AWS cli documentation change
Summary
Added new filter options (CertificateKeyPairOrigin, AcmeEndpointArn, AcmeAccountId) to the search-certificates command, updated navigation links, and incremented CLI version reference.
Security assessment
The changes introduce new filters for certificate key origins and ACME details, enhancing certificate management capabilities. While these additions relate to security features (certificate lifecycle management), there is no evidence of a specific security vulnerability being addressed. The updates improve operational security by enabling finer-grained certificate filtering but do not patch a disclosed weakness.
Diff
diff --git a/cli/latest/reference/acm/search-certificates.md b/cli/latest/reference/acm/search-certificates.md index 683ad00b2..ffd464a82 100644 --- a//cli/latest/reference/acm/search-certificates.md +++ b//cli/latest/reference/acm/search-certificates.md @@ -13 +13 @@ - * [next](update-certificate-options.html "update-certificate-options") | + * [next](tag-resource.html "tag-resource") | @@ -15 +15 @@ - * [AWS CLI 2.35.11 Command Reference](../../index.html) » + * [AWS CLI 2.35.13 Command Reference](../../index.html) » @@ -23 +23 @@ - * [update-certificate-options →](update-certificate-options.html "next chapter \(use the right arrow\)") + * [tag-resource →](tag-resource.html "next chapter \(use the right arrow\)") @@ -348 +348 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 ->>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`. +>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`, `CertificateKeyPairOrigin`, `AcmeEndpointArn`, `AcmeAccountId`. @@ -430,0 +431,35 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 +>>>>> +>>>>> CertificateKeyPairOrigin -> (string) +>>>>> +>>>>>> Filter by certificate key pair origin. +>>>>>> +>>>>>> Possible values: +>>>>>> +>>>>>> * `AWS_MANAGED` +>>>>>> * `ACME` +>>>>>> * `CUSTOMER_PROVIDED` +>>>>>> + +>>>>> +>>>>> AcmeEndpointArn -> (string) +>>>>> +>>>>>> Filter by ACME endpoint ARN. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `20` +>>>>>> * max: `2048` +>>>>>> * pattern: `arn:[\w+=/,.@-]+:acm:[\w+=/,.@-]*:[0-9]+:[\w+=,.@-]+(/[\w+=,.@-]+)*` +>>>>>> + +>>>>> +>>>>> AcmeAccountId -> (string) +>>>>> +>>>>>> Filter by ACME account identifier. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `36` +>>>>>> * max: `36` +>>>>>> + @@ -672 +707 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 ->>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`. +>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`, `CertificateKeyPairOrigin`, `AcmeEndpointArn`, `AcmeAccountId`. @@ -754,0 +790,35 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 +>>>>> +>>>>> CertificateKeyPairOrigin -> (string) +>>>>> +>>>>>> Filter by certificate key pair origin. +>>>>>> +>>>>>> Possible values: +>>>>>> +>>>>>> * `AWS_MANAGED` +>>>>>> * `ACME` +>>>>>> * `CUSTOMER_PROVIDED` +>>>>>> + +>>>>> +>>>>> AcmeEndpointArn -> (string) +>>>>> +>>>>>> Filter by ACME endpoint ARN. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `20` +>>>>>> * max: `2048` +>>>>>> * pattern: `arn:[\w+=/,.@-]+:acm:[\w+=/,.@-]*:[0-9]+:[\w+=,.@-]+(/[\w+=,.@-]+)*` +>>>>>> + +>>>>> +>>>>> AcmeAccountId -> (string) +>>>>> +>>>>>> Filter by ACME account identifier. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `36` +>>>>>> * max: `36` +>>>>>> + @@ -985 +1055 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 ->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`. +>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`, `CertificateKeyPairOrigin`, `AcmeEndpointArn`, `AcmeAccountId`. @@ -1067,0 +1138,35 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 +>>>> +>>>> CertificateKeyPairOrigin -> (string) +>>>> +>>>>> Filter by certificate key pair origin. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `AWS_MANAGED` +>>>>> * `ACME` +>>>>> * `CUSTOMER_PROVIDED` +>>>>> + +>>>> +>>>> AcmeEndpointArn -> (string) +>>>> +>>>>> Filter by ACME endpoint ARN. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `20` +>>>>> * max: `2048` +>>>>> * pattern: `arn:[\w+=/,.@-]+:acm:[\w+=/,.@-]*:[0-9]+:[\w+=,.@-]+(/[\w+=,.@-]+)*` +>>>>> + +>>>> +>>>> AcmeAccountId -> (string) +>>>> +>>>>> Filter by ACME account identifier. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `36` +>>>>> * max: `36` +>>>>> + @@ -1264 +1369 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`. +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `Status`, `RenewalStatus`, `Type`, `InUse`, `Exported`, `ExportOption`, `ManagedBy`, `ValidationMethod`, `CertificateKeyPairOrigin`, `AcmeEndpointArn`, `AcmeAccountId`. @@ -1346,0 +1452,35 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/acm-20 +>>> +>>> CertificateKeyPairOrigin -> (string) +>>> +>>>> Filter by certificate key pair origin. +>>>> +>>>> Possible values: +>>>> +>>>> * `AWS_MANAGED` +>>>> * `ACME` +>>>> * `CUSTOMER_PROVIDED` +>>>> + +>>> +>>> AcmeEndpointArn -> (string) +>>> +>>>> Filter by ACME endpoint ARN. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `20` +>>>> * max: `2048` +>>>> * pattern: `arn:[\w+=/,.@-]+:acm:[\w+=/,.@-]*:[0-9]+:[\w+=,.@-]+(/[\w+=,.@-]+)*` +>>>> + +>>> +>>> AcmeAccountId -> (string) +>>> +>>>> Filter by ACME account identifier. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `36` +>>>> * max: `36` +>>>> + @@ -1399 +1539,4 @@ JSON Syntax: - "ValidationMethod": "EMAIL"|"DNS"|"HTTP" + "ValidationMethod": "EMAIL"|"DNS"|"HTTP", + "CertificateKeyPairOrigin": "AWS_MANAGED"|"ACME"|"CUSTOMER_PROVIDED", + "AcmeEndpointArn": "string", + "AcmeAccountId": "string" @@ -1452 +1595,4 @@ JSON Syntax: - "ValidationMethod": "EMAIL"|"DNS"|"HTTP" + "ValidationMethod": "EMAIL"|"DNS"|"HTTP", + "CertificateKeyPairOrigin": "AWS_MANAGED"|"ACME"|"CUSTOMER_PROVIDED", + "AcmeEndpointArn": "string", + "AcmeAccountId": "string" @@ -1504 +1650,4 @@ JSON Syntax: - "ValidationMethod": "EMAIL"|"DNS"|"HTTP" + "ValidationMethod": "EMAIL"|"DNS"|"HTTP", + "CertificateKeyPairOrigin": "AWS_MANAGED"|"ACME"|"CUSTOMER_PROVIDED", + "AcmeEndpointArn": "string", + "AcmeAccountId": "string" @@ -1544 +1693,4 @@ JSON Syntax: - "ValidationMethod": "EMAIL"|"DNS"|"HTTP" + "ValidationMethod": "EMAIL"|"DNS"|"HTTP", + "CertificateKeyPairOrigin": "AWS_MANAGED"|"ACME"|"CUSTOMER_PROVIDED", + "AcmeEndpointArn": "string", + "AcmeAccountId": "string" @@ -1573,0 +1726,3 @@ JSON Syntax: +> * `ACME_ENDPOINT_ARN` +> * `ACME_ACCOUNT_ID` +> * `CERTIFICATE_KEY_PAIR_ORIGIN` @@ -2242,0 +2398,35 @@ Results -> (list) +>>>> +>>>> CertificateKeyPairOrigin -> (string)