AWS bedrock-agentcore medium security documentation change
Summary
Updated hardware configuration limits from 'per account' to 'per session', added new hardware configuration entry, and changed 'Resilience' section to 'Cross-service confused deputy prevention'
Security assessment
The change from 'Resilience' to 'Cross-service confused deputy prevention' explicitly documents protection against the confused deputy problem (a security vulnerability where one service impersonates another). This is a security feature addition addressing authorization boundaries.
Diff
diff --git a/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md b/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md index 05fe9b4a6..6feaebf17 100644 --- a//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md +++ b//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md @@ -48,0 +49 @@ Maximum size for a Docker image in an AgentCore Runtime | 1 GB | No | +Hardware configuration per session | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account @@ -144 +144,0 @@ Tool name character limit | 256 characters | Yes | -Hardware configuration per account | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account @@ -171 +171 @@ CDP stream and live view stream per session | 1 each | No | Allows a single agen -Hardware configuration per account | 1vCPU/4GB | No | The maximum memory/CPU usage and configuration per account +Hardware configuration per session | 1vCPU/4GB | No | The maximum memory/CPU usage and configuration per account @@ -182 +182 @@ Total Code Interpreter tool configurations per account | 100 | Yes | Can be incr -Hardware configuration per account | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account +Hardware configuration per session | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account @@ -190 +190 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please -Resilience +Cross-service confused deputy prevention