AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-06-16 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/update-configuration-bundle.md

Summary

Added new '--kms-key-arn' option for encrypting component configurations and updated ARN pattern

Security assessment

Documents new KMS encryption option and key rotation capability, which are security features but not fixes for existing vulnerabilities.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/update-configuration-bundle.md b/cli/latest/reference/bedrock-agentcore-control/update-configuration-bundle.md
index 7961014bb..53099b161 100644
--- a//cli/latest/reference/bedrock-agentcore-control/update-configuration-bundle.md
+++ b//cli/latest/reference/bedrock-agentcore-control/update-configuration-bundle.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
@@ -77,0 +78 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
+    [--kms-key-arn <value>]
@@ -251,0 +253,12 @@ JSON Syntax:
+`--kms-key-arn` (string)
+
+> Optional KMS key ARN for encrypting component configurations. If provided, components will be encrypted with this key. If the bundle already has a KMS key, this rotates to the new key.
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `2048`
+>   * pattern: `arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}`
+> 
+
+
@@ -371 +384 @@ bundleArn -> (string)
->   * pattern: `arn:aws:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}`
+>   * pattern: `arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:configuration-bundle/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}`
@@ -409 +422 @@ updatedAt -> (timestamp)
-  * [AWS CLI 2.35.3 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.5 Command Reference](../../index.html) »