AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2025-10-13 · Documentation medium

File: cli/latest/reference/bedrock-agentcore-control/update-memory.md

Summary

Added 'selfManagedConfiguration' option with trigger conditions and invocation configuration for custom memory processing pipelines

Security assessment

The change introduces documentation for self-managed configurations involving SNS topics and S3 buckets which are security-sensitive resources. While it adds security-relevant documentation about infrastructure configuration, there's no evidence this addresses a specific existing security vulnerability.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/update-memory.md b/cli/latest/reference/bedrock-agentcore-control/update-memory.md
index c1457f37f..0a8c2b2e9 100644
--- a//cli/latest/reference/bedrock-agentcore-control/update-memory.md
+++ b//cli/latest/reference/bedrock-agentcore-control/update-memory.md
@@ -15 +15 @@
-  * [AWS CLI 2.31.10 Command Reference](../../index.html) »
+  * [AWS CLI 2.31.13 Command Reference](../../index.html) »
@@ -353 +353 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `semanticOverride`, `summaryOverride`, `userPreferenceOverride`.
+>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `semanticOverride`, `summaryOverride`, `userPreferenceOverride`, `selfManagedConfiguration`.
@@ -460,0 +461,102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>>> 
+>>>>> selfManagedConfiguration -> (structure)
+>>>>>
+>>>>>> The self managed configuration for a custom memory strategy.
+>>>>>> 
+>>>>>> triggerConditions -> (list)
+>>>>>>
+>>>>>>> A list of conditions that trigger memory processing.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * min: `1`
+>>>>>>> 
+
+>>>>>>> 
+>>>>>>> (tagged union structure)
+>>>>>>>
+>>>>>>>> Condition that triggers memory processing.
+>>>>>>>> 
+>>>>>>>> ### Note
+>>>>>>>> 
+>>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `messageBasedTrigger`, `tokenBasedTrigger`, `timeBasedTrigger`.
+>>>>>>>> 
+>>>>>>>> messageBasedTrigger -> (structure)
+>>>>>>>>
+>>>>>>>>> Message based trigger configuration.
+>>>>>>>>> 
+>>>>>>>>> messageCount -> (integer)
+>>>>>>>>>
+>>>>>>>>>> The number of messages that trigger memory processing.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `1`
+>>>>>>>>>>   * max: `50`
+>>>>>>>>>> 
+
+>>>>>>>> 
+>>>>>>>> tokenBasedTrigger -> (structure)
+>>>>>>>>
+>>>>>>>>> Token based trigger configuration.
+>>>>>>>>> 
+>>>>>>>>> tokenCount -> (integer)
+>>>>>>>>>
+>>>>>>>>>> Number of tokens that trigger memory processing.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `100`
+>>>>>>>>>>   * max: `500000`
+>>>>>>>>>> 
+
+>>>>>>>> 
+>>>>>>>> timeBasedTrigger -> (structure)
+>>>>>>>>
+>>>>>>>>> Time based trigger configuration.
+>>>>>>>>> 
+>>>>>>>>> idleSessionTimeout -> (integer)
+>>>>>>>>>
+>>>>>>>>>> Idle session timeout (seconds) that triggers memory processing.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints:
+>>>>>>>>>> 
+>>>>>>>>>>   * min: `10`
+>>>>>>>>>>   * max: `3000`
+>>>>>>>>>> 
+
+>>>>>> 
+>>>>>> invocationConfiguration -> (structure) [required]
+>>>>>>
+>>>>>>> Configuration to invoke a self-managed memory processing pipeline with.
+>>>>>>> 
+>>>>>>> topicArn -> (string) [required]
+>>>>>>>
+>>>>>>>> The ARN of the SNS topic for job notifications.
+>>>>>>>> 
+>>>>>>>> Constraints:
+>>>>>>>> 
+>>>>>>>>   * pattern: `arn:[a-z0-9-\.]{1,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[^/].{0,1023}`
+>>>>>>>> 
+
+>>>>>>> 
+>>>>>>> payloadDeliveryBucketName -> (string) [required]
+>>>>>>>
+>>>>>>>> The S3 bucket name for event payload delivery.
+>>>>>>>> 
+>>>>>>>> Constraints:
+>>>>>>>> 
+>>>>>>>>   * pattern: `[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]`
+>>>>>>>> 
+
+>>>>>> 
+>>>>>> historicalContextWindowSize -> (integer)
+>>>>>>
+>>>>>>> Number of historical messages to include in processing context.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * min: `0`
+>>>>>>>   * max: `50`
+>>>>>>> 
+
@@ -634,0 +737,102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+>>>> 
+>>>> selfManagedConfiguration -> (structure)
+>>>>
+>>>>> The updated self-managed configuration.
+>>>>> 
+>>>>> triggerConditions -> (list)
+>>>>>
+>>>>>> The updated list of conditions that trigger memory processing.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `1`
+>>>>>> 
+
+>>>>>> 
+>>>>>> (tagged union structure)
+>>>>>>
+>>>>>>> Condition that triggers memory processing.
+>>>>>>> 
+>>>>>>> ### Note
+>>>>>>> 
+>>>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `messageBasedTrigger`, `tokenBasedTrigger`, `timeBasedTrigger`.
+>>>>>>> 
+>>>>>>> messageBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Message based trigger configuration.
+>>>>>>>> 
+>>>>>>>> messageCount -> (integer)
+>>>>>>>>
+>>>>>>>>> The number of messages that trigger memory processing.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `1`
+>>>>>>>>>   * max: `50`
+>>>>>>>>> 
+
+>>>>>>> 
+>>>>>>> tokenBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Token based trigger configuration.
+>>>>>>>> 
+>>>>>>>> tokenCount -> (integer)
+>>>>>>>>
+>>>>>>>>> Number of tokens that trigger memory processing.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `100`
+>>>>>>>>>   * max: `500000`
+>>>>>>>>> 
+
+>>>>>>> 
+>>>>>>> timeBasedTrigger -> (structure)
+>>>>>>>
+>>>>>>>> Time based trigger configuration.
+>>>>>>>> 
+>>>>>>>> idleSessionTimeout -> (integer)
+>>>>>>>>
+>>>>>>>>> Idle session timeout (seconds) that triggers memory processing.
+>>>>>>>>> 
+>>>>>>>>> Constraints:
+>>>>>>>>> 
+>>>>>>>>>   * min: `10`
+>>>>>>>>>   * max: `3000`
+>>>>>>>>> 
+
+>>>>> 
+>>>>> invocationConfiguration -> (structure)
+>>>>>
+>>>>>> The updated configuration to invoke self-managed memory processing pipeline.
+>>>>>> 
+>>>>>> topicArn -> (string)
+>>>>>>
+>>>>>>> The updated ARN of the SNS topic for job notifications.
+>>>>>>> 
+>>>>>>> Constraints:
+>>>>>>> 
+>>>>>>>   * pattern: `arn:[a-z0-9-\.]{1,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[a-z0-9-\.]{0,63}:[^/].{0,1023}`
+>>>>>>> 
+
+>>>>>> 
+>>>>>> payloadDeliveryBucketName -> (string)
+>>>>>>
+>>>>>>> The updated S3 bucket name for event payload delivery.
+>>>>>>>