AWS cli: Add --action-configuration (AlarmTagsPropagation) to put-metric-alarm
Summary
Documents a new --action-configuration structure for put-metric-alarm that controls whether alarm tags are included in action notifications and state-change events, including IncludedTagKeys/ExcludedTagKeys lists and the required cloudwatch:ListTagsForResource permission. Also bumps the CLI version footer to 2.38.2.
Security assessment
The new parameter is a feature addition, but it explicitly documents an IAM permission requirement (cloudwatch:ListTagsForResource) needed to create/update alarms when tag propagation is enabled, which is security-relevant access-control guidance rather than a fix for a specific vulnerability.
Evidence
>>> When this is `true` , you must have the `cloudwatch:ListTagsForResource` permission on the alarm to create or update it.
Diff
diff --git a/cli/latest/reference/cloudwatch/put-metric-alarm.md b/cli/latest/reference/cloudwatch/put-metric-alarm.md index b24ee99..3cc5e61 100644 --- a//cli/latest/reference/cloudwatch/put-metric-alarm.md +++ b//cli/latest/reference/cloudwatch/put-metric-alarm.md @@ -15 +15 @@ - * [AWS CLI 2.38.1 Command Reference](../../index.html) » + * [AWS CLI 2.38.2 Command Reference](../../index.html) » @@ -119,0 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/monito + [--action-configuration <value>] @@ -1113,0 +1115,80 @@ JSON Syntax: +`--action-configuration` (structure) + +> Settings that change the content of the notifications and events that the alarm sends when its state changes. These settings apply to the alarm’s actions, whichever state triggers them. +> +> AlarmTagsPropagation -> (structure) +> +>> Settings for including the alarm’s tags in its action notifications and state-change events. +>> +>> Enabled -> (boolean) [required] +>> +>>> Set to `true` to include the alarm’s tags. Set to `false` to stop including them. +>>> +>>> When this is `true` , you must have the `cloudwatch:ListTagsForResource` permission on the alarm to create or update it. +>> +>> IncludedTagKeys -> (list) +>> +>>> The tag keys to include. Only the alarm’s tags with these keys are included. +>>> +>>> You can specify 1 to 50 tag keys. Each tag key must be 1 to 128 characters long. +>>> +>>> You can’t specify both `IncludedTagKeys` and `ExcludedTagKeys` . +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `50` +>>> + +>>> +>>> (string) +>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `128` +>>>> + +>> +>> ExcludedTagKeys -> (list) +>> +>>> The tag keys to exclude. All of the alarm’s tags except those with these keys are included. +>>> +>>> You can specify 1 to 50 tag keys. Each tag key must be 1 to 128 characters long. +>>> +>>> You can’t specify both `IncludedTagKeys` and `ExcludedTagKeys` . +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `50` +>>> + +>>> +>>> (string) +>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `128` +>>>> + + +Shorthand Syntax: + + + AlarmTagsPropagation={Enabled=boolean,IncludedTagKeys=[string,string],ExcludedTagKeys=[string,string]} + + +JSON Syntax: + + + { + "AlarmTagsPropagation": { + "Enabled": true|false, + "IncludedTagKeys": ["string", ...], + "ExcludedTagKeys": ["string", ...] + } + } + + @@ -1265 +1346 @@ None - * [AWS CLI 2.38.1 Command Reference](../../index.html) » + * [AWS CLI 2.38.2 Command Reference](../../index.html) »