AWS cli documentation change

Service: cli · 2026-06-19 · Documentation medium

File: cli/latest/reference/securityagent/start-code-review-job.md

Summary

Added new --diff-source parameter for differential scans and updated CLI version reference. The parameter allows scanning only changed lines using unified diff files from S3.

Security assessment

Introduces a security feature enabling efficient differential scanning (security best practice) but doesn't address any specific vulnerability. The change documents a security enhancement feature.

Diff

diff --git a/cli/latest/reference/securityagent/start-code-review-job.md b/cli/latest/reference/securityagent/start-code-review-job.md
index 91e805b8b..8deedc4e1 100644
--- a//cli/latest/reference/securityagent/start-code-review-job.md
+++ b//cli/latest/reference/securityagent/start-code-review-job.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -68,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+    [--diff-source <value>]
@@ -101,0 +103,26 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+`--diff-source` (tagged union structure)
+
+> Source of the diff for a differential scan. When present, the job analyzes only the changed lines instead of performing a full scan.
+> 
+> ### Note
+> 
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3Uri`.
+> 
+> s3Uri -> (string)
+>
+>> S3 URI pointing to a unified diff file. The file must be in standard unified diff format and stored in an S3 bucket connected to your Agent Space.
+
+Shorthand Syntax:
+    
+    
+    s3Uri=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "s3Uri": "string"
+    }
+    
+
@@ -263 +290 @@ agentSpaceId -> (string)
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »