AWS cli documentation change
Summary
Updated CLI version reference from 2.31.8 to 2.31.10. Improved documentation for OAuth 2.0 token retrieval parameters including credential provider references, callback URL validation, 3LO flow behavior, and custom parameter handling.
Security assessment
Changes clarify security-related parameters (OAuth scopes, callback URL validation, 3LO flow controls) but do not indicate remediation of a specific vulnerability. Enhancements improve security documentation without evidence of addressing an active exploit.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore/get-resource-oauth2-token.md b/cli/latest/reference/bedrock-agentcore/get-resource-oauth2-token.md index 8e16d4dbc..f261d5691 100644 --- a//cli/latest/reference/bedrock-agentcore/get-resource-oauth2-token.md +++ b//cli/latest/reference/bedrock-agentcore/get-resource-oauth2-token.md @@ -15 +15 @@ - * [AWS CLI 2.31.8 Command Reference](../../index.html) » + * [AWS CLI 2.31.10 Command Reference](../../index.html) » @@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c -Returns the OAuth 2.0 token of the provided resource +Returns the OAuth 2.0 token of the provided resource. @@ -100 +100 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -> The identity token of the workload you want to retrive the Oauth2 Token of. +> The identity token of the workload from which you want to retrieve the OAuth2 token. @@ -111 +111 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -> Reference to the credential provider +> The name of the resource’s credential provider. @@ -123 +123 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc -> The OAuth scopes requested +> The OAuth scopes being requested. @@ -142 +142 @@ Syntax: -> The type of flow to be performed +> The type of flow to be performed. @@ -153 +153 @@ Syntax: -> Callback url to redirect after token retrieval completes. Should be one of the provideded urls during WorkloadIdentity creation +> The callback URL to redirect to after the OAuth 2.0 token retrieval is complete. This URL must be one of the provided URLs configured for the workload identity. @@ -165 +165 @@ Syntax: -> If true, always initiate a new 3LO flow +> Indicates whether to always initiate a new three-legged OAuth (3LO) flow, regardless of any existing session. @@ -169 +169 @@ Syntax: -> Gives the ability to send extra/custom parameters to the resource credentials provider during the authorization process. Standard OAuth2 flow parameters will not be overriden. +> A map of custom parameters to include in the authorization request to the resource credential provider. These parameters are in addition to the standard OAuth 2.0 flow parameters, and will not override them. @@ -304 +304 @@ authorizationUrl -> (string) -> The URL for the authorization process, provided if the Access token requires user Authorization. +> The URL to initiate the authorization process, provided when the access token requires user authorization. @@ -308 +308 @@ accessToken -> (string) -> OAuth2 token ready for use +> The OAuth 2.0 access token to use. @@ -327 +327 @@ accessToken -> (string) - * [AWS CLI 2.31.8 Command Reference](../../index.html) » + * [AWS CLI 2.31.10 Command Reference](../../index.html) »