AWS cli high security documentation change

Service: cli · 2026-07-01 · Security-related high

File: cli/latest/reference/cleanrooms/create-configured-table-analysis-rule.md

Summary

Added 'allowedResultReceivers' and 'allowedAdditionalAnalyses' fields to configure query result destinations and permitted analyses

Security assessment

Added security controls to restrict query results to specific AWS accounts (allowedResultReceivers) and limit additional analyses (allowedAdditionalAnalyses). These enforce data access boundaries and prevent unauthorized result exposure.

Diff

diff --git a/cli/latest/reference/cleanrooms/create-configured-table-analysis-rule.md b/cli/latest/reference/cleanrooms/create-configured-table-analysis-rule.md
index 0ed7ab3c9..3c492beb7 100644
--- a//cli/latest/reference/cleanrooms/create-configured-table-analysis-rule.md
+++ b//cli/latest/reference/cleanrooms/create-configured-table-analysis-rule.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »
@@ -510,0 +511,35 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/cleanr
+>>> 
+>>> allowedResultReceivers -> (list)
+>>>
+>>>> The list of Amazon Web Services account IDs that are allowed to receive results from queries run on the configured table.
+>>>> 
+>>>> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `12`
+>>>>>   * max: `12`
+>>>>>   * pattern: `\d+`
+>>>>> 
+
+>>> 
+>>> allowedAdditionalAnalyses -> (list)
+>>>
+>>>> The list of allowed additional analyses for the custom analysis rule.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `25`
+>>>> 
+
+>>>> 
+>>>> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `256`
+>>>>>   * pattern: `arn:aws:cleanrooms:[\w]{2}-[\w]{4,9}-[\d]:([\d]{12}|\*):membership\/[\*\d\w-]+\/configuredaudiencemodelassociation\/[\*\d\w-]+$|^arn:aws[-a-z]*:cleanrooms-ml:[-a-z0-9]+:([0-9]{12}|\*):membership\/[\*\d\w-]+\/configured-model-algorithm-association\/([-a-zA-Z0-9_\/.]+|\*)`
+>>>>> 
+
@@ -558 +593,3 @@ JSON Syntax:
-          }
+          },
+          "allowedResultReceivers": ["string", ...],
+          "allowedAdditionalAnalyses": ["string", ...]
@@ -1096,0 +1134,35 @@ analysisRule -> (structure)
+>>>> 
+>>>> allowedResultReceivers -> (list)
+>>>>
+>>>>> The list of Amazon Web Services account IDs that are allowed to receive results from queries run on the configured table.
+>>>>> 
+>>>>> (string)
+>>>>>
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `12`
+>>>>>>   * max: `12`
+>>>>>>   * pattern: `\d+`
+>>>>>> 
+
+>>>> 
+>>>> allowedAdditionalAnalyses -> (list)
+>>>>
+>>>>> The list of allowed additional analyses for the custom analysis rule.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `25`
+>>>>> 
+
+>>>>> 
+>>>>> (string)
+>>>>>
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `0`
+>>>>>>   * max: `256`
+>>>>>>   * pattern: `arn:aws:cleanrooms:[\w]{2}-[\w]{4,9}-[\d]:([\d]{12}|\*):membership\/[\*\d\w-]+\/configuredaudiencemodelassociation\/[\*\d\w-]+$|^arn:aws[-a-z]*:cleanrooms-ml:[-a-z0-9]+:([0-9]{12}|\*):membership\/[\*\d\w-]+\/configured-model-algorithm-association\/([-a-zA-Z0-9_\/.]+|\*)`
+>>>>>> 
+
@@ -1128 +1200 @@ analysisRule -> (structure)
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »