AWS bedrock documentation change

Service: bedrock · 2026-05-13 · Documentation low

File: bedrock/latest/userguide/model-evaluation-type-automatic.md

Summary

Clarified that CORS configuration is not required for automatic model evaluation jobs.

Security assessment

Change removes unnecessary security requirement but doesn't fix a vulnerability. It prevents potential misconfiguration but lacks evidence of addressing an active security issue.

Diff

diff --git a/bedrock/latest/userguide/model-evaluation-type-automatic.md b/bedrock/latest/userguide/model-evaluation-type-automatic.md
index a365f5013..b1eceddfe 100644
--- a//bedrock/latest/userguide/model-evaluation-type-automatic.md
+++ b//bedrock/latest/userguide/model-evaluation-type-automatic.md
@@ -15 +15 @@ Automatic model evaluation jobs require access to the following service level re
-All console-based model evaluation jobs require Cross Origin Resource Sharing (CORS) permissions to be enabled on any Amazon S3 buckets specified in the model evaluation job. To learn more, see [Required Cross Origin Resource Sharing (CORS) permissions on S3 buckets](./model-evaluation-security-cors.html)
+CORS permissions are only required on the Amazon S3 output bucket for human-based model evaluation jobs. Automated model evaluation jobs do not require CORS configuration. To learn more, see [Required Cross Origin Resource Sharing (CORS) permissions on S3 buckets](./model-evaluation-security-cors.html)
@@ -27 +27 @@ All console-based model evaluation jobs require Cross Origin Resource Sharing (C
-  5. Cross Origin Resource Sharing (CORS) – Automatic model evaluations jobs that are created using the Amazon Bedrock console require that you specify a CORS configuration on the S3 bucket. To learn more, see [Required Cross Origin Resource Sharing (CORS) permissions on S3 buckets](./model-evaluation-security-cors.html).
+  5. Cross Origin Resource Sharing (CORS) – CORS configuration is not required for automatic model evaluation jobs. It is only required for human-based evaluation jobs. To learn more, see [Required Cross Origin Resource Sharing (CORS) permissions on S3 buckets](./model-evaluation-security-cors.html).