AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-16 · Documentation low

File: cli/latest/reference/bedrock-agentcore/get-batch-evaluation.md

Summary

Updated AWS CLI version reference from 2.35.3 to 2.35.5; added new 'insights' configuration section; expanded 'dataSourceConfig' to include 'onlineEvaluationConfigSource'; added detailed 'failureAnalysisResult', 'userIntentResult', and 'executionSummaryResult' structures; introduced 'kmsKeyArn' field for encryption configuration.

Security assessment

The change adds documentation for KMS encryption configuration (kmsKeyArn field) which is a security feature. It also includes failure categories related to security issues like authentication errors and rate limiting, but these are diagnostic features rather than vulnerability fixes. No specific security vulnerability is being patched.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore/get-batch-evaluation.md b/cli/latest/reference/bedrock-agentcore/get-batch-evaluation.md
index 859b685e8..48ed60f62 100644
--- a//cli/latest/reference/bedrock-agentcore/get-batch-evaluation.md
+++ b//cli/latest/reference/bedrock-agentcore/get-batch-evaluation.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
@@ -267 +267 @@ evaluators -> (list)
->> An evaluator to run against sessions.
+>> An evaluator to run against sessions
@@ -278,0 +279,25 @@ evaluators -> (list)
+insights -> (list)
+
+> The list of insight analyses applied during the batch evaluation.
+> 
+> Constraints:
+> 
+>   * min: `0`
+>   * max: `10`
+> 
+
+> 
+> (structure)
+>
+>> A reference to an insight analysis to run against sessions.
+>> 
+>> insightId -> (string) [required]
+>>
+>>> Canonical insight identifiers using the Builtin.Insight.* naming convention. Used by BatchEvaluate, InternalEvaluate, and ServiceEngineEvaluate flows.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `(Builtin\.[a-zA-Z0-9._-]+|[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10})`
+>>> 
+
+
@@ -285 +310 @@ dataSourceConfig -> (tagged union structure)
-> This is a Tagged Union structure. Only one of the following top level keys can be set: `cloudWatchLogs`.
+> This is a Tagged Union structure. Only one of the following top level keys can be set: `cloudWatchLogs`, `onlineEvaluationConfigSource`.
@@ -344,0 +370,26 @@ dataSourceConfig -> (tagged union structure)
+> 
+> onlineEvaluationConfigSource -> (structure)
+>
+>> Reference an existing OnlineEvaluationConfig as session source
+>> 
+>> onlineEvaluationConfigArn -> (string) [required]
+>>
+>>> The Amazon Resource Name (ARN) of the online evaluation configuration to use as the session source.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:online-evaluation-config\/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}`
+>>> 
+
+>> 
+>> sessionFilterConfig -> (structure)
+>>
+>>> Optional session filter configuration to narrow down which sessions from the online evaluation configuration to include.
+>>> 
+>>> startTime -> (timestamp)
+>>>
+>>>> The start time of the time range. Only sessions with activity at or after this timestamp are included.
+>>> 
+>>> endTime -> (timestamp)
+>>>
+>>>> The end time of the time range. Only sessions with activity before this timestamp are included.
@@ -417,0 +469,326 @@ evaluationResults -> (structure)
+failureAnalysisResult -> (structure)
+
+> Unified customer-facing clustering result written to S3.
+> 
+> failures -> (list) [required]
+>
+>> The list of failure category clusters identified across analyzed sessions.
+>> 
+>> Constraints:
+>> 
+>>   * min: `0`
+>> 
+
+>> 
+>> (structure)
+>>
+>>> A top-level failure category identified by clustering similar failure patterns across sessions.
+>>> 
+>>> clusterId -> (integer) [required]
+>>>
+>>>> The unique identifier of the failure category cluster.
+>>> 
+>>> name -> (string) [required]
+>>>
+>>>> The name of the failure category.
+>>> 
+>>> description -> (string) [required]
+>>>
+>>>> A description of the failure category pattern.
+>>> 
+>>> affectedSessionCount -> (integer) [required]
+>>>
+>>>> The number of sessions affected by this failure category.
+>>> 
+>>> subCategories -> (list) [required]
+>>>
+>>>> The list of failure subcategories within this category.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>> 
+
+>>>> 
+>>>> (structure)
+>>>>
+>>>>> A subcategory of failures within a top-level failure category.
+>>>>> 
+>>>>> clusterId -> (integer) [required]
+>>>>>
+>>>>>> The unique identifier of the failure subcategory cluster.
+>>>>> 
+>>>>> name -> (string) [required]
+>>>>>
+>>>>>> The name of the failure subcategory.
+>>>>> 
+>>>>> description -> (string) [required]
+>>>>>
+>>>>>> A description of the failure subcategory pattern.
+>>>>> 
+>>>>> affectedSessionCount -> (integer) [required]
+>>>>>
+>>>>>> The number of sessions affected by this failure subcategory.
+>>>>> 
+>>>>> rootCauses -> (list) [required]
+>>>>>
+>>>>>> The list of root cause clusters identified within this subcategory.
+>>>>>> 
+>>>>>> Constraints:
+>>>>>> 
+>>>>>>   * min: `0`
+>>>>>> 
+
+>>>>>> 
+>>>>>> (structure)
+>>>>>>
+>>>>>>> A cluster of similar root causes identified within a failure subcategory.
+>>>>>>> 
+>>>>>>> clusterId -> (integer) [required]
+>>>>>>>
+>>>>>>>> The unique identifier of the root cause cluster.
+>>>>>>> 
+>>>>>>> name -> (string) [required]
+>>>>>>>
+>>>>>>>> The name of the root cause cluster.
+>>>>>>> 
+>>>>>>> rootCause -> (string) [required]
+>>>>>>>
+>>>>>>>> The root cause explanation for this cluster of failures.
+>>>>>>> 
+>>>>>>> recommendation -> (string) [required]
+>>>>>>>
+>>>>>>>> The recommended fix for this root cause.
+>>>>>>> 
+>>>>>>> affectedSessionCount -> (integer) [required]
+>>>>>>>
+>>>>>>>> The number of sessions affected by this root cause.
+>>>>>>> 
+>>>>>>> affectedSessions -> (list) [required]
+>>>>>>>
+>>>>>>>> The list of sessions affected by this root cause.
+>>>>>>>> 
+>>>>>>>> Constraints:
+>>>>>>>> 
+>>>>>>>>   * min: `0`
+>>>>>>>> 
+
+>>>>>>>> 
+>>>>>>>> (structure)
+>>>>>>>>
+>>>>>>>>> A session affected by a detected failure pattern, including root cause details.
+>>>>>>>>> 
+>>>>>>>>> sessionId -> (string) [required]
+>>>>>>>>>
+>>>>>>>>>> The unique identifier of the affected session.
+>>>>>>>>> 
+>>>>>>>>> explanation -> (string) [required]
+>>>>>>>>>
+>>>>>>>>>> An explanation of how the failure manifested in this session.
+>>>>>>>>> 
+>>>>>>>>> fixType -> (string) [required]
+>>>>>>>>>
+>>>>>>>>>> The type of fix recommended for this failure.
+>>>>>>>>> 
+>>>>>>>>> recommendation -> (string) [required]
+>>>>>>>>>
+>>>>>>>>>> The specific fix recommendation for this session.
+>>>>>>>>> 
+>>>>>>>>> failureSpans -> (list) [required]
+>>>>>>>>>
+>>>>>>>>>> The list of spans where failures were detected in this session.
+>>>>>>>>>> 
+>>>>>>>>>> Constraints: