AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-06-28 · Documentation low

File: bedrock-agentcore/latest/devguide/datasets-encryption.md

Summary

Added CLI example for creating encrypted datasets using customer-managed KMS keys

Security assessment

Demonstrates encryption feature implementation using KMS. While encryption is security-related, this is documentation enhancement not a security fix.

Diff

diff --git a/bedrock-agentcore/latest/devguide/datasets-encryption.md b/bedrock-agentcore/latest/devguide/datasets-encryption.md
index f73f25f29..385e5cb38 100644
--- a//bedrock-agentcore/latest/devguide/datasets-encryption.md
+++ b//bedrock-agentcore/latest/devguide/datasets-encryption.md
@@ -147,0 +148,15 @@ Specify the `kmsKeyArn` parameter when calling `CreateDataset`:
+AgentCore CLI
+    
+
+  1. To create an encrypted dataset, pass `--kms-key-arn` when you add the dataset, then run `agentcore deploy`. Replace the KMS key ARN with your own key ARN.
+    
+        agentcore add dataset --name encrypted_dataset \
+        --schema-type AGENTCORE_EVALUATION_PREDEFINED_V1 \
+        --kms-key-arn "arn:aws:kms:us-east-1:111122223333:key/1234abcd-12ab-34cd-56ef-1234567890ab"
+    
+    # Add your scenarios to agentcore/datasets/encrypted_dataset.jsonl, then run agentcore deploy.
+    agentcore deploy
+
+
+
+