AWS Security ChangesHomeSearch

AWS cli: DynamoDB describe-table: document DisassociationProtectionEnabled field

Service: cli · 2026-10-21 · Documentation medium

File: cli/latest/reference/dynamodb/describe-table.md

Summary

AWS CLI reference version bump 2.38.2 -> 2.38.3, plus new documentation for the TableDescription field DisassociationProtectionEnabled (default enabled) and a note that after a successful disassociation the replica list is absent/empty and TableStatus should be ACTIVE.

Security assessment

The added field documents a guardrail that prevents accidental disassociation of a local global table replica (enabled by default), which is a protective/hardening control against destructive misconfiguration; no vulnerability, CVE, or credential/authz change is referenced.

Evidence

>> Specifies whether disassociation protection is enabled (`true` ) or disabled (`false` ) for the local global table replica. Protection is enabled by default.

Diff

diff --git a/cli/latest/reference/dynamodb/describe-table.md b/cli/latest/reference/dynamodb/describe-table.md
index b178e7a..086d78d 100644
--- a//cli/latest/reference/dynamodb/describe-table.md
+++ b//cli/latest/reference/dynamodb/describe-table.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.3 Command Reference](../../index.html) »
@@ -1035,0 +1036,2 @@ Table -> (structure)
+>> After a successful disassociation, this list is absent or empty. To confirm disassociation, also verify that `TableStatus` is `ACTIVE` .
+>> 
@@ -1453,0 +1456,4 @@ Table -> (structure)
+> DisassociationProtectionEnabled -> (boolean)
+>
+>> Specifies whether disassociation protection is enabled (`true` ) or disabled (`false` ) for the local global table replica. Protection is enabled by default.
+> 
@@ -1731 +1737 @@ Table -> (structure)
-  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.3 Command Reference](../../index.html) »