AWS bedrock documentation change

Service: bedrock · 2025-08-01 · Documentation low

File: bedrock/latest/userguide/cmk-agent-resources.md

Summary

Simplified policy statement IDs and updated KMS ARNs with concrete account ID (123456789012)

Security assessment

Documents encryption configuration for Agents using KMS, but changes are example standardization rather than addressing specific vulnerabilities

Diff

diff --git a/bedrock/latest/userguide/cmk-agent-resources.md b/bedrock/latest/userguide/cmk-agent-resources.md
index 33047c212..7d9a94330 100644
--- a//bedrock/latest/userguide/cmk-agent-resources.md
+++ b//bedrock/latest/userguide/cmk-agent-resources.md
@@ -73 +73 @@ JSON
-                "Sid": "Allow Amazon Bedrock to encrypt and decrypt Agent resources on behalf of authorized users",
+                "Sid": "EncryptAgents",
@@ -79 +79 @@ JSON
-                "Resource": "arn:aws:kms:us-east-1:${account-id}:key/${key-id}",
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/${key-id}",
@@ -82 +82 @@ JSON
-                        "kms:EncryptionContext:aws:bedrock:arn": "arn:aws:bedrock:${region}:${account-id}:agent/${agent-id}"
+                        "kms:EncryptionContext:aws:bedrock:arn": "arn:aws:bedrock:us-east-1:123456789012:agent/${agent-id}"
@@ -113 +113 @@ JSON
-                "Resource": "arn:aws:kms:us-east-1:${account-id}:key/${key-id}"
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/${key-id}"
@@ -125 +125 @@ JSON
-                "Resource": "arn:aws:kms:us-east-1:${account-id}:key/${key-id}",
+                "Resource": "arn:aws:kms:us-east-1:123456789012:key/${key-id}",
@@ -128 +128 @@ JSON
-                        "kms:EncryptionContext:aws:bedrock:arn": "arn:aws:bedrock:${region}:${account-id}:agent/${agent-id}"
+                        "kms:EncryptionContext:aws:bedrock:arn": "arn:aws:bedrock:us-east-1:123456789012:agent/${agent-id}"