AWS devopsagent medium security documentation change
Summary
Added maximum tool length constraint (64 characters) and updated authentication credential update procedure requiring server deregistration/re-registration
Security assessment
The credential update procedure change enhances security by requiring complete credential rotation (deregister/reregister) instead of simple edits, reducing risks from stale credentials. The tool length limit prevents potential buffer overflow attacks.
Diff
diff --git a/devopsagent/latest/userguide/configuring-capabilities-for-aws-devops-agent-connecting-mcp-servers.md b/devopsagent/latest/userguide/configuring-capabilities-for-aws-devops-agent-connecting-mcp-servers.md index c7512ad0e..c11aea72d 100644 --- a//devopsagent/latest/userguide/configuring-capabilities-for-aws-devops-agent-connecting-mcp-servers.md +++ b//devopsagent/latest/userguide/configuring-capabilities-for-aws-devops-agent-connecting-mcp-servers.md @@ -29,0 +30,5 @@ When connecting MCP servers to AWS DevOps Agent, consider these security aspects + + + +Please note that the maximum tool length of any MCP tool is 64. + @@ -218 +223 @@ AWS DevOps Agent will now be able to use the allowlisted tools from your MCP ser -**Updating authentication credentials** – If your authentication credentials need to be updated, navigate to the **Capabilities** tab in the AWS DevOps Agent console, select your MCP server, click **Edit** , update the authentication configuration, and click **Save**. +**Updating authentication credentials** – If your authentication credentials need to be updated, you will need to re-register your MCP server. Navigate to the **Settings** page the AWS DevOps Agent console, locate your MCP server, remove any active associations, and click **Deregister**. Next, **register** your MCP server with the new authentication credentials and re-create any necessary associations with your Agent Space. @@ -220 +225 @@ AWS DevOps Agent will now be able to use the allowlisted tools from your MCP ser -**Viewing connected MCP servers** – To see all MCP servers connected to your Agent Space, select your Agent Space, go to the **Capabilities** tab, and check the **MCP Servers** section. +**Viewing connected MCP servers** – To see all MCP servers connected to your Agent Space, select your Agent Space, go to the **Capabilities** tab, and check the **MCP Servers** section. You can also update selected tools here.