AWS cli documentation change

Service: cli · 2026-06-19 · Documentation low

File: cli/latest/reference/synthetics/update-canary.md

Summary

Added new options --add-replica-locations and --remove-replica-locations for managing canary replicas, including VPC configuration with security groups and IP settings. Updated CLI version reference.

Security assessment

Documents new VPC security features including SecurityGroupIds and Ipv6AllowedForDualStack, but no evidence of addressing a specific vulnerability. Enhances security posture documentation.

Diff

diff --git a/cli/latest/reference/synthetics/update-canary.md b/cli/latest/reference/synthetics/update-canary.md
index 30cc4f8cd..d48ac979e 100644
--- a//cli/latest/reference/synthetics/update-canary.md
+++ b//cli/latest/reference/synthetics/update-canary.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -96,0 +97,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/synthe
+    [--add-replica-locations <value>]
+    [--remove-replica-locations <value>]
@@ -204 +206 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/synthe
->> Multi-checks monitors HTTP/DNS/SSL/TCP endpoints with built-in authentication schemes (Basic, API Key, OAuth, SigV4) and assertion capabilities. When you specify `BlueprintTypes` , the Handler field cannot be specified since the blueprint provides a pre-defined entry point.
+>> Multi-checks monitors HTTP/DNS/SSL/TCP endpoints with built-in authentication schemes (Basic, API Key, OAuth, SigV4) and assertion capabilities. When you specify `BlueprintTypes` , the `Handler` field cannot be specified since the blueprint provides a pre-defined entry point.
@@ -873,0 +876,109 @@ JSON Syntax:
+`--add-replica-locations` (list)
+
+> A list of locations (Amazon Web Services Regions) to add as replicas for the canary. Each location specifies a Region and optional VPC configuration for the replica. You can add up to 50 replica locations.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `50`
+> 
+
+> 
+> (structure)
+>
+>> A structure that specifies a replica location for a canary, including the Region and optional VPC configuration.
+>> 
+>> Location -> (string) [required]
+>>
+>>> The Amazon Web Services Region where the canary replica should be created, for example `us-east-1` .
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `20`
+>>>   * pattern: `^[a-z]{2}-((iso[a-z]{0,1}-)|(gov-)){0,1}[a-z]+-{0,1}[0-9]{0,1}$`
+>>> 
+
+>> 
+>> VpcConfig -> (structure)
+>>
+>>> The VPC configuration to use for the canary replica in this location. If not specified, the replica runs without VPC connectivity.
+>>> 
+>>> SubnetIds -> (list)
+>>>
+>>>> The IDs of the subnets where this canary is to run.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `16`
+>>>> 
+
+>>>> 
+>>>> (string)
+>>> 
+>>> SecurityGroupIds -> (list)
+>>>
+>>>> The IDs of the security groups for this canary.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `5`
+>>>> 
+
+>>>> 
+>>>> (string)
+>>> 
+>>> Ipv6AllowedForDualStack -> (boolean)
+>>>
+>>>> Set this to `true` to allow outbound IPv6 traffic on VPC canaries that are connected to dual-stack subnets. The default is `false`
+
+Shorthand Syntax:
+    
+    
+    Location=string,VpcConfig={SubnetIds=[string,string],SecurityGroupIds=[string,string],Ipv6AllowedForDualStack=boolean} ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "Location": "string",
+        "VpcConfig": {
+          "SubnetIds": ["string", ...],
+          "SecurityGroupIds": ["string", ...],
+          "Ipv6AllowedForDualStack": true|false
+        }
+      }
+      ...
+    ]
+    
+
+`--remove-replica-locations` (list)
+
+> A list of locations (Amazon Web Services Regions) to remove as replicas for the canary. You must specify at least one location to remove. All replicas can be removed in a single API call and you cannot remove the primary location.
+> 
+> Constraints:
+> 
+>   * min: `1`
+> 
+
+> 
+> (string)
+>
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `20`
+>>   * pattern: `^[a-z]{2}-((iso[a-z]{0,1}-)|(gov-)){0,1}[a-z]+-{0,1}[0-9]{0,1}$`
+>> 
+
+
+Syntax:
+    
+    
+    "string" "string" ...
+    
+
@@ -1021 +1132 @@ None
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »