AWS cli documentation change
Summary
Added documentation for 'advertisedScopeMapping' parameter in harness output structure, detailing OAuth scope mapping capabilities
Security assessment
Documents OAuth security feature for scope mapping in harness outputs. This enhances security documentation by explaining how to validate and advertise scopes, but shows no evidence of fixing a security vulnerability.
Diff
diff --git a/cli/latest/reference/bedrock-agentcore-control/delete-harness.md b/cli/latest/reference/bedrock-agentcore-control/delete-harness.md index 74071e028..b76c81674 100644 --- a//cli/latest/reference/bedrock-agentcore-control/delete-harness.md +++ b//cli/latest/reference/bedrock-agentcore-control/delete-harness.md @@ -15 +15 @@ - * [AWS CLI 2.35.16 Command Reference](../../index.html) » + * [AWS CLI 2.35.19 Command Reference](../../index.html) » @@ -1338,0 +1339,31 @@ harness -> (structure) +>>> +>>> advertisedScopeMapping -> (map) +>>> +>>>> A map that associates each scope in `allowedScopes` with a corresponding advertised scope value. The advertised scope appears in OAuth protected resource metadata and `WWW-Authenticate` response headers. Use this parameter when the scope that clients request from your identity provider differs from the scope in the validated token. Each key is a scope from `allowedScopes` that the service uses for token validation. Each value is the corresponding scope that the service advertises to clients. Scopes without a mapping entry appear unchanged to clients. +>>>> +>>>> Constraints: +>>>> +>>>> * min: `1` +>>>> * max: `50` +>>>> + +>>>> +>>>> key -> (string) +>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `255` +>>>>> * pattern: `[\x21\x23-\x5B\x5D-\x7E]+` +>>>>> + +>>>> +>>>> value -> (string) +>>>> +>>>>> Constraints: +>>>>> +>>>>> * min: `1` +>>>>> * max: `255` +>>>>> * pattern: `[\x21\x23-\x5B\x5D-\x7E]+` +>>>>> + @@ -1908 +1939 @@ harness -> (structure) - * [AWS CLI 2.35.16 Command Reference](../../index.html) » + * [AWS CLI 2.35.19 Command Reference](../../index.html) »