AWS cli documentation change

Service: cli · 2026-03-22 · Documentation medium

File: cli/latest/reference/bedrock-agentcore-control/create-browser.md

Summary

Added documentation for enterprise policies and certificate management options in create-browser command

Security assessment

Added parameters for enterprise policies (security configurations) and certificates stored in Secrets Manager, which are security features but not fixes for existing vulnerabilities. The changes enable secure policy enforcement and certificate management through AWS services.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-browser.md b/cli/latest/reference/bedrock-agentcore-control/create-browser.md
index 8b9101a77..77260aaa3 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-browser.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-browser.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »
@@ -72,0 +73,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--enterprise-policies <value>]
+    [--certificates <value>]
@@ -292,0 +295,152 @@ JSON Syntax:
+`--enterprise-policies` (list)
+
+> A list of enterprise policy files for the browser.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `100`
+> 
+
+> 
+> (structure)
+>
+>> Browser enterprise policy configuration.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location of the enterprise policy file.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>> 
+>>> s3 -> (structure)
+>>>
+>>>> The Amazon S3 location for storing data. This structure defines where in Amazon S3 data is stored.
+>>>> 
+>>>> bucket -> (string) [required]
+>>>>
+>>>>> The name of the Amazon S3 bucket. This bucket contains the stored data.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]`
+>>>>> 
+
+>>>> 
+>>>> prefix -> (string) [required]
+>>>>
+>>>>> The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>> 
+
+>>>> 
+>>>> versionId -> (string)
+>>>>
+>>>>> The version ID of the Amazon Amazon S3 object. If not specified, the latest version of the object is used.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `3`
+>>>>>   * max: `1024`
+>>>>> 
+
+>> 
+>> type -> (string)
+>>
+>>> The type of browser enterprise policy. Available values are `MANAGED` and `RECOMMENDED` .
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `MANAGED`
+>>>   * `RECOMMENDED`
+>>> 
+
+
+Shorthand Syntax:
+    
+    
+    location={s3={bucket=string,prefix=string,versionId=string}},type=string ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "location": {
+          "s3": {
+            "bucket": "string",
+            "prefix": "string",
+            "versionId": "string"
+          }
+        },
+        "type": "MANAGED"|"RECOMMENDED"
+      }
+      ...
+    ]
+    
+
+`--certificates` (list)
+
+> A list of certificates to install in the browser.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `200`
+> 
+
+> 
+> (structure)
+>
+>> A certificate to install in the browser or code interpreter.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location of the certificate.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `secretsManager`.
+>>> 
+>>> secretsManager -> (structure)
+>>>
+>>>> The Amazon Web Services Secrets Manager location of the certificate.
+>>>> 
+>>>> secretArn -> (string) [required]
+>>>>
+>>>>> The ARN of the Amazon Web Services Secrets Manager secret containing the certificate.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `arn:aws(-[a-z-]+)?:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+`
+>>>>> 
+
+
+Shorthand Syntax:
+    
+    
+    location={secretsManager={secretArn=string}} ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "location": {
+          "secretsManager": {
+            "secretArn": "string"
+          }
+        }
+      }
+      ...
+    ]
+    
+
@@ -511 +665 @@ status -> (string)
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »