AWS cli documentation change

Service: cli · 2026-03-22 · Documentation low

File: cli/latest/reference/bedrock-agentcore/start-browser-session.md

Summary

Added new --enterprise-policies and --certificates parameters to the start-browser-session command, allowing configuration of enterprise policies from S3 and certificates from Secrets Manager. Also updated AWS CLI version reference from 2.34.12 to 2.34.14.

Security assessment

This change adds documentation for new security-related features (enterprise policies and certificate management) but does not indicate it's addressing a specific security vulnerability or incident. The additions are feature enhancements that improve security posture by allowing enterprise policy enforcement and certificate management, but there's no evidence of a security incident being fixed.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore/start-browser-session.md b/cli/latest/reference/bedrock-agentcore/start-browser-session.md
index 1d4811c8e..053822f3d 100644
--- a//cli/latest/reference/bedrock-agentcore/start-browser-session.md
+++ b//cli/latest/reference/bedrock-agentcore/start-browser-session.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »
@@ -86,0 +87,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--enterprise-policies <value>]
+    [--certificates <value>]
@@ -403 +405 @@ JSON Syntax:
->>>>>>>   * pattern: `arn:aws:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+`
+>>>>>>>   * pattern: `arn:aws(-[a-z-]+)?:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+`
@@ -456,0 +459,154 @@ JSON Syntax:
+`--enterprise-policies` (list)
+
+> A list of files containing enterprise policies for the browser.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `100`
+> 
+
+> 
+> (structure)
+>
+>> Browser enterprise policy configuration.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location of the enterprise policy file.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>> 
+>>> s3 -> (structure)
+>>>
+>>>> The Amazon S3 location of the resource. Use this when the resource is stored in an Amazon S3 bucket.
+>>>> 
+>>>> bucket -> (string) [required]
+>>>>
+>>>>> The name of the Amazon S3 bucket where the resource is stored.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `3`
+>>>>>   * max: `63`
+>>>>>   * pattern: `[a-z0-9][a-z0-9.-]*[a-z0-9]`
+>>>>> 
+
+>>>> 
+>>>> prefix -> (string) [required]
+>>>>
+>>>>> The name of the Amazon S3 prefix/key where the resource is stored.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>> 
+
+>>>> 
+>>>> versionId -> (string)
+>>>>
+>>>>> The name of the Amazon S3 version ID where the resource is stored (Optional).
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>> 
+
+>> 
+>> type -> (string)
+>>
+>>> The enterprise policy type. See BrowserEnterprisePolicyType.
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `MANAGED`
+>>>   * `RECOMMENDED`
+>>> 
+
+
+Shorthand Syntax:
+    
+    
+    location={s3={bucket=string,prefix=string,versionId=string}},type=string ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "location": {
+          "s3": {
+            "bucket": "string",
+            "prefix": "string",
+            "versionId": "string"
+          }
+        },
+        "type": "MANAGED"|"RECOMMENDED"
+      }
+      ...
+    ]
+    
+
+`--certificates` (list)
+
+> A list of certificates to install in the browser session.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `200`
+> 
+
+> 
+> (structure)
+>
+>> A certificate to install in the browser or code interpreter session.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location of the certificate.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `secretsManager`.
+>>> 
+>>> secretsManager -> (structure)
+>>>
+>>>> The Amazon Web Services Secrets Manager location of the certificate.
+>>>> 
+>>>> secretArn -> (string) [required]
+>>>>
+>>>>> The ARN of the Amazon Web Services Secrets Manager secret containing the certificate.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `arn:aws(-[a-z-]+)?:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+`
+>>>>> 
+
+
+Shorthand Syntax:
+    
+    
+    location={secretsManager={secretArn=string}} ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "location": {
+          "secretsManager": {
+            "secretArn": "string"
+          }
+        }
+      }
+      ...
+    ]
+    
+
@@ -655 +811 @@ streams -> (structure)
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »