AWS cli documentation change

Service: cli · 2026-06-19 · Documentation low

File: cli/latest/reference/devops-agent/get-service.md

Summary

Added 'remoteagent' (token-based) and 'remoteagentsigv4' authentication methods with detailed configuration parameters including authorization methods, API keys, and IAM roles

Security assessment

Documents new secure authentication methods (OAuth, API keys, SigV4) and IAM role integration. The constrained patterns for role ARNs and endpoint validation improve security posture, but no specific vulnerability is addressed.

Diff

diff --git a/cli/latest/reference/devops-agent/get-service.md b/cli/latest/reference/devops-agent/get-service.md
index 6d2114832..db66826a4 100644
--- a//cli/latest/reference/devops-agent/get-service.md
+++ b//cli/latest/reference/devops-agent/get-service.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -257,0 +258,2 @@ service -> (structure)
+>>   * `remoteagent`
+>>   * `remoteagentsigv4`
@@ -285 +287 @@ service -> (structure)
->> This is a Tagged Union structure. Only one of the following top level keys can be set: `github`, `slack`, `mcpserverdatadog`, `mcpserver`, `servicenow`, `gitlab`, `mcpserversplunk`, `mcpservernewrelic`, `azuredevops`, `azureidentity`, `mcpservergrafana`, `pagerduty`, `mcpserversigv4`.
+>> This is a Tagged Union structure. Only one of the following top level keys can be set: `github`, `slack`, `mcpserverdatadog`, `mcpserver`, `servicenow`, `gitlab`, `mcpserversplunk`, `mcpservernewrelic`, `azuredevops`, `azureidentity`, `mcpservergrafana`, `pagerduty`, `mcpserversigv4`, `remoteagent`, `remoteagentsigv4`.
@@ -727,0 +730,131 @@ service -> (structure)
+>> 
+>> remoteagent -> (structure)
+>>
+>>> Remote A2A agent-specific service details (token-based auth).
+>>> 
+>>> name -> (string) [required]
+>>>
+>>>> Name identifier for a remote A2A agent.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `128`
+>>>>   * pattern: `[a-zA-Z0-9_-]+`
+>>>> 
+
+>>> 
+>>> endpoint -> (string) [required]
+>>>
+>>>> HTTPS endpoint URL for a remote A2A agent.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `2048`
+>>>>   * pattern: `https://[a-zA-Z0-9.-]+(?::[0-9]+)?(?:/.*)?`
+>>>> 
+
+>>> 
+>>> description -> (string)
+>>>
+>>>> Description field
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `500`
+>>>>   * pattern: `[\p{L}\p{N}\p{P}\p{S}\p{Z}]+`
+>>>> 
+
+>>> 
+>>> authorizationMethod -> (string) [required]
+>>>
+>>>> The authorization method used by the remote agent.
+>>>> 
+>>>> Possible values:
+>>>> 
+>>>>   * `oauth-client-credentials`
+>>>>   * `api-key`
+>>>>   * `bearer-token`
+>>>> 
+
+>>> 
+>>> apiKeyHeader -> (string)
+>>>
+>>>> If the remote agent uses API key authentication, the header name.
+>> 
+>> remoteagentsigv4 -> (structure)
+>>
+>>> Remote A2A agent-specific service details (SigV4 auth).
+>>> 
+>>> name -> (string) [required]
+>>>
+>>>> Name identifier for a remote A2A agent.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `128`
+>>>>   * pattern: `[a-zA-Z0-9_-]+`
+>>>> 
+
+>>> 
+>>> endpoint -> (string) [required]
+>>>
+>>>> HTTPS endpoint URL for a remote A2A agent.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `2048`
+>>>>   * pattern: `https://[a-zA-Z0-9.-]+(?::[0-9]+)?(?:/.*)?`
+>>>> 
+
+>>> 
+>>> description -> (string)
+>>>
+>>>> Description field
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `0`
+>>>>   * max: `500`
+>>>>   * pattern: `[\p{L}\p{N}\p{P}\p{S}\p{Z}]+`
+>>>> 
+
+>>> 
+>>> region -> (string) [required]
+>>>
+>>>> AWS region identifier or wildcard (*) for SigV4a multi-region signing.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `50`
+>>>>   * pattern: `(\*|[a-z]{2,4}(-[a-z]+)+-\d+)`
+>>>> 
+
+>>> 
+>>> service -> (string) [required]
+>>>
+>>>> The AWS service name for SigV4 signing.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `100`
+>>>> 
+
+>>> 
+>>> roleArn -> (string)
+>>>
+>>>> AWS IAM role ARN.
+>>>> 
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `255`
+>>>>   * pattern: `arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@_/-]+`
+>>>> 
+
@@ -790 +923 @@ tags -> (map)
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »