AWS cli medium security documentation change

Service: cli · 2026-01-22 · Security-related medium

File: cli/latest/reference/bedrock-agentcore/get-browser-session.md

Summary

Added documentation for browser extensions configuration including S3 storage requirements and constraints

Security assessment

The change adds security-critical constraints for browser extensions (min/max limits, S3 bucket naming patterns). It explicitly documents security controls for extension sourcing from S3, including required bucket naming patterns and versionId constraints. This prevents arbitrary extension loading and enforces secure sourcing mechanisms.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore/get-browser-session.md b/cli/latest/reference/bedrock-agentcore/get-browser-session.md
index abb1f89c7..388fc9b37 100644
--- a//cli/latest/reference/bedrock-agentcore/get-browser-session.md
+++ b//cli/latest/reference/bedrock-agentcore/get-browser-session.md
@@ -15 +15 @@
-  * [AWS CLI 2.33.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.4 Command Reference](../../index.html) »
@@ -270,0 +271,61 @@ viewPort -> (structure)
+extensions -> (list)
+
+> The list of browser extensions that are configured in the browser session.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `10`
+> 
+
+> 
+> (structure)
+>
+>> Browser extension configuration.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location where the browser extension files are stored. This specifies the source from which the extension will be loaded and installed.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>> 
+>>> s3 -> (structure)
+>>>
+>>>> The Amazon S3 location of the resource. Use this when the resource is stored in an Amazon S3 bucket.
+>>>> 
+>>>> bucket -> (string) [required]
+>>>>
+>>>>> The name of the Amazon S3 bucket where the resource is stored.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `3`
+>>>>>   * max: `63`
+>>>>>   * pattern: `[a-z0-9][a-z0-9.-]*[a-z0-9]`
+>>>>> 
+
+>>>> 
+>>>> prefix -> (string) [required]
+>>>>
+>>>>> The name of the Amazon S3 prefix/key where the resource is stored.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>> 
+
+>>>> 
+>>>> versionId -> (string)
+>>>>
+>>>>> The name of the Amazon S3 version ID where the resource is stored (Optional).
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>> 
+
+
@@ -356 +417 @@ lastUpdatedAt -> (timestamp)
-  * [AWS CLI 2.33.2 Command Reference](../../index.html) »
+  * [AWS CLI 2.33.4 Command Reference](../../index.html) »