aws-cli

One identity check, aws sts get-caller-identity, before any command that can create a billable resource. AWS CLI 2.37.12 on 11 October 2026.

Two CLIs, not one binary named bedrock-cli. AWS CLI 2.37.12 and agentcore 0.30.0, checked 11 October 2026.

AWS CLI v2 #10196 chmod'd streaming outputs to 0600 — including /dev/null. July 2026 retrospective: #10215 revert, host repair, pin-and-canary checklist.