AWS cli documentation change
Summary
Added documentation for 'advertisedScopeMapping' parameter in OAuth configuration, enabling scope translation between identity providers and services
Security assessment
Introduces documentation for OAuth security feature that maps scopes between identity providers and services. This improves security posture by enabling proper scope validation but doesn't address any specific vulnerability.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/create-registry.md b/cli/latest/reference/bedrock-agentcore-control/create-registry.md index 46273a560..11c86f0ae 100644 --- a//cli/latest/reference/bedrock-agentcore-control/create-registry.md +++ b//cli/latest/reference/bedrock-agentcore-control/create-registry.md @@ -15 +15 @@ - * [AWS CLI 2.35.16 Command Reference](../../index.html) » + * [AWS CLI 2.35.19 Command Reference](../../index.html) » @@ -203,0 +204,31 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc +>> +>> advertisedScopeMapping -> (map) +>> +>>> A map that associates each scope in `allowedScopes` with a corresponding advertised scope value. The advertised scope appears in OAuth protected resource metadata and `WWW-Authenticate` response headers. Use this parameter when the scope that clients request from your identity provider differs from the scope in the validated token. Each key is a scope from `allowedScopes` that the service uses for token validation. Each value is the corresponding scope that the service advertises to clients. Scopes without a mapping entry appear unchanged to clients. +>>> +>>> Constraints: +>>> +>>> * min: `1` +>>> * max: `50` +>>> + +>>> +>>> key -> (string) +>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `255` +>>>> * pattern: `[\x21\x23-\x5B\x5D-\x7E]+` +>>>> + +>>> +>>> value -> (string) +>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `255` +>>>> * pattern: `[\x21\x23-\x5B\x5D-\x7E]+` +>>>> + @@ -640,0 +672,2 @@ JSON Syntax: + "advertisedScopeMapping": {"string": "string" + ...}, @@ -869 +902 @@ registryArn -> (string) - * [AWS CLI 2.35.16 Command Reference](../../index.html) » + * [AWS CLI 2.35.19 Command Reference](../../index.html) »