AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-16 · Documentation low

File: cli/latest/reference/bedrock-agent/update-agent-alias.md

Summary

Updated AWS CLI version reference from 2.28.8 to 2.28.11, restructured command parameters documentation, and reorganized response field descriptions for agent alias operations. Added explicit documentation for --agent-id parameter and moved --alias-invocation-state documentation to a different section.

Security assessment

The changes primarily involve documentation restructuring and version updates. The --alias-invocation-state parameter documentation was moved but not fundamentally changed. While this parameter relates to controlling agent alias activation (ACCEPT/REJECT_INVOCATIONS), there's no evidence this change addresses a specific security vulnerability. The clientToken documentation about idempotency is a standard API practice, not a security feature addition.

Diff

diff --git a/cli/latest/reference/bedrock-agent/update-agent-alias.md b/cli/latest/reference/bedrock-agent/update-agent-alias.md
index 93c2967ae..a2bfe49a3 100644
--- a//cli/latest/reference/bedrock-agent/update-agent-alias.md
+++ b//cli/latest/reference/bedrock-agent/update-agent-alias.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
@@ -66,0 +67 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    --agent-id <value>
@@ -69,2 +69,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    --agent-id <value>
-    [--alias-invocation-state <value>]
@@ -72,0 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--alias-invocation-state <value>]
@@ -96,0 +97,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+`--agent-id` (string)
+
+> The unique identifier of the agent.
+
@@ -105,15 +108,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--agent-id` (string)
-
-> The unique identifier of the agent.
-
-`--alias-invocation-state` (string)
-
-> The invocation state for the agent alias. To pause the agent alias, set the value to `REJECT_INVOCATIONS` . To start the agent alias running again, set the value to `ACCEPT_INVOCATIONS` . Use the `GetAgentAlias` , or `ListAgentAliases` , operation to get the invocation state of an agent alias.
-> 
-> Possible values:
-> 
->   * `ACCEPT_INVOCATIONS`
->   * `REJECT_INVOCATIONS`
-> 
-
-
@@ -157,0 +147,11 @@ JSON Syntax:
+`--alias-invocation-state` (string)
+
+> The invocation state for the agent alias. To pause the agent alias, set the value to `REJECT_INVOCATIONS` . To start the agent alias running again, set the value to `ACCEPT_INVOCATIONS` . Use the `GetAgentAlias` , or `ListAgentAliases` , operation to get the invocation state of an agent alias.
+> 
+> Possible values:
+> 
+>   * `ACCEPT_INVOCATIONS`
+>   * `REJECT_INVOCATIONS`
+> 
+
+
@@ -260,0 +261,12 @@ agentAlias -> (structure)
+> agentId -> (string)
+>
+>> The unique identifier of the agent.
+> 
+> agentAliasId -> (string)
+>
+>> The unique identifier of the alias of the agent.
+> 
+> agentAliasName -> (string)
+>
+>> The name of the alias of the agent.
+> 
@@ -264,0 +277,32 @@ agentAlias -> (structure)
+> clientToken -> (string)
+>
+>> A unique, case-sensitive identifier to ensure that the API request completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request, but does not return an error. For more information, see [Ensuring idempotency](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html) .
+> 
+> description -> (string)
+>
+>> The description of the alias of the agent.
+> 
+> routingConfiguration -> (list)
+>
+>> Contains details about the routing configuration of the alias.
+>> 
+>> (structure)
+>>
+>>> Contains details about the routing configuration of the alias.
+>>> 
+>>> agentVersion -> (string)
+>>>
+>>>> The version of the agent with which the alias is associated.
+>>> 
+>>> provisionedThroughput -> (string)
+>>>
+>>>> Information on the Provisioned Throughput assigned to an agent alias.
+> 
+> createdAt -> (timestamp)
+>
+>> The time at which the alias of the agent was created.
+> 
+> updatedAt -> (timestamp)
+>
+>> The time at which the alias was last updated.
+> 
@@ -273,4 +316,0 @@ agentAlias -> (structure)
->>> endDate -> (timestamp)
->>>
->>>> The date that the alias stopped being associated to the version in the `routingConfiguration` object
->>> 
@@ -292,0 +333,4 @@ agentAlias -> (structure)
+>>> endDate -> (timestamp)
+>>>
+>>>> The date that the alias stopped being associated to the version in the `routingConfiguration` object
+>>> 
@@ -297,8 +340,0 @@ agentAlias -> (structure)
-> agentAliasId -> (string)
->
->> The unique identifier of the alias of the agent.
-> 
-> agentAliasName -> (string)
->
->> The name of the alias of the agent.
-> 
@@ -317,20 +352,0 @@ agentAlias -> (structure)
-> 
-> agentId -> (string)
->
->> The unique identifier of the agent.
-> 
-> aliasInvocationState -> (string)
->
->> The invocation state for the agent alias. If the agent alias is running, the value is `ACCEPT_INVOCATIONS` . If the agent alias is paused, the value is `REJECT_INVOCATIONS` . Use the `UpdateAgentAlias` operation to change the invocation state.
-> 
-> clientToken -> (string)
->
->> A unique, case-sensitive identifier to ensure that the API request completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request, but does not return an error. For more information, see [Ensuring idempotency](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html) .
-> 
-> createdAt -> (timestamp)
->
->> The time at which the alias of the agent was created.
-> 
-> description -> (string)
->
->> The description of the alias of the agent.
@@ -344,17 +360 @@ agentAlias -> (structure)
-> routingConfiguration -> (list)
->
->> Contains details about the routing configuration of the alias.
->> 
->> (structure)
->>
->>> Contains details about the routing configuration of the alias.
->>> 
->>> agentVersion -> (string)
->>>
->>>> The version of the agent with which the alias is associated.
->>> 
->>> provisionedThroughput -> (string)
->>>
->>>> Information on the Provisioned Throughput assigned to an agent alias.
-> 
-> updatedAt -> (timestamp)
+> aliasInvocationState -> (string)
@@ -362 +362 @@ agentAlias -> (structure)
->> The time at which the alias was last updated.
+>> The invocation state for the agent alias. If the agent alias is running, the value is `ACCEPT_INVOCATIONS` . If the agent alias is paused, the value is `REJECT_INVOCATIONS` . Use the `UpdateAgentAlias` operation to change the invocation state.
@@ -374 +374 @@ agentAlias -> (structure)
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »