AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-05-04 · Documentation medium

File: cli/latest/reference/appstream/describe-stacks.md

Summary

Added documentation for AgentAccessConfig structure including settings for agent actions (COMPUTER_VISION/COMPUTER_INPUT), screenshot storage configuration (S3BucketArn), screenshot uploads (ScreenshotsUploadEnabled), screen resolution, and image format.

Security assessment

The changes document new agent access controls and screenshot handling features, which are security-related configurations for managing agent permissions and sensitive data storage. However, there's no evidence this addresses a specific vulnerability or incident.

Diff

diff --git a/cli/latest/reference/appstream/describe-stacks.md b/cli/latest/reference/appstream/describe-stacks.md
index d6e55ee4e..68f1f858d 100644
--- a//cli/latest/reference/appstream/describe-stacks.md
+++ b//cli/latest/reference/appstream/describe-stacks.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
@@ -622,0 +623,75 @@ Stacks -> (list)
+>> 
+>> AgentAccessConfig -> (structure)
+>>
+>>> The agent access configuration of the stack, if agent access is enabled.
+>>> 
+>>> Settings -> (list) [required]
+>>>
+>>>> The list of agent access settings that define permissions for each agent action. You must specify at least one setting.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>> 
+
+>>>> 
+>>>> (structure)
+>>>>
+>>>>> A permission setting for an agent action. Each setting specifies an agent action and whether it is enabled or disabled.
+>>>>> 
+>>>>> AgentAction -> (string) [required]
+>>>>>
+>>>>>> The agent action to configure. Valid values are COMPUTER_VISION and COMPUTER_INPUT. If you enable COMPUTER_INPUT, you must also enable COMPUTER_VISION.
+>>>>>> 
+>>>>>> Possible values:
+>>>>>> 
+>>>>>>   * `COMPUTER_VISION`
+>>>>>>   * `COMPUTER_INPUT`
+>>>>>> 
+
+>>>>> 
+>>>>> Permission -> (string) [required]
+>>>>>
+>>>>>> Whether the agent action is enabled or disabled.
+>>>>>> 
+>>>>>> Possible values:
+>>>>>> 
+>>>>>>   * `ENABLED`
+>>>>>>   * `DISABLED`
+>>>>>> 
+
+>>> 
+>>> S3BucketArn -> (string)
+>>>
+>>>> The Amazon Resource Name (ARN) of the Amazon S3 bucket where agent screenshots are stored. Required when ScreenshotsUploadEnabled is true.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * pattern: `^arn:aws(?:\-cn|\-iso\-b|\-iso|\-us\-gov)?:s3:::[a-z0-9][a-z0-9.\-]{1,61}[a-z0-9]$`
+>>>> 
+
+>>> 
+>>> ScreenshotsUploadEnabled -> (boolean)
+>>>
+>>>> Indicates whether screenshot uploads to Amazon S3 are enabled for agent sessions.
+>>> 
+>>> ScreenResolution -> (string) [required]
+>>>
+>>>> The screen resolution for the agent streaming environment.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `W_1280xH_720`
+>>>> 
+
+>>> 
+>>> ScreenImageFormat -> (string) [required]
+>>>
+>>>> The image format for agent screen captures.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `PNG`
+>>>>   * `JPEG`
+>>>> 
+
@@ -644 +719 @@ NextToken -> (string)
-  * [AWS CLI 2.34.40 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.41 Command Reference](../../index.html) »