AWS cli medium security documentation change
Summary
Added authorizationData (OAuth2) structure, targetType, listingMode, and constraints fields
Security assessment
The OAuth2 authorization implementation (with required authorizationUrl and user ID constraints) directly enhances security by formalizing token-based access control. The DYNAMIC/DEFAULT listing modes introduce security-conscious resource caching policies affecting data freshness and access patterns.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/list-gateway-targets.md b/cli/latest/reference/bedrock-agentcore-control/list-gateway-targets.md index d863878df..547bd0fe2 100644 --- a//cli/latest/reference/bedrock-agentcore-control/list-gateway-targets.md +++ b//cli/latest/reference/bedrock-agentcore-control/list-gateway-targets.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -118,0 +119,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc +> +> Constraints: +> +> * min: `1` +> * max: `1000` +> + @@ -315,0 +323,66 @@ items -> (list) +>> +>> lastSynchronizedAt -> (timestamp) +>> +>>> The timestamp when the target was last synchronized. +>> +>> authorizationData -> (tagged union structure) +>> +>>> Contains the authorization data that is returned when a gateway target is configured with a credential provider with authorization code grant type and requires user federation. +>>> +>>> ### Note +>>> +>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `oauth2`. +>>> +>>> oauth2 -> (structure) +>>> +>>>> OAuth2 authorization data for the gateway target. +>>>> +>>>> authorizationUrl -> (string) [required] +>>>> +>>>>> The URL to initiate the authorization process. This URL is provided when the OAuth2 access token requires user authorization. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> + +>>>> +>>>> userId -> (string) +>>>> +>>>>> The user identifier associated with the OAuth2 authorization session that is defined by AgentCore Gateway. +>>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `128` +>>>>> + +>> +>> targetType -> (string) +>> +>>> The type of the target. +>>> +>>> Possible values: +>>> +>>> * `OPEN_API_SCHEMA` +>>> * `SMITHY_MODEL` +>>> * `MCP_SERVER` +>>> * `LAMBDA` +>>> * `API_GATEWAY` +>>> * `CONNECTOR` +>>> * `AGENTCORE_RUNTIME` +>>> * `PASSTHROUGH` +>>> * `PROVIDER` +>>> + +>> +>> listingMode -> (string) +>> +>>> The listing mode for the target. MCP resources for `DEFAULT` targets are cached at the control plane for faster access. MCP resources for `DYNAMIC` targets are retrieved dynamically when listing tools. +>>> +>>> Possible values: +>>> +>>> * `DEFAULT` +>>> * `DYNAMIC` +>>> + @@ -339 +412 @@ nextToken -> (string) - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) »