AWS Security ChangesHomeSearch

AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-06-19 · Documentation low

File: bedrock-agentcore/latest/devguide/harness-get-started.md

Summary

Restructured documentation with updated prerequisites, moved AWS CLI/boto3 examples earlier, added new API references, and clarified installation steps.

Security assessment

The changes reorganize content and add API references but contain no evidence of addressing security vulnerabilities. The existing reference to IAM execution role policies remains unchanged.

Diff

diff --git a/bedrock-agentcore/latest/devguide/harness-get-started.md b/bedrock-agentcore/latest/devguide/harness-get-started.md
index 6686ab332..9ff17357b 100644
--- a//bedrock-agentcore/latest/devguide/harness-get-started.md
+++ b//bedrock-agentcore/latest/devguide/harness-get-started.md
@@ -15 +15 @@ You can use the harness through the [AgentCore CLI](https://github.com/aws/agent
-  * AWS credentials configured in one of the preview regions: US East (N. Virginia), US West (Oregon), Europe (Frankfurt), or Asia Pacific (Sydney).
+  * AWS credentials configured in one of the [supported regions](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agentcore-regions.html).
@@ -17 +17 @@ You can use the harness through the [AgentCore CLI](https://github.com/aws/agent
-  * For the CLI: Node.js 20+, AgentCore CLI installed with the preview channel:
+  * For the CLI: Node.js 20+
@@ -19,3 +19 @@ You can use the harness through the [AgentCore CLI](https://github.com/aws/agent
-        npm install -g @aws/agentcore@preview
-
-  * For the SDK/boto3: Python 3.10+, `boto3` installed, and an IAM execution role the harness can assume. See the [execution role policy](./harness-security.html#harness-execution-role-policy) for minimum permissions.
+  * For the SDK/boto3: Python 3.10+, [`boto3` installed](https://docs.aws.amazon.com/boto3/latest/guide/quickstart.html), and an IAM execution role the harness can assume. See the [execution role policy](./harness-security.html#harness-execution-role-policy) for minimum permissions.
@@ -29,0 +28,40 @@ You can use the harness through the [AgentCore CLI](https://github.com/aws/agent
+AWS CLI/boto3
+    
+
+Create the harness with a name and execution role:
+    
+    
+    aws bedrock-agentcore-control create-harness \
+      --harness-name "MyHarness" \
+      --execution-role-arn "arn:aws:iam::123456789012:role/MyHarnessRole"
+
+Poll `get-harness` until `"status": "READY"`. Note the `arn` in the response.
+    
+    
+    aws bedrock-agentcore-control get-harness \
+      --harness-id "MyHarness-XyZ123"
+
+Invoke from Python. If you don’t specify a model, the harness defaults to Anthropic Claude Sonnet 4.6 on Amazon Bedrock:
+    
+    
+    import boto3
+    
+    client = boto3.client("bedrock-agentcore", region_name="us-west-2")
+    
+    response = client.invoke_harness(
+        harnessArn="arn:aws:bedrock-agentcore:us-west-2:123456789012:harness/MyHarness-XyZ123",  # Replace with your harness ARN
+        runtimeSessionId="1234abcd-12ab-34cd-56ef-1234567890ab",
+        messages=[{
+            "role": "user",
+            "content": [{"text": "Research three tropical vacation options under $3k."}]
+        }],
+    )
+    
+    for event in response["stream"]:
+        if "contentBlockDelta" in event:
+            delta = event["contentBlockDelta"].get("delta", {})
+            if "text" in delta:
+                print(delta["text"], end="", flush=True)
+        elif "runtimeClientError" in event:
+            print(f"\nError: {event['runtimeClientError']['message']}")
+
@@ -32,0 +71,5 @@ AgentCore CLI
+Install AgentCore CLI installed with the preview channel:
+    
+    
+    npm install -g @aws/agentcore@preview
+
@@ -130,40 +172,0 @@ Expand **Harness Settings** to view and override the harness configuration for t
-AWS CLI/boto3
-    
-
-Create the harness with a name and execution role:
-    
-    
-    aws bedrock-agentcore-control create-harness \
-      --harness-name "MyHarness" \
-      --execution-role-arn "arn:aws:iam::123456789012:role/MyHarnessRole"
-
-Poll `get-harness` until `"status": "READY"`. Note the `arn` in the response.
-    
-    
-    aws bedrock-agentcore-control get-harness \
-      --harness-id "MyHarness-XyZ123"
-
-Invoke from Python. If you don’t specify a model, the harness defaults to Anthropic Claude Sonnet 4.6 on Amazon Bedrock:
-    
-    
-    import boto3
-    
-    client = boto3.client("bedrock-agentcore", region_name="us-west-2")
-    
-    response = client.invoke_harness(
-        harnessArn="arn:aws:bedrock-agentcore:us-west-2:123456789012:harness/MyHarness-XyZ123",  # Replace with your harness ARN
-        runtimeSessionId="1234abcd-12ab-34cd-56ef-1234567890ab",
-        messages=[{
-            "role": "user",
-            "content": [{"text": "Research three tropical vacation options under $3k."}]
-        }],
-    )
-    
-    for event in response["stream"]:
-        if "contentBlockDelta" in event:
-            delta = event["contentBlockDelta"].get("delta", {})
-            if "text" in delta:
-                print(delta["text"], end="", flush=True)
-        elif "runtimeClientError" in event:
-            print(f"\nError: {event['runtimeClientError']['message']}")
-
@@ -189,0 +193,2 @@ For additional details, see the API Reference:
+  * [ListHarnessVersions API](https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnessVersions.html)
+
@@ -193,0 +199,10 @@ For additional details, see the API Reference:
+  * [CreateHarnessEndpoint API](https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateHarnessEndpoint.html)
+
+  * [GetHarnessEndpoint API](https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetHarnessEndpoint.html)
+
+  * [UpdateHarnessEndpoint API](https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateHarnessEndpoint.html)
+
+  * [DeleteHarnessEndpoint API](https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteHarnessEndpoint.html)
+
+  * [ListHarnessesEndpoints API](https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnessesEndpoint.html)
+
@@ -243 +258 @@ AgentCore harness
-Configure agents and models
+Models and instructions