AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-03-25 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md

Summary

Added new --filesystem-configurations parameter with session storage support for persistent storage across AgentCore Runtime sessions, including mount path constraints and syntax examples

Security assessment

This change adds documentation for a new feature (filesystem configurations for persistent storage) but does not indicate any security vulnerability being addressed. The constraints on mount paths (must be under /mnt with specific patterns) are architectural constraints rather than security fixes.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
index 3fe10a335..68a878dda 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.14 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.16 Command Reference](../../index.html) »
@@ -77,0 +78 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--filesystem-configurations <value>]
@@ -698,0 +700,54 @@ JSON Syntax:
+`--filesystem-configurations` (list)
+
+> The filesystem configurations to mount into the AgentCore Runtime. Use filesystem configurations to provide persistent storage to your AgentCore Runtime sessions.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `1`
+> 
+
+> 
+> (tagged union structure)
+>
+>> Configuration for a filesystem that can be mounted into the AgentCore Runtime.
+>> 
+>> ### Note
+>> 
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionStorage`.
+>> 
+>> sessionStorage -> (structure)
+>>
+>>> Configuration for session storage. Session storage provides persistent storage that is preserved across AgentCore Runtime session invocations.
+>>> 
+>>> mountPath -> (string) [required]
+>>>
+>>>> The mount path for the session storage filesystem inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data` ).
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `6`
+>>>>   * max: `200`
+>>>>   * pattern: `/mnt/[a-zA-Z0-9._-]+/?`
+>>>> 
+
+
+Shorthand Syntax:
+    
+    
+    sessionStorage={mountPath=string} ...
+    
+
+JSON Syntax:
+    
+    
+    [
+      {
+        "sessionStorage": {
+          "mountPath": "string"
+        }
+      }
+      ...
+    ]
+    
+
@@ -932 +987 @@ status -> (string)
-  * [AWS CLI 2.34.14 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.16 Command Reference](../../index.html) »