AWS cli documentation change
Summary
Added session timeout configuration and response streaming settings to MCP gateway documentation. Updated VPC Lattice endpoint description with routing guidance.
Security assessment
The change introduces session timeout configuration (min 15m, max 8h) which is a security control against session hijacking. It also improves endpoint documentation by recommending secure routing through VPC endpoints/internal load balancers. While these are security enhancements, there's no evidence of addressing a specific vulnerability.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/update-gateway.md b/cli/latest/reference/bedrock-agentcore-control/update-gateway.md index b3bc5380f..574e8413e 100644 --- a//cli/latest/reference/bedrock-agentcore-control/update-gateway.md +++ b//cli/latest/reference/bedrock-agentcore-control/update-gateway.md @@ -15 +15 @@ - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) » @@ -194,0 +195,23 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc +>> +>> sessionConfiguration -> (structure) +>> +>>> The session configuration for the MCP gateway. This configuration controls session behavior, including session timeout settings. +>>> +>>> sessionTimeoutInSeconds -> (integer) +>>> +>>>> The session timeout in seconds. After this timeout, the session expires and subsequent requests to this session will receive an error. The minimum value is 900 seconds (15 minutes), the maximum value is 28800 seconds (8 hours), and the default value is 3600 seconds (1 hour). +>>>> +>>>> Constraints: +>>>> +>>>> * min: `900` +>>>> * max: `28800` +>>>> + +>> +>> streamingConfiguration -> (structure) +>> +>>> The streaming configuration for the MCP gateway. This configuration controls whether response streaming is enabled for the gateway. +>>> +>>> enableResponseStreaming -> (boolean) +>>> +>>>> Indicates whether response streaming is enabled for the gateway. When set to `true` , the gateway streams responses from targets back to the client. @@ -199 +222 @@ Shorthand Syntax: - mcp={supportedVersions=[string,string],instructions=string,searchType=string} + mcp={supportedVersions=[string,string],instructions=string,searchType=string,sessionConfiguration={sessionTimeoutInSeconds=integer},streamingConfiguration={enableResponseStreaming=boolean}} @@ -209 +232,7 @@ JSON Syntax: - "searchType": "SEMANTIC" + "searchType": "SEMANTIC", + "sessionConfiguration": { + "sessionTimeoutInSeconds": integer + }, + "streamingConfiguration": { + "enableResponseStreaming": true|false + } @@ -508 +537 @@ JSON Syntax: ->>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -660 +689 @@ JSON Syntax: ->>>>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -1163,0 +1193,23 @@ protocolConfiguration -> (tagged union structure) +>> +>> sessionConfiguration -> (structure) +>> +>>> The session configuration for the MCP gateway. This configuration controls session behavior, including session timeout settings. +>>> +>>> sessionTimeoutInSeconds -> (integer) +>>> +>>>> The session timeout in seconds. After this timeout, the session expires and subsequent requests to this session will receive an error. The minimum value is 900 seconds (15 minutes), the maximum value is 28800 seconds (8 hours), and the default value is 3600 seconds (1 hour). +>>>> +>>>> Constraints: +>>>> +>>>> * min: `900` +>>>> * max: `28800` +>>>> + +>> +>> streamingConfiguration -> (structure) +>> +>>> The streaming configuration for the MCP gateway. This configuration controls whether response streaming is enabled for the gateway. +>>> +>>> enableResponseStreaming -> (boolean) +>>> +>>>> Indicates whether response streaming is enabled for the gateway. When set to `true` , the gateway streams responses from targets back to the client. @@ -1459 +1511 @@ authorizerConfiguration -> (tagged union structure) ->>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -1611 +1663 @@ authorizerConfiguration -> (tagged union structure) ->>>>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -1771 +1823 @@ exceptionLevel -> (string) - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) »