AWS Security ChangesHomeSearch

AWS cli medium security documentation change

Service: cli · 2025-09-28 · Security-related medium

File: cli/latest/reference/bedrock-agent-runtime/get-agent-memory.md

Summary

Updated parameter order, regex patterns, added memory-type documentation, and restructured output fields

Security assessment

The change removes regex anchors (^ and $) from input validation patterns (e.g., agent-id pattern changed from '^[0-9a-zA-Z]+$' to '[0-9a-zA-Z]+'), which weakens input validation by allowing partial matches. This could permit unintended characters in identifiers if not properly handled elsewhere, potentially enabling injection or misrouting attacks.

Diff

diff --git a/cli/latest/reference/bedrock-agent-runtime/get-agent-memory.md b/cli/latest/reference/bedrock-agent-runtime/get-agent-memory.md
index 028ed5522..ce0c15251 100644
--- a//cli/latest/reference/bedrock-agent-runtime/get-agent-memory.md
+++ b//cli/latest/reference/bedrock-agent-runtime/get-agent-memory.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
@@ -69,2 +68,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    --agent-alias-id <value>
-    --agent-id <value>
@@ -72 +70,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    --memory-id <value>
+    --agent-id <value>
+    --agent-alias-id <value>
@@ -73,0 +73 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    --memory-id <value>
@@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--agent-alias-id` (string) [required]
+`--max-items` (integer)
@@ -102 +102,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> The unique identifier of an alias of an agent.
+> The total number of items to return in the command’s output. If the total number of items available is more than the value specified, a `NextToken` is provided in the command’s output. To resume pagination, provide the `NextToken` value in the `starting-token` argument of a subsequent command. **Do not** use the `NextToken` response element directly outside of the AWS CLI.
+> 
+> For usage examples, see [Pagination](https://docs.aws.amazon.com/cli/latest/userguide/pagination.html) in the _AWS Command Line Interface User Guide_ .
+
+`--agent-id` (string) [required]
+
+> The unique identifier of the agent to which the alias belongs.
@@ -108 +114 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[0-9a-zA-Z]+$`
+>   * pattern: `[0-9a-zA-Z]+`
@@ -112 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--agent-id` (string) [required]
+`--agent-alias-id` (string) [required]
@@ -114 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> The unique identifier of the agent to which the alias belongs.
+> The unique identifier of an alias of an agent.
@@ -120 +126 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[0-9a-zA-Z]+$`
+>   * pattern: `[0-9a-zA-Z]+`
@@ -124 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--max-items` (integer)
+`--memory-type` (string) [required]
@@ -126 +132,5 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> The total number of items to return in the command’s output. If the total number of items available is more than the value specified, a `NextToken` is provided in the command’s output. To resume pagination, provide the `NextToken` value in the `starting-token` argument of a subsequent command. **Do not** use the `NextToken` response element directly outside of the AWS CLI.
+> The type of memory.
+> 
+> Possible values:
+> 
+>   * `SESSION_SUMMARY`
@@ -128 +138 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> For usage examples, see [Pagination](https://docs.aws.amazon.com/cli/latest/userguide/pagination.html) in the _AWS Command Line Interface User Guide_ .
+
@@ -138,11 +148 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[0-9a-zA-Z._:-]+$`
-> 
-
-
-`--memory-type` (string) [required]
-
-> The type of memory.
-> 
-> Possible values:
-> 
->   * `SESSION_SUMMARY`
+>   * pattern: `[0-9a-zA-Z._:-]+`
@@ -262,0 +263,12 @@ Disable automatically prompt for CLI input parameters.
+nextToken -> (string)
+
+> If the total number of results is greater than the maxItems value provided in the request, use this token when making another request in the `nextToken` field to return the next batch of results.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `2048`
+>   * pattern: `\S*`
+> 
+
+
@@ -287 +299 @@ memoryContents -> (list)
->>>>   * pattern: `^[0-9a-zA-Z._:-]+$`
+>>>>   * pattern: `[0-9a-zA-Z._:-]+`
@@ -290,4 +301,0 @@ memoryContents -> (list)
->>> 
->>> sessionExpiryTime -> (timestamp)
->>>
->>>> The time when the memory duration for the session is set to end.
@@ -303 +311 @@ memoryContents -> (list)
->>>>   * pattern: `^[0-9a-zA-Z._:-]+$`
+>>>>   * pattern: `[0-9a-zA-Z._:-]+`
@@ -310,0 +319,4 @@ memoryContents -> (list)
+>>> sessionExpiryTime -> (timestamp)
+>>>
+>>>> The time when the memory duration for the session is set to end.
+>>> 
@@ -322,12 +333,0 @@ memoryContents -> (list)
-nextToken -> (string)
-
-> If the total number of results is greater than the maxItems value provided in the request, use this token when making another request in the `nextToken` field to return the next batch of results.
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `2048`
->   * pattern: `^\S*$`
-> 
-
-
@@ -344 +344 @@ nextToken -> (string)
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »