AWS bedrock high security documentation change
Summary
Changed API key guidance from long-term to short-term keys and added recommendation to use IAM roles or temporary credentials for production applications
Security assessment
This change directly addresses security best practices by discouraging long-term API keys (which pose security risks if compromised) and recommending short-term keys and IAM roles/temporary credentials. The explicit guidance for production applications indicates this is a security-focused update to prevent credential exposure risks.
Diff
diff --git a/bedrock/latest/userguide/getting-started.md b/bedrock/latest/userguide/getting-started.md index 80927b61e..2aa81f1aa 100644 --- a//bedrock/latest/userguide/getting-started.md +++ b//bedrock/latest/userguide/getting-started.md @@ -13 +13 @@ In this section, we will show you how to get started with Amazon Bedrock within -**Step 2 - API key:** Once you have an AWS account, you can create a long-term API key to authenticate your requests to Amazon Bedrock. To do that, go to the [Amazon Bedrock service in AWS Console](https://console.aws.amazon.com/bedrock/home#/api-keys/long-term/create) and generate a long term key. For more information, see the [API keys](./api-keys.html) section in the [Build](./build.html) chapter. +**Step 2 - API key:** Once you have an AWS account, you can create a short-term API key to authenticate your requests to Amazon Bedrock. To do that, go to the [Amazon Bedrock service in AWS Console](https://console.aws.amazon.com/bedrock/home#/api-keys/short-term/create) and generate a short-term key. For production applications, use [IAM roles or temporary credentials](https://docs.aws.amazon.com/IAM/latest/UserGuide/security-creds-programmatic-access.html#security-creds-alternatives-to-long-term-access-keys). For more information, see the [API keys](./api-keys.html) section in the [Build](./build.html) chapter.