AWS Security ChangesHomeSearch

AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-04-10 · Documentation low

File: bedrock-agentcore/latest/devguide/code-interpreter-getting-started.md

Summary

Updated formatting for section headers, removed a waiver note from an IAM policy example, modified a resource ARN placeholder format, removed a topics list, and fixed a typo.

Security assessment

The removal of the waiver note '&TCX5-2025-waiver;' could be related to internal compliance, but there is no concrete evidence in the diff that it addresses a specific security vulnerability. The ARN placeholder change (++<account_id>++) is a formatting adjustment. These are documentation clarifications and formatting updates without introducing or documenting security features.

Diff

diff --git a/bedrock-agentcore/latest/devguide/code-interpreter-getting-started.md b/bedrock-agentcore/latest/devguide/code-interpreter-getting-started.md
index 79ee7703a..3c3d5cced 100644
--- a//bedrock-agentcore/latest/devguide/code-interpreter-getting-started.md
+++ b//bedrock-agentcore/latest/devguide/code-interpreter-getting-started.md
@@ -56 +56 @@ Perform the following steps to configure your AWS credentials and attach the req
-  1. ###### Verify your AWS credentials
+  1. **Verify your AWS credentials**
@@ -64 +64 @@ Confirm your AWS credentials are configured:
-Take note of the user or credentials returned here, as you'll be using it when attaching the required permissions.
+Take note of the user or credentials returned here, as you’ll be using it when attaching the required permissions.
@@ -68 +68 @@ If this command fails, configure your credentials. For more information, see [Co
-  2. ###### Attach required permissions
+  2. **Attach required permissions**
@@ -77 +77 @@ Replace `<region>` with your chosen region (for example, `us-west-2`) and `<acco
-        "Version":"2012-10-17",	&TCX5-2025-waiver;
+        "Version":"2012-10-17",	
@@ -93 +93 @@ Replace `<region>` with your chosen region (for example, `us-west-2`) and `<acco
-                "Resource": "arn:aws:bedrock-agentcore:<region>:<account_id>:code-interpreter/*"
+                "Resource": "arn:aws:bedrock-agentcore:<region>:++<account_id>++:code-interpreter/*"
@@ -101,2 +101 @@ Replace `<region>` with your chosen region (for example, `us-west-2`) and `<acco
-
-###### To attach this policy
+**To attach this policy**
@@ -121 +120 @@ Follow these steps:
-If you're deploying agents to Amazon Bedrock AgentCore Runtime, you'll also eed to create an IAM execution role with a service trust policy. For more information, see [Get started with AgentCore Runtime](./runtime-getting-started.html).
+If you’re deploying agents to Amazon Bedrock AgentCore Runtime, you’ll also eed to create an IAM execution role with a service trust policy. For more information, see [Get started with AgentCore Runtime](./runtime-getting-started.html).
@@ -125,9 +123,0 @@ The following sections show you how to use the Amazon Bedrock AgentCore Code Int
-###### Topics
-
-  * [Using AgentCore Code Interpreter via AWS Strands](./code-interpreter-using-strands.html)
-
-  * [Using AgentCore Code Interpreter directly](./code-interpreter-using-directly.html)
-
-
-
-