AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-09-28 · Documentation low

File: cli/latest/reference/bedrock-agent-runtime/get-invocation-step.md

Summary

Updated regex patterns, added sessionId field in output structure, and reordered union structure keys

Security assessment

Pattern validation changes remove regex anchors but don't explicitly address security vulnerabilities. Session ID field addition appears to be documentation refinement rather than security feature introduction. No evidence of patching vulnerabilities.

Diff

diff --git a/cli/latest/reference/bedrock-agent-runtime/get-invocation-step.md b/cli/latest/reference/bedrock-agent-runtime/get-invocation-step.md
index 2f3dd51e4..f69170fa5 100644
--- a//cli/latest/reference/bedrock-agent-runtime/get-invocation-step.md
+++ b//cli/latest/reference/bedrock-agent-runtime/get-invocation-step.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
@@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -110 +110 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -120 +120 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^(arn:aws(-[^:]+)?:bedrock:[a-z0-9-]+:[0-9]{12}:session/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})|([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$`
+>   * pattern: `(arn:aws(-[^:]+)?:bedrock:[a-z0-9-]+:[0-9]{12}:session/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})|([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})`
@@ -225,0 +226,10 @@ invocationStep -> (structure)
+> 
+> sessionId -> (string) [required]
+>
+>> The unique identifier of the session containing the invocation step.
+>> 
+>> Constraints:
+>> 
+>>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
+>> 
+
@@ -233 +243 @@ invocationStep -> (structure)
->>   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -243 +253 @@ invocationStep -> (structure)
->>   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -277 +287,11 @@ invocationStep -> (structure)
->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `image`, `text`.
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `text`, `image`.
+>>>> 
+>>>> text -> (string)
+>>>>
+>>>>> The text in the invocation step.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>> 
+
@@ -326 +346 @@ invocationStep -> (structure)
->>>>>>>>   * pattern: `^s3://[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]/.{1,1024}$`
+>>>>>>>>   * pattern: `s3://[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]/.{1,1024}`
@@ -329,20 +348,0 @@ invocationStep -> (structure)
->>>> 
->>>> text -> (string)
->>>>
->>>>> The text in the invocation step.
->>>>> 
->>>>> Constraints:
->>>>> 
->>>>>   * min: `1`
->>>>> 
-
-> 
-> sessionId -> (string) [required]
->
->> The unique identifier of the session containing the invocation step.
->> 
->> Constraints:
->> 
->>   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
->> 
-
@@ -360 +360 @@ invocationStep -> (structure)
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »