AWS cli documentation change

Service: cli · 2025-10-13 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/create-gateway-target.md

Summary

Updated documentation to add 'mcpServer' as a new gateway target option with HTTPS endpoint constraint, made credential-provider-configurations optional, added synchronization statuses, and clarified idempotency token behavior

Security assessment

The addition of HTTPS pattern enforcement for mcpServer endpoints improves security by mandating encrypted communication. However, there's no explicit mention of addressing a specific vulnerability. The credential-provider-configurations change could impact security configurations but appears to be a documentation clarification rather than a vulnerability fix.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-gateway-target.md b/cli/latest/reference/bedrock-agentcore-control/create-gateway-target.md
index 03b8c42cc..0b2ea95be 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-gateway-target.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-gateway-target.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.10 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
@@ -72 +72 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-    --credential-provider-configurations <value>
+    [--credential-provider-configurations <value>]
@@ -130 +130 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
-> A unique, case-sensitive identifier to ensure that the API request completes no more than one time. If this token matches a previous request, the service ignores the request, but does not return an error. For more information, see [Ensuring idempotency](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html) .
+> A unique, case-sensitive identifier to ensure that the API request completes no more than one time. If you don’t specify this field, a value is randomly generated for you. If this token matches a previous request, the service ignores the request, but doesn’t return an error. For more information, see [Ensuring idempotency](https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html) .
@@ -154 +154 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `openApiSchema`, `smithyModel`, `lambda`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `openApiSchema`, `smithyModel`, `lambda`, `mcpServer`.
@@ -508,0 +509,14 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>> 
+>> mcpServer -> (structure)
+>>
+>>> The MCP server specified as the gateway target.
+>>> 
+>>> endpoint -> (string) [required]
+>>>
+>>>> The endpoint for the MCP server target configuration.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `https://.*`
+>>>> 
+
@@ -587,0 +602,3 @@ JSON Syntax:
+        },
+        "mcpServer": {
+          "endpoint": "string"
@@ -593 +610 @@ JSON Syntax:
-`--credential-provider-configurations` (list) [required]
+`--credential-provider-configurations` (list)
@@ -901,0 +919,2 @@ status -> (string)
+>   * `SYNCHRONIZING`
+>   * `SYNCHRONIZE_UNSUCCESSFUL`
@@ -960 +979 @@ targetConfiguration -> (tagged union structure)
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `openApiSchema`, `smithyModel`, `lambda`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `openApiSchema`, `smithyModel`, `lambda`, `mcpServer`.
@@ -1314,0 +1334,14 @@ targetConfiguration -> (tagged union structure)
+>> 
+>> mcpServer -> (structure)
+>>
+>>> The MCP server specified as the gateway target.
+>>> 
+>>> endpoint -> (string) [required]
+>>>
+>>>> The endpoint for the MCP server target configuration.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `https://.*`
+>>>> 
+
@@ -1460,0 +1494,4 @@ credentialProviderConfigurations -> (list)
+lastSynchronizedAt -> (timestamp)
+
+> The last synchronization of the target.
+
@@ -1471 +1508 @@ credentialProviderConfigurations -> (list)
-  * [AWS CLI 2.31.10 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.13 Command Reference](../../index.html) »