AWS cli documentation change
Summary
Updated AWS CLI version reference from 2.35.5 to 2.35.8. Added documentation for new connector and inference configurations, expanded tagged union structures, and added passthrough configuration options.
Security assessment
The changes primarily add new configuration options (connectors, inference targets, passthrough) without addressing vulnerabilities or security weaknesses. The pattern update for Lambda ARNs is a minor syntax expansion ([a-zA-Z0-9-]+ to [a-zA-Z0-9-_]+) with no security implications. Added bucket owner account ID fields support cross-account access but don't introduce new security controls.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/get-gateway-target.md b/cli/latest/reference/bedrock-agentcore-control/get-gateway-target.md index 46799c0f0..762918ae2 100644 --- a//cli/latest/reference/bedrock-agentcore-control/get-gateway-target.md +++ b//cli/latest/reference/bedrock-agentcore-control/get-gateway-target.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -62,0 +63,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc +`get-gateway-target` uses document type values. Document types follow the JSON data model where valid values are: strings, numbers, booleans, null, arrays, and objects. For command input, options and nested parameters that are labeled with the type `document` must be provided as JSON. Shorthand syntax does not support document types. + @@ -322 +324 @@ targetConfiguration -> (tagged union structure) -> This is a Tagged Union structure. Only one of the following top level keys can be set: `mcp`, `http`. +> This is a Tagged Union structure. Only one of the following top level keys can be set: `mcp`, `http`, `inference`. @@ -330 +332 @@ targetConfiguration -> (tagged union structure) ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `openApiSchema`, `smithyModel`, `lambda`, `mcpServer`, `apiGateway`. +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `openApiSchema`, `smithyModel`, `lambda`, `mcpServer`, `apiGateway`, `connector`. @@ -416 +418 @@ targetConfiguration -> (tagged union structure) ->>>> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:([a-z]{2}(-gov)?-[a-z]+-\d{1}):(\d{12}):function:([a-zA-Z0-9-_.]+)(:(\$LATEST|[a-zA-Z0-9-]+))?` +>>>> * pattern: `arn:(aws[a-zA-Z-]*)?:lambda:([a-z]{2}(-gov)?-[a-z]+-\d{1}):(\d{12}):function:([a-zA-Z0-9-_.]+)(:(\$LATEST|[a-zA-Z0-9-_]+))?` @@ -838,0 +841,87 @@ targetConfiguration -> (tagged union structure) +>> +>> connector -> (structure) +>> +>>> The connector integration configuration for the Model Context Protocol target. This configuration defines how the gateway uses a pre-built connector to communicate with the target. +>>> +>>> source -> (structure) [required] +>>> +>>>> The source configuration identifying which connector to use. +>>>> +>>>> connectorId -> (string) [required] +>>>> +>>>>> The identifier for the connector integration (for example, `bedrock-knowledge-bases` ). +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `256` +>>>>> + +>>> +>>> enabled -> (list) +>>> +>>>> A list of tool names to enable from this connector. If absent, all tools provided by the connector are enabled. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `50` +>>>> + +>>>> +>>>> (string) +>>> +>>> configurations -> (list) +>>> +>>>> A list of per-tool configurations for the connector. +>>>> +>>>> (structure) +>>>> +>>>>> Configuration for a single tool within a connector. +>>>>> +>>>>> name -> (string) [required] +>>>>> +>>>>>> The tool or operation name (for example, `retrieve` or `webSearch` ). +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `0` +>>>>>> * max: `64` +>>>>>> * pattern: `[a-zA-Z][a-zA-Z0-9_-]*` +>>>>>> + +>>>>> +>>>>> description -> (string) +>>>>> +>>>>>> An agent-facing description override for this tool. +>>>>>> +>>>>>> Constraints: +>>>>>> +>>>>>> * min: `0` +>>>>>> * max: `2000` +>>>>>> + +>>>>> +>>>>> parameterValues -> (document) +>>>>> +>>>>>> Parameters to set as fixed or default values when provisioning this tool. +>>>>> +>>>>> parameterOverrides -> (list) +>>>>> +>>>>>> Parameters to expose to the agent at runtime, with optional description overrides. +>>>>>> +>>>>>> (structure) +>>>>>> +>>>>>>> Specifies a parameter override for a connector tool, allowing you to control parameter visibility and descriptions. +>>>>>>> +>>>>>>> path -> (string) [required] +>>>>>>> +>>>>>>>> A JSON Pointer path identifying the parameter (for example, `/numberOfResults` or `/filter` ). +>>>>>>> +>>>>>>> description -> (string) +>>>>>>> +>>>>>>>> An agent-facing description override for this parameter. +>>>>>>> +>>>>>>> visible -> (boolean) +>>>>>>> +>>>>>>>> Whether this parameter is visible to the agent. If not specified, uses the service default. @@ -846 +935 @@ targetConfiguration -> (tagged union structure) ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `agentcoreRuntime`. +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `agentcoreRuntime`, `passthrough`. @@ -870,0 +960,267 @@ targetConfiguration -> (tagged union structure) +>>> +>>> schema -> (structure) +>>> +>>>> The API schema configuration that defines the structure of the runtime target’s API. +>>>> +>>>> source -> (tagged union structure) [required] +>>>> +>>>>> Configuration for API schema. +>>>>> +>>>>> ### Note +>>>>> +>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`, `inlinePayload`. +>>>>> +>>>>> s3 -> (structure) +>>>>> +>>>>>> The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3. +>>>>>> +>>>>>> uri -> (string) +>>>>>> +>>>>>>> The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3. +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * pattern: `s3://.{1,2043}` +>>>>>>> + +>>>>>> +>>>>>> bucketOwnerAccountId -> (string) +>>>>>> +>>>>>>> The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket. +>>>>>>> +>>>>>>> Constraints: +>>>>>>> +>>>>>>> * pattern: `[0-9]{12}` +>>>>>>> + +>>>>> +>>>>> inlinePayload -> (string) +>>>>> +>>>>>> The inline payload containing the API schema definition. +>> +>> passthrough -> (structure) +>> +>>> The passthrough configuration for the HTTP target. A passthrough target forwards requests directly to an external HTTP endpoint. +>>> +>>> endpoint -> (string) [required] +>>> +>>>> The HTTPS endpoint that the gateway forwards requests to for this passthrough target. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `2048` +>>>> * pattern: `https://[a-zA-Z0-9\-\.]+(:[0-9]{1,5})?(/.*)?` +>>>> + +>>> +>>> protocolType -> (string) [required] +>>> +>>>> The application protocol the passthrough target implements. Required for passthrough targets. +>>>> +>>>> Possible values: +>>>> +>>>> * `MCP` +>>>> * `A2A` +>>>> * `INFERENCE` +>>>> * `CUSTOM` +>>>> + +>>> +>>> schema -> (structure) +>>> +>>>> The API schema configuration that defines the structure of the passthrough target’s API. +>>>> +>>>> source -> (tagged union structure) [required] +>>>> +>>>>> Configuration for API schema. +>>>>> +>>>>> ### Note +>>>>> +>>>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `s3`, `inlinePayload`. +>>>>> +>>>>> s3 -> (structure) +>>>>> +>>>>>> The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3. +>>>>>> +>>>>>> uri -> (string) +>>>>>> +>>>>>>> The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.