AWS cli medium security documentation change

Service: cli · 2025-10-10 · Security-related medium

File: cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md

Summary

Updated CLI version reference, reordered parameters, added lifecycle-configuration with idle session timeout and max lifetime settings, added A2A protocol option, and adjusted parameter constraints

Security assessment

Added 'lifecycle-configuration' with idle session timeout (60-28800s) and max lifetime (60-28800s) settings enforces session termination policies. These timeouts mitigate risks of prolonged unauthorized access to runtime sessions. The environment variables constraints (min/max lengths) and protocol configuration updates (A2A addition) show security-conscious parameter validation

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
index 657b62503..0ba4ce45b 100644
--- a//cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
+++ b//cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.8 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.10 Command Reference](../../index.html) »
@@ -68 +67,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    [--description <value>]
@@ -72,3 +71 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    [--protocol-configuration <value>]
-    [--client-token <value>]
-    [--environment-variables <value>]
+    [--description <value>]
@@ -76,0 +74,4 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--protocol-configuration <value>]
+    [--lifecycle-configuration <value>]
+    [--environment-variables <value>]
+    [--client-token <value>]
@@ -111,11 +111,0 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-`--description` (string)
-
-> The updated description of the AgentCore Runtime.
-> 
-> Constraints:
-> 
->   * min: `1`
->   * max: `4096`
-> 
-
-
@@ -249,42 +239 @@ JSON Syntax:
-`--protocol-configuration` (structure)
-
-> The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
-> 
-> serverProtocol -> (string) [required]
->
->> The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
->> 
->> Possible values:
->> 
->>   * `MCP`
->>   * `HTTP`
->> 
-
-
-Shorthand Syntax:
-    
-    
-    serverProtocol=string
-    
-
-JSON Syntax:
-    
-    
-    {
-      "serverProtocol": "MCP"|"HTTP"
-    }
-    
-
-`--client-token` (string)
-
-> A unique, case-sensitive identifier to ensure idempotency of the request.
-> 
-> Constraints:
-> 
->   * min: `33`
->   * max: `256`
->   * pattern: `[a-zA-Z0-9](-*[a-zA-Z0-9]){0,256}`
-> 
-
-
-`--environment-variables` (map)
+`--description` (string)
@@ -292 +241 @@ JSON Syntax:
-> Updated environment variables to set in the AgentCore Runtime environment.
+> The updated description of the AgentCore Runtime.
@@ -296,15 +245,2 @@ JSON Syntax:
->   * min: `0`
->   * max: `50`
-> 
-
-> 
-> key -> (string)
->
->> Constraints:
->> 
->>   * min: `1`
->>   * max: `100`
->> 
-
-> 
-> value -> (string)
+>   * min: `1`
+>   * max: `4096`
@@ -312,18 +247,0 @@ JSON Syntax:
->> Constraints:
->> 
->>   * min: `0`
->>   * max: `5000`
->> 
-
-
-Shorthand Syntax:
-    
-    
-    KeyName1=string,KeyName2=string
-    
-
-JSON Syntax:
-    
-    
-    {"string": "string"
-      ...}
@@ -438,0 +357,125 @@ JSON Syntax:
+`--protocol-configuration` (structure)
+
+> The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
+> 
+> serverProtocol -> (string) [required]
+>
+>> The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
+>> 
+>> Possible values:
+>> 
+>>   * `MCP`
+>>   * `HTTP`
+>>   * `A2A`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    serverProtocol=string
+    
+
+JSON Syntax:
+    
+    
+    {
+      "serverProtocol": "MCP"|"HTTP"|"A2A"
+    }
+    
+
+`--lifecycle-configuration` (structure)
+
+> The updated life cycle configuration for the AgentCore Runtime.
+> 
+> idleRuntimeSessionTimeout -> (integer)
+>
+>> Timeout in seconds for idle runtime sessions. When a session remains idle for this duration, it will be automatically terminated. Default: 900 seconds (15 minutes).
+>> 
+>> Constraints:
+>> 
+>>   * min: `60`
+>>   * max: `28800`
+>> 
+
+> 
+> maxLifetime -> (integer)
+>
+>> Maximum lifetime for the instance in seconds. Once reached, instances will be automatically terminated and replaced. Default: 28800 seconds (8 hours).
+>> 
+>> Constraints:
+>> 
+>>   * min: `60`
+>>   * max: `28800`
+>> 
+
+
+Shorthand Syntax:
+    
+    
+    idleRuntimeSessionTimeout=integer,maxLifetime=integer
+    
+
+JSON Syntax:
+    
+    
+    {
+      "idleRuntimeSessionTimeout": integer,
+      "maxLifetime": integer
+    }
+    
+
+`--environment-variables` (map)
+
+> Updated environment variables to set in the AgentCore Runtime environment.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `50`
+> 
+
+> 
+> key -> (string)
+>