AWS bedrock-agentcore documentation change
Summary
Expanded lifecycle status documentation for online evaluations, added failure states (CREATE_FAILED/UPDATE_FAILED/ERROR) and troubleshooting guidance including IAM/permission issues.
Security assessment
Documents operational security considerations (IAM roles, permissions) for evaluation configurations but doesn't address specific vulnerabilities. Enhances security awareness around misconfiguration risks.
Diff
diff --git a/bedrock-agentcore/latest/devguide/get-online-evaluations.md b/bedrock-agentcore/latest/devguide/get-online-evaluations.md index fb331322c..807f3951a 100644 --- a//bedrock-agentcore/latest/devguide/get-online-evaluations.md +++ b//bedrock-agentcore/latest/devguide/get-online-evaluations.md @@ -7 +7 @@ -Code samples for AgentCore SDK and AWS SDKConsole +Lifecycle statusCode samples for AgentCore SDK and AWS SDKConsole @@ -13 +13,22 @@ The `GetOnlineEvaluationConfig` API retrieves the complete details and current s -Use this API to monitor the configuration’s lifecycle status (Creating, Active, Updating, or Deleting), check current execution status (ENABLED or DISABLED), and retrieve all configuration parameters including evaluator lists, data source settings, and output destinations. +Use this API to monitor the configuration’s lifecycle status (`ACTIVE`, `CREATING`, `CREATE_FAILED`, `UPDATING`, `UPDATE_FAILED`, `DELETING`, or `ERROR`), check current execution status (`ENABLED` or `DISABLED`), and retrieve all configuration parameters including evaluator lists, data source settings, and output destinations. + +## Lifecycle status + +The `status` field on an online evaluation configuration reports its lifecycle state, which is separate from the `executionStatus` field that controls whether the evaluation job is actively processing traces. + + * `ACTIVE` – The configuration is fully provisioned and ready to use. + + * `CREATING` – The configuration is being provisioned. Wait for it to transition to `ACTIVE` before updating or deleting. + + * `CREATE_FAILED` – Creation did not complete successfully. You cannot update a configuration in this state; call `DeleteOnlineEvaluationConfig` to remove it and then create a new one. + + * `UPDATING` – An update is in progress. Wait for the operation to complete before making additional changes. + + * `UPDATE_FAILED` – The most recent update did not apply. You can retry by calling `UpdateOnlineEvaluationConfig` again or remove the configuration with `DeleteOnlineEvaluationConfig`. + + * `DELETING` – The configuration is being removed. + + * `ERROR` – A problem occurred that requires your action. Check the `failureReason` field to identify the issue. Common causes include insufficient IAM role access, missing log group permissions, and exceeded service quotas. After fixing the issue, call `UpdateOnlineEvaluationConfig` to retry or `DeleteOnlineEvaluationConfig` to remove the configuration. + + +