AWS Security ChangesHomeSearch

AWS bedrock-agentcore medium security documentation change

Service: bedrock-agentcore · 2025-08-16 · Security-related medium

File: bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md

Summary

Updated hardware configuration limits from 'per account' to 'per session', added new hardware configuration entry, and changed 'Resilience' section to 'Cross-service confused deputy prevention'

Security assessment

The change from 'Resilience' to 'Cross-service confused deputy prevention' explicitly documents protection against the confused deputy problem (a security vulnerability where one service impersonates another). This is a security feature addition addressing authorization boundaries.

Diff

diff --git a/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md b/bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md
index 05fe9b4a6..6feaebf17 100644
--- a//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md
+++ b//bedrock-agentcore/latest/devguide/bedrock-agentcore-limits.md
@@ -48,0 +49 @@ Maximum size for a Docker image in an AgentCore Runtime | 1 GB | No |
+Hardware configuration per session | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account  
@@ -144 +144,0 @@ Tool name character limit | 256 characters | Yes |
-Hardware configuration per account | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account  
@@ -171 +171 @@ CDP stream and live view stream per session | 1 each | No | Allows a single agen
-Hardware configuration per account | 1vCPU/4GB | No | The maximum memory/CPU usage and configuration per account  
+Hardware configuration per session | 1vCPU/4GB | No | The maximum memory/CPU usage and configuration per account  
@@ -182 +182 @@ Total Code Interpreter tool configurations per account | 100 | Yes | Can be incr
-Hardware configuration per account | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account  
+Hardware configuration per session | 2vCPU/8GB | No | The maximum memory/CPU usage and configuration per account  
@@ -190 +190 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Resilience
+Cross-service confused deputy prevention