AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-06-22 · Documentation low

File: bedrock-agentcore/latest/devguide/payments-create-manager.md

Summary

Added documentation for AgentCore CLI commands to create, view, update, and delete payment managers and connectors, including credential management and deployment instructions

Security assessment

The changes document handling of sensitive credentials (API keys, secrets, private keys) in CLI commands, but don't address a specific security vulnerability. The additions focus on operational procedures for payment systems which are security-sensitive features.

Diff

diff --git a/bedrock-agentcore/latest/devguide/payments-create-manager.md b/bedrock-agentcore/latest/devguide/payments-create-manager.md
index 8305b8e8a..08f7a9787 100644
--- a//bedrock-agentcore/latest/devguide/payments-create-manager.md
+++ b//bedrock-agentcore/latest/devguide/payments-create-manager.md
@@ -512,0 +513,51 @@ The AgentCore SDK provides a convenience method `create_payment_manager_with_con
+AgentCore CLI
+    
+
+The AgentCore CLI creates the credential provider, Payment Manager, and Payment Connector together from your project directory. Requires CLI v0.19.0 or later.
+
+**Interactive wizard:**
+    
+    
+    agentcore add payment-manager
+
+The wizard prompts for manager name, pattern, auto-payment toggle, spend limit, and optionally walks through adding a connector with provider credentials.
+
+**Non-interactive (Coinbase CDP):**
+    
+    
+    agentcore add payment-manager \
+      --name MyPaymentManager \
+      --auto-payment \
+      --default-spend-limit 10.00
+    
+    agentcore add payment-connector \
+      --manager MyPaymentManager \
+      --name CoinbaseConnector \
+      --provider CoinbaseCDP \
+      --api-key-id <YOUR_API_KEY_ID> \
+      --api-key-secret <YOUR_API_KEY_SECRET> \
+      --wallet-secret <YOUR_WALLET_SECRET>
+    
+    agentcore deploy
+
+**Non-interactive (Stripe/Privy):**
+    
+    
+    agentcore add payment-manager \
+      --name MyPaymentManager \
+      --auto-payment \
+      --default-spend-limit 10.00
+    
+    agentcore add payment-connector \
+      --manager MyPaymentManager \
+      --name StripePrivyConnector \
+      --provider StripePrivy \
+      --app-id <YOUR_APP_ID> \
+      --app-secret <YOUR_APP_SECRET> \
+      --authorization-id <YOUR_AUTHORIZATION_ID> \
+      --authorization-private-key <YOUR_PRIVATE_KEY_BASE64>
+    
+    agentcore deploy
+
+Running `agentcore deploy` provisions IAM roles, stores credentials in AgentCore Identity, and creates the Payment Manager and Connector.
+
@@ -557,0 +609,6 @@ AgentCore SDK
+AgentCore CLI
+    
+    
+    
+    agentcore status
+
@@ -587,0 +645,6 @@ AgentCore SDK
+AgentCore CLI
+    
+    
+    
+    agentcore status
+
@@ -618,0 +682,10 @@ AgentCore SDK
+AgentCore CLI
+    
+    
+    
+    agentcore remove payment-connector --manager MyPaymentManager --name CoinbaseConnector --yes
+    agentcore remove payment-manager --name MyPaymentManager --yes
+    agentcore deploy
+
+The `remove` commands update local configuration. The follow-up `deploy` tears down the payment infrastructure in your account.
+