AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-05-22 · Documentation low

File: cli/latest/reference/bedrock-agentcore/create-payment-instrument.md

Summary

Updated documentation for payment instrument creation including grammatical improvements, terminology standardization ('linkedAccounts' to 'linked accounts'), removal of explicit optional markers from OAuth2 fields, and clarification of idempotency token requirements. AWS CLI version reference updated from 2.34.49 to 2.34.52.

Security assessment

Changes are primarily grammatical improvements and terminology standardization without evidence of addressing vulnerabilities. The removal of explicit '(optional)' markers from OAuth2 provider fields doesn't indicate a security fix but rather documentation refinement. No security vulnerabilities, exploits, or weaknesses are mentioned or implied in the diff.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore/create-payment-instrument.md b/cli/latest/reference/bedrock-agentcore/create-payment-instrument.md
index f9a8c8ef3..bbc8076fa 100644
--- a//cli/latest/reference/bedrock-agentcore/create-payment-instrument.md
+++ b//cli/latest/reference/bedrock-agentcore/create-payment-instrument.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.49 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.52 Command Reference](../../index.html) »
@@ -59 +59 @@ First time using the AWS CLI? See the [User Guide](https://docs.aws.amazon.com/c
-Create a new payment instrument for a connector
+Create a new payment instrument for a connector.
@@ -165 +165 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->> Embedded crypto wallet managed directly by end user
+>> Embedded crypto wallet managed directly by end user.
@@ -169 +169 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>> The blockchain network for this embedded crypto wallet. Supported networks: ETHEREUM, SOLANA
+>>> The blockchain network for this embedded crypto wallet. Supported networks: ETHEREUM, SOLANA.
@@ -180 +180 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>> List of linkedAccounts linked to this wallet. Each linkedAccount represents a way the end user can authenticate to this wallet. Can be empty when adding a new linkedAccount to an existing wallet.
+>>> List of linked accounts linked to this wallet. Each represents a way the end user can authenticate to this wallet.
@@ -191 +191 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>> Represents different linkedAccounts that can be linked to an embedded wallet. This union supports multiple linkedAccount approaches: email, SMS, JWT, and OAuth2.
+>>>> Represents different linked accounts that can be linked to an embedded wallet. Supports email, SMS, JWT, and OAuth2 approaches.
@@ -199 +199 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> Email-based linkedAccount
+>>>>> Email-based linked account.
@@ -203 +203 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> The email address used for linkedAccount. Must be a valid email format.
+>>>>>> The email address used for the linked account. Must be a valid email format.
@@ -215 +215 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> SMS-based linkedAccount using phone number
+>>>>> SMS-based linked account using phone number.
@@ -219 +219 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> The phone number in E.164 format (e.g., +1234567890). Must be a valid E.164 formatted phone number starting with + and containing 1-15 digits.
+>>>>>> The phone number in E.164 format (e.g., +1234567890).
@@ -231 +231 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> Developer JWT linkedAccount with key ID and subject
+>>>>> Developer JWT linked account with key ID and subject.
@@ -258 +258 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>> OAuth2 provider linkedAccount (Google, Apple, X, Telegram, GitHub)
+>>>>> OAuth2 provider linked account (Google, Apple, X, Telegram, GitHub).
@@ -266 +266 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> Google OAuth2 authentication
+>>>>>> Google OAuth2 authentication.
@@ -281 +281 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>> The email address from the OAuth2 provider.
@@ -293 +293 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>> The user’s name from the OAuth2 provider.
@@ -304 +304 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>> The username from the OAuth2 provider.
@@ -315 +315 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> Apple OAuth2 authentication
+>>>>>> Apple OAuth2 authentication.
@@ -330 +330 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>> The email address from the OAuth2 provider.
@@ -342 +342 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>> The user’s name from the OAuth2 provider.
@@ -353 +353 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>> The username from the OAuth2 provider.
@@ -364 +364 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> X (formerly Twitter) OAuth2 authentication
+>>>>>> X (formerly Twitter) OAuth2 authentication.
@@ -379 +379 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>> The email address from the OAuth2 provider.
@@ -391 +391 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>> The user’s name from the OAuth2 provider.
@@ -402 +402 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>> The username from the OAuth2 provider.
@@ -413 +413 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> Telegram OAuth2 authentication
+>>>>>> Telegram OAuth2 authentication.
@@ -428 +428 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>> The email address from the OAuth2 provider.
@@ -440 +440 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>> The user’s name from the OAuth2 provider.
@@ -451 +451 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>> The username from the OAuth2 provider.
@@ -462 +462 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>> GitHub OAuth2 authentication
+>>>>>> GitHub OAuth2 authentication.
@@ -477 +477 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>> The email address from the OAuth2 provider.
@@ -489 +489 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>> The user’s name from the OAuth2 provider.
@@ -500 +500 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>> The username from the OAuth2 provider.
@@ -515 +515 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->>> URL for the end user to complete a provider-specific action (e.g., wallet linking, onboarding). Returned by the payment connector during instrument creation.
+>>> URL for the end user to complete a provider-specific action such as wallet linking or onboarding.
@@ -585 +585 @@ JSON Syntax:
-> Idempotency token to ensure request uniqueness.
+> A unique, case-sensitive identifier that you provide to ensure the idempotency of the request.
@@ -710 +710 @@ paymentInstrument -> (structure)
-> Represents a payment instrument
+> The created payment instrument.
@@ -779 +779 @@ paymentInstrument -> (structure)
->>> Embedded crypto wallet managed directly by end user
+>>> Embedded crypto wallet managed directly by end user.
@@ -783 +783 @@ paymentInstrument -> (structure)
->>>> The blockchain network for this embedded crypto wallet. Supported networks: ETHEREUM, SOLANA
+>>>> The blockchain network for this embedded crypto wallet. Supported networks: ETHEREUM, SOLANA.
@@ -794 +794 @@ paymentInstrument -> (structure)
->>>> List of linkedAccounts linked to this wallet. Each linkedAccount represents a way the end user can authenticate to this wallet. Can be empty when adding a new linkedAccount to an existing wallet.
+>>>> List of linked accounts linked to this wallet. Each represents a way the end user can authenticate to this wallet.
@@ -805 +805 @@ paymentInstrument -> (structure)
->>>>> Represents different linkedAccounts that can be linked to an embedded wallet. This union supports multiple linkedAccount approaches: email, SMS, JWT, and OAuth2.
+>>>>> Represents different linked accounts that can be linked to an embedded wallet. Supports email, SMS, JWT, and OAuth2 approaches.
@@ -813 +813 @@ paymentInstrument -> (structure)
->>>>>> Email-based linkedAccount
+>>>>>> Email-based linked account.
@@ -817 +817 @@ paymentInstrument -> (structure)
->>>>>>> The email address used for linkedAccount. Must be a valid email format.
+>>>>>>> The email address used for the linked account. Must be a valid email format.
@@ -829 +829 @@ paymentInstrument -> (structure)
->>>>>> SMS-based linkedAccount using phone number
+>>>>>> SMS-based linked account using phone number.
@@ -833 +833 @@ paymentInstrument -> (structure)
->>>>>>> The phone number in E.164 format (e.g., +1234567890). Must be a valid E.164 formatted phone number starting with + and containing 1-15 digits.
+>>>>>>> The phone number in E.164 format (e.g., +1234567890).
@@ -845 +845 @@ paymentInstrument -> (structure)
->>>>>> Developer JWT linkedAccount with key ID and subject
+>>>>>> Developer JWT linked account with key ID and subject.
@@ -872 +872 @@ paymentInstrument -> (structure)
->>>>>> OAuth2 provider linkedAccount (Google, Apple, X, Telegram, GitHub)
+>>>>>> OAuth2 provider linked account (Google, Apple, X, Telegram, GitHub).
@@ -880 +880 @@ paymentInstrument -> (structure)
->>>>>>> Google OAuth2 authentication
+>>>>>>> Google OAuth2 authentication.
@@ -895 +895 @@ paymentInstrument -> (structure)
->>>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>>> The email address from the OAuth2 provider.
@@ -907 +907 @@ paymentInstrument -> (structure)
->>>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>>> The user’s name from the OAuth2 provider.
@@ -918 +918 @@ paymentInstrument -> (structure)
->>>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>>> The username from the OAuth2 provider.
@@ -929 +929 @@ paymentInstrument -> (structure)
->>>>>>> Apple OAuth2 authentication
+>>>>>>> Apple OAuth2 authentication.
@@ -944 +944 @@ paymentInstrument -> (structure)
->>>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>>> The email address from the OAuth2 provider.
@@ -956 +956 @@ paymentInstrument -> (structure)
->>>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>>> The user’s name from the OAuth2 provider.
@@ -967 +967 @@ paymentInstrument -> (structure)
->>>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>>> The username from the OAuth2 provider.
@@ -978 +978 @@ paymentInstrument -> (structure)
->>>>>>> X (formerly Twitter) OAuth2 authentication
+>>>>>>> X (formerly Twitter) OAuth2 authentication.
@@ -993 +993 @@ paymentInstrument -> (structure)
->>>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>>> The email address from the OAuth2 provider.
@@ -1005 +1005 @@ paymentInstrument -> (structure)
->>>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>>> The user’s name from the OAuth2 provider.
@@ -1016 +1016 @@ paymentInstrument -> (structure)
->>>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>>> The username from the OAuth2 provider.
@@ -1027 +1027 @@ paymentInstrument -> (structure)
->>>>>>> Telegram OAuth2 authentication
+>>>>>>> Telegram OAuth2 authentication.
@@ -1042 +1042 @@ paymentInstrument -> (structure)
->>>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>>> The email address from the OAuth2 provider.
@@ -1054 +1054 @@ paymentInstrument -> (structure)
->>>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>>> The user’s name from the OAuth2 provider.
@@ -1065 +1065 @@ paymentInstrument -> (structure)
->>>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>>> The username from the OAuth2 provider.
@@ -1076 +1076 @@ paymentInstrument -> (structure)
->>>>>>> GitHub OAuth2 authentication
+>>>>>>> GitHub OAuth2 authentication.
@@ -1091 +1091 @@ paymentInstrument -> (structure)
->>>>>>>> The email address from the OAuth2 provider (optional).
+>>>>>>>> The email address from the OAuth2 provider.
@@ -1103 +1103 @@ paymentInstrument -> (structure)
->>>>>>>> The user’s name from the OAuth2 provider (optional).
+>>>>>>>> The user’s name from the OAuth2 provider.
@@ -1114 +1114 @@ paymentInstrument -> (structure)
->>>>>>>> The username from the OAuth2 provider (optional).
+>>>>>>>> The username from the OAuth2 provider.
@@ -1129 +1129 @@ paymentInstrument -> (structure)