AWS cli: Bedrock Agent tag-resource: ARN pattern adds retrieval-instruction resources

Service: cli · 2026-10-20 · Documentation low

File: cli/latest/reference/bedrock-agent/tag-resource.md · Type: iam

Summary

Updates the AWS CLI reference version to 2.38.2 and extends the accepted resource ARN regex for TagResource to include retrieval-instruction resources and alternate partitions (aws-cn, aws-us-gov, aws-eusc, aws-iso*).

Security assessment

The only substantive change is the resource-ARN validation pattern used when tagging Bedrock resources; it now accepts retrieval-instruction ARNs and additional partitions. This affects which resources can be targeted by tag operations (relevant to IAM resource scoping) but fixes no vulnerability and documents no security control.

Evidence

>   * pattern: `.*(^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:(agent|agent-alias|knowledge-base|flow|prompt)/[A-Z0-9]{10}(?:/[A-Z0-9]{10})?$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:flow/([A-Z0-9]{10})/alias/([A-Z0-9]{10})$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:prompt/([A-Z0-9]{10})?(?::/d+)?$|^arn:aws(-cn|-us-gov|-eusc|-iso(-[b-f])?)?:bedrock:[a-zA-Z0-9-]+:[0-9]{12}:retrieval-instruction/[a-z0-9]{10}$).*`

Diff

diff --git a/cli/latest/reference/bedrock-agent/tag-resource.md b/cli/latest/reference/bedrock-agent/tag-resource.md
index 1789588..e26d410 100644
--- a//cli/latest/reference/bedrock-agent/tag-resource.md
+++ b//cli/latest/reference/bedrock-agent/tag-resource.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
@@ -102 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `.*(^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:(agent|agent-alias|knowledge-base|flow|prompt)/[A-Z0-9]{10}(?:/[A-Z0-9]{10})?$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:flow/([A-Z0-9]{10})/alias/([A-Z0-9]{10})$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:prompt/([A-Z0-9]{10})?(?::/d+)?$).*`
+>   * pattern: `.*(^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:(agent|agent-alias|knowledge-base|flow|prompt)/[A-Z0-9]{10}(?:/[A-Z0-9]{10})?$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:flow/([A-Z0-9]{10})/alias/([A-Z0-9]{10})$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:prompt/([A-Z0-9]{10})?(?::/d+)?$|^arn:aws(-cn|-us-gov|-eusc|-iso(-[b-f])?)?:bedrock:[a-zA-Z0-9-]+:[0-9]{12}:retrieval-instruction/[a-z0-9]{10}$).*`
@@ -268 +268 @@ None
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »