AWS cli documentation change

Service: cli · 2026-07-10 · Documentation high

File: cli/latest/reference/lambda/get-durable-execution.md

Summary

Added --include-execution-data flag and documented new DurableConfig structure with KMS encryption, execution timeout, and history retention settings

Security assessment

The change documents encryption of execution payloads using KMS keys and execution data exposure controls, but doesn't indicate any security vulnerability being fixed

Diff

diff --git a/cli/latest/reference/lambda/get-durable-execution.md b/cli/latest/reference/lambda/get-durable-execution.md
index 2eb870e82..bb63efcf9 100644
--- a//cli/latest/reference/lambda/get-durable-execution.md
+++ b//cli/latest/reference/lambda/get-durable-execution.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »
@@ -67,0 +68 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
+    [--include-execution-data | --no-include-execution-data]
@@ -104,0 +106,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/lambda
+`--include-execution-data` | `--no-include-execution-data` (boolean)
+
+> Specifies whether to include execution data such as input payload, result, and error information in the response. Set to `false` for a more compact response that includes only execution metadata. The default value is set to `true` .
+
@@ -346,0 +352,42 @@ TraceHeader -> (structure)
+ExecutionDataIncluded -> (boolean)
+
+> Indicates whether execution data is included in this response. Returns `false` when `IncludeExecutionData` is set to `false` in the request.
+
+DurableConfig -> (structure)
+
+> Configuration settings for the durable execution, including execution timeout, retention period for execution history, and an optional ARN of the Key Management Service (KMS) customer managed key that is used to encrypt your durable execution’s payload data, including input, output, and error payloads.
+> 
+> KMSKeyArn -> (string)
+>
+>> The ARN of the Key Management Service (KMS) customer managed key that is used to encrypt your durable execution’s payload data, including input, output, and error payloads.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>>   * max: `10000`
+>>   * pattern: `(arn:(aws[a-zA-Z-]*)?:[a-z0-9-.]+:.*)|()`
+>> 
+
+> 
+> RetentionPeriodInDays -> (integer)
+>
+>> The number of days to retain execution history after a durable execution completes. After this period, execution history is no longer available through the GetDurableExecutionHistory API.
+>> 
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `90`
+>> 
+
+> 
+> ExecutionTimeout -> (integer)
+>
+>> The maximum time (in seconds) that a durable execution can run before timing out. This timeout applies to the entire durable execution, not individual function invocations.
+>> 
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `31622400`
+>> 
+
+
@@ -357 +404 @@ TraceHeader -> (structure)
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »