AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-03-22 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/get-browser.md

Summary

Added documentation for enterprisePolicies and certificates fields in the browser response, including S3 storage for policies and Secrets Manager for certificates

Security assessment

This change documents new security features for managing enterprise policies and certificates in browsers, including secure storage in S3 and Secrets Manager. It enhances security posture by providing documentation for certificate management and policy enforcement but doesn't indicate a specific security vulnerability being fixed.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/get-browser.md b/cli/latest/reference/bedrock-agentcore-control/get-browser.md
index 833c8bbb6..00fa6e3d0 100644
--- a//cli/latest/reference/bedrock-agentcore-control/get-browser.md
+++ b//cli/latest/reference/bedrock-agentcore-control/get-browser.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »
@@ -377,0 +378,107 @@ browserSigning -> (structure)
+enterprisePolicies -> (list)
+
+> The list of enterprise policy files configured for the browser.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `100`
+> 
+
+> 
+> (structure)
+>
+>> Browser enterprise policy configuration.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location of the enterprise policy file.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`.
+>>> 
+>>> s3 -> (structure)
+>>>
+>>>> The Amazon S3 location for storing data. This structure defines where in Amazon S3 data is stored.
+>>>> 
+>>>> bucket -> (string) [required]
+>>>>
+>>>>> The name of the Amazon S3 bucket. This bucket contains the stored data.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]`
+>>>>> 
+
+>>>> 
+>>>> prefix -> (string) [required]
+>>>>
+>>>>> The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `1024`
+>>>>> 
+
+>>>> 
+>>>> versionId -> (string)
+>>>>
+>>>>> The version ID of the Amazon Amazon S3 object. If not specified, the latest version of the object is used.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `3`
+>>>>>   * max: `1024`
+>>>>> 
+
+>> 
+>> type -> (string)
+>>
+>>> The type of browser enterprise policy. Available values are `MANAGED` and `RECOMMENDED` .
+>>> 
+>>> Possible values:
+>>> 
+>>>   * `MANAGED`
+>>>   * `RECOMMENDED`
+>>> 
+
+
+certificates -> (list)
+
+> The list of certificates configured for the browser.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `200`
+> 
+
+> 
+> (structure)
+>
+>> A certificate to install in the browser or code interpreter.
+>> 
+>> location -> (tagged union structure) [required]
+>>
+>>> The location of the certificate.
+>>> 
+>>> ### Note
+>>> 
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `secretsManager`.
+>>> 
+>>> secretsManager -> (structure)
+>>>
+>>>> The Amazon Web Services Secrets Manager location of the certificate.
+>>>> 
+>>>> secretArn -> (string) [required]
+>>>>
+>>>>> The ARN of the Amazon Web Services Secrets Manager secret containing the certificate.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * pattern: `arn:aws(-[a-z-]+)?:secretsmanager:[a-z0-9-]+:[0-9]{12}:secret:[a-zA-Z0-9/_+=.@-]+`
+>>>>> 
+
+
@@ -415 +522 @@ lastUpdatedAt -> (timestamp)
-  * [AWS CLI 2.34.12 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.14 Command Reference](../../index.html) »