AWS Security ChangesHomeSearch

AWS prometheus documentation change

Service: prometheus · 2026-06-19 · Documentation low

File: prometheus/latest/userguide/AMP-APIReference-ListRules.md

Summary

Added documentation for URL query parameters in ListRules API including filtering/pagination options

Security assessment

The change documents standard API filtering parameters without any security context. Parameters like 'exclude_alerts' are operational features, not security controls. No evidence of vulnerability remediation or security feature introduction.

Diff

diff --git a/prometheus/latest/userguide/AMP-APIReference-ListRules.md b/prometheus/latest/userguide/AMP-APIReference-ListRules.md
index 0812ea8a6..c85fe8248 100644
--- a//prometheus/latest/userguide/AMP-APIReference-ListRules.md
+++ b//prometheus/latest/userguide/AMP-APIReference-ListRules.md
@@ -20,0 +21,19 @@ Valid URIs:
+URL query parameters:
+    
+
+`type=<alert|record>` Return only the alerting rules (for example, `type=alert`) or the recording rules (for example, `type=record`). When the parameter is absent or empty, no filtering is done. Optional
+
+`rule_name[]=<string>` Filters rules using the provided names. When multiple filters are provided, the rule name must satisfy at least one of the given filters. Optional
+
+`rule_group[]=<string>` Filters rule groups using the provided names. When multiple filters are provided, the rule group name must satisfy at least one of the given filters. Optional
+
+`file[]=<string>` Filters rule group namespaces using the provided names. When multiple filters are provided, the rule group namespace name must satisfy at least one of the given filters. Optional
+
+`exclude_alerts=<true|false>` Filters rules without any active alerts when set to `true`. Optional
+
+`match[]=<series_selector>` Only return rules that have configured labels that satisfy the label selectors. If the parameter is repeated, rules that match any of the sets of label selectors are returned. Note that matching is on the labels in the definition of each rule, not on the values after template expansion (for alerting rules). Optional
+
+`group_limit=<number>` Maximum number of rule groups returned in a single response. In subsequent requests to paginate, use the `groupNextToken` property from this response to set the `group_next_token` parameter. Optional
+
+`group_next_token=<string>` The pagination token returned in the previous request when the `group_limit` property was set. This token is used to iteratively paginate over the remaining rule groups. Optional
+