AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-13 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/create-memory.md

Summary

Added selfManagedConfiguration structure with trigger conditions and invocation configuration for custom memory processing pipelines

Security assessment

The changes introduce configuration options for self-managed memory processing pipelines but do not address any specific security vulnerabilities. While the documentation now includes security-sensitive elements like SNS topics and S3 buckets for payload delivery, these are standard cloud resource references rather than security fixes or new security features.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-memory.md b/cli/latest/reference/bedrock-agentcore-control/create-memory.md
index bf19ab13c..e4a889741 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-memory.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-memory.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.10 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
@@ -360 +360 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `semanticOverride`, `summaryOverride`, `userPreferenceOverride`.
+>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `semanticOverride`, `summaryOverride`, `userPreferenceOverride`, `selfManagedConfiguration`.
@@ -467,0 +468,102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>> 
+>>>> selfManagedConfiguration -> (structure)
+>>>>
+>>>>> The self managed configuration for a custom memory strategy.
+>>>>> 
+>>>>> triggerConditions -> (list)
+>>>>>
+>>>>>> A list of conditions that trigger memory processing.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>> 
+
+>>>>>> 
+>>>>>> (tagged union structure)
+>>>>>>
+>>>>>>> Condition that triggers memory processing.
+>>>>>>> 
+>>>>>>> ### Note
+>>>>>>> 
+>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `messageBasedTrigger`, `tokenBasedTrigger`, `timeBasedTrigger`.
+>>>>>>> 
+>>>>>>> messageBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Message based trigger configuration.
+>>>>>>>> 
+>>>>>>>> messageCount -> (integer)
+>>>>>>>>
+>>>>>>>>> The number of messages that trigger memory processing.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `1`
+>>>>>>>>>   * max: `50`
+>>>>>>>>> 
+
+>>>>>>> 
+>>>>>>> tokenBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Token based trigger configuration.
+>>>>>>>> 
+>>>>>>>> tokenCount -> (integer)
+>>>>>>>>
+>>>>>>>>> Number of tokens that trigger memory processing.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `100`
+>>>>>>>>>   * max: `500000`
+>>>>>>>>> 
+
+>>>>>>> 
+>>>>>>> timeBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Time based trigger configuration.
+>>>>>>>> 
+>>>>>>>> idleSessionTimeout -> (integer)
+>>>>>>>>
+>>>>>>>>> Idle session timeout (seconds) that triggers memory processing.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `10`
+>>>>>>>>>   * max: `3000`
+>>>>>>>>> 
+
+>>>>> 
+>>>>> invocationConfiguration -> (structure) [required]
+>>>>>
+>>>>>> Configuration to invoke a self-managed memory processing pipeline with.
+>>>>>> 
+>>>>>> topicArn -> (string) [required]
+>>>>>>
+>>>>>>> The ARN of the SNS topic for job notifications.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * pattern: `arn:[a-z0-9-\.]{1,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[^/].{0,1023}`
+>>>>>>> 
+
+>>>>>> 
+>>>>>> payloadDeliveryBucketName -> (string) [required]
+>>>>>>
+>>>>>>> The S3 bucket name for event payload delivery.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * pattern: `[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]`
+>>>>>>> 
+
+>>>>> 
+>>>>> historicalContextWindowSize -> (integer)
+>>>>>
+>>>>>> Number of historical messages to include in processing context.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `0`
+>>>>>>   * max: `50`
+>>>>>> 
+
@@ -518,0 +621,21 @@ JSON Syntax:
+            },
+            "selfManagedConfiguration": {
+              "triggerConditions": [
+                {
+                  "messageBasedTrigger": {
+                    "messageCount": integer
+                  },
+                  "tokenBasedTrigger": {
+                    "tokenCount": integer
+                  },
+                  "timeBasedTrigger": {
+                    "idleSessionTimeout": integer
+                  }
+                }
+                ...
+              ],
+              "invocationConfiguration": {
+                "topicArn": "string",
+                "payloadDeliveryBucketName": "string"
+              },
+              "historicalContextWindowSize": integer
@@ -824,0 +948 @@ memory -> (structure)
+>>>>>   * `SELF_MANAGED`
@@ -953,0 +1078,68 @@ memory -> (structure)
+>>>> 
+>>>> selfManagedConfiguration -> (structure)
+>>>>
+>>>>> Self-managed configuration settings.
+>>>>> 
+>>>>> triggerConditions -> (list) [required]
+>>>>>
+>>>>>> A list of conditions that trigger memory processing.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>> 
+
+>>>>>> 
+>>>>>> (tagged union structure)
+>>>>>>
+>>>>>>> Condition that triggers memory processing.
+>>>>>>> 
+>>>>>>> ### Note
+>>>>>>> 
+>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `messageBasedTrigger`, `tokenBasedTrigger`, `timeBasedTrigger`.
+>>>>>>> 
+>>>>>>> messageBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Message based trigger configuration.
+>>>>>>>> 
+>>>>>>>> messageCount -> (integer)
+>>>>>>>>
+>>>>>>>>> The number of messages that trigger memory processing.
+>>>>>>> 
+>>>>>>> tokenBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Token based trigger configuration.
+>>>>>>>> 
+>>>>>>>> tokenCount -> (integer)
+>>>>>>>>
+>>>>>>>>> Number of tokens that trigger memory processing.
+>>>>>>> 
+>>>>>>> timeBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Time based trigger configuration.
+>>>>>>>> 
+>>>>>>>> idleSessionTimeout -> (integer)
+>>>>>>>>
+>>>>>>>>> Idle session timeout (seconds) that triggers memory processing.
+>>>>> 
+>>>>> invocationConfiguration -> (structure) [required]
+>>>>>
+>>>>>> The configuration to use when invoking memory processing.
+>>>>>> 
+>>>>>> topicArn -> (string) [required]
+>>>>>>
+>>>>>>> The ARN of the SNS topic for job notifications.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * pattern: `arn:[a-z0-9-\.]{1,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[^/].{0,1023}`
+>>>>>>> 
+
+>>>>>> 
+>>>>>> payloadDeliveryBucketName -> (string) [required]