AWS bedrock-agentcore documentation change
Summary
Added clarification note about automatic role creation during A/B tests when not specifying a custom role ARN.
Security assessment
The change clarifies role management behavior but doesn't address security vulnerabilities or introduce new security features. It's a documentation improvement about operational workflow.
Diff
diff --git a/bedrock-agentcore/latest/devguide/ab-testing-prereqs.md b/bedrock-agentcore/latest/devguide/ab-testing-prereqs.md index cd221eabb..715701c29 100644 --- a//bedrock-agentcore/latest/devguide/ab-testing-prereqs.md +++ b//bedrock-agentcore/latest/devguide/ab-testing-prereqs.md @@ -45,0 +46,4 @@ The A/B test execution role must trust the `bedrock-agentcore.amazonaws.com` ser +###### Note + +You only need to create this role manually if you bring your own execution role and pass it with `agentcore run ab-test --role-arn <arn>`. If you omit `--role-arn`, the AgentCore CLI auto-creates an execution role for the test. +