AWS cli documentation change

Service: cli · 2026-05-07 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md

Summary

Updated CLI version, modified intermediate domain documentation, relaxed header pattern, increased max value limit, added new storage mount options (S3/EFS access points)

Security assessment

Changes include feature enhancements (new storage mount types) and documentation improvements. The header pattern change ([A-Za-z][A-Za-z0-9_-]{0,255}) is more permissive but lacks security context. No evidence of vulnerability remediation.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
index 9b66def7c..d3acfe2c3 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-agent-runtime.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »
@@ -634 +634 @@ JSON Syntax:
->>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable.
+>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain].
@@ -786 +786 @@ JSON Syntax:
->>>>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable.
+>>>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain].
@@ -881 +881 @@ JSON Syntax:
->>>   * pattern: `(Authorization|X-Amzn-Bedrock-AgentCore-Runtime-Custom-[a-zA-Z0-9-]+)`
+>>>   * pattern: `[A-Za-z][A-Za-z0-9_-]{0,255}`
@@ -1020 +1020 @@ JSON Syntax:
->   * max: `1`
+>   * max: `5`
@@ -1030 +1030 @@ JSON Syntax:
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionStorage`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionStorage`, `s3FilesAccessPoint`, `efsAccessPoint`.
@@ -1046,0 +1047,56 @@ JSON Syntax:
+>> 
+>> s3FilesAccessPoint -> (structure)
+>>
+>>> Configuration for an Amazon S3 Files access point to mount into the AgentCore Runtime.
+>>> 
+>>> accessPointArn -> (string) [required]
+>>>
+>>>> The ARN of the S3 Files access point to mount into the AgentCore Runtime.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `256`
+>>>>   * pattern: `arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}`
+>>>> 
+
+>>> 
+>>> mountPath -> (string) [required]
+>>>
+>>>> The mount path for the S3 Files access point inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data` ).
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `6`
+>>>>   * max: `200`
+>>>>   * pattern: `/mnt/[a-zA-Z0-9._-]+/?`
+>>>> 
+
+>> 
+>> efsAccessPoint -> (structure)
+>>
+>>> Configuration for an Amazon EFS access point to mount into the AgentCore Runtime.
+>>> 
+>>> accessPointArn -> (string) [required]
+>>>
+>>>> The ARN of the EFS access point to mount into the AgentCore Runtime.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `128`
+>>>>   * pattern: `arn:aws[-a-z]*:elasticfilesystem:[0-9a-z-:]+:access-point/fsap-[0-9a-f]{8,40}`
+>>>> 
+
+>>> 
+>>> mountPath -> (string) [required]
+>>>
+>>>> The mount path for the EFS access point inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data` ).
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `6`
+>>>>   * max: `200`
+>>>>   * pattern: `/mnt/[a-zA-Z0-9._-]+/?`
+>>>> 
+
@@ -1051 +1107 @@ Shorthand Syntax:
-    sessionStorage={mountPath=string} ...
+    sessionStorage={mountPath=string},s3FilesAccessPoint={accessPointArn=string,mountPath=string},efsAccessPoint={accessPointArn=string,mountPath=string} ...
@@ -1060,0 +1117,8 @@ JSON Syntax:
+        },
+        "s3FilesAccessPoint": {
+          "accessPointArn": "string",
+          "mountPath": "string"
+        },
+        "efsAccessPoint": {
+          "accessPointArn": "string",
+          "mountPath": "string"
@@ -1300 +1364 @@ status -> (string)
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »