AWS cli documentation change
Summary
Added Snowflake connection properties to the Tagged Union structure and documented Snowflake-specific configuration including role requirements, identity mapping, lineage sync settings, and status tracking
Security assessment
The change adds documentation for Snowflake connection security features including role-based access control (snowflakeRole with pattern constraints) and identity mapping configuration (usernameAttribute). These document security best practices but don't address a specific vulnerability.
Diff
diff --git a/cli/latest/reference/datazone/list-connections.md b/cli/latest/reference/datazone/list-connections.md index 00991c2bc..ef7bc2731 100644 --- a//cli/latest/reference/datazone/list-connections.md +++ b//cli/latest/reference/datazone/list-connections.md @@ -15 +15 @@ - * [AWS CLI 2.35.11 Command Reference](../../index.html) » + * [AWS CLI 2.35.13 Command Reference](../../index.html) » @@ -1048 +1048 @@ items -> (list) ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`, `vpcProperties`. +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `hyperPodProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `sparkGlueProperties`, `s3Properties`, `snowflakeProperties`, `amazonQProperties`, `mlflowProperties`, `workflowsMwaaProperties`, `workflowsServerlessProperties`, `lakehouseProperties`, `vpcProperties`. @@ -1489,0 +1490,146 @@ items -> (list) +>>> snowflakeProperties -> (structure) +>>> +>>>> The Snowflake-specific connection properties for an existing connection. +>>>> +>>>> snowflakeRole -> (string) [required] +>>>> +>>>>> The Snowflake role used to access Snowflake resources. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `255` +>>>>> * pattern: `[a-zA-Z0-9_$]+` +>>>>> + +>>>> +>>>> identityMapping -> (structure) [required] +>>>> +>>>>> The identity mapping configuration for the Snowflake connection. +>>>>> +>>>>> usernameAttribute -> (string) [required] +>>>>> +>>>>>> The username attribute used for the identity mapping. +>>>>> +>>>>> prefix -> (string) +>>>>> +>>>>>> The prefix used for the identity mapping. +>>>> +>>>> lineageSync -> (structure) [required] +>>>> +>>>>> The lineage sync configuration for the Snowflake connection. +>>>>> +>>>>> lineageJobId -> (string) +>>>>> +>>>>>> The ID of the lineage sync job. +>>>>> +>>>>> timezone -> (string) +>>>>> +>>>>>> The timezone of the lineage sync schedule. +>>>>>> +>>>>>> Possible values: +>>>>>> +>>>>>> * `UTC` +>>>>>> * `AFRICA_JOHANNESBURG` +>>>>>> * `AMERICA_MONTREAL` +>>>>>> * `AMERICA_SAO_PAULO` +>>>>>> * `ASIA_BAHRAIN` +>>>>>> * `ASIA_BANGKOK` +>>>>>> * `ASIA_CALCUTTA` +>>>>>> * `ASIA_DUBAI` +>>>>>> * `ASIA_HONG_KONG` +>>>>>> * `ASIA_JAKARTA` +>>>>>> * `ASIA_KUALA_LUMPUR` +>>>>>> * `ASIA_SEOUL` +>>>>>> * `ASIA_SHANGHAI` +>>>>>> * `ASIA_SINGAPORE` +>>>>>> * `ASIA_TAIPEI` +>>>>>> * `ASIA_TOKYO` +>>>>>> * `AUSTRALIA_MELBOURNE` +>>>>>> * `AUSTRALIA_SYDNEY` +>>>>>> * `CANADA_CENTRAL` +>>>>>> * `CET` +>>>>>> * `CST6CDT` +>>>>>> * `ETC_GMT` +>>>>>> * `ETC_GMT0` +>>>>>> * `ETC_GMT_ADD_0` +>>>>>> * `ETC_GMT_ADD_1` +>>>>>> * `ETC_GMT_ADD_10` +>>>>>> * `ETC_GMT_ADD_11` +>>>>>> * `ETC_GMT_ADD_12` +>>>>>> * `ETC_GMT_ADD_2` +>>>>>> * `ETC_GMT_ADD_3` +>>>>>> * `ETC_GMT_ADD_4` +>>>>>> * `ETC_GMT_ADD_5` +>>>>>> * `ETC_GMT_ADD_6` +>>>>>> * `ETC_GMT_ADD_7` +>>>>>> * `ETC_GMT_ADD_8` +>>>>>> * `ETC_GMT_ADD_9` +>>>>>> * `ETC_GMT_NEG_0` +>>>>>> * `ETC_GMT_NEG_1` +>>>>>> * `ETC_GMT_NEG_10` +>>>>>> * `ETC_GMT_NEG_11` +>>>>>> * `ETC_GMT_NEG_12` +>>>>>> * `ETC_GMT_NEG_13` +>>>>>> * `ETC_GMT_NEG_14` +>>>>>> * `ETC_GMT_NEG_2` +>>>>>> * `ETC_GMT_NEG_3` +>>>>>> * `ETC_GMT_NEG_4` +>>>>>> * `ETC_GMT_NEG_5` +>>>>>> * `ETC_GMT_NEG_6` +>>>>>> * `ETC_GMT_NEG_7` +>>>>>> * `ETC_GMT_NEG_8` +>>>>>> * `ETC_GMT_NEG_9` +>>>>>> * `EUROPE_DUBLIN` +>>>>>> * `EUROPE_LONDON` +>>>>>> * `EUROPE_PARIS` +>>>>>> * `EUROPE_STOCKHOLM` +>>>>>> * `EUROPE_ZURICH` +>>>>>> * `ISRAEL` +>>>>>> * `MEXICO_GENERAL` +>>>>>> * `MST7MDT` +>>>>>> * `PACIFIC_AUCKLAND` +>>>>>> * `US_CENTRAL` +>>>>>> * `US_EASTERN` +>>>>>> * `US_MOUNTAIN` +>>>>>> * `US_PACIFIC` +>>>>>> + +>>>>> +>>>>> enabled -> (boolean) +>>>>> +>>>>>> Specifies whether lineage sync is enabled. +>>>>> +>>>>> schedule -> (string) +>>>>> +>>>>>> The schedule of the lineage sync. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `1` +>>>>>> * max: `256` +>>>>>> * pattern: `cron\((\b[0-5]?[0-9]\b) ([*]|\b2[0-3]\b|\b[0-1]?[0-9]\b) ([-?*,/\dLW]){1,83} ([-*,/\d]|[a-zA-Z]{3}){1,23} ([-?#*,/\dL]|[a-zA-Z]{3}){1,13} ([^\)]+)\)` +>>>>>> + +>>>> +>>>> status -> (string) [required] +>>>> +>>>>> The status of the Snowflake connection. +>>>>> +>>>>> Possible values: +>>>>> +>>>>> * `CREATING` +>>>>> * `CREATE_FAILED` +>>>>> * `DELETING` +>>>>> * `DELETE_FAILED` +>>>>> * `READY` +>>>>> * `UPDATING` +>>>>> * `UPDATE_FAILED` +>>>>> * `DELETED` +>>>>> + +>>>> +>>>> errorMessage -> (string) +>>>> +>>>>> An error message returned if the Snowflake connection failed to establish or validate. +>>> @@ -1699 +1845 @@ nextToken -> (string) - * [AWS CLI 2.35.11 Command Reference](../../index.html) » + * [AWS CLI 2.35.13 Command Reference](../../index.html) »