AWS cli documentation change
Summary
Updated CLI command structure, reordered parameters, added/modified configuration details for data sources (S3, Web, Confluence, Salesforce, SharePoint), and expanded security-related documentation for crawler user-agent headers and credential management.
Security assessment
The changes include enhanced documentation for security features such as the 'userAgentHeader' field (explicitly describing allowlisting via custom suffixes) and 'credentialsSecretArn' references (emphasizing Secrets Manager usage). These additions improve security guidance but do not indicate a specific vulnerability being patched.
Diff
diff --git a/cli/latest/reference/bedrock-agent/update-data-source.md b/cli/latest/reference/bedrock-agent/update-data-source.md index 20c5188a6..bc12758bf 100644 --- a//cli/latest/reference/bedrock-agent/update-data-source.md +++ b//cli/latest/reference/bedrock-agent/update-data-source.md @@ -15 +15 @@ - * [AWS CLI 2.28.8 Command Reference](../../index.html) » + * [AWS CLI 2.28.11 Command Reference](../../index.html) » @@ -71,4 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc - [--data-deletion-policy <value>] - --data-source-configuration <value> - --data-source-id <value> - [--description <value>] @@ -75,0 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc + --data-source-id <value> @@ -76,0 +74,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc + [--description <value>] + --data-source-configuration <value> + [--data-deletion-policy <value>] @@ -103 +103 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -`--data-deletion-policy` (string) +`--knowledge-base-id` (string) @@ -105,7 +105,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -> The data deletion policy for the data source that you want to update. -> -> Possible values: -> -> * `RETAIN` -> * `DELETE` -> +> The unique identifier of the knowledge base for the data source. + +`--data-source-id` (string) @@ -112,0 +109,9 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc +> The unique identifier of the data source. + +`--name` (string) + +> Specifies a new name for the data source. + +`--description` (string) + +> Specifies a new description for the data source. @@ -118 +123 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -> confluenceConfiguration -> (structure) +> type -> (string) @@ -120 +125,23 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->> The configuration information to connect to Confluence as your data source. +>> The type of data source. +> +> s3Configuration -> (structure) +> +>> The configuration information to connect to Amazon S3 as your data source. +>> +>> bucketArn -> (string) +>> +>>> The Amazon Resource Name (ARN) of the S3 bucket that contains your data. +>> +>> inclusionPrefixes -> (list) +>> +>>> A list of S3 prefixes to include certain files or content. For more information, see [Organizing objects using prefixes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-prefixes.html) . +>>> +>>> (string) +>> +>> bucketOwnerAccountId -> (string) +>> +>>> The account ID for the owner of the S3 bucket. +> +> webConfiguration -> (structure) +> +>> The configuration of web URLs to crawl for your data source. You should be authorized to crawl the URLs. @@ -124 +151 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->> Confluence data source connector is in preview release and is subject to change. +>> Crawling web URLs as your data source is in preview release and is subject to change. @@ -126 +153 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->> crawlerConfiguration -> (structure) +>> sourceConfiguration -> (structure) @@ -128 +155 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> The configuration of the Confluence content. For example, configuring specific types of Confluence content. +>>> The source configuration details for the web data source. @@ -130 +157 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> filterConfiguration -> (structure) +>>> urlConfiguration -> (structure) @@ -132 +159 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>> The configuration of filtering the Confluence content. For example, configuring regular expression patterns to include or exclude certain content. +>>>> The configuration of the URL/URLs. @@ -134 +161 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>> patternObjectFilter -> (structure) +>>>> seedUrls -> (list) @@ -136 +163 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>> The configuration of filtering certain objects or content types of the data source. +>>>>> One or more seed or starting point URLs. @@ -138 +165 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>> filters -> (list) +>>>>> (structure) @@ -140 +167 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>>> The configuration of specific filters applied to your data source content. You can filter out or include certain content. +>>>>>> The seed or starting point URL. You should be authorized to crawl the URL. @@ -142 +169 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>>> (structure) +>>>>>> url -> (string) @@ -144,21 +171 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>>>> The specific filters applied to your data source content. You can filter out or include certain content. ->>>>>>> ->>>>>>> exclusionFilters -> (list) ->>>>>>> ->>>>>>>> A list of one or more exclusion regular expression patterns to exclude certain object types that adhere to the pattern. If you specify an inclusion and exclusion filter/pattern and both match a document, the exclusion filter takes precedence and the document isn’t crawled. ->>>>>>>> ->>>>>>>> (string) ->>>>>>> ->>>>>>> inclusionFilters -> (list) ->>>>>>> ->>>>>>>> A list of one or more inclusion regular expression patterns to include certain object types that adhere to the pattern. If you specify an inclusion and exclusion filter/pattern and both match a document, the exclusion filter takes precedence and the document isn’t crawled. ->>>>>>>> ->>>>>>>> (string) ->>>>>>> ->>>>>>> objectType -> (string) ->>>>>>> ->>>>>>>> The supported object type or content type of the data source. ->>>> ->>>> type -> (string) ->>>> ->>>>> The type of filtering that you want to apply to certain objects or content of the data source. For example, the `PATTERN` type is regular expression patterns you can apply to filter your content. +>>>>>>> A seed or starting point URL. @@ -166 +173 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->> sourceConfiguration -> (structure) +>> crawlerConfiguration -> (structure) @@ -168 +175 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> The endpoint information to connect to your Confluence data source. +>>> The Web Crawler configuration details for the web data source. @@ -170 +177 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> authType -> (string) +>>> crawlerLimits -> (structure) @@ -172 +179,9 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>> The supported authentication type to authenticate and connect to your Confluence instance. +>>>> The configuration of crawl limits for the web URLs. +>>>> +>>>> rateLimit -> (integer) +>>>> +>>>>> The max rate at which pages are crawled, up to 300 per minute per host. +>>>> +>>>> maxPages -> (integer) +>>>> +>>>>> The max number of web pages crawled from your source URLs, up to 25,000 pages. If the web pages exceed this limit, the data source sync will fail and no web pages will be ingested. @@ -174 +189 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> credentialsSecretArn -> (string) +>>> inclusionFilters -> (list) @@ -176 +191,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>> The Amazon Resource Name of an Secrets Manager secret that stores your authentication credentials for your Confluence instance URL. For more information on the key-value pairs that must be included in your secret, depending on your authentication type, see [Confluence connection configuration](https://docs.aws.amazon.com/bedrock/latest/userguide/confluence-data-source-connector.html#configuration-confluence-connector) . +>>>> A list of one or more inclusion regular expression patterns to include certain URLs. If you specify an inclusion and exclusion filter/pattern and both match a URL, the exclusion filter takes precedence and the web content of the URL isn’t crawled. +>>>> +>>>> (string) @@ -178 +195 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> hostType -> (string) +>>> exclusionFilters -> (list) @@ -180 +197,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>> The supported host type, whether online/cloud or server/on-premises. +>>>> A list of one or more exclusion regular expression patterns to exclude certain URLs. If you specify an inclusion and exclusion filter/pattern and both match a URL, the exclusion filter takes precedence and the web content of the URL isn’t crawled. +>>>> +>>>> (string) @@ -182 +201 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> hostUrl -> (string) +>>> scope -> (string) @@ -184 +203,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>> The Confluence host URL or instance URL. +>>>> The scope of what is crawled for your URLs. +>>>> +>>>> You can choose to crawl only web pages that belong to the same host or primary domain. For example, only web pages that contain the seed URL “<https://docs.aws.amazon.com/bedrock/latest/userguide/>” and no other domains. You can choose to include sub domains in addition to the host or primary domain. For example, web pages that contain “aws.amazon.com” can also include sub domain “docs.aws.amazon.com”. +>>> +>>> userAgent -> (string) +>>> +>>>> Returns the user agent suffix for your web crawler. +>>> +>>> userAgentHeader -> (string) +>>> +>>>> A string used for identifying the crawler or bot when it accesses a web server. The user agent header value consists of the `bedrockbot` , UUID, and a user agent suffix for your crawler (if one is provided). By default, it is set to `bedrockbot_UUID` . You can optionally append a custom suffix to `bedrockbot_UUID` to allowlist a specific user agent permitted to access your source URLs. @@ -186 +215 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -> s3Configuration -> (structure) +> confluenceConfiguration -> (structure) @@ -188,5 +217 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->> The configuration information to connect to Amazon S3 as your data source. ->> ->> bucketArn -> (string) ->> ->>> The Amazon Resource Name (ARN) of the S3 bucket that contains your data. +>> The configuration information to connect to Confluence as your data source. @@ -194 +219 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->> bucketOwnerAccountId -> (string) +>> ### Note @@ -196 +221 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> The account ID for the owner of the S3 bucket. +>> Confluence data source connector is in preview release and is subject to change. @@ -198 +223 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->> inclusionPrefixes -> (list) +>> sourceConfiguration -> (structure) @@ -200 +225 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> A list of S3 prefixes to include certain files or content. For more information, see [Organizing objects using prefixes](https://docs.aws.amazon.com/AmazonS3/latest/userguide/using-prefixes.html) . +>>> The endpoint information to connect to your Confluence data source. @@ -202,9 +227,15 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>> (string) ->