Security assessment

The changes add explicit documentation about function URL authentication controls (--function-url-auth-type) which is a security feature. However, there is no evidence of a specific security vulnerability being addressed - the updates appear to be routine documentation improvements and parameter validation enhancements.

Diff

diff --git a/cli/latest/reference/lambda/add-permission.md b/cli/latest/reference/lambda/add-permission.md
index bd1f8f414..dce08dce9 100644
--- a//cli/latest/reference/lambda/add-permission.md
+++ b//cli/latest/reference/lambda/add-permission.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -76,0 +77,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
+    [--function-url-auth-type <value>]
+    [--invoked-via-function-url | --no-invoked-via-function-url]
@@ -82,2 +83,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
-    [--function-url-auth-type <value>]
-    [--invoked-via-function-url | --no-invoked-via-function-url]
@@ -127 +127 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
->   * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`
+>   * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?`
@@ -148,0 +149,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
+>   * min: `0`
+>   * max: `10000`
@@ -158,0 +161,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
+>   * min: `0`
+>   * max: `2048`
@@ -171 +175,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
->   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
+>   * min: `0`
+>   * max: `10000`
+>   * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)`
@@ -174,0 +181,15 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
+`--function-url-auth-type` (string)
+
+> The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .
+> 
+> Possible values:
+> 
+>   * `NONE`
+>   * `AWS_IAM`
+> 
+
+
+`--invoked-via-function-url` | `--no-invoked-via-function-url` (boolean)
+
+> Indicates whether the permission applies when the function is invoked through a function URL.
+
@@ -227,15 +247,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
-`--function-url-auth-type` (string)
-
-> The type of authentication that your function URL uses. Set to `AWS_IAM` if you want to restrict access to authenticated users only. Set to `NONE` if you want to bypass IAM authentication to create a public endpoint. For more information, see [Control access to Lambda function URLs](https://docs.aws.amazon.com/lambda/latest/dg/urls-auth.html) .
-> 
-> Possible values:
-> 
->   * `NONE`
->   * `AWS_IAM`
-> 
-
-
-`--invoked-via-function-url` | `--no-invoked-via-function-url` (boolean)
-
-> Indicates whether the permission applies when the function is invoked through a function URL.
-
@@ -408 +414 @@ Statement -> (string)
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »