AWS cli medium security documentation change

Service: cli · 2026-07-01 · Security-related medium

File: cli/latest/reference/imagebuilder/update-image-pipeline.md

Summary

Updated CloudWatch Logs documentation to match get-image-pipeline.md changes, specifying log group naming rules and permission requirements.

Security assessment

Reinforces security documentation about executionRole permissions for custom log groups, ensuring consistent security guidance across imagebuilder commands to prevent misconfigurations.

Diff

diff --git a/cli/latest/reference/imagebuilder/update-image-pipeline.md b/cli/latest/reference/imagebuilder/update-image-pipeline.md
index 686179e78..ef614fe2b 100644
--- a//cli/latest/reference/imagebuilder/update-image-pipeline.md
+++ b//cli/latest/reference/imagebuilder/update-image-pipeline.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »
@@ -484 +484 @@ JSON Syntax:
->> The log group name that Image Builder uses for image creation. If not specified, the log group name defaults to `/aws/imagebuilder/image-name` .
+>> Specifies the CloudWatch Logs log group name for image build logs. The log group name can contain alphanumeric characters, hyphens, underscores, forward slashes, and periods, up to 512 characters. Log group names not starting with `/aws/imagebuilder/` require an `executionRole` with CloudWatch Logs write permissions. If not specified, defaults to `/aws/imagebuilder/image-name` .
@@ -496 +496 @@ JSON Syntax:
->> The log group name that Image Builder uses for the log output during creation of a new pipeline. If not specified, the pipeline log group name defaults to `/aws/imagebuilder/pipeline/pipeline-name` .
+>> Specifies the CloudWatch Logs log group name for pipeline execution logs. The log group name can contain alphanumeric characters, hyphens, underscores, forward slashes, and periods, up to 512 characters. Log group names not starting with `/aws/imagebuilder/` require an `executionRole` with CloudWatch Logs write permissions. If not specified, defaults to `/aws/imagebuilder/pipeline/pipeline-name` .
@@ -777 +777 @@ imagePipelineArn -> (string)
-  * [AWS CLI 2.35.11 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.13 Command Reference](../../index.html) »