AWS cli documentation change
Summary
Added LiteLLM model configuration support, new API format options for Bedrock/OpenAI providers, S3/Git skill sources with authentication, and updated OAuth description.
Security assessment
The changes introduce secure credential handling via ARNs (apiKeyArn for LiteLLM, credentialArn for Git auth) and clarify OAuth usage for outbound authentication. While these document security features, there's no evidence of patching a specific vulnerability.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/get-harness.md b/cli/latest/reference/bedrock-agentcore-control/get-harness.md index 00b5246cd..e2b4eebf9 100644 --- a//cli/latest/reference/bedrock-agentcore-control/get-harness.md +++ b//cli/latest/reference/bedrock-agentcore-control/get-harness.md @@ -15 +15 @@ - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) » @@ -294 +294 @@ harness -> (structure) ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `bedrockModelConfig`, `openAiModelConfig`, `geminiModelConfig`. +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `bedrockModelConfig`, `openAiModelConfig`, `geminiModelConfig`, `liteLlmModelConfig`. @@ -334,0 +335,16 @@ harness -> (structure) +>>> +>>> apiFormat -> (string) +>>> +>>>> The API format to use when calling the Bedrock provider. +>>>> +>>>> Possible values: +>>>> +>>>> * `converse_stream` +>>>> * `responses` +>>>> * `chat_completions` +>>>> + +>>> +>>> additionalParams -> (document) +>>> +>>>> Provider-specific parameters passed through to the model provider unchanged. @@ -384,0 +401,15 @@ harness -> (structure) +>>> +>>> apiFormat -> (string) +>>> +>>>> The API format to use when calling the OpenAI provider. +>>>> +>>>> Possible values: +>>>> +>>>> * `chat_completions` +>>>> * `responses` +>>>> + +>>> +>>> additionalParams -> (document) +>>> +>>>> Provider-specific parameters passed through to the model provider unchanged. @@ -445,0 +477,65 @@ harness -> (structure) +>> +>> liteLlmModelConfig -> (structure) +>> +>>> The LiteLLM model configuration for connecting to third-party model providers. +>>> +>>> modelId -> (string) [required] +>>> +>>>> The LiteLLM model identifier (e.g., “anthropic/claude-3-sonnet”). +>>> +>>> apiKeyArn -> (string) +>>> +>>>> The ARN of the API key in AgentCore Identity for authenticating with the model provider. +>>>> +>>>> Constraints: +>>>> +>>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:token-vault/[a-zA-Z0-9-.]+/apikeycredentialprovider/[a-zA-Z0-9-.]+` +>>>> + +>>> +>>> apiBase -> (string) +>>> +>>>> The base URL for the model provider’s API endpoint. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `16383` +>>>> + +>>> +>>> maxTokens -> (integer) +>>> +>>>> The maximum number of tokens to allow in the generated response per iteration. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> + +>>> +>>> temperature -> (float) +>>> +>>>> The temperature to set when calling the model. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0.0` +>>>> * max: `2.0` +>>>> + +>>> +>>> topP -> (float) +>>> +>>>> The topP set when calling the model. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `0.0` +>>>> * max: `1.0` +>>>> + +>>> +>>> additionalParams -> (document) +>>> +>>>> Provider-specific parameters passed through to the model provider unchanged. @@ -598 +694 @@ harness -> (structure) ->>>>>>> An OAuth credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using OAuth. +>>>>>>> Use OAuth credentials for outbound authentication to the gateway. @@ -732 +828 @@ harness -> (structure) ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `path`. +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `path`, `s3`, `git`. @@ -742,0 +839,52 @@ harness -> (structure) +>>> +>>> s3 -> (structure) +>>> +>>>> An S3 source containing the skill. +>>>> +>>>> uri -> (string) [required] +>>>> +>>>>> The S3 URI pointing to the skill directory (e.g., s3://bucket/skills/my-skill/). +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `5` +>>>>> * pattern: `s3://.*` +>>>>> + +>>> +>>> git -> (structure) +>>> +>>>> A git repository containing the skill. +>>>> +>>>> url -> (string) [required] +>>>> +>>>>> The HTTPS URL of the git repository. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `8` +>>>>> * pattern: `https://.*` +>>>>> + +>>>> +>>>> path -> (string) +>>>> +>>>>> Subdirectory within the repository containing the skill. +>>>> +>>>> auth -> (structure) +>>>> +>>>>> Authentication configuration for private repositories. +>>>>> +>>>>> credentialArn -> (string) [required] +>>>>> +>>>>>> The ARN of the credential in AgentCore Identity containing the password or personal access token. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:token-vault/[a-zA-Z0-9-.]+/apikeycredentialprovider/[a-zA-Z0-9-.]+` +>>>>>> + +>>>>> +>>>>> username -> (string) +>>>>> +>>>>>> Username for authentication. Defaults to ‘oauth2’ if not specified. @@ -1598 +1746 @@ harness -> (structure) - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) »