AWS cli documentation change
Summary
Updated CLI version references, modified intermediate domain routing documentation, relaxed request header pattern, increased filesystemConfigurations max limit, and added S3/EFS access point configurations
Security assessment
The header pattern change ([A-Za-z][A-Za-z0-9_-]{0,255}) increases flexibility but could allow potentially unsafe headers if not properly validated. The S3/EFS access point additions document secure access patterns for sensitive data storage. However, there's no evidence of a specific security vulnerability being patched.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md index 55b15855e..0301232c0 100644 --- a//cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md +++ b//cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md @@ -15 +15 @@ - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) » @@ -853 +853 @@ authorizerConfiguration -> (tagged union structure) ->>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -1005 +1005 @@ authorizerConfiguration -> (tagged union structure) ->>>>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -1039 +1039 @@ requestHeaderConfiguration -> (tagged union structure) ->>> * pattern: `(Authorization|X-Amzn-Bedrock-AgentCore-Runtime-Custom-[a-zA-Z0-9-]+)` +>>> * pattern: `[A-Za-z][A-Za-z0-9_-]{0,255}` @@ -1058 +1058 @@ filesystemConfigurations -> (list) -> * max: `1` +> * max: `5` @@ -1068 +1068 @@ filesystemConfigurations -> (list) ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionStorage`. +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionStorage`, `s3FilesAccessPoint`, `efsAccessPoint`. @@ -1084,0 +1085,56 @@ filesystemConfigurations -> (list) +>> +>> s3FilesAccessPoint -> (structure) +>> +>>> Configuration for an Amazon S3 Files access point to mount into the AgentCore Runtime. +>>> +>>> accessPointArn -> (string) [required] +>>> +>>>> The ARN of the S3 Files access point to mount into the AgentCore Runtime. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `256` +>>>> * pattern: `arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}` +>>>> + +>>> +>>> mountPath -> (string) [required] +>>> +>>>> The mount path for the S3 Files access point inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data` ). +>>>> +>>>> Constraints: +>>>> +>>>> * min: `6` +>>>> * max: `200` +>>>> * pattern: `/mnt/[a-zA-Z0-9._-]+/?` +>>>> + +>> +>> efsAccessPoint -> (structure) +>> +>>> Configuration for an Amazon EFS access point to mount into the AgentCore Runtime. +>>> +>>> accessPointArn -> (string) [required] +>>> +>>>> The ARN of the EFS access point to mount into the AgentCore Runtime. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0` +>>>> * max: `128` +>>>> * pattern: `arn:aws[-a-z]*:elasticfilesystem:[0-9a-z-:]+:access-point/fsap-[0-9a-f]{8,40}` +>>>> + +>>> +>>> mountPath -> (string) [required] +>>> +>>>> The mount path for the EFS access point inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data` ). +>>>> +>>>> Constraints: +>>>> +>>>> * min: `6` +>>>> * max: `200` +>>>> * pattern: `/mnt/[a-zA-Z0-9._-]+/?` +>>>> + @@ -1096 +1152 @@ filesystemConfigurations -> (list) - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) »