AWS step-functions documentation change
Summary
Updated Amazon Bedrock integration examples: Changed 'Parameters' to 'Arguments', modified prompt syntax to use state input reference, reduced max_tokens value, removed ResultPath/ResultSelector. Standardized IAM policy examples by replacing hardcoded regions/account IDs with placeholders.
Security assessment
Changes primarily focus on syntax updates and documentation standardization. While IAM policy examples are security-related by nature, the modifications only replace hardcoded values with placeholders rather than addressing vulnerabilities or adding security features. No evidence of patching vulnerabilities or responding to security incidents.
Diff
diff --git a/step-functions/latest/dg/connect-bedrock.md b/step-functions/latest/dg/connect-bedrock.md index 2d7ccb79a..afda39457 100644 --- a//step-functions/latest/dg/connect-bedrock.md +++ b//step-functions/latest/dg/connect-bedrock.md @@ -73 +73 @@ The following Task state definition shows how you can integrate with Amazon Bedr - "Parameters": { + "Arguments": { @@ -76,2 +76,2 @@ The following Task state definition shows how you can integrate with Amazon Bedr - "prompt.$": "$.prompt_one", - "max_tokens": 250 + "prompt": "{% states.input.prompt_one %}", + "max_tokens": 20 @@ -82,4 +81,0 @@ The following Task state definition shows how you can integrate with Amazon Bedr - "ResultPath": "$.result_one", - "ResultSelector": { - "result_one.$": "$.Body.generations[0].text" - }, @@ -139 +135 @@ The following is an IAM policy example for a state machine that accesses a speci - "arn:aws:bedrock:us-east-2::foundation-model/amazon.titan-text-express-v1" + "arn:aws:bedrock:region::foundation-model/amazon.titan-text-express-v1" @@ -160 +156 @@ The following is an IAM policy example for a state machine that accesses a speci - "arn:aws:bedrock:us-east-2:123456789012:provisioned-model/c2oi931ulksx" + "arn:aws:bedrock:region:account-id:provisioned-model/c2oi931ulksx" @@ -181,2 +177,2 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:us-east-2::foundation-model/*", - "arn:aws:bedrock:us-east-2:123456789012:provisioned-model/*" + "arn:aws:bedrock:region::foundation-model/*", + "arn:aws:bedrock:region:account-id:provisioned-model/*" @@ -203,3 +199,3 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:us-east-2::foundation-model/amazon.titan-text-express-v1", - "arn:aws:bedrock:us-east-2:123456789012:custom-model/*", - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region::foundation-model/amazon.titan-text-express-v1", + "arn:aws:bedrock:region:account-id:custom-model/*", + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -215 +211 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:iam::123456789012:role/myRole" + "arn:aws:iam::account-id:role/myRole" @@ -236,2 +232,2 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:us-east-2:123456789012:custom-model/*", - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region:account-id:custom-model/*", + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -247 +243 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:iam::123456789012:role/[[roleName]]" + "arn:aws:iam::account-id:role/roleName" @@ -268,3 +264,3 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:us-east-2::foundation-model/*", - "arn:aws:bedrock:us-east-2:123456789012:custom-model/*", - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region::foundation-model/*", + "arn:aws:bedrock:region:account-id:custom-model/*", + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -280 +276 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:iam::123456789012:role/myRole" + "arn:aws:iam::account-id:role/myRole" @@ -301,3 +297,3 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:us-east-2::foundation-model/amazon.titan-text-express-v1", - "arn:aws:bedrock:us-east-2:123456789012:custom-model/*", - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region::foundation-model/amazon.titan-text-express-v1", + "arn:aws:bedrock:region:account-id:custom-model/*", + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -314 +310 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -324 +320 @@ The following is an IAM policy example for a state machine to access a specific - "arn:aws:iam::123456789012:role/myRole" + "arn:aws:iam::account-id:role/myRole" @@ -345,2 +341,2 @@ The following is an IAM policy example for a state machine to access a custom mo - "arn:aws:bedrock:us-east-2:123456789012:custom-model/*", - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region:account-id:custom-model/*", + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -357 +353 @@ The following is an IAM policy example for a state machine to access a custom mo - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -367 +363 @@ The following is an IAM policy example for a state machine to access a custom mo - "arn:aws:iam::123456789012:role/myRole" + "arn:aws:iam::account-id:role/myRole" @@ -388,3 +384,3 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:us-east-2::foundation-model/*", - "arn:aws:bedrock:us-east-2:123456789012:custom-model/*", - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region::foundation-model/*", + "arn:aws:bedrock:region:account-id:custom-model/*", + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -401 +397 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:bedrock:us-east-2:123456789012:model-customization-job/*" + "arn:aws:bedrock:region:account-id:model-customization-job/*" @@ -411 +407 @@ The following is an IAM policy example for a state machine that provides full ac - "arn:aws:iam::123456789012:role/myRole" + "arn:aws:iam::account-id:role/myRole"