AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-09-28 · Documentation low

File: cli/latest/reference/bedrock-agent-runtime/get-execution-flow-snapshot.md

Summary

Updated parameter order, renamed flow/execution identifiers, modified regex patterns for validation, and restructured output fields including encryption key reference changes

Security assessment

Changes involve parameter reordering and regex pattern modifications (removed ^/$ anchors) but no explicit security vulnerability fix. Encryption key reference was moved to different field but not removed. No CVE or security advisory mentioned.

Diff

diff --git a/cli/latest/reference/bedrock-agent-runtime/get-execution-flow-snapshot.md b/cli/latest/reference/bedrock-agent-runtime/get-execution-flow-snapshot.md
index fdeee213a..08c368528 100644
--- a//cli/latest/reference/bedrock-agent-runtime/get-execution-flow-snapshot.md
+++ b//cli/latest/reference/bedrock-agent-runtime/get-execution-flow-snapshot.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
@@ -71,2 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    --execution-identifier <value>
-    --flow-alias-identifier <value>
@@ -73,0 +72,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    --flow-alias-identifier <value>
+    --execution-identifier <value>
@@ -98 +98 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--execution-identifier` (string) [required]
+`--flow-identifier` (string) [required]
@@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> The unique identifier of the flow execution.
+> The unique identifier of the flow.
@@ -106 +106 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[a-zA-Z0-9-]{1,36}$|^(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10}/alias/[0-9a-zA-Z]{10}/execution/[a-zA-Z0-9-]{1,36})$`
+>   * pattern: `(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10})|([0-9a-zA-Z]{10})`
@@ -118 +118 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10}/alias/[0-9a-zA-Z]{10})|(\bTSTALIASID\b|[0-9a-zA-Z]+)$`
+>   * pattern: `(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10}/alias/[0-9a-zA-Z]{10})|(\bTSTALIASID\b|[0-9a-zA-Z]+)`
@@ -122 +122 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--flow-identifier` (string) [required]
+`--execution-identifier` (string) [required]
@@ -124 +124 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> The unique identifier of the flow.
+> The unique identifier of the flow execution.
@@ -130 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10})|([0-9a-zA-Z]{10})$`
+>   * pattern: `[a-zA-Z0-9-]{1,36}$|^(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10}/alias/[0-9a-zA-Z]{10}/execution/[a-zA-Z0-9-]{1,36})`
@@ -233 +233 @@ Disable automatically prompt for CLI input parameters.
-customerEncryptionKeyArn -> (string)
+flowIdentifier -> (string)
@@ -235 +235 @@ customerEncryptionKeyArn -> (string)
-> The Amazon Resource Name (ARN) of the customer managed KMS key that’s used to encrypt the flow snapshot.
+> The unique identifier of the flow.
@@ -239 +239 @@ customerEncryptionKeyArn -> (string)
->   * min: `1`
+>   * min: `0`
@@ -241 +241 @@ customerEncryptionKeyArn -> (string)
->   * pattern: `^arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}$`
+>   * pattern: `(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10})|([0-9a-zA-Z]{10})`
@@ -245,7 +245 @@ customerEncryptionKeyArn -> (string)
-definition -> (string)
-
-> The flow definition used for the flow execution, including the nodes, connections, and configuration at the time when the execution started.
-> 
-> The definition returns as a string that follows the structure of a [FlowDefinition](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_FlowDefinition.html) object.
-
-executionRoleArn -> (string)
+flowAliasIdentifier -> (string)
@@ -253 +247 @@ executionRoleArn -> (string)
-> The Amazon Resource Name (ARN) of the IAM service role that’s used by the flow execution.
+> The unique identifier of the flow alias used for the flow execution.
@@ -259 +253 @@ executionRoleArn -> (string)
->   * pattern: `^arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/(service-role/)?.+$`
+>   * pattern: `(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10}/alias/[0-9a-zA-Z]{10})|(\bTSTALIASID\b|[0-9a-zA-Z]+)`
@@ -263 +257 @@ executionRoleArn -> (string)
-flowAliasIdentifier -> (string)
+flowVersion -> (string)
@@ -265 +259 @@ flowAliasIdentifier -> (string)
-> The unique identifier of the flow alias used for the flow execution.
+> The version of the flow used for the flow execution.
@@ -269,3 +263,3 @@ flowAliasIdentifier -> (string)
->   * min: `0`
->   * max: `2048`
->   * pattern: `^(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10}/alias/[0-9a-zA-Z]{10})|(\bTSTALIASID\b|[0-9a-zA-Z]+)$`
+>   * min: `1`
+>   * max: `5`
+>   * pattern: `(DRAFT|[0-9]{0,4}[1-9][0-9]{0,4})`
@@ -275 +269 @@ flowAliasIdentifier -> (string)
-flowIdentifier -> (string)
+executionRoleArn -> (string)
@@ -277 +271 @@ flowIdentifier -> (string)
-> The unique identifier of the flow.
+> The Amazon Resource Name (ARN) of the IAM service role that’s used by the flow execution.
@@ -283 +277 @@ flowIdentifier -> (string)
->   * pattern: `^(arn:aws:bedrock:[a-z0-9-]{1,20}:[0-9]{12}:flow/[0-9a-zA-Z]{10})|([0-9a-zA-Z]{10})$`
+>   * pattern: `arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/(service-role/)?.+`
@@ -287 +281 @@ flowIdentifier -> (string)
-flowVersion -> (string)
+definition -> (string)
@@ -289 +283,7 @@ flowVersion -> (string)
-> The version of the flow used for the flow execution.
+> The flow definition used for the flow execution, including the nodes, connections, and configuration at the time when the execution started.
+> 
+> The definition returns as a string that follows the structure of a [FlowDefinition](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_FlowDefinition.html) object.
+
+customerEncryptionKeyArn -> (string)
+
+> The Amazon Resource Name (ARN) of the customer managed KMS key that’s used to encrypt the flow snapshot.
@@ -294,2 +294,2 @@ flowVersion -> (string)
->   * max: `5`
->   * pattern: `^(DRAFT|[0-9]{0,4}[1-9][0-9]{0,4})$`
+>   * max: `2048`
+>   * pattern: `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}`
@@ -309 +309 @@ flowVersion -> (string)
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »