AWS cli medium security documentation change
Summary
Updated AWS CLI version reference and modified descriptions for VPC Lattice endpoint configuration and TOKEN_EXCHANGE grant type parameters
Security assessment
The changes enhance documentation about secure traffic routing through intermediate domains (VPC endpoints/internal load balancers) and clarify security parameters for OAuth2 token exchange (RFC 8693). This provides explicit guidance on securing network traffic and token-based authentication flows.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/update-oauth2-credential-provider.md b/cli/latest/reference/bedrock-agentcore-control/update-oauth2-credential-provider.md index 76f75f2c6..193b6577b 100644 --- a//cli/latest/reference/bedrock-agentcore-control/update-oauth2-credential-provider.md +++ b//cli/latest/reference/bedrock-agentcore-control/update-oauth2-credential-provider.md @@ -15 +15 @@ - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) » @@ -351 +351 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -503 +503 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -529 +529 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>> Configuration specific to TOKEN_EXCHANGE grant type (RFC 8693) +>>>> Configuration specific to the TOKEN_EXCHANGE grant type (RFC 8693). @@ -545 +545 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc ->>>>> Only valid when actorTokenContent is M2M +>>>>> The scopes for the actor token. Only valid when actorTokenContent is M2M. @@ -1284 +1284 @@ oauth2ProviderConfigOutput -> (tagged union structure) ->>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -1436 +1436 @@ oauth2ProviderConfigOutput -> (tagged union structure) ->>>>>>> An intermediate publicly resolvable domain used as the VPC Lattice resource configuration endpoint. Required when your private endpoint uses a domain that is not publicly resolvable. +>>>>>>> An intermediate domain to use as the resource configuration endpoint instead of the actual target domain. Use this when you want to route traffic through an intermediate component such as a VPC endpoint or internal load balancer. For more information, see xref:lattice-vpc-egress-routing-domain[Route traffic through an intermediate domain]. @@ -1462 +1462 @@ oauth2ProviderConfigOutput -> (tagged union structure) ->>>> Configuration specific to TOKEN_EXCHANGE grant type (RFC 8693) +>>>> Configuration specific to the TOKEN_EXCHANGE grant type (RFC 8693). @@ -1478 +1478 @@ oauth2ProviderConfigOutput -> (tagged union structure) ->>>>> Only valid when actorTokenContent is M2M +>>>>> The scopes for the actor token. Only valid when actorTokenContent is M2M. @@ -2127 +2127 @@ status -> (string) - * [AWS CLI 2.34.41 Command Reference](../../index.html) » + * [AWS CLI 2.34.44 Command Reference](../../index.html) »