AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-08-16 · Documentation low

File: cli/latest/reference/bedrock-agent/validate-flow-definition.md

Summary

Updated AWS CLI version reference from 2.28.8 to 2.28.11. Restructured flow definition documentation with renamed fields (connections->nodes), updated node configuration details, added guardrail configurations, reranking configurations, and enhanced prompt/node type documentation.

Security assessment

The changes introduce documentation for guardrail configurations (guardrailIdentifier/Version) and security-related model configurations (modelArn in reranking). While these relate to security features, there's no evidence of addressing an active vulnerability. The updates appear to document existing/pre-existing security controls rather than patching issues.

Diff

diff --git a/cli/latest/reference/bedrock-agent/validate-flow-definition.md b/cli/latest/reference/bedrock-agent/validate-flow-definition.md
index 684a83438..2da96c6a0 100644
--- a//cli/latest/reference/bedrock-agent/validate-flow-definition.md
+++ b//cli/latest/reference/bedrock-agent/validate-flow-definition.md
@@ -15 +15 @@
-  * [AWS CLI 2.28.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.28.11 Command Reference](../../index.html) »
@@ -98 +98 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> connections -> (list)
+> nodes -> (list)
@@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->> An array of connection definitions in the flow.
+>> An array of node definitions in the flow.
@@ -104,29 +104 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>> Contains information about a connection between two nodes in the flow.
->>> 
->>> configuration -> (tagged union structure)
->>>
->>>> The configuration of the connection.
->>>> 
->>>> ### Note
->>>> 
->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `conditional`, `data`.
->>>> 
->>>> conditional -> (structure)
->>>>
->>>>> The configuration of a connection originating from a Condition node.
->>>>> 
->>>>> condition -> (string)
->>>>>
->>>>>> The condition that triggers this connection. For more information about how to write conditions, see the **Condition** node type in the [Node types](https://docs.aws.amazon.com/bedrock/latest/userguide/node-types.html) topic in the Amazon Bedrock User Guide.
->>>> 
->>>> data -> (structure)
->>>>
->>>>> The configuration of a connection originating from a node that isn’t a Condition node.
->>>>> 
->>>>> sourceOutput -> (string)
->>>>>
->>>>>> The name of the output in the source node that the connection begins from.
->>>>> 
->>>>> targetInput -> (string)
->>>>>
->>>>>> The name of the input in the target node that the connection ends at.
+>>> Contains configurations about a node in the flow.
@@ -136,9 +108 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>> A name for the connection that you can reference.
->>> 
->>> source -> (string)
->>>
->>>> The node that the connection starts at.
->>> 
->>> target -> (string)
->>>
->>>> The node that the connection ends at.
+>>>> A name for the node.
@@ -148,9 +112 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>> Whether the source node that the connection begins from is a condition node (`Conditional` ) or not (`Data` ).
-> 
-> nodes -> (list)
->
->> An array of node definitions in the flow.
->> 
->> (structure)
->>
->>> Contains configurations about a node in the flow.
+>>>> The type of node. This value must match the name of the key that you provide in the configuration you provide in the `FlowNodeConfiguration` field.
@@ -164,49 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `agent`, `collector`, `condition`, `inlineCode`, `input`, `iterator`, `knowledgeBase`, `lambdaFunction`, `lex`, `loop`, `loopController`, `loopInput`, `output`, `prompt`, `retrieval`, `storage`.
->>>> 
->>>> agent -> (structure)
->>>>
->>>>> Contains configurations for an agent node in your flow. Invokes an alias of an agent and returns the response.
->>>>> 
->>>>> agentAliasArn -> (string)
->>>>>
->>>>>> The Amazon Resource Name (ARN) of the alias of the agent to invoke.
->>>> 
->>>> collector -> (structure)
->>>>
->>>>> Contains configurations for a collector node in your flow. Collects an iteration of inputs and consolidates them into an array of outputs.
->>>> 
->>>> condition -> (structure)
->>>>
->>>>> Contains configurations for a condition node in your flow. Defines conditions that lead to different branches of the flow.
->>>>> 
->>>>> conditions -> (list)
->>>>>
->>>>>> An array of conditions. Each member contains the name of a condition and an expression that defines the condition.
->>>>>> 
->>>>>> (structure)
->>>>>>
->>>>>>> Defines a condition in the condition node.
->>>>>>> 
->>>>>>> expression -> (string)
->>>>>>>
->>>>>>>> Defines the condition. You must refer to at least one of the inputs in the condition. For more information, expand the Condition node section in [Node types in prompt flows](https://docs.aws.amazon.com/bedrock/latest/userguide/flows-how-it-works.html#flows-nodes) .
->>>>>>> 
->>>>>>> name -> (string)
->>>>>>>
->>>>>>>> A name for the condition that you can reference.
->>>> 
->>>> inlineCode -> (structure)
->>>>
->>>>> Contains configurations for an inline code node in your flow. Inline code nodes let you write and execute code directly within your flow, enabling data transformations, custom logic, and integrations without needing an external Lambda function.
->>>>> 
->>>>> code -> (string)
->>>>>
->>>>>> The code that’s executed in your inline code node. The code can access input data from previous nodes in the flow, perform operations on that data, and produce output that can be used by other nodes in your flow.
->>>>>> 
->>>>>> The code must be valid in the programming `language` that you specify.
->>>>> 
->>>>> language -> (string)
->>>>>
->>>>>> The programming language used by your inline code node.
->>>>>> 
->>>>>> The code must be valid in the programming `language` that you specify. Currently, only Python 3 (`Python_3` ) is supported.
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `input`, `output`, `knowledgeBase`, `condition`, `lex`, `prompt`, `lambdaFunction`, `storage`, `agent`, `retrieval`, `iterator`, `collector`, `inlineCode`, `loop`, `loopInput`, `loopController`.
@@ -218 +126 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>> iterator -> (structure)
+>>>> output -> (structure)
@@ -220,3 +128 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> Contains configurations for an iterator node in your flow. Takes an input that is an array and iteratively sends each item of the array as an output to the following node. The size of the array is also returned in the output.
->>>>> 
->>>>> The output flow node at the end of the flow iteration will return a response for each member of the array. To return only one response, you can include a collector node downstream from the iterator node.
+>>>>> Contains configurations for an output flow node in your flow. The last node in the flow. `outputs` can’t be specified for this node.
@@ -227,0 +134,8 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>>> knowledgeBaseId -> (string)
+>>>>>
+>>>>>> The unique identifier of the knowledge base to query.
+>>>>> 
+>>>>> modelId -> (string)
+>>>>>
+>>>>>> The unique identifier of the model or [inference profile](https://docs.aws.amazon.com/bedrock/latest/userguide/cross-region-inference.html) to use to generate a response from the query results. Omit this field if you want to return the retrieved results as an array.
+>>>>> 
@@ -239,0 +154,12 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>>> numberOfResults -> (integer)
+>>>>>
+>>>>>> The number of results to retrieve from the knowledge base.
+>>>>> 
+>>>>> promptTemplate -> (structure)
+>>>>>
+>>>>>> A custom prompt template to use with the knowledge base for generating responses.
+>>>>>> 
+>>>>>> textPromptTemplate -> (string)
+>>>>>>
+>>>>>>> The text of the prompt template.
+>>>>> 
@@ -251,0 +178,8 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>>>>> temperature -> (float)
+>>>>>>>
+>>>>>>>> Controls the randomness of the response. Choose a lower value for more predictable outputs and a higher value for more surprising outputs.
+>>>>>>> 
+>>>>>>> topP -> (float)
+>>>>>>>
+>>>>>>>> The percentage of most-likely candidates that the model considers for the next token.
+>>>>>>> 
@@ -261,20 +194,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> 
->>>>>>> temperature -> (float)
->>>>>>>
->>>>>>>> Controls the randomness of the response. Choose a lower value for more predictable outputs and a higher value for more surprising outputs.
->>>>>>> 
->>>>>>> topP -> (float)
->>>>>>>
->>>>>>>> The percentage of most-likely candidates that the model considers for the next token.
->>>>> 
->>>>> knowledgeBaseId -> (string)
->>>>>
->>>>>> The unique identifier of the knowledge base to query.
->>>>> 
->>>>> modelId -> (string)
->>>>>
->>>>>> The unique identifier of the model or [inference profile](https://docs.aws.amazon.com/bedrock/latest/userguide/cross-region-inference.html) to use to generate a response from the query results. Omit this field if you want to return the retrieved results as an array.
->>>>> 
->>>>> numberOfResults -> (integer)
->>>>>
->>>>>> The number of results to retrieve from the knowledge base.
@@ -282 +196 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> orchestrationConfiguration -> (structure)
+>>>>> rerankingConfiguration -> (structure)
@@ -284 +198 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> The configuration for orchestrating the retrieval and generation process in the knowledge base node.
+>>>>>> The configuration for reranking the retrieved results from the knowledge base to improve relevance.
@@ -286 +200 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> additionalModelRequestFields -> (map)
+>>>>>> type -> (string)
@@ -288,5 +202 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The additional model-specific request parameters as key-value pairs to be included in the request to the foundation model.
->>>>>>> 
->>>>>>> key -> (string)
->>>>>>> 
->>>>>>> value -> (document)
+>>>>>>> Specifies the type of reranking model to use. Currently, the only supported value is `BEDROCK_RERANKING_MODEL` .
@@ -294 +204 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> inferenceConfig -> (tagged union structure)
+>>>>>> bedrockRerankingConfiguration -> (structure)
@@ -296,5 +206 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> Contains inference configurations for the prompt.
->>>>>>> 
->>>>>>> ### Note