AWS AWSCloudFormation documentation change
Summary
Added documentation about session storage mount path requirements
Security assessment
The change clarifies technical constraints for mount paths but doesn't address security vulnerabilities or introduce security features. The path restriction appears to be an architectural constraint rather than a security measure.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-runtime-sessionstorageconfiguration.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-runtime-sessionstorageconfiguration.md index 1a1851999..bd8635e2e 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-runtime-sessionstorageconfiguration.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrockagentcore-runtime-sessionstorageconfiguration.md @@ -11 +11 @@ This is the new _CloudFormation Template Reference Guide_. Please update your bo -The `SessionStorageConfiguration` property type specifies Property description not available. for an [AWS::BedrockAgentCore::Runtime](./aws-resource-bedrockagentcore-runtime.html). +Configuration for a session storage filesystem mounted into the AgentCore Runtime. Session storage provides persistent storage that is preserved across AgentCore Runtime session invocations. @@ -36 +36 @@ To declare this entity in your CloudFormation template, use the following syntax -Property description not available. +The mount path for the session storage filesystem inside the AgentCore Runtime. The path must be under `/mnt` with exactly one subdirectory level (for example, `/mnt/data`).