AWS cli medium security documentation change
Summary
Updated CLI version reference; added new 'batchEvaluation' option to recommendationConfig; added constraints to parameters; introduced 'explanation' field; added 'kmsKeyArn' field for encryption; expanded ARN patterns to support all AWS partitions
Security assessment
The addition of 'kmsKeyArn' field explicitly documents encryption of recommendation data using KMS keys, which is a security control. The ARN pattern expansion (adding '[a-zA-Z-]*') enables GovCloud and China regions, which have stricter security requirements. No specific vulnerability is mentioned.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore/get-recommendation.md b/cli/latest/reference/bedrock-agentcore/get-recommendation.md index 23fccfcf9..af3220c7f 100644 --- a//cli/latest/reference/bedrock-agentcore/get-recommendation.md +++ b//cli/latest/reference/bedrock-agentcore/get-recommendation.md @@ -15 +15 @@ - * [AWS CLI 2.35.3 Command Reference](../../index.html) » + * [AWS CLI 2.35.5 Command Reference](../../index.html) » @@ -313 +313 @@ recommendationConfig -> (tagged union structure) ->>>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` +>>>>> * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` @@ -331 +331 @@ recommendationConfig -> (tagged union structure) ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionSpans`, `cloudwatchLogs`. +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionSpans`, `cloudwatchLogs`, `batchEvaluation`. @@ -377,0 +378,2 @@ recommendationConfig -> (tagged union structure) +>>>>>> * min: `1` +>>>>>> * max: `256` @@ -456,0 +459,8 @@ recommendationConfig -> (tagged union structure) +>>> +>>> batchEvaluation -> (structure) +>>> +>>>> Use a completed batch evaluation as the source of agent traces. +>>>> +>>>> batchEvaluationArn -> (string) [required] +>>>> +>>>>> The ARN of the completed batch evaluation to use as the trace source. @@ -458 +468 @@ recommendationConfig -> (tagged union structure) ->> evaluationConfig -> (structure) [required] +>> evaluationConfig -> (structure) @@ -483 +493 @@ recommendationConfig -> (tagged union structure) ->>>>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:evaluator\/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}$|^arn:aws:bedrock-agentcore:::evaluator/Builtin.[a-zA-Z0-9_-]+` +>>>>>> * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:evaluator\/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}$|^arn:aws[a-zA-Z-]*:bedrock-agentcore:::evaluator/Builtin.[a-zA-Z0-9_-]+` @@ -552 +562 @@ recommendationConfig -> (tagged union structure) ->>>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` +>>>>> * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` @@ -590 +600 @@ recommendationConfig -> (tagged union structure) ->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionSpans`, `cloudwatchLogs`. +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sessionSpans`, `cloudwatchLogs`, `batchEvaluation`. @@ -636,0 +647,2 @@ recommendationConfig -> (tagged union structure) +>>>>>> * min: `1` +>>>>>> * max: `256` @@ -715,0 +728,8 @@ recommendationConfig -> (tagged union structure) +>>> +>>> batchEvaluation -> (structure) +>>> +>>>> Use a completed batch evaluation as the source of agent traces. +>>>> +>>>> batchEvaluationArn -> (string) [required] +>>>> +>>>>> The ARN of the completed batch evaluation to use as the trace source. @@ -772 +792 @@ recommendationResult -> (tagged union structure) ->>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` +>>>> * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` @@ -778,0 +799,11 @@ recommendationResult -> (tagged union structure) +>> +>> explanation -> (string) +>> +>>> An explanation of why the recommendation was generated and what patterns were identified in the agent traces. +>>> +>>> Constraints: +>>> +>>> * min: `0` +>>> * max: `4096` +>>> + @@ -835,0 +867,11 @@ recommendationResult -> (tagged union structure) +>>>> +>>>> explanation -> (string) +>>>> +>>>>> An explanation of why the recommendation was generated for this tool and what patterns were identified in the agent traces. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `0` +>>>>> * max: `4096` +>>>>> + @@ -847 +889 @@ recommendationResult -> (tagged union structure) ->>>> * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` +>>>> * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}` @@ -876,0 +919,12 @@ recommendationResult -> (tagged union structure) +kmsKeyArn -> (string) + +> The ARN of the KMS key used to encrypt recommendation data. +> +> Constraints: +> +> * min: `1` +> * max: `2048` +> * pattern: `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}` +> + + @@ -887 +941 @@ recommendationResult -> (tagged union structure) - * [AWS CLI 2.35.3 Command Reference](../../index.html) » + * [AWS CLI 2.35.5 Command Reference](../../index.html) »