AWS cli medium security documentation change

Service: cli · 2026-06-19 · Security-related medium

File: cli/latest/reference/devops-agent/list-services.md

Summary

Added new 'remoteagent' and 'remoteagentsigv4' service types with detailed authentication configurations, including API key headers, OAuth methods, IAM roles, and SigV4 signing. Added parameter constraints and updated CLI version references.

Security assessment

The change documents multiple authentication methods (API keys, OAuth, bearer tokens, SigV4) and IAM role usage ('roleArn' field with ARN pattern constraints), directly addressing authentication security. Endpoint validation (HTTPS pattern) ensures encrypted communication. Authorization methods and credential handling instructions improve secure configuration practices.

Diff

diff --git a/cli/latest/reference/devops-agent/list-services.md b/cli/latest/reference/devops-agent/list-services.md
index d57c9a9fb..3695f9c4a 100644
--- a//cli/latest/reference/devops-agent/list-services.md
+++ b//cli/latest/reference/devops-agent/list-services.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »
@@ -121,0 +122,2 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/devops
+>   * `remoteagent`
+>   * `remoteagentsigv4`
@@ -135,0 +138,7 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/devops
+> 
+> Constraints:
+> 
+>   * min: `1`
+>   * max: `100`
+> 
+
@@ -308,0 +318,2 @@ services -> (list)
+>>>   * `remoteagent`
+>>>   * `remoteagentsigv4`
@@ -336 +347 @@ services -> (list)
->>> This is a Tagged Union structure. Only one of the following top level keys can be set: `github`, `slack`, `mcpserverdatadog`, `mcpserver`, `servicenow`, `gitlab`, `mcpserversplunk`, `mcpservernewrelic`, `azuredevops`, `azureidentity`, `mcpservergrafana`, `pagerduty`, `mcpserversigv4`.
+>>> This is a Tagged Union structure. Only one of the following top level keys can be set: `github`, `slack`, `mcpserverdatadog`, `mcpserver`, `servicenow`, `gitlab`, `mcpserversplunk`, `mcpservernewrelic`, `azuredevops`, `azureidentity`, `mcpservergrafana`, `pagerduty`, `mcpserversigv4`, `remoteagent`, `remoteagentsigv4`.
@@ -778,0 +790,131 @@ services -> (list)
+>>> 
+>>> remoteagent -> (structure)
+>>>
+>>>> Remote A2A agent-specific service details (token-based auth).
+>>>> 
+>>>> name -> (string) [required]
+>>>>
+>>>>> Name identifier for a remote A2A agent.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `128`
+>>>>>   * pattern: `[a-zA-Z0-9_-]+`
+>>>>> 
+
+>>>> 
+>>>> endpoint -> (string) [required]
+>>>>
+>>>>> HTTPS endpoint URL for a remote A2A agent.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `https://[a-zA-Z0-9.-]+(?::[0-9]+)?(?:/.*)?`
+>>>>> 
+
+>>>> 
+>>>> description -> (string)
+>>>>
+>>>>> Description field
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `500`
+>>>>>   * pattern: `[\p{L}\p{N}\p{P}\p{S}\p{Z}]+`
+>>>>> 
+
+>>>> 
+>>>> authorizationMethod -> (string) [required]
+>>>>
+>>>>> The authorization method used by the remote agent.
+>>>>> 
+>>>>> Possible values:
+>>>>> 
+>>>>>   * `oauth-client-credentials`
+>>>>>   * `api-key`
+>>>>>   * `bearer-token`
+>>>>> 
+
+>>>> 
+>>>> apiKeyHeader -> (string)
+>>>>
+>>>>> If the remote agent uses API key authentication, the header name.
+>>> 
+>>> remoteagentsigv4 -> (structure)
+>>>
+>>>> Remote A2A agent-specific service details (SigV4 auth).
+>>>> 
+>>>> name -> (string) [required]
+>>>>
+>>>>> Name identifier for a remote A2A agent.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `128`
+>>>>>   * pattern: `[a-zA-Z0-9_-]+`
+>>>>> 
+
+>>>> 
+>>>> endpoint -> (string) [required]
+>>>>
+>>>>> HTTPS endpoint URL for a remote A2A agent.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `2048`
+>>>>>   * pattern: `https://[a-zA-Z0-9.-]+(?::[0-9]+)?(?:/.*)?`
+>>>>> 
+
+>>>> 
+>>>> description -> (string)
+>>>>
+>>>>> Description field
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `0`
+>>>>>   * max: `500`
+>>>>>   * pattern: `[\p{L}\p{N}\p{P}\p{S}\p{Z}]+`
+>>>>> 
+
+>>>> 
+>>>> region -> (string) [required]
+>>>>
+>>>>> AWS region identifier or wildcard (*) for SigV4a multi-region signing.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `50`
+>>>>>   * pattern: `(\*|[a-z]{2,4}(-[a-z]+)+-\d+)`
+>>>>> 
+
+>>>> 
+>>>> service -> (string) [required]
+>>>>
+>>>>> The AWS service name for SigV4 signing.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `100`
+>>>>> 
+
+>>>> 
+>>>> roleArn -> (string)
+>>>>
+>>>>> AWS IAM role ARN.
+>>>>> 
+>>>>> Constraints:
+>>>>> 
+>>>>>   * min: `1`
+>>>>>   * max: `255`
+>>>>>   * pattern: `arn:aws:iam::\d{12}:role/[a-zA-Z0-9+=,.@_/-]+`
+>>>>> 
+
@@ -813 +955 @@ services -> (list)
-  * [AWS CLI 2.35.5 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.8 Command Reference](../../index.html) »