AWS cli documentation change

Service: cli · 2026-07-10 · Documentation low

File: cli/latest/reference/securityhub/get-resources-v2.md

Summary

Added new resource fields (AccountName, ResourceProvider, ResourceOwnerAccountId, ResourceOwnerOrgId, ResourceCloudPartition, ResourceRegion) and updated descriptions for existing fields. Changed ResourceType to required.

Security assessment

The changes enhance resource visibility by adding ownership and cloud context metadata, which improves security auditing capabilities. However, there's no evidence of a specific vulnerability being addressed.

Diff

diff --git a/cli/latest/reference/securityhub/get-resources-v2.md b/cli/latest/reference/securityhub/get-resources-v2.md
index cd06f5e30..f870ab403 100644
--- a//cli/latest/reference/securityhub/get-resources-v2.md
+++ b//cli/latest/reference/securityhub/get-resources-v2.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »
@@ -134,0 +135 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+>>>>>>   * `AccountName`
@@ -135,0 +137,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+>>>>>>   * `ResourceProvider`
+>>>>>>   * `ResourceOwnerAccountId`
+>>>>>>   * `ResourceOwnerOrgId`
+>>>>>>   * `ResourceCloudPartition`
+>>>>>>   * `ResourceRegion`
@@ -438,0 +445 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+>>>>>>>>   * `AccountName`
@@ -439,0 +447,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/securi
+>>>>>>>>   * `ResourceProvider`
+>>>>>>>>   * `ResourceOwnerAccountId`
+>>>>>>>>   * `ResourceOwnerOrgId`
+>>>>>>>>   * `ResourceCloudPartition`
+>>>>>>>>   * `ResourceRegion`
@@ -759 +771 @@ JSON Syntax:
-              "FieldName": "ResourceGuid"|"ResourceId"|"AccountId"|"Region"|"ResourceCategory"|"ResourceType"|"ResourceName"|"FindingsSummary.FindingType"|"FindingsSummary.ProductName",
+              "FieldName": "ResourceGuid"|"ResourceId"|"AccountId"|"AccountName"|"Region"|"ResourceProvider"|"ResourceOwnerAccountId"|"ResourceOwnerOrgId"|"ResourceCloudPartition"|"ResourceRegion"|"ResourceCategory"|"ResourceType"|"ResourceName"|"FindingsSummary.FindingType"|"FindingsSummary.ProductName",
@@ -810 +822 @@ JSON Syntax:
-                  "FieldName": "ResourceGuid"|"ResourceId"|"AccountId"|"Region"|"ResourceCategory"|"ResourceType"|"ResourceName"|"FindingsSummary.FindingType"|"FindingsSummary.ProductName",
+                  "FieldName": "ResourceGuid"|"ResourceId"|"AccountId"|"AccountName"|"Region"|"ResourceProvider"|"ResourceOwnerAccountId"|"ResourceOwnerOrgId"|"ResourceCloudPartition"|"ResourceRegion"|"ResourceCategory"|"ResourceType"|"ResourceName"|"FindingsSummary.FindingType"|"FindingsSummary.ProductName",
@@ -1145 +1157,11 @@ Resources -> (list)
->>> The Amazon Web Services account that owns the resource.
+>>> The Amazon Web Services account that recorded the resource data in Security Hub.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `.*\S.*`
+>>> 
+
+>> 
+>> AccountName -> (string)
+>>
+>>> The name of the Amazon Web Services account that’s associated with the resource.
@@ -1155 +1177,51 @@ Resources -> (list)
->>> The Amazon Web Services Region where the resource is located.
+>>> The Amazon Web Services Region that recorded the resource data in Security Hub.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `.*\S.*`
+>>> 
+
+>> 
+>> ResourceProvider -> (string)
+>>
+>>> The cloud provider where the resource exists. Valid values are `AWS` and `Azure` . This field is always included.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `.*\S.*`
+>>> 
+
+>> 
+>> ResourceOwnerAccountId -> (string)
+>>
+>>> The identifier of the cloud account that owns the resource. For Amazon Web Services resources, this is the Amazon Web Services account ID. For Azure resources, this is the Azure subscription ID.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `.*\S.*`
+>>> 
+
+>> 
+>> ResourceOwnerOrgId -> (string)
+>>
+>>> The identifier of the cloud organization that owns the resource. For Amazon Web Services resources, this is the Organizations ID. For Azure resources, this is the Azure tenant ID.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `.*\S.*`
+>>> 
+
+>> 
+>> ResourceCloudPartition -> (string)
+>>
+>>> The cloud partition where the resource exists. For Amazon Web Services, valid values include `aws` , `aws-cn` , and `aws-us-gov` . This field isn’t returned for cloud providers that don’t use partitions.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `.*\S.*`
+>>> 
+
+>> 
+>> ResourceRegion -> (string)
+>>
+>>> The native cloud region where the resource is located. For Amazon Web Services, this is an Amazon Web Services Region (for example, `us-east-1` ). For Azure resources, this is the Azure region (for example, `westus2` ). This field is always included.
@@ -1175,0 +1248 @@ Resources -> (list)
+>>>   * `Messaging`
@@ -1180 +1253 @@ Resources -> (list)
->> ResourceType -> (string)
+>> ResourceType -> (string) [required]
@@ -1334 +1407 @@ NextToken -> (string)
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »