AWS cli documentation change

Service: cli · 2026-05-07 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md

Summary

Updated CLI version reference; expanded documentation for intermediate domain routing; relaxed header pattern validation; increased max value limit; added S3/EFS access point configurations

Security assessment

Changes involve feature enhancements (S3/EFS mounting) and documentation improvements without addressing vulnerabilities. The header pattern change ([A-Za-z][A-Za-z0-9_-]{0,255}) relaxes previous restrictions but doesn't indicate a security fix. Intermediate domain routing clarification improves operational guidance but doesn't reference security flaws.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
index d4a36d372..cf4ac7b67 100644
--- a//cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
+++ b//cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »
@@ -622 +622 @@ JSON Syntax:
->>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable.
+>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain].
@@ -774 +774 @@ JSON Syntax:
->>>>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable.
+>>>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain].
@@ -869 +869 @@ JSON Syntax:
->>>   * pattern: `(Authorization|X-Amzn-Bedrock-AgentCore-Runtime-Custom-[a-zA-Z0-9-]+)`
+>>>   * pattern: `[A-Za-z][A-Za-z0-9_-]{0,255}`
@@ -1030 +1030 @@ JSON Syntax:
->   * max: `1`
+>   * max: `5`
@@ -1040 +1040 @@ JSON Syntax:
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionStorage`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionStorage`, `s3FilesAccessPoint`, `efsAccessPoint`.
@@ -1056,0 +1057,56 @@ JSON Syntax:
+>> 
+>> s3FilesAccessPoint -> (structure)
+>>
+>>> Configuration for an Amazon S3 Files access point to mount into the AgentCore Runtime.
+>>> 
+>>> accessPointArn -> (string) [required]
+>>>
+>>>> The ARN of the S3 Files access point to mount into the AgentCore Runtime.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `256`
+>>>>   * pattern: `arn:aws[-a-z]*:s3files:[0-9a-z-:]+:file-system/fs-[0-9a-f]{17,40}/access-point/fsap-[0-9a-f]{17,40}`
+>>>> 
+
+>>> 
+>>> mountPath -> (string) [required]
+>>>
+>>>> The mount path for the S3 Files access point inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data` ).
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `6`
+>>>>   * max: `200`
+>>>>   * pattern: `/mnt/[a-zA-Z0-9._-]+/?`
+>>>> 
+
+>> 
+>> efsAccessPoint -> (structure)
+>>
+>>> Configuration for an Amazon EFS access point to mount into the AgentCore Runtime.
+>>> 
+>>> accessPointArn -> (string) [required]
+>>>
+>>>> The ARN of the EFS access point to mount into the AgentCore Runtime.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `128`
+>>>>   * pattern: `arn:aws[-a-z]*:elasticfilesystem:[0-9a-z-:]+:access-point/fsap-[0-9a-f]{8,40}`
+>>>> 
+
+>>> 
+>>> mountPath -> (string) [required]
+>>>
+>>>> The mount path for the EFS access point inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data` ).
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `6`
+>>>>   * max: `200`
+>>>>   * pattern: `/mnt/[a-zA-Z0-9._-]+/?`
+>>>> 
+
@@ -1061 +1117 @@ Shorthand Syntax:
-    sessionStorage={mountPath=string} ...
+    sessionStorage={mountPath=string},s3FilesAccessPoint={accessPointArn=string,mountPath=string},efsAccessPoint={accessPointArn=string,mountPath=string} ...
@@ -1070,0 +1127,8 @@ JSON Syntax:
+        },
+        "s3FilesAccessPoint": {
+          "accessPointArn": "string",
+          "mountPath": "string"
+        },
+        "efsAccessPoint": {
+          "accessPointArn": "string",
+          "mountPath": "string"
@@ -1282 +1346 @@ status -> (string)
-  * [AWS CLI 2.34.41 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.44 Command Reference](../../index.html) »