AWS cli medium security documentation change

Service: cli · 2026-06-16 · Security-related medium

File: cli/latest/reference/bedrock-agentcore-control/create-configuration-bundle.md

Summary

Added --kms-key-arn for encrypting component configurations and updated ARN pattern with partition support

Security assessment

The --kms-key-arn option provides explicit documentation for encrypting configuration bundles at rest using KMS, enhancing data protection capabilities for sensitive configuration data.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/create-configuration-bundle.md b/cli/latest/reference/bedrock-agentcore-control/create-configuration-bundle.md
index 93b01192e..459c7c5b1 100644
--- a//cli/latest/reference/bedrock-agentcore-control/create-configuration-bundle.md
+++ b//cli/latest/reference/bedrock-agentcore-control/create-configuration-bundle.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
@@ -75,0 +76 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--kms-key-arn <value>]
@@ -222,0 +224,12 @@ JSON Syntax:
+`--kms-key-arn` (string)
+
+> Optional KMS key ARN for encrypting component configurations.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `2048`
+>   * pattern: `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}`
+> 
+
+
@@ -386 +399 @@ bundleArn -> (string)
->   * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}`
+>   * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}`
@@ -424 +437 @@ createdAt -> (timestamp)
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »