AWS cli medium security documentation change
Summary
Updated AWS CLI version reference from 2.35.5 to 2.35.8. Enhanced documentation for event source mappings by adding new configuration sections (FilterCriteriaError, KMSKeyArn, MetricsConfig, LoggingConfig, ScalingConfig), updated pattern constraints to support new region formats (eusc-), added min/max constraints for various parameters, and improved UUID validation patterns.
Security assessment
Added documentation for KMSKeyArn which handles encryption of filter criteria, and FilterCriteriaError which details encryption-related errors. These additions demonstrate explicit security features for protecting sensitive data. The pattern expansion doesn't indicate a security fix but enables new regions.
Diff
diff --git a/cli/latest/reference/lambda/list-event-source-mappings.md b/cli/latest/reference/lambda/list-event-source-mappings.md index 07158281d..d436b9989 100644 --- a//cli/latest/reference/lambda/list-event-source-mappings.md +++ b//cli/latest/reference/lambda/list-event-source-mappings.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -115 +115,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda -> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +> * min: `0` +> * max: `10000` +> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -138 +140 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda -> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` +> * pattern: `(arn:(aws[a-zA-Z-]*)?:lambda:)?((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:)?(\d{12}:)?(function:)?([a-zA-Z0-9-_\.]+)(:(\$LATEST(\.PUBLISHED)?|[a-zA-Z0-9-_]+))?` @@ -158,0 +161,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda +> +> Constraints: +> +> * min: `1` +> * max: `10000` +> + @@ -324,0 +334,7 @@ EventSourceMappings -> (list) +>>> +>>> Constraints: +>>> +>>> * min: `36` +>>> * max: `36` +>>> + @@ -389 +405,3 @@ EventSourceMappings -> (list) ->>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -415 +433 @@ EventSourceMappings -> (list) ->>>>>> * pattern: `.*` +>>>>>> * pattern: `[\s\S]*` @@ -417,0 +436,104 @@ EventSourceMappings -> (list) +>> +>> FilterCriteriaError -> (structure) +>> +>>> An object that contains details about an error related to filter criteria encryption. +>>> +>>> ErrorCode -> (string) +>>> +>>>> The KMS exception that resulted from filter criteria encryption or decryption. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `10` +>>>> * max: `50` +>>>> * pattern: `[A-Za-z]+Exception` +>>>> + +>>> +>>> Message -> (string) +>>> +>>>> The error message. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `10` +>>>> * max: `2048` +>>>> * pattern: `.*` +>>>> + +>> +>> KMSKeyArn -> (string) +>> +>>> The ARN of the Key Management Service (KMS) customer managed key that Lambda uses to encrypt your function’s [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics) . +>>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `10000` +>>> * pattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()` +>>> + +>> +>> MetricsConfig -> (structure) +>> +>>> The metrics configuration for your event source. For more information, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics) . +>>> +>>> Metrics -> (list) +>>> +>>>> The metrics you want your event source mapping to produce, including `EventCount` , `ErrorCount` , `KafkaMetrics` . +>>>> +>>>> * `EventCount` to receive metrics related to the number of events processed by your event source mapping. +>>>> * `ErrorCount` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the number of errors in your event source mapping processing. +>>>> * `KafkaMetrics` (Amazon MSK and self-managed Apache Kafka) to receive metrics related to the Kafka consumers from your event source mapping. +>>>> + +>>>> +>>>> For more information about these metrics, see [Event source mapping metrics](https://docs.aws.amazon.com/lambda/latest/dg/monitoring-metrics-types.html#event-source-mapping-metrics) . +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `3` +>>>> + +>>>> +>>>> (string) +>>>> +>>>>> Possible values: +>>>>> +>>>>> * `EventCount` +>>>>> * `ErrorCount` +>>>>> * `KafkaMetrics` +>>>>> + +>> +>> LoggingConfig -> (structure) +>> +>>> (Amazon MSK, and self-managed Apache Kafka only) The logging configuration for your event source. For more information, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html) . +>>> +>>> SystemLogLevel -> (string) +>>> +>>>> The log level you want your event source mapping to use. Lambda event poller only sends system logs at the selected level of detail and lower, where `DEBUG` is the highest level and `WARN` is the lowest. For more information about these metrics, see [Event source mapping logging](https://docs.aws.amazon.com/lambda/latest/dg/esm-logging.html) . +>>>> +>>>> Possible values: +>>>> +>>>> * `DEBUG` +>>>> * `INFO` +>>>> * `WARN` +>>>> + +>> +>> ScalingConfig -> (structure) +>> +>>> (Amazon SQS only) The scaling configuration for the event source. For more information, see [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency) . +>>> +>>> MaximumConcurrency -> (integer) +>>> +>>>> Limits the number of concurrent instances that the Amazon SQS event source can invoke. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `2` +>>>> * max: `1000` +>>>> + @@ -427 +549 @@ EventSourceMappings -> (list) ->>> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` +>>> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:(eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1}:\d{12}:function:[a-zA-Z0-9-_]+(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -467 +589 @@ EventSourceMappings -> (list) ->>>>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>>>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -491 +613 @@ EventSourceMappings -> (list) ->>>>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>>>> * pattern: `$|kafka://([^.]([a-zA-Z0-9\-_.]{0,248}))|arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -544 +666 @@ EventSourceMappings -> (list) ->>> * max: `22` +>>> * max: `23` @@ -778 +900,3 @@ EventSourceMappings -> (list) ->>>>>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>>>>>> * min: `0` +>>>>>>> * max: `10000` +>>>>>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -884 +1008,3 @@ EventSourceMappings -> (list) ->>>>>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:([a-z]{2}(-gov)?-[a-z]+-\d{1})?:(\d{12})?:(.*)` +>>>>>>> * min: `0` +>>>>>>> * max: `10000` +>>>>>>> * pattern: `arn:(aws[a-zA-Z0-9-]*):([a-zA-Z0-9\-])+:((eusc-)?[a-z]{2}((-gov)|(-iso([a-z]?)))?-[a-z]+-\d{1})?:(\d{12})?:(.*)` @@ -906,15 +1031,0 @@ EventSourceMappings -> (list) ->> ->> ScalingConfig -> (structure) ->> ->>> (Amazon SQS only) The scaling configuration for the event source. For more information, see [Configuring maximum concurrency for Amazon SQS event sources](https://docs.aws.amazon.com/lambda/latest/dg/with-sqs.html#events-sqs-max-concurrency) . ->>> ->>> MaximumConcurrency -> (integer) ->>> ->>>> Limits the number of concurrent instances that the Amazon SQS event source can invoke. ->>>> ->>>> Constraints: ->>>> ->>>> * min: `2` ->>>> * max: `1000` ->>>> - @@ -960,38 +1070,0 @@ EventSourceMappings -> (list) ->> ->> KMSKeyArn -> (string) ->> ->>> The ARN of the Key Management Service (KMS) customer managed key that Lambda uses to encrypt your function’s [filter criteria](https://docs.aws.amazon.com/lambda/latest/dg/invocation-eventfiltering.html#filtering-basics) . ->>> ->>> Constraints: ->>> ->>> * pattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()` ->>> - ->> ->> FilterCriteriaError -> (structure) ->> ->>> An object that contains details about an error related to filter criteria encryption. ->>> ->>> ErrorCode -> (string) ->>>