AWS cli documentation change

Service: cli · 2026-03-22 · Documentation low

File: cli/latest/reference/bedrock-agentcore/start-code-interpreter-session.md

Summary

Added new --certificates parameter to the start-code-interpreter-session command, allowing installation of certificates from Secrets Manager. Also updated AWS CLI version reference from 2.34.12 to 2.34.14.

Security assessment

This change adds documentation for certificate management in code interpreter sessions, which is a security feature enhancement. It allows secure certificate installation from Secrets Manager but doesn't indicate it's fixing a specific security vulnerability or incident. The change improves security capabilities but isn't reactive to a known security issue.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore/start-code-interpreter-session.md b/cli/latest/reference/bedrock-agentcore/start-code-interpreter-session.md
index e6d1d095f..ef7bf976c 100644
--- a//cli/latest/reference/bedrock-agentcore/start-code-interpreter-session.md
+++ b//cli/latest/reference/bedrock-agentcore/start-code-interpreter-session.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »
@@ -81,0 +82 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--certificates <value>]
@@ -155,0 +157,58 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+`--certificates` (list)
+
+> A list of certificates to install in the code interpreter session.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `200`
+> 
+
+> 
+> (structure)
+>
+>> A certificate to install in the browser or code interpreter session.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location of the certificate.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `secretsManager`.
+>>> 
+>>> secretsManager -> (structure)
+>>>
+>>>> The Amazon Web Services Secrets Manager location of the certificate.
+>>>> 
+>>>> secretArn -> (string) [required]
+>>>>
+>>>>> The ARN of the Amazon Web Services Secrets Manager secret containing the certificate.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `arn:aws(-[a-z-]+)?:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+`
+>>>>> 
+
+
+Shorthand Syntax:
+    
+    
+    location={secretsManager={secretArn=string}} ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "location": {
+          "secretsManager": {
+            "secretArn": "string"
+          }
+        }
+      }
+      ...
+    ]
+    
+
@@ -309 +368 @@ createdAt -> (timestamp)
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »