AWS cli documentation change
Summary
Added new 'remoteagent' and 'remoteagentsigv4' integration types, introduced 'runtimeRoleArn' field for automatic verification testing/VPC connectivity, and added 'capabilities' configuration section
Security assessment
The change introduces SigV4 authentication for remote agents and runtime IAM roles for secure VPC connectivity. While these are security features, there's no evidence of addressing a specific vulnerability. The 'runtimeRoleArn' with strict IAM ARN pattern enhances runtime security.
Diff
diff --git a/cli/latest/reference/devops-agent/get-association.md b/cli/latest/reference/devops-agent/get-association.md index 875f199ef..3ff928c7c 100644 --- a//cli/latest/reference/devops-agent/get-association.md +++ b//cli/latest/reference/devops-agent/get-association.md @@ -15 +15 @@ - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) » @@ -293 +293 @@ association -> (structure) ->> This is a Tagged Union structure. Only one of the following top level keys can be set: `sourceAws`, `aws`, `github`, `slack`, `dynatrace`, `servicenow`, `mcpservernewrelic`, `mcpserverdatadog`, `mcpserver`, `gitlab`, `mcpserversplunk`, `eventChannel`, `azure`, `azuredevops`, `mcpservergrafana`, `pagerduty`, `mcpserversigv4`. +>> This is a Tagged Union structure. Only one of the following top level keys can be set: `sourceAws`, `aws`, `github`, `slack`, `dynatrace`, `servicenow`, `mcpservernewrelic`, `mcpserverdatadog`, `mcpserver`, `gitlab`, `mcpserversplunk`, `eventChannel`, `azure`, `azuredevops`, `mcpservergrafana`, `pagerduty`, `mcpserversigv4`, `remoteagent`, `remoteagentsigv4`. @@ -400,0 +401,12 @@ association -> (structure) +>>> +>>> runtimeRoleArn -> (string) +>>> +>>>> Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `255` +>>>> * pattern: `arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@_/-]+` +>>>> + @@ -552,0 +565,12 @@ association -> (structure) +>>> +>>> runtimeRoleArn -> (string) +>>> +>>>> Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `255` +>>>> * pattern: `arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@_/-]+` +>>>> + @@ -656,0 +681,31 @@ association -> (structure) +>> +>> remoteagent -> (structure) +>> +>>> Remote A2A agent integration configuration (token-based auth). +>> +>> remoteagentsigv4 -> (structure) +>> +>>> Remote A2A agent integration configuration (SigV4 auth). +> +> capabilities -> (map) +> +>> Enabled capabilities for this association. +>> +>> key -> (string) +>> +>>> AWS DevOps Agent capability types representing the set of automated capabilities that can be enabled per association. +>>> +>>> Possible values: +>>> +>>> * `RELEASE_READINESS_REVIEW` +>>> * `RELEASE_READINESS_REVIEW_AUTOMATED_TESTING` +>>> + +>> +>> value -> (structure) +>> +>>> Capability configuration for the AWS DevOps Agent. +>>> +>>> enabled -> (boolean) +>>> +>>>> Whether the capability is enabled. @@ -668 +723 @@ association -> (structure) - * [AWS CLI 2.35.5 Command Reference](../../index.html) » + * [AWS CLI 2.35.8 Command Reference](../../index.html) »