AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-07-01 · Documentation low

File: cli/latest/reference/datazone/update-connection.md

Summary

Added Snowflake connection properties support including authentication configuration, role settings, and lineage sync options

Security assessment

The change introduces documentation for Snowflake authentication methods including secret ARNs and basic credentials. While this documents security features (authentication mechanisms), there's no evidence of addressing a specific vulnerability. The constraints on credentials (e.g., password patterns) represent standard security practices rather than vulnerability fixes.

Diff

diff --git a/cli/latest/reference/datazone/update-connection.md b/cli/latest/reference/datazone/update-connection.md
index e4d9a310e..7f090629f 100644
--- a//cli/latest/reference/datazone/update-connection.md
+++ b//cli/latest/reference/datazone/update-connection.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »
@@ -259 +259 @@ JSON Syntax:
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `s3Properties`, `amazonQProperties`, `mlflowProperties`, `lakehouseProperties`, `vpcProperties`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `athenaProperties`, `glueProperties`, `iamProperties`, `redshiftProperties`, `sparkEmrProperties`, `s3Properties`, `snowflakeProperties`, `amazonQProperties`, `mlflowProperties`, `lakehouseProperties`, `vpcProperties`.
@@ -601,0 +602,182 @@ JSON Syntax:
+> 
+> snowflakeProperties -> (structure)
+>
+>> The Snowflake-specific connection properties to update.
+>> 
+>> connectivityPropertiesPatch -> (structure)
+>>
+>>> The connectivity properties patch of the Snowflake connection.
+>>> 
+>>> description -> (string)
+>>>
+>>>> A description of the connectivity properties update.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `2048`
+>>>>   * pattern: `[\S\s]*`
+>>>> 
+
+>>> 
+>>> connectionProperties -> (map)
+>>>
+>>>> The connection properties to update.
+>>>> 
+>>>> key -> (string)
+>>>> 
+>>>> value -> (string)
+>>>>
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>> 
+
+>>> 
+>>> authenticationConfiguration -> (structure)
+>>>
+>>>> The authentication settings to update.
+>>>> 
+>>>> secretArn -> (string)
+>>>>
+>>>>> The secret ARN of a connection.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `arn:aws(-(cn|us-gov|iso(-[bef])?))?:secretsmanager:.*`
+>>>>> 
+
+>>>> 
+>>>> basicAuthenticationCredentials -> (structure)
+>>>>
+>>>>> The basic authentication credentials of a connection.
+>>>>> 
+>>>>> userName -> (string)
+>>>>>
+>>>>>> The user name for the connecion.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `0`
+>>>>>>   * max: `512`
+>>>>>>   * pattern: `\S+`
+>>>>>> 
+
+>>>>> 
+>>>>> password -> (string)
+>>>>>
+>>>>>> The password for a connection.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `0`
+>>>>>>   * max: `512`
+>>>>>>   * pattern: `.*`
+>>>>>> 
+
+>> 
+>> snowflakeRole -> (string)
+>>
+>>> The Snowflake role used to access Snowflake resources.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `255`
+>>>   * pattern: `[a-zA-Z0-9_$]+`
+>>> 
+
+>> 
+>> lineageSync -> (structure)
+>>
+>>> The lineage sync configuration for the Snowflake connection.
+>>> 
+>>> timezone -> (string)
+>>>
+>>>> The timezone of the lineage sync schedule.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `UTC`
+>>>>   * `AFRICA_JOHANNESBURG`
+>>>>   * `AMERICA_MONTREAL`
+>>>>   * `AMERICA_SAO_PAULO`
+>>>>   * `ASIA_BAHRAIN`
+>>>>   * `ASIA_BANGKOK`
+>>>>   * `ASIA_CALCUTTA`
+>>>>   * `ASIA_DUBAI`
+>>>>   * `ASIA_HONG_KONG`
+>>>>   * `ASIA_JAKARTA`
+>>>>   * `ASIA_KUALA_LUMPUR`
+>>>>   * `ASIA_SEOUL`
+>>>>   * `ASIA_SHANGHAI`
+>>>>   * `ASIA_SINGAPORE`
+>>>>   * `ASIA_TAIPEI`
+>>>>   * `ASIA_TOKYO`
+>>>>   * `AUSTRALIA_MELBOURNE`
+>>>>   * `AUSTRALIA_SYDNEY`
+>>>>   * `CANADA_CENTRAL`
+>>>>   * `CET`
+>>>>   * `CST6CDT`
+>>>>   * `ETC_GMT`
+>>>>   * `ETC_GMT0`
+>>>>   * `ETC_GMT_ADD_0`
+>>>>   * `ETC_GMT_ADD_1`
+>>>>   * `ETC_GMT_ADD_10`
+>>>>   * `ETC_GMT_ADD_11`
+>>>>   * `ETC_GMT_ADD_12`
+>>>>   * `ETC_GMT_ADD_2`
+>>>>   * `ETC_GMT_ADD_3`
+>>>>   * `ETC_GMT_ADD_4`
+>>>>   * `ETC_GMT_ADD_5`
+>>>>   * `ETC_GMT_ADD_6`
+>>>>   * `ETC_GMT_ADD_7`
+>>>>   * `ETC_GMT_ADD_8`
+>>>>   * `ETC_GMT_ADD_9`
+>>>>   * `ETC_GMT_NEG_0`
+>>>>   * `ETC_GMT_NEG_1`
+>>>>   * `ETC_GMT_NEG_10`
+>>>>   * `ETC_GMT_NEG_11`
+>>>>   * `ETC_GMT_NEG_12`
+>>>>   * `ETC_GMT_NEG_13`
+>>>>   * `ETC_GMT_NEG_14`
+>>>>   * `ETC_GMT_NEG_2`
+>>>>   * `ETC_GMT_NEG_3`
+>>>>   * `ETC_GMT_NEG_4`
+>>>>   * `ETC_GMT_NEG_5`
+>>>>   * `ETC_GMT_NEG_6`
+>>>>   * `ETC_GMT_NEG_7`
+>>>>   * `ETC_GMT_NEG_8`
+>>>>   * `ETC_GMT_NEG_9`
+>>>>   * `EUROPE_DUBLIN`
+>>>>   * `EUROPE_LONDON`
+>>>>   * `EUROPE_PARIS`
+>>>>   * `EUROPE_STOCKHOLM`
+>>>>   * `EUROPE_ZURICH`
+>>>>   * `ISRAEL`
+>>>>   * `MEXICO_GENERAL`
+>>>>   * `MST7MDT`
+>>>>   * `PACIFIC_AUCKLAND`
+>>>>   * `US_CENTRAL`
+>>>>   * `US_EASTERN`
+>>>>   * `US_MOUNTAIN`
+>>>>   * `US_PACIFIC`
+>>>> 
+
+>>> 
+>>> enabled -> (boolean) [required]
+>>>
+>>>> Specifies whether lineage sync is enabled.
+>>> 
+>>> schedule -> (string)
+>>>
+>>>> The schedule of the lineage sync.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `256`
+>>>>   * pattern: `cron\((\b[0-5]?[0-9]\b) ([*]|\b2[0-3]\b|\b[0-1]?[0-9]\b) ([-?*,/\dLW]){1,83} ([-*,/\d]|[a-zA-Z]{3}){1,23} ([-?#*,/\dL]|[a-zA-Z]{3}){1,13} ([^\)]+)\)`
+>>>> 
+
@@ -759,0 +942,20 @@ JSON Syntax:
+      "snowflakeProperties": {
+        "connectivityPropertiesPatch": {
+          "description": "string",
+          "connectionProperties": {"string": "string"
+            ...},
+          "authenticationConfiguration": {