AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-05-31 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/get-api-key-credential-provider.md

Summary

Added 'apiKeySecretJsonKey' and 'apiKeySecretSource' fields to specify secret extraction methods and secret management sources, plus updated AWS CLI version references.

Security assessment

New fields explicitly document secure handling of API keys through JSON key extraction and secret source differentiation (MANAGED/EXTERNAL), enhancing security documentation without addressing specific vulnerabilities.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/get-api-key-credential-provider.md b/cli/latest/reference/bedrock-agentcore-control/get-api-key-credential-provider.md
index ee401eafc..b7a947330 100644
--- a//cli/latest/reference/bedrock-agentcore-control/get-api-key-credential-provider.md
+++ b//cli/latest/reference/bedrock-agentcore-control/get-api-key-credential-provider.md
@@ -15 +15 @@
-  * [AWS CLI 2.34.55 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.57 Command Reference](../../index.html) »
@@ -231,0 +232,22 @@ apiKeySecretArn -> (structure)
+apiKeySecretJsonKey -> (string)
+
+> The JSON key used to extract the API key value from the AWS Secrets Manager secret.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `128`
+> 
+
+
+apiKeySecretSource -> (string)
+
+> The source type of the API key secret. Either `MANAGED` if the secret is managed by the service, or `EXTERNAL` if managed by the user in AWS Secrets Manager.
+> 
+> Possible values:
+> 
+>   * `MANAGED`
+>   * `EXTERNAL`
+> 
+
+
@@ -272 +294 @@ lastUpdatedTime -> (timestamp)
-  * [AWS CLI 2.34.55 Command Reference](../../index.html) »
+  * [AWS CLI 2.34.57 Command Reference](../../index.html) »