AWS cli documentation change
Summary
Added LiteLLM model configuration support, extended existing model configs with apiFormat and additionalParams, added S3/Git skill sources with authentication, updated OAuth description, and incremented CLI version
Security assessment
Changes introduce security features like credential ARNs for API keys and Git authentication, but no evidence of patching existing vulnerabilities. Security documentation is added for secure credential handling via ARN patterns and OAuth usage.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/update-harness.md b/cli/latest/reference/bedrock-agentcore-control/update-harness.md index 84ac05ed0..4e97a681d 100644 --- a//cli/latest/reference/bedrock-agentcore-control/update-harness.md +++ b//cli/latest/reference/bedrock-agentcore-control/update-harness.md @@ -15 +15 @@ - * [AWS CLI 2.34.55 Command Reference](../../index.html) » + * [AWS CLI 2.34.57 Command Reference](../../index.html) » @@ -985 +985 @@ JSON Syntax: -> This is a Tagged Union structure. Only one of the following top level keys can be set: `bedrockModelConfig`, `openAiModelConfig`, `geminiModelConfig`. +> This is a Tagged Union structure. Only one of the following top level keys can be set: `bedrockModelConfig`, `openAiModelConfig`, `geminiModelConfig`, `liteLlmModelConfig`. @@ -1025,0 +1026,16 @@ JSON Syntax: +>> +>> apiFormat -> (string) +>> +>>> The API format to use when calling the Bedrock provider. +>>> +>>> Possible values: +>>> +>>> * `converse_stream` +>>> * `responses` +>>> * `chat_completions` +>>> + +>> +>> additionalParams -> (document) +>> +>>> Provider-specific parameters passed through to the model provider unchanged. @@ -1075,0 +1092,15 @@ JSON Syntax: +>> +>> apiFormat -> (string) +>> +>>> The API format to use when calling the OpenAI provider. +>>> +>>> Possible values: +>>> +>>> * `chat_completions` +>>> * `responses` +>>> + +>> +>> additionalParams -> (document) +>> +>>> Provider-specific parameters passed through to the model provider unchanged. @@ -1136,0 +1168,65 @@ JSON Syntax: +> +> liteLlmModelConfig -> (structure) +> +>> The LiteLLM model configuration for connecting to third-party model providers. +>> +>> modelId -> (string) [required] +>> +>>> The LiteLLM model identifier (e.g., “anthropic/claude-3-sonnet”). +>> +>> apiKeyArn -> (string) +>> +>>> The ARN of the API key in AgentCore Identity for authenticating with the model provider. +>>> +>>> Constraints: +>>> +>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:token-vault/[a-zA-Z0-9-.]+/apikeycredentialprovider/[a-zA-Z0-9-.]+` +>>> + +>> +>> apiBase -> (string) +>> +>>> The base URL for the model provider’s API endpoint. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `16383` +>>> + +>> +>> maxTokens -> (integer) +>> +>>> The maximum number of tokens to allow in the generated response per iteration. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> + +>> +>> temperature -> (float) +>> +>>> The temperature to set when calling the model. +>>> +>>> Constraints: +>>> +>>> * min: `0.0` +>>> * max: `2.0` +>>> + +>> +>> topP -> (float) +>> +>>> The topP set when calling the model. +>>> +>>> Constraints: +>>> +>>> * min: `0.0` +>>> * max: `1.0` +>>> + +>> +>> additionalParams -> (document) +>> +>>> Provider-specific parameters passed through to the model provider unchanged. @@ -1141 +1237 @@ Shorthand Syntax: - bedrockModelConfig={modelId=string,maxTokens=integer,temperature=float,topP=float},openAiModelConfig={modelId=string,apiKeyArn=string,maxTokens=integer,temperature=float,topP=float},geminiModelConfig={modelId=string,apiKeyArn=string,maxTokens=integer,temperature=float,topP=float,topK=integer} + bedrockModelConfig={modelId=string,maxTokens=integer,temperature=float,topP=float,apiFormat=string},openAiModelConfig={modelId=string,apiKeyArn=string,maxTokens=integer,temperature=float,topP=float,apiFormat=string},geminiModelConfig={modelId=string,apiKeyArn=string,maxTokens=integer,temperature=float,topP=float,topK=integer},liteLlmModelConfig={modelId=string,apiKeyArn=string,apiBase=string,maxTokens=integer,temperature=float,topP=float} @@ -1152 +1248,3 @@ JSON Syntax: - "topP": float + "topP": float, + "apiFormat": "converse_stream"|"responses"|"chat_completions", + "additionalParams": {...} @@ -1159 +1257,3 @@ JSON Syntax: - "topP": float + "topP": float, + "apiFormat": "chat_completions"|"responses", + "additionalParams": {...} @@ -1167,0 +1268,9 @@ JSON Syntax: + }, + "liteLlmModelConfig": { + "modelId": "string", + "apiKeyArn": "string", + "apiBase": "string", + "maxTokens": integer, + "temperature": float, + "topP": float, + "additionalParams": {...} @@ -1340 +1449 @@ JSON Syntax: ->>>>>> An OAuth credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using OAuth. +>>>>>> Use OAuth credentials for outbound authentication to the gateway. @@ -1522 +1631 @@ JSON Syntax: ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `path`. +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `path`, `s3`, `git`. @@ -1532,0 +1642,52 @@ JSON Syntax: +>> +>> s3 -> (structure) +>> +>>> An S3 source containing the skill. +>>> +>>> uri -> (string) [required] +>>> +>>>> The S3 URI pointing to the skill directory (e.g., s3://bucket/skills/my-skill/). +>>>> +>>>> Constraints: +>>>> +>>>> * min: `5` +>>>> * pattern: `s3://.*` +>>>> + +>> +>> git -> (structure) +>> +>>> A git repository containing the skill. +>>> +>>> url -> (string) [required] +>>> +>>>> The HTTPS URL of the git repository. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `8` +>>>> * pattern: `https://.*` +>>>> + +>>> +>>> path -> (string) +>>> +>>>> Subdirectory within the repository containing the skill. +>>> +>>> auth -> (structure) +>>> +>>>> Authentication configuration for private repositories. +>>>> +>>>> credentialArn -> (string) [required] +>>>> +>>>>> The ARN of the credential in AgentCore Identity containing the password or personal access token. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:token-vault/[a-zA-Z0-9-.]+/apikeycredentialprovider/[a-zA-Z0-9-.]+` +>>>>> + +>>>> +>>>> username -> (string) +>>>> +>>>>> Username for authentication. Defaults to ‘oauth2’ if not specified. @@ -1537 +1698 @@ Shorthand Syntax: - path=string ... + path=string,s3={uri=string},git={url=string,path=string,auth={credentialArn=string,username=string}} ... @@ -1545 +1706,12 @@ JSON Syntax: - "path": "string" + "path": "string", + "s3": { + "uri": "string" + },