AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-16 · Documentation low

File: cli/latest/reference/bedrock-agent/ingest-knowledge-base-documents.md

Summary

Updated CLI reference version, restructured command parameters, added detailed metadata structure documentation, and reorganized content sections

Security assessment

The changes add documentation about specifying bucket owner account IDs in S3 locations, which helps enforce proper access control. However, there's no evidence this addresses a specific security vulnerability - rather it improves documentation of existing security-relevant features.

Diff

diff --git a/cli/latest/reference/bedrock-agent/ingest-knowledge-base-documents.md b/cli/latest/reference/bedrock-agent/ingest-knowledge-base-documents.md
index 019eb4e26..b93a13a85 100644
--- a//cli/latest/reference/bedrock-agent/ingest-knowledge-base-documents.md
+++ b//cli/latest/reference/bedrock-agent/ingest-knowledge-base-documents.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
@@ -67 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    [--client-token <value>]
+    --knowledge-base-id <value>
@@ -68,0 +69 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--client-token <value>]
@@ -70 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    --knowledge-base-id <value>
@@ -95 +95 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--client-token` (string)
+`--knowledge-base-id` (string)
@@ -97 +97 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> A unique, case-sensitive identifier to ensure that the API request completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request, but does not return an error. For more information, see [Ensuring idempotency](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html) .
+> The unique identifier of the knowledge base to ingest the documents into.
@@ -102,0 +103,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+`--client-token` (string)
+
+> A unique, case-sensitive identifier to ensure that the API request completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request, but does not return an error. For more information, see [Ensuring idempotency](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html) .
+
@@ -110,0 +115,58 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>> metadata -> (structure)
+>>
+>>> Contains the metadata to associate with the document.
+>>> 
+>>> type -> (string)
+>>>
+>>>> The type of the source source from which to add metadata.
+>>> 
+>>> inlineAttributes -> (list)
+>>>
+>>>> An array of objects, each of which defines a metadata attribute to associate with the content to ingest. You define the attributes inline.
+>>>> 
+>>>> (structure)
+>>>>
+>>>>> Contains information about a metadata attribute.
+>>>>> 
+>>>>> key -> (string)
+>>>>>
+>>>>>> The key of the metadata attribute.
+>>>>> 
+>>>>> value -> (structure)
+>>>>>
+>>>>>> Contains the value of the metadata attribute.
+>>>>>> 
+>>>>>> type -> (string)
+>>>>>>
+>>>>>>> The type of the metadata attribute.
+>>>>>> 
+>>>>>> numberValue -> (double)
+>>>>>>
+>>>>>>> The value of the numeric metadata attribute.
+>>>>>> 
+>>>>>> booleanValue -> (boolean)
+>>>>>>
+>>>>>>> The value of the Boolean metadata attribute.
+>>>>>> 
+>>>>>> stringValue -> (string)
+>>>>>>
+>>>>>>> The value of the string metadata attribute.
+>>>>>> 
+>>>>>> stringListValue -> (list)
+>>>>>>
+>>>>>>> An array of strings that define the value of the metadata attribute.
+>>>>>>> 
+>>>>>>> (string)
+>>> 
+>>> s3Location -> (structure)
+>>>
+>>>> The Amazon S3 location of the file containing metadata to associate with the content to ingest.
+>>>> 
+>>>> uri -> (string)
+>>>>
+>>>>> The S3 URI of the file containing the content to ingest.
+>>>> 
+>>>> bucketOwnerAccountId -> (string)
+>>>>
+>>>>> The identifier of the Amazon Web Services account that owns the S3 bucket containing the content to ingest.
+>> 
@@ -114,0 +177,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>> dataSourceType -> (string)
+>>>
+>>>> The type of data source that is connected to the knowledge base to which to ingest this document.
+>>> 
@@ -126,0 +193,16 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>> sourceType -> (string)
+>>>>
+>>>>> The source of the data to ingest.
+>>>> 
+>>>> s3Location -> (structure)
+>>>>
+>>>>> Contains information about the Amazon S3 location of the file from which to ingest data.
+>>>>> 
+>>>>> uri -> (string)
+>>>>>
+>>>>>> The S3 URI of the file containing the content to ingest.
+>>>>> 
+>>>>> bucketOwnerAccountId -> (string)
+>>>>>
+>>>>>> The identifier of the Amazon Web Services account that owns the S3 bucket containing the content to ingest.
+>>>> 
@@ -130,0 +213,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>>> type -> (string)
+>>>>>
+>>>>>> The type of inline content to define.
+>>>>> 
@@ -135,4 +220,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> data -> (blob)
->>>>>>
->>>>>>> The base64-encoded string of the content.
->>>>>> 
@@ -164,0 +247,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>>>> 
+>>>>>> data -> (blob)
+>>>>>>
+>>>>>>> The base64-encoded string of the content.
@@ -173,24 +258,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> 
->>>>> type -> (string)
->>>>>
->>>>>> The type of inline content to define.
->>>> 
->>>> s3Location -> (structure)
->>>>
->>>>> Contains information about the Amazon S3 location of the file from which to ingest data.
->>>>> 
->>>>> bucketOwnerAccountId -> (string)
->>>>>
->>>>>> The identifier of the Amazon Web Services account that owns the S3 bucket containing the content to ingest.
->>>>> 
->>>>> uri -> (string)
->>>>>
->>>>>> The S3 URI of the file containing the content to ingest.
->>>> 
->>>> sourceType -> (string)
->>>>
->>>>> The source of the data to ingest.
->>> 
->>> dataSourceType -> (string)
->>>
->>>> The type of data source that is connected to the knowledge base to which to ingest this document.
@@ -209,58 +270,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->> 
->> metadata -> (structure)
->>
->>> Contains the metadata to associate with the document.
->>> 
->>> inlineAttributes -> (list)
->>>
->>>> An array of objects, each of which defines a metadata attribute to associate with the content to ingest. You define the attributes inline.
->>>> 
->>>> (structure)
->>>>
->>>>> Contains information about a metadata attribute.
->>>>> 
->>>>> key -> (string)
->>>>>
->>>>>> The key of the metadata attribute.
->>>>> 
->>>>> value -> (structure)
->>>>>
->>>>>> Contains the value of the metadata attribute.
->>>>>> 
->>>>>> booleanValue -> (boolean)
->>>>>>
->>>>>>> The value of the Boolean metadata attribute.
->>>>>> 
->>>>>> numberValue -> (double)
->>>>>>
->>>>>>> The value of the numeric metadata attribute.
->>>>>> 
->>>>>> stringListValue -> (list)
->>>>>>
->>>>>>> An array of strings that define the value of the metadata attribute.
->>>>>>> 
->>>>>>> (string)
->>>>>> 
->>>>>> stringValue -> (string)
->>>>>>
->>>>>>> The value of the string metadata attribute.
->>>>>> 
->>>>>> type -> (string)
->>>>>>
->>>>>>> The type of the metadata attribute.
->>> 
->>> s3Location -> (structure)
->>>
->>>> The Amazon S3 location of the file containing metadata to associate with the content to ingest.
->>>> 
->>>> bucketOwnerAccountId -> (string)
->>>>
->>>>> The identifier of the Amazon Web Services account that owns the S3 bucket containing the content to ingest.
->>>> 
->>>> uri -> (string)
->>>>