AWS Security ChangesHomeSearch

AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-04-01 · Documentation low

File: bedrock-agentcore/latest/devguide/evaluations-prerequisites.md

Summary

Updated IAM role creation instructions to replace 'AgentCore Evaluations Starter Toolkits' with 'AgentCore CLI' and clarified that the CLI automatically creates the required IAM role during project deployment.

Security assessment

The change updates the recommended tooling for IAM role creation but does not address any specific security vulnerability or weakness. It clarifies automation of IAM role creation, which is a convenience feature rather than a security documentation addition. No evidence of security incident remediation or new security controls.

Diff

diff --git a/bedrock-agentcore/latest/devguide/evaluations-prerequisites.md b/bedrock-agentcore/latest/devguide/evaluations-prerequisites.md
index ed615f0f3..a00a67f19 100644
--- a//bedrock-agentcore/latest/devguide/evaluations-prerequisites.md
+++ b//bedrock-agentcore/latest/devguide/evaluations-prerequisites.md
@@ -127 +127 @@ Amazon Bedrock AgentCore Evaluations requires a custom IAM role to access AWS re
-To create the IAM role you can use the AgentCore Evaluations Console, AWS console, or AgentCore Evaluations starter toolkits.
+To create the IAM role you can use the AgentCore Evaluations console, the AWS console, or the AgentCore CLI.
@@ -133 +133 @@ To create the IAM role you can use the AgentCore Evaluations Console, AWS consol
-  * Option 2: Using AgentCore Evaluations Starter Toolkits
+  * Option 2: Using the AgentCore CLI
@@ -157 +157 @@ You can create the required IAM role directly through the AgentCore Evaluations
-### Option 2: Using AgentCore Evaluations Starter Toolkits
+### Option 2: Using the AgentCore CLI
@@ -159 +159 @@ You can create the required IAM role directly through the AgentCore Evaluations
-The AgentCore Evaluations Starter Toolkits automatically create the required IAM role.
+The AgentCore CLI automatically creates the required IAM role when you deploy your project.