AWS cli documentation change

Service: cli · 2026-07-10 · Documentation low

File: cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md

Summary

Added 'advertisedScopeMapping' parameter to OAuth configuration with constraints and usage documentation

Security assessment

Documents new security feature for OAuth scope mapping between validation and client presentation, enhancing security controls without addressing a specific vulnerability

Diff

diff --git a/cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md b/cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
index 40a298d0e..243a5528b 100644
--- a//cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
+++ b//cli/latest/reference/bedrock-agentcore-control/update-agent-runtime.md
@@ -15 +15 @@
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »
@@ -420,0 +421,31 @@ JSON Syntax:
+>> 
+>> advertisedScopeMapping -> (map)
+>>
+>>> A map that associates each scope in `allowedScopes` with a corresponding advertised scope value. The advertised scope appears in OAuth protected resource metadata and `WWW-Authenticate` response headers. Use this parameter when the scope that clients request from your identity provider differs from the scope in the validated token. Each key is a scope from `allowedScopes` that the service uses for token validation. Each value is the corresponding scope that the service advertises to clients. Scopes without a mapping entry appear unchanged to clients.
+>>> 
+>>> Constraints:
+>>> 
+>>>   * min: `1`
+>>>   * max: `50`
+>>> 
+
+>>> 
+>>> key -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `255`
+>>>>   * pattern: `[\x21\x23-\x5B\x5D-\x7E]+`
+>>>> 
+
+>>> 
+>>> value -> (string)
+>>>
+>>>> Constraints:
+>>>> 
+>>>>   * min: `1`
+>>>>   * max: `255`
+>>>>   * pattern: `[\x21\x23-\x5B\x5D-\x7E]+`
+>>>> 
+
@@ -857,0 +889,2 @@ JSON Syntax:
+        "advertisedScopeMapping": {"string": "string"
+          ...},
@@ -1421 +1454 @@ status -> (string)
-  * [AWS CLI 2.35.16 Command Reference](../../index.html) »
+  * [AWS CLI 2.35.19 Command Reference](../../index.html) »