AWS cli medium security documentation change

Service: cli · 2025-10-10 · Security-related medium

File: cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md

Summary

Added lifecycle-configuration parameter with session/timeout controls, updated protocol options (added A2A), reordered parameters, and adjusted environment variable constraints

Security assessment

The new 'lifecycle-configuration' parameter introduces security controls with idle session timeout (15m default) and max instance lifetime (8h default). These timeouts help mitigate risks of prolonged unauthorized access and resource exhaustion attacks. The protocol configuration now includes A2A option but no explicit security context is given for this addition.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
index 93c6e66d9..f98784e24 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.10 Command Reference](../../index.html) »
@@ -68 +67,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    [--description <value>]
@@ -72 +70,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    [--protocol-configuration <value>]
@@ -74 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    [--environment-variables <value>]
+    [--description <value>]
@@ -76,0 +75,3 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--protocol-configuration <value>]
+    [--lifecycle-configuration <value>]
+    [--environment-variables <value>]
@@ -112,11 +112,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--description` (string)
-
-> The description of the AgentCore Runtime.
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `4096`
-> 
-
-
@@ -250,29 +239,0 @@ JSON Syntax:
-`--protocol-configuration` (structure)
-
-> The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
-> 
-> serverProtocol -> (string) [required]
->
->> The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
->> 
->> Possible values:
->> 
->>   * `MCP`
->>   * `HTTP`
->> 
-
-
-Shorthand Syntax:
-    
-    
-    serverProtocol=string
-    
-
-JSON Syntax:
-    
-    
-    {
-      "serverProtocol": "MCP"|"HTTP"
-    }
-    
-
@@ -291 +252 @@ JSON Syntax:
-`--environment-variables` (map)
+`--description` (string)
@@ -293 +254 @@ JSON Syntax:
-> Environment variables to set in the AgentCore Runtime environment.
+> The description of the AgentCore Runtime.
@@ -297,2 +258,2 @@ JSON Syntax:
->   * min: `0`
->   * max: `50`
+>   * min: `1`
+>   * max: `4096`
@@ -301,31 +261,0 @@ JSON Syntax:
-> 
-> key -> (string)
->
->> Constraints:
->> 
->>   * min: `1`
->>   * max: `100`
->> 
-
-> 
-> value -> (string)
->
->> Constraints:
->> 
->>   * min: `0`
->>   * max: `5000`
->> 
-
-
-Shorthand Syntax:
-    
-    
-    KeyName1=string,KeyName2=string
-    
-
-JSON Syntax:
-    
-    
-    {"string": "string"
-      ...}
-    
@@ -439,0 +370,113 @@ JSON Syntax:
+`--protocol-configuration` (structure)
+
+> The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
+> 
+> serverProtocol -> (string) [required]
+>
+>> The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
+>> 
+>> Possible values:
+>> 
+>>   * `MCP`
+>>   * `HTTP`
+>>   * `A2A`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    serverProtocol=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "serverProtocol": "MCP"|"HTTP"|"A2A"
+    }
+    
+
+`--lifecycle-configuration` (structure)
+
+> The life cycle configuration for the AgentCore Runtime.
+> 
+> idleRuntimeSessionTimeout -> (integer)
+>
+>> Timeout in seconds for idle runtime sessions. When a session remains idle for this duration, it will be automatically terminated. Default: 900 seconds (15 minutes).
+>> 
+>> Constraints:
+>> 
+>>   * min: `60`
+>>   * max: `28800`
+>> 
+
+> 
+> maxLifetime -> (integer)
+>
+>> Maximum lifetime for the instance in seconds. Once reached, instances will be automatically terminated and replaced. Default: 28800 seconds (8 hours).
+>> 
+>> Constraints:
+>> 
+>>   * min: `60`
+>>   * max: `28800`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    idleRuntimeSessionTimeout=integer,maxLifetime=integer
+    
+
+JSON Syntax:
+    
+    
+    {
+      "idleRuntimeSessionTimeout": integer,
+      "maxLifetime": integer
+    }
+    
+
+`--environment-variables` (map)
+
+> Environment variables to set in the AgentCore Runtime environment.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `50`
+> 
+
+> 
+> key -> (string)
+>
+>> Constraints:
+>> 
+>>   * min: `1`
+>>   * max: `100`
+>> 
+
+> 
+> value -> (string)
+>
+>> Constraints:
+>> 
+>>   * min: `0`