AWS bedrock-agentcore documentation change
Summary
Changed heading style and restructured note about semantic search, including IAM permission requirement for enabling semantic search.
Security assessment
The change adds documentation about the required IAM action (bedrock-agentcore:SynchronizeGatewayTargets) for creating a gateway with semantic search, which is a security-related configuration detail. This helps users understand the necessary permissions for enabling this feature, but does not address a specific security vulnerability.
Diff
diff --git a/bedrock-agentcore/latest/devguide/gateway-create.md b/bedrock-agentcore/latest/devguide/gateway-create.md index 9ce6e2ed6..3e5502bf7 100644 --- a//bedrock-agentcore/latest/devguide/gateway-create.md +++ b//bedrock-agentcore/latest/devguide/gateway-create.md @@ -26 +26 @@ When you create a gateway, a [workload identity](./identity-manage-agent-ids.htm -###### Gateway features that can be set during creation +**Gateway features that can be set during creation** @@ -32 +32 @@ You can activate the following features of the gateway during creation: - * **Custom encryption of the gateway** – Specify the Amazon Resource Name (ARN) of a customer-managed AWS KMS key for greater control over the encryption process of your resource. If you don't include one, AWS encrypts the resource with an AWS-managed key. For more information, see [Encrypt your AgentCore gateway with a customer-managed KMS key](./gateway-encryption.html). + * **Custom encryption of the gateway** – Specify the Amazon Resource Name (ARN) of a customer-managed AWS KMS key for greater control over the encryption process of your resource. If you don’t include one, AWS encrypts the resource with an AWS-managed key. For more information, see [Encrypt your AgentCore gateway with a customer-managed KMS key](./gateway-encryption.html). @@ -40,5 +40 @@ You can activate the following features of the gateway during creation: -Note the following for semantic search: - - * You can only enable semantic search when creating a gateway. After you've created a gateway, you can't change its configuration to enable semantic search. - - * For an identity to create a gateway with semantic search, ensure that it has permissions to use the `bedrock-agentcore:SynchronizeGatewayTargets` IAM action. +Note the following for semantic search: **You can only enable semantic search when creating a gateway. After you’ve created a gateway, you can’t change its configuration to enable semantic search.** For an identity to create a gateway with semantic search, ensure that it has permissions to use the `bedrock-agentcore:SynchronizeGatewayTargets` IAM action.