AWS cli medium security documentation change
Summary
Updated CLI command reference documentation for Bedrock Agent action groups, including reordered parameters, added security warnings for computer use tools, and expanded documentation for parent action group signatures
Security assessment
Added explicit security warnings about computer use tools (beta feature) recommending virtual environments with restricted data access. Documentation now includes security precautions for Anthropic Claude model capabilities.
Diff
diff --git a/cli/latest/reference/bedrock-agent/update-agent-action-group.md b/cli/latest/reference/bedrock-agent/update-agent-action-group.md index abd2809b5..df2e603a9 100644 --- a//cli/latest/reference/bedrock-agent/update-agent-action-group.md +++ b//cli/latest/reference/bedrock-agent/update-agent-action-group.md @@ -15 +15 @@ - * [AWS CLI 2.28.8 Command Reference](../../index.html) » + * [AWS CLI 2.28.11 Command Reference](../../index.html) » @@ -67,4 +66,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc - [--action-group-executor <value>] - --action-group-id <value> - --action-group-name <value> - [--action-group-state <value>] @@ -73 +69,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc - [--api-schema <value>] + --action-group-id <value> + --action-group-name <value> @@ -75 +71,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc - [--function-schema <value>] @@ -77,0 +74,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc + [--action-group-executor <value>] + [--action-group-state <value>] + [--api-schema <value>] + [--function-schema <value>] @@ -101,0 +102,77 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc +`--agent-id` (string) + +> The unique identifier of the agent for which to update the action group. + +`--agent-version` (string) + +> The unique identifier of the agent version for which to update the action group. + +`--action-group-id` (string) + +> The unique identifier of the action group. + +`--action-group-name` (string) + +> Specifies a new name for the action group. + +`--description` (string) + +> Specifies a new name for the action group. + +`--parent-action-group-signature` (string) + +> Update the built-in or computer use action for this action group. If you specify a value, you must leave the `description` , `apiSchema` , and `actionGroupExecutor` fields empty for this action group. +> +> * To allow your agent to request the user for additional information when trying to complete a task, set this field to `AMAZON.UserInput` . +> * To allow your agent to generate, run, and troubleshoot code when trying to complete a task, set this field to `AMAZON.CodeInterpreter` . +> * To allow your agent to use an Anthropic computer use tool, specify one of the following values. +> + +> +> ### Warning +> +>> Computer use is a new Anthropic Claude model capability (in beta) available with Anthropic Claude 3.7 Sonnet and Claude 3.5 Sonnet v2 only. When operating computer use functionality, we recommend taking additional security precautions, such as executing computer actions in virtual environments with restricted data access and limited internet connectivity. For more information, see [Configure an Amazon Bedrock Agent to complete tasks with computer use tools](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-computer-use.html) . +> +> * `ANTHROPIC.Computer` \- Gives the agent permission to use the mouse and keyboard and take screenshots. +> * `ANTHROPIC.TextEditor` \- Gives the agent permission to view, create and edit files. +> * `ANTHROPIC.Bash` \- Gives the agent permission to run commands in a bash shell. +> + +> +> During orchestration, if your agent determines that it needs to invoke an API in an action group, but doesn’t have enough information to complete the API request, it will invoke this action group instead and return an [Observation](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_Observation.html) reprompting the user for more information. +> +> Possible values: +> +> * `AMAZON.UserInput` +> * `AMAZON.CodeInterpreter` +> * `ANTHROPIC.Computer` +> * `ANTHROPIC.Bash` +> * `ANTHROPIC.TextEditor` +> + + +`--parent-action-group-signature-params` (map) + +> The configuration settings for a computer use action. +> +> ### Warning +> +> Computer use is a new Anthropic Claude model capability (in beta) available with Claude 3.7 Sonnet and Claude 3.5 Sonnet v2 only. For more information, see [Configure an Amazon Bedrock Agent to complete tasks with computer use tools](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-computer-use.html) . +> +> key -> (string) +> +> value -> (string) + +Shorthand Syntax: + + + KeyName1=string,KeyName2=string + + +JSON Syntax: + + + {"string": "string" + ...} + + @@ -108,5 +185 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -> This is a Tagged Union structure. Only one of the following top level keys can be set: `customControl`, `lambda`. -> -> customControl -> (string) -> ->> To return the action group invocation results directly in the `InvokeAgent` response, specify `RETURN_CONTROL` . +> This is a Tagged Union structure. Only one of the following top level keys can be set: `lambda`, `customControl`. @@ -116,0 +190,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc +> +> customControl -> (string) +> +>> To return the action group invocation results directly in the `InvokeAgent` response, specify `RETURN_CONTROL` . @@ -121 +198 @@ Shorthand Syntax: - customControl=string,lambda=string + lambda=string,customControl=string @@ -128,2 +205,2 @@ JSON Syntax: - "customControl": "RETURN_CONTROL", - "lambda": "string" + "lambda": "string", + "customControl": "RETURN_CONTROL" @@ -133,8 +209,0 @@ JSON Syntax: -`--action-group-id` (string) - -> The unique identifier of the action group. - -`--action-group-name` (string) - -> Specifies a new name for the action group. - @@ -152,8 +220,0 @@ JSON Syntax: -`--agent-id` (string) - -> The unique identifier of the agent for which to update the action group. - -`--agent-version` (string) - -> The unique identifier of the agent version for which to update the action group. - @@ -166,5 +227 @@ JSON Syntax: -> This is a Tagged Union structure. Only one of the following top level keys can be set: `payload`, `s3`. -> -> payload -> (string) -> ->> The JSON or YAML-formatted payload defining the OpenAPI schema for the action group. For more information, see [Action group OpenAPI schemas](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-api-schema.html) . +> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`, `payload`. @@ -182,0 +240,4 @@ JSON Syntax: +> +> payload -> (string) +> +>> The JSON or YAML-formatted payload defining the OpenAPI schema for the action group. For more information, see [Action group OpenAPI schemas](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-api-schema.html) . @@ -187 +248 @@ Shorthand Syntax: - payload=string,s3={s3BucketName=string,s3ObjectKey=string} + s3={s3BucketName=string,s3ObjectKey=string},payload=string @@ -194 +254,0 @@ JSON Syntax: - "payload": "string", @@ -197,0 +258,2 @@ JSON Syntax: + }, + "payload": "string" @@ -199,2 +260,0 @@ JSON Syntax: - } - @@ -202,3 +261,0 @@ JSON Syntax: -`--description` (string) - -> Specifies a new name for the action group. @@ -231,4 +287,0 @@ JSON Syntax: ->>> ->>> description -> (string) ->>> ->>>> A description of the function and its purpose. @@ -239,0 +293,4 @@ JSON Syntax: +>>> description -> (string) +>>> +>>>> A description of the function and its purpose. +>>> @@ -264,4 +320,0 @@ JSON Syntax: ->>>>> required -> (boolean) ->>>>> ->>>>>> Whether the parameter is required for the agent to complete the function for action group invocation. ->>>>> @@ -270,0 +324,4 @@ JSON Syntax: +>>>>> +>>>>> required -> (boolean) +>>>>> +>>>>>> Whether the parameter is required for the agent to complete the function for action group invocation. @@ -282 +338,0 @@ JSON Syntax: - "description": "string", @@ -283,0 +340 @@ JSON Syntax: + "description": "string", @@ -286,2 +343,2 @@ JSON Syntax: - "required": true|false, - "type": "string"|"number"|"integer"|"boolean"|"array" + "type": "string"|"number"|"integer"|"boolean"|"array", + "required": true|false @@ -297,57 +353,0 @@ JSON Syntax: -`--parent-action-group-signature` (string) - -> Update the built-in or computer use action for this action group. If you specify a value, you must leave the `description` , `apiSchema` , and `actionGroupExecutor` fields empty for this action group. ->