AWS Security ChangesHomeSearch

AWS cli documentation change

Service: cli · 2026-07-10 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md

Summary

Updated AWS CLI version reference from 2.35.16 to 2.35.19 and added documentation for 'advertisedScopeMapping' parameter in authorizerConfiguration

Security assessment

The change documents OAuth scope mapping configuration which helps prevent token scope mismatches and improves security metadata accuracy. However, there's no evidence of a specific vulnerability being addressed.

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md
index 6f914ea5d..b8bc6f9c8 100644
--- a//cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md
+++ b//cli/latest/reference/bedrock-agentcore-control/get-agent-runtime.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »
@@ -650,0 +651,31 @@ authorizerConfiguration -> (tagged union structure)
+>> 
+>> advertisedScopeMapping -> (map)
+>>
+>>> A map that associates each scope in `allowedScopes` with a corresponding advertised scope value. The advertised scope appears in OAuth protected resource metadata and `WWW-Authenticate` response headers. Use this parameter when the scope that clients request from your identity provider differs from the scope in the validated token. Each key is a scope from `allowedScopes` that the service uses for token validation. Each value is the corresponding scope that the service advertises to clients. Scopes without a mapping entry appear unchanged to clients.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `50`
+>>> 
+
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `255`
+>>>>   * pattern: `[\x21\x23-\x5B\x5D-\x7E]+`
+>>>> 
+
+>>> 
+>>> value -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `255`
+>>>>   * pattern: `[\x21\x23-\x5B\x5D-\x7E]+`
+>>>> 
+
@@ -1217 +1248 @@ filesystemConfigurations -> (list)
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »