AWS Security ChangesHomeSearch

AWS cli: Comprehend Medical PHI job: remove real-looking account ID from samples

Service: cli · 2026-10-31 · Security-related low

File: cli/latest/reference/comprehendmedical/describe-phi-detection-job.md · Type: info-disclosure

Summary

Version banner bumped to 2.39.3; both the sample DataAccessRoleArn and the S3Key prefix (which embedded the account number) changed from 867139942017 to 123456789012.

Security assessment

The removed line exposes a specific account ID (867139942017) in both a role ARN and an S3 key prefix derived from it in output for a PHI-detection job; replacing it with the documentation placeholder removes that identifying detail from published examples.

Evidence

-                "S3Key": "867139942017-PHIDetection-4750034166536cdb52ffa3295a1b00a3/"

Diff

diff --git a/cli/latest/reference/comprehendmedical/describe-phi-detection-job.md b/cli/latest/reference/comprehendmedical/describe-phi-detection-job.md
index 288d599..bf4e5ec 100644
--- a//cli/latest/reference/comprehendmedical/describe-phi-detection-job.md
+++ b//cli/latest/reference/comprehendmedical/describe-phi-detection-job.md
@@ -15 +15 @@
-  * [AWS CLI 2.39.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.39.3 Command Reference](../../index.html) »
@@ -250 +250 @@ Output:
-                "S3Key": "867139942017-PHIDetection-4750034166536cdb52ffa3295a1b00a3/"
+                "S3Key": "123456789012-PHIDetection-4750034166536cdb52ffa3295a1b00a3/"
@@ -253 +253 @@ Output:
-            "DataAccessRoleArn": "arn:aws:iam::867139942017:role/ComprehendMedicalBatchProcessingRole",
+            "DataAccessRoleArn": "arn:aws:iam::123456789012:role/ComprehendMedicalBatchProcessingRole",
@@ -436 +436 @@ ComprehendMedicalAsyncJobProperties -> (structure)
-  * [AWS CLI 2.39.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.39.3 Command Reference](../../index.html) »