AWS marketplace documentation change
Summary
Added OAuth authentication requirements, MCP server capabilities, and protocol version documentation. Updated enablement steps to include MCP server integration and AWS Marketplace UI references.
Security assessment
The changes explicitly document OAuth authentication configurations (client credentials, endpoints) which are security-related features. However, there is no evidence this addresses a specific security vulnerability rather than documenting standard authentication practices.
Diff
diff --git a/marketplace/latest/userguide/bedrock-agentcore-gateway.md b/marketplace/latest/userguide/bedrock-agentcore-gateway.md index cb020cc77..0eaccdf59 100644 --- a//marketplace/latest/userguide/bedrock-agentcore-gateway.md +++ b//marketplace/latest/userguide/bedrock-agentcore-gateway.md @@ -60,0 +61,15 @@ Your MCP server must meet the following requirements: + * OAuth authentication with one of following configurations: + + * client id, client secret, and discovery URL + + * client id, client secret, issuer, authorization endpoint and token endpoint. + + * The MCP server must have tool capabilities. + + * Supported MCP protocol versions: **2025-06-18** and **2025-03-26**. + + * For the provided URL or endpoint of the server, the URL should be encoded. The Gateway uses the same URL to invoke the server. + + + + @@ -105 +120 @@ Server configuration | Basic URL | -### Enabling Bedrock AgentCore Gateway on AWS Marketplace +### Enabling Bedrock AgentCore Gateway @@ -107 +122 @@ Server configuration | Basic URL | -Before you enable Gateway integration, test your OpenAPI specification with Amazon Bedrock AgentCore Gateway by completing these tasks: +Before you enable Gateway integration, test your OpenAPI specification or MCP server with Amazon Bedrock AgentCore Gateway by completing these tasks: @@ -118 +133,3 @@ Before you enable Gateway integration, test your OpenAPI specification with Amaz -To enable Gateway integration: +You can enable integration with Amazon Bedrock AgentCore by providing OpenAPI spec. + +###### To enable Gateway integration @@ -122 +139 @@ To enable Gateway integration: - 2. Open the [SaaS products](https://aws.amazon.com/marketplace/management/products/saas) page. + 2. Open the [AI agents and tools](https://aws.amazon.com/marketplace/management/products/aiagents) page. @@ -124 +141 @@ To enable Gateway integration: - 3. On the **SaaS products** tab, select the product to modify. + 3. On the **AI agents and tools products** tab, select the product to modify. @@ -130 +147 @@ To enable Gateway integration: - 6. Upload your OpenAPI specification. + 6. Upload your OpenAPI specification or use your MCP endpoint for MCP servers with OAuth authentication..