AWS bedrock high security documentation change

Service: bedrock · 2026-02-28 · Security-related high

File: bedrock/latest/userguide/bda-using-api.md

Summary

Removed encryption configuration parameters and simplified sync API request structure. Added support for inline image bytes.

Security assessment

Removal of encryptionConfiguration block eliminates documentation for KMS key management and encryption context. This could lead to unintended unencrypted data processing if encryption is no longer configurable via the API.

Diff

diff --git a/bedrock/latest/userguide/bda-using-api.md b/bedrock/latest/userguide/bda-using-api.md
index 6a86ac803..29ab264ed 100644
--- a//bedrock/latest/userguide/bda-using-api.md
+++ b//bedrock/latest/userguide/bda-using-api.md
@@ -5 +5 @@
-Create a Data Automation ProjectInvoke Data Automation AsyncInvoke Data Automation (Sync)Get Data Automation StatusAsync Output ResponseBlueprint Optimization APIs
+Create a Data Automation ProjectGet Data Automation StatusAsync Output ResponseBlueprint Optimization APIs
@@ -51 +51,4 @@ There's a limit to the number of projects that can be created per AWS account. C
-## Invoke Data Automation Async
+Async
+    
+
+**Invoke Data Automation Async**
@@ -107 +110,4 @@ When you run `InvokeDataAutomationAsync` on a video file, you can set a 5 minute
-## Invoke Data Automation (Sync)
+Sync
+    
+
+**Invoke Data Automation**
@@ -113 +119 @@ This API call initiates the synchronous processing of the provided via an S3 ref
-Here is the structure of the JSON request:
+Here is the structure of the JSON request for both image and document. Sync API request supports both image bytes and S3 bucket. To use image bytes, simply replace `“s3Uri”: “string”` in “inputConfiguration” section with `“bytes“: “base64-encoded string“` `outputConfiguration` is optional with default is inline output. If S3 uri is provided as outputConfiguration, encrypted output will be put into the specified S3 bucket.
@@ -120 +126 @@ Here is the structure of the JSON request:
-              "blueprintArn": "string",
+              "blueprintArn": "string",  //use for image
@@ -125 +130,0 @@ Here is the structure of the JSON request:
-        "clientToken": "string",
@@ -131,6 +135,0 @@ Here is the structure of the JSON request:
-        "encryptionConfiguration": { 
-           "kmsEncryptionContext": { 
-              "string" : "string" 
-           },
-           "kmsKeyId": "string"
-        },
@@ -138,4 +136,0 @@ Here is the structure of the JSON request:
-           "assetProcessingConfiguration": { 
-              "video": { 
-                 "segmentConfiguration": { ... }
-              }
@@ -144,9 +139,2 @@ Here is the structure of the JSON request:
-        "notificationConfiguration": { 
-           "eventBridgeConfiguration": { 
-              "eventBridgeEnabled": boolean
-           }
-        },
-        "tags": [ 
-           { 
-              "key": "string",
-              "value": "string"
+        "outputConfiguration": { 
+           "s3Uri": "string"
@@ -154 +141,0 @@ Here is the structure of the JSON request:
-        ]