AWS cli medium security documentation change

Service: cli · 2026-05-01 · Security-related medium

File: cli/latest/reference/bedrock-agentcore-control/create-evaluator.md

Summary

Updated navigation links, AWS CLI version reference, and added a new optional parameter '--kms-key-arn' for specifying a KMS key to encrypt sensitive evaluator data.

Security assessment

Added a new parameter for customer-managed KMS keys to encrypt sensitive evaluator data. Explicitly references encryption at rest for security compliance, making it a security-related documentation addition.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-evaluator.md b/cli/latest/reference/bedrock-agentcore-control/create-evaluator.md
index 0ca3f172f..4b03e271e 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-evaluator.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-evaluator.md
@@ -14,2 +14,2 @@
-  * [previous](create-code-interpreter.html "create-code-interpreter") |
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [previous](create-configuration-bundle.html "create-configuration-bundle") |
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
@@ -22 +22 @@
-  * [← create-code-interpreter](create-code-interpreter.html "previous chapter \(use the left arrow\)") /
+  * [← create-configuration-bundle](create-configuration-bundle.html "previous chapter \(use the left arrow\)") /
@@ -73,0 +74 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--kms-key-arn <value>]
@@ -377,0 +379,12 @@ JSON Syntax:
+`--kms-key-arn` (string)
+
+> The Amazon Resource Name (ARN) of a customer managed KMS key to use for encrypting sensitive evaluator data, including instructions and rating scale. If you don’t specify a KMS key, the evaluator data is encrypted with an Amazon Web Services owned key. Only symmetric encryption KMS keys are supported. For more information, see [Encryption at rest for AgentCore Evaluations](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/evaluations-encryption.html) .
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `2048`
+>   * pattern: `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}`
+> 
+
+
@@ -574 +587 @@ status -> (string)
-  * [← create-code-interpreter](create-code-interpreter.html "previous chapter \(use the left arrow\)") /
+  * [← create-configuration-bundle](create-configuration-bundle.html "previous chapter \(use the left arrow\)") /
@@ -583,2 +596,2 @@ status -> (string)
-  * [previous](create-code-interpreter.html "create-code-interpreter") |
-  * [AWS CLI 2.34.38 Command Reference](../../index.html) »
+  * [previous](create-configuration-bundle.html "create-configuration-bundle") |
+  * [AWS CLI 2.34.40 Command Reference](../../index.html) »