AWS cli documentation change
Summary
Added documentation for new secret management fields including apiKeySecretJsonKey, apiKeySecretSource, walletSecretJsonKey, walletSecretSource, appSecretJsonKey, appSecretSource, authorizationPrivateKeyJsonKey, and authorizationPrivateKeySource. Updated CLI version reference.
Security assessment
The changes add documentation for secret management parameters that specify how to securely retrieve credentials from AWS Secrets Manager. While this enhances security documentation by describing secret storage best practices, there's no evidence of a specific security vulnerability being addressed.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/get-payment-credential-provider.md b/cli/latest/reference/bedrock-agentcore-control/get-payment-credential-provider.md index 22a027375..0c735005b 100644 --- a//cli/latest/reference/bedrock-agentcore-control/get-payment-credential-provider.md +++ b//cli/latest/reference/bedrock-agentcore-control/get-payment-credential-provider.md @@ -15 +15 @@ - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) » @@ -287,0 +288,22 @@ providerConfigurationOutput -> (tagged union structure) +>> +>> apiKeySecretJsonKey -> (string) +>> +>>> The JSON key used to extract the API key secret value from the AWS Secrets Manager secret. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `128` +>>> + +>> +>> apiKeySecretSource -> (string) +>> +>>> The source type of the API key secret. Either `MANAGED` if the secret is managed by the service, or `EXTERNAL` if managed by the user in AWS Secrets Manager. +>>> +>>> Possible values: +>>> +>>> * `MANAGED` +>>> * `EXTERNAL` +>>> + @@ -301,0 +324,22 @@ providerConfigurationOutput -> (tagged union structure) +>> +>> walletSecretJsonKey -> (string) +>> +>>> The JSON key used to extract the wallet secret value from the AWS Secrets Manager secret. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `128` +>>> + +>> +>> walletSecretSource -> (string) +>> +>>> The source type of the wallet secret. Either `MANAGED` if the secret is managed by the service, or `EXTERNAL` if managed by the user in AWS Secrets Manager. +>>> +>>> Possible values: +>>> +>>> * `MANAGED` +>>> * `EXTERNAL` +>>> + @@ -331,0 +376,22 @@ providerConfigurationOutput -> (tagged union structure) +>> +>> appSecretJsonKey -> (string) +>> +>>> The JSON key used to extract the app secret value from the AWS Secrets Manager secret. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `128` +>>> + +>> +>> appSecretSource -> (string) +>> +>>> The source type of the app secret. Either `MANAGED` if the secret is managed by the service, or `EXTERNAL` if managed by the user in AWS Secrets Manager. +>>> +>>> Possible values: +>>> +>>> * `MANAGED` +>>> * `EXTERNAL` +>>> + @@ -345,0 +412,22 @@ providerConfigurationOutput -> (tagged union structure) +>> +>> authorizationPrivateKeyJsonKey -> (string) +>> +>>> The JSON key used to extract the authorization private key value from the AWS Secrets Manager secret. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `128` +>>> + +>> +>> authorizationPrivateKeySource -> (string) +>> +>>> The source type of the authorization private key. Either `MANAGED` if the secret is managed by the service, or `EXTERNAL` if managed by the user in AWS Secrets Manager. +>>> +>>> Possible values: +>>> +>>> * `MANAGED` +>>> * `EXTERNAL` +>>> + @@ -408 +496 @@ tags -> (map) - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) »