AWS Security ChangesHomeSearch

AWS cli: DynamoDB CreateTable: document DisassociationProtectionEnabled

Service: cli · 2026-10-21 · Documentation medium

File: cli/latest/reference/dynamodb/create-table.md

Summary

Adds documentation for the `DisassociationProtectionEnabled` boolean on the local global table replica (enabled by default) and clarifies that after a successful disassociation the replica list is absent/empty and TableStatus should be ACTIVE. Version footer bumped to 2.38.3.

Security assessment

Documents a protective control that guards against removal/disassociation of a global table replica (default-on), which is a hardening/config setting with availability and data-integrity impact. No specific vulnerability or CVE is referenced, so it is security-adjacent guidance rather than a fix.

Evidence

>> Specifies whether disassociation protection is enabled (`true` ) or disabled (`false` ) for the local global table replica. Protection is enabled by default.

Diff

diff --git a/cli/latest/reference/dynamodb/create-table.md b/cli/latest/reference/dynamodb/create-table.md
index ed8dbad..127676c 100644
--- a//cli/latest/reference/dynamodb/create-table.md
+++ b//cli/latest/reference/dynamodb/create-table.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.3 Command Reference](../../index.html) »
@@ -2845,0 +2846,2 @@ TableDescription -> (structure)
+>> After a successful disassociation, this list is absent or empty. To confirm disassociation, also verify that `TableStatus` is `ACTIVE` .
+>> 
@@ -3263,0 +3266,4 @@ TableDescription -> (structure)
+> DisassociationProtectionEnabled -> (boolean)
+>
+>> Specifies whether disassociation protection is enabled (`true` ) or disabled (`false` ) for the local global table replica. Protection is enabled by default.
+> 
@@ -3541 +3547 @@ TableDescription -> (structure)
-  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.3 Command Reference](../../index.html) »