AWS bedrock-agentcore documentation change
Summary
Updated CLI documentation for adding targets to AgentCore gateway, changing from 'bedrock-agentcore-starter-toolkit' to 'agentcore' commands, adding MCP server target type, restructuring Lambda and OpenAPI target commands, and adding interactive TUI instructions.
Security assessment
The change adds explicit documentation for outbound authentication options (none|api-key|oauth) when adding OpenAPI schema targets, which is a security feature. However, there is no evidence this addresses a specific security vulnerability or incident - it appears to be routine documentation updates for new CLI syntax and features.
Diff
diff --git a/bedrock-agentcore/latest/devguide/gateway-add-target-cli.md b/bedrock-agentcore/latest/devguide/gateway-add-target-cli.md index 4ef39fdae..a74c5845e 100644 --- a//bedrock-agentcore/latest/devguide/gateway-add-target-cli.md +++ b//bedrock-agentcore/latest/devguide/gateway-add-target-cli.md @@ -7 +7 @@ -You can use the Amazon Bedrock AgentCore starter toolkit CLI to add targets to an existing gateway with simplified commands. +You can use the AgentCore CLI to add targets to an existing gateway with simplified commands. @@ -9 +9 @@ You can use the Amazon Bedrock AgentCore starter toolkit CLI to add targets to a -Lambda target +AgentCore CLI @@ -11,0 +12 @@ Lambda target +Add an MCP server target: @@ -13,4 +14,12 @@ Lambda target - bedrock-agentcore-starter-toolkit gateway create-mcp-gateway-target \ - --gateway-arn arn:aws:bedrock-agentcore:us-east-1:123456789012:gateway/abc123 \ - --gateway-url https://abc123.execute-api.us-east-1.amazonaws.com \ - --role-arn arn:aws:iam::123456789012:role/MyGatewayRole \ + + agentcore add gateway-target \ + --name MyMCPTarget \ + --type mcp-server \ + --endpoint https://your-mcp-server.example.com/mcp \ + --gateway MyGateway + agentcore deploy + +Add a Lambda function target: + + + agentcore add gateway-target \ @@ -18 +27,5 @@ Lambda target - --target-type lambda + --type lambda-function-arn \ + --lambda-arn arn:aws:lambda:us-east-1:123456789012:function:MyFunction \ + --tool-schema-file tools.json \ + --gateway MyGateway + agentcore deploy @@ -20 +33 @@ Lambda target -OpenAPI target with credentials +Add an OpenAPI schema target: @@ -22,0 +36,7 @@ OpenAPI target with credentials + agentcore add gateway-target \ + --name MyOpenAPITarget \ + --type open-api-schema \ + --schema path/to/openapi-spec.json \ + --outbound-auth none|api-key|oauth \ + --gateway MyGateway + agentcore deploy @@ -24,8 +44 @@ OpenAPI target with credentials - bedrock-agentcore-starter-toolkit gateway create-mcp-gateway-target \ - --gateway-arn arn:aws:bedrock-agentcore:us-east-1:123456789012:gateway/abc123 \ - --gateway-url https://abc123.execute-api.us-east-1.amazonaws.com \ - --role-arn arn:aws:iam::123456789012:role/MyGatewayRole \ - --name MyAPITarget \ - --target-type openApiSchema \ - --target-payload '{"s3":{"uri":"s3://my-bucket/api-spec.json"}}' \ - --credentials '{"api_key":"my-key","credential_location":"HEADER","credential_parameter_name":"X-API-Key"}' +Interactive @@ -33 +46,12 @@ OpenAPI target with credentials -MCP server target + +You can also use the AgentCore CLI interactive terminal UI. Run `agentcore` to open the TUI, then select **add** and choose **Gateway Target** : + + 1. In the **Add Resource** menu, select **Gateway Target** and press **Enter**. + + + + 2. Select the target type for your gateway. The wizard shows the available target types, including MCP Server endpoint, API Gateway REST API, OpenAPI Schema, Smithy Model, and Lambda function. + + + + 3. Follow the remaining wizard prompts to provide the target name, endpoint or schema details, and outbound authorization configuration. The specific fields depend on the target type you selected. @@ -37,6 +60,0 @@ MCP server target - bedrock-agentcore-starter-toolkit gateway create-mcp-gateway-target \ - --gateway-arn arn:aws:bedrock-agentcore:us-east-1:123456789012:gateway/abc123 \ - --gateway-url https://abc123.execute-api.us-east-1.amazonaws.com \ - --role-arn arn:aws:iam::123456789012:role/MyGatewayRole \ - --name MyMCPTarget \ - --target-type mcpServer @@ -44 +62 @@ MCP server target -Replace the gateway ARN, URL, and role ARN with the values from your gateway. For more CLI examples, see the [Get started with AgentCore Gateway](./gateway-quick-start.html). +For more CLI examples, see the [Get started with AgentCore Gateway](./gateway-quick-start.html).