AWS cli medium security documentation change

Service: cli · 2026-07-01 · Security-related medium

File: cli/latest/reference/imagebuilder/list-image-pipelines.md

Summary

Updated CloudWatch Logs documentation for image build logs and pipeline execution logs to match changes in get-image-pipeline.md.

Security assessment

Same security documentation update as get-image-pipeline.md, clarifying permission requirements for custom log groups to prevent misconfiguration that could compromise log integrity or cause delivery failures.

Diff

diff --git a/cli/latest/reference/imagebuilder/list-image-pipelines.md b/cli/latest/reference/imagebuilder/list-image-pipelines.md
index 413df586a..eccaad44e 100644
--- a//cli/latest/reference/imagebuilder/list-image-pipelines.md
+++ b//cli/latest/reference/imagebuilder/list-image-pipelines.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »
@@ -719 +719 @@ imagePipelineList -> (list)
->>>> The log group name that Image Builder uses for image creation. If not specified, the log group name defaults to `/aws/imagebuilder/image-name` .
+>>>> Specifies the CloudWatch Logs log group name for image build logs. The log group name can contain alphanumeric characters, hyphens, underscores, forward slashes, and periods, up to 512 characters. Log group names not starting with `/aws/imagebuilder/` require an `executionRole` with CloudWatch Logs write permissions. If not specified, defaults to `/aws/imagebuilder/image-name` .
@@ -731 +731 @@ imagePipelineList -> (list)
->>>> The log group name that Image Builder uses for the log output during creation of a new pipeline. If not specified, the pipeline log group name defaults to `/aws/imagebuilder/pipeline/pipeline-name` .
+>>>> Specifies the CloudWatch Logs log group name for pipeline execution logs. The log group name can contain alphanumeric characters, hyphens, underscores, forward slashes, and periods, up to 512 characters. Log group names not starting with `/aws/imagebuilder/` require an `executionRole` with CloudWatch Logs write permissions. If not specified, defaults to `/aws/imagebuilder/pipeline/pipeline-name` .
@@ -786 +786 @@ nextToken -> (string)
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »