AWS Security ChangesHomeSearch

AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-03-04 · Documentation low

File: bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.md

Summary

Updated Step 8 to include explicit session stopping command and clarify resource cleanup instructions

Security assessment

Changes emphasize proper resource management and session lifecycle control, but there's no indication of addressing security vulnerabilities in the diff.

Diff

diff --git a/bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.md b/bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.md
index 63e57a64a..a3a49f04c 100644
--- a//bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.md
+++ b//bedrock-agentcore/latest/devguide/runtime-get-started-toolkit.md
@@ -5 +5 @@
-PrerequisitesStep 1: Set up project and install dependenciesStep 2: Create your agent projectStep 3: Test your agent locallyStep 4: Enable observability for your agentStep 5: Deploy to Amazon Bedrock AgentCore RuntimeStep 6: Test your deployed agentStep 7: Invoke your agent programmaticallyStep 8: Clean upFind your resourcesCommon issues and solutionsAdvanced options (Optional)
+PrerequisitesStep 1: Set up project and install dependenciesStep 2: Create your agent projectStep 3: Test your agent locallyStep 4: Enable observability for your agentStep 5: Deploy to Amazon Bedrock AgentCore RuntimeStep 6: Test your deployed agentStep 7: Invoke your agent programmaticallyStep 8: Stop session or clean upFind your resourcesCommon issues and solutionsAdvanced options (Optional)
@@ -33 +33 @@ For information about the HTTP protocol that the agent uses, see [HTTP protocol
-  * Step 8: Clean up
+  * Step 8: Stop session or clean up
@@ -239 +239 @@ If you plan on integrating your agent with OAuth, you can't use the AWS SDK to c
-## Step 8: Clean up
+## Step 8: Stop session or clean up
@@ -241 +241,6 @@ If you plan on integrating your agent with OAuth, you can't use the AWS SDK to c
-If you no longer want to host the agent in the AgentCore Runtime, use the `destroy` commnand to delete the AWS resources that the starter toolit created for you.
+To stop the running session before the configurable `IdleRuntimeSessionTimeout` (defaulted at 15 minutes) and save on any potential runaway costs, execute:
+    
+    
+    agentcore stop-session
+
+If you no longer want to host the agent in the AgentCore Runtime, use the `destroy` command to delete the AWS resources that the starter toolkit created for you.