AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2025-08-16 · Documentation medium

File: bedrock-agentcore/latest/devguide/gateway-workflow-observability.md

Summary

Removed observability setup code examples and IAM permissions requirements

Security assessment

Removal of monitoring configuration details reduces operational visibility but doesn't directly indicate security fixes or introduce vulnerabilities.

Diff

diff --git a/bedrock-agentcore/latest/devguide/gateway-workflow-observability.md b/bedrock-agentcore/latest/devguide/gateway-workflow-observability.md
index 5268f3ae3..6e27521dd 100644
--- a//bedrock-agentcore/latest/devguide/gateway-workflow-observability.md
+++ b//bedrock-agentcore/latest/devguide/gateway-workflow-observability.md
@@ -5,2 +4,0 @@
-Required permissions for observability
-
@@ -37,55 +34,0 @@ These metrics are available through the Amazon Bedrock AgentCore console and can
-To enable observability for your gateway, you can use the following Python code:
-    
-    
-    from bedrock_agentcore_starter_toolkit.operations.gateway import GatewayClient
-    
-    # Initialize the Gateway client
-    gateway_client = GatewayClient(region_name="us-west-2")
-    
-    # Create a gateway with observability enabled
-    gateway = gateway_client.create_gateway(
-        name="observable-gateway",
-        description="A gateway with observability features enabled",
-        observability_config={        
-            "cloudwatch_metrics_enabled": True,
-            "xray_enabled": True
-        }
-    )
-    
-    print(f"Gateway created with observability features enabled")
-    print(f"Gateway URL: {gateway.endpoint_url}")
-        
-
-## Required permissions for observability
-
-To monitor and observe your Gateway endpoints and targets, you need specific IAM permissions for CloudWatch metrics. The following IAM policy provides the necessary permissions:
-
-JSON
-    
-
-****
-    
-    
-    
-    {
-      "Version": "2012-10-17",
-      "Statement": [
-        {
-          "Effect": "Allow",
-          "Action": [
-            "cloudwatch:GetMetricData",
-            "cloudwatch:GetMetricStatistics",
-            "cloudwatch:ListMetrics",
-            "cloudwatch:PutMetricAlarm",
-            "cloudwatch:DescribeAlarms",
-            "cloudwatch:DeleteAlarms"
-          ],
-          "Resource": "*"
-        }    
-      ]
-    }
-          
-    
-
-This policy includes the permissions to view and manage CloudWatch metrics and alarms.
-
@@ -107 +50 @@ To use the Amazon Web Services Documentation, Javascript must be enabled. Please
-Using the MCP Inspector
+Connecting agents to your gateway