AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-09-28 · Documentation low

File: cli/latest/reference/bedrock-agent-runtime/put-invocation-step.md

Summary

Updated CLI version reference, swapped parameter order between --session-identifier and --invocation-step-id, modified regex patterns to remove start/end anchors, added text field constraints, and adjusted S3 URI validation pattern

Security assessment

The changes primarily involve parameter ordering adjustments, documentation formatting, and regex pattern modifications (removing ^/$ anchors). While pattern changes could theoretically impact input validation security, there's no explicit evidence of addressing a known vulnerability. The added min:1 constraint for text fields improves validation but doesn't specifically address security threats. No security advisories or vulnerability references are mentioned.

Diff

diff --git a/cli/latest/reference/bedrock-agent-runtime/put-invocation-step.md b/cli/latest/reference/bedrock-agent-runtime/put-invocation-step.md
index bbe470638..230c8313d 100644
--- a//cli/latest/reference/bedrock-agent-runtime/put-invocation-step.md
+++ b//cli/latest/reference/bedrock-agent-runtime/put-invocation-step.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »
@@ -75,0 +76 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    --session-identifier <value>
@@ -77 +77,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    [--invocation-step-id <value>]
@@ -80 +80 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    --session-identifier <value>
+    [--invocation-step-id <value>]
@@ -105 +105 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--invocation-identifier` (string) [required]
+`--session-identifier` (string) [required]
@@ -107 +107 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> The unique identifier (in UUID format) of the invocation to add the invocation step to.
+> The unique identifier for the session to add the invocation step to. You can specify either the session’s `sessionId` or its Amazon Resource Name (ARN).
@@ -111 +111 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>   * pattern: `(arn:aws(-[^:]+)?:bedrock:[a-z0-9-]+:[0-9]{12}:session/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})|([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})`
@@ -115 +115 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--invocation-step-id` (string)
+`--invocation-identifier` (string) [required]
@@ -117 +117 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> The unique identifier of the invocation step in UUID format.
+> The unique identifier (in UUID format) of the invocation to add the invocation step to.
@@ -121 +121 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -155 +155,11 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `image`, `text`.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `text`, `image`.
+>>> 
+>>> text -> (string)
+>>>
+>>>> The text in the invocation step.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>> 
+
@@ -204 +214 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>>   * pattern: `^s3://[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]/.{1,1024}$`
+>>>>>>>   * pattern: `s3://[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]/.{1,1024}`
@@ -207,10 +216,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>> 
->>> text -> (string)
->>>
->>>> The text in the invocation step.
->>>> 
->>>> Constraints:
->>>> 
->>>>   * min: `1`
->>>> 
-
@@ -223,0 +224 @@ JSON Syntax:
+          "text": "string",
@@ -232,2 +233 @@ JSON Syntax:
-          },
-          "text": "string"
+          }
@@ -240 +240 @@ JSON Syntax:
-`--session-identifier` (string) [required]
+`--invocation-step-id` (string)
@@ -242 +242 @@ JSON Syntax:
-> The unique identifier for the session to add the invocation step to. You can specify either the session’s `sessionId` or its Amazon Resource Name (ARN).
+> The unique identifier of the invocation step in UUID format.
@@ -246 +246 @@ JSON Syntax:
->   * pattern: `^(arn:aws(-[^:]+)?:bedrock:[a-z0-9-]+:[0-9]{12}:session/[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})|([a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12})$`
+>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -355 +355 @@ invocationStepId -> (string)
->   * pattern: `^[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}$`
+>   * pattern: `[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}`
@@ -369 +369 @@ invocationStepId -> (string)
-  * [AWS CLI 2.31.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.3 Command Reference](../../index.html) »