AWS Security ChangesHomeSearch

AWS cli: Bedrock Agent untag-resource: ARN pattern adds retrieval-instruction resources

Service: cli · 2026-10-20 · Documentation low

File: cli/latest/reference/bedrock-agent/untag-resource.md · Type: iam

Summary

Updates the AWS CLI reference version to 2.38.2 and extends the accepted resource ARN regex for UntagResource to include retrieval-instruction resources and alternate partitions (aws-cn, aws-us-gov, aws-eusc, aws-iso*).

Security assessment

Same ARN-pattern expansion as the tag-resource page, applied to UntagResource. It broadens the set of valid resource ARNs for tag removal (IAM resource-scoping relevance) but is a routine API surface update with no vulnerability or security guidance.

Evidence

>   * pattern: `.*(^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:(agent|agent-alias|knowledge-base|flow|prompt)/[A-Z0-9]{10}(?:/[A-Z0-9]{10})?$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:flow/([A-Z0-9]{10})/alias/([A-Z0-9]{10})$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:prompt/([A-Z0-9]{10})?(?::/d+)?$|^arn:aws(-cn|-us-gov|-eusc|-iso(-[b-f])?)?:bedrock:[a-zA-Z0-9-]+:[0-9]{12}:retrieval-instruction/[a-z0-9]{10}$).*`

Diff

diff --git a/cli/latest/reference/bedrock-agent/untag-resource.md b/cli/latest/reference/bedrock-agent/untag-resource.md
index d5c6d97..a27984b 100644
--- a//cli/latest/reference/bedrock-agent/untag-resource.md
+++ b//cli/latest/reference/bedrock-agent/untag-resource.md
@@ -15 +15 @@
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »
@@ -102 +102 @@ See also: [AWS API Documentation](https://docs.aws.amazon.com/goto/WebAPI/bedroc
->   * pattern: `.*(^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:(agent|agent-alias|knowledge-base|flow|prompt)/[A-Z0-9]{10}(?:/[A-Z0-9]{10})?$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:flow/([A-Z0-9]{10})/alias/([A-Z0-9]{10})$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:prompt/([A-Z0-9]{10})?(?::/d+)?$).*`
+>   * pattern: `.*(^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:(agent|agent-alias|knowledge-base|flow|prompt)/[A-Z0-9]{10}(?:/[A-Z0-9]{10})?$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:flow/([A-Z0-9]{10})/alias/([A-Z0-9]{10})$|^arn:aws:bedrock:[a-zA-Z0-9-]+:/d{12}:prompt/([A-Z0-9]{10})?(?::/d+)?$|^arn:aws(-cn|-us-gov|-eusc|-iso(-[b-f])?)?:bedrock:[a-zA-Z0-9-]+:[0-9]{12}:retrieval-instruction/[a-z0-9]{10}$).*`
@@ -258 +258 @@ None
-  * [AWS CLI 2.38.1 Command Reference](../../index.html) »
+  * [AWS CLI 2.38.2 Command Reference](../../index.html) »