The identifier of an end user or agent that a session belongs to. This value scopes session history so that one actor's history is never returned for another.
", + "smithy.api#length": { + "min": 1, + "max": 255 + }, + "smithy.api#pattern": "^[a-zA-Z0-9][a-zA-Z0-9\\-_/]*(?::[a-zA-Z0-9\\-_/]+)*[a-zA-Z0-9\\-_/]*$" + } + }, + "com.amazonaws.bedrockagentruntime#AgentCoreMemoryId": { + "type": "string", + "traits": { + "smithy.api#documentation": "The identifier of an AgentCore Memory resource used with this retrieval.
", + "smithy.api#length": { + "min": 12, + "max": 111 + }, + "smithy.api#pattern": "^[a-zA-Z][a-zA-Z0-9\\-_]{0,99}-[a-zA-Z0-9]{10}$" + } + }, + "com.amazonaws.bedrockagentruntime#AgentCoreMemorySessionId": { + "type": "string", + "traits": { + "smithy.api#documentation": "The identifier of a session in an AgentCore Memory resource.
", + "smithy.api#length": { + "min": 1, + "max": 100 + }, + "smithy.api#pattern": "^[a-zA-Z0-9][a-zA-Z0-9\\-_]*$" + } + }, "com.amazonaws.bedrockagentruntime#AgentId": { "type": "string", "traits": { @@ -502,6 +535,12 @@ "traits": { "smithy.api#documentation": "Details of a full document expansion action.
" } + }, + "memoryRetrieve": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryRetrieveDetails", + "traits": { + "smithy.api#documentation": "The details of a long-term memory retrieval that the agent chose to perform.
" + } } }, "traits": { @@ -814,6 +853,390 @@ "smithy.api#documentation": "A warning generated by a guardrail during agentic retrieval.
" } }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryConfiguration": { + "type": "structure", + "members": { + "memoryId": { + "target": "com.amazonaws.bedrockagentruntime#AgentCoreMemoryId", + "traits": { + "smithy.api#documentation": "The identifier of the AgentCore Memory resource to use. The resource must exist in your account and be in the ACTIVE state.
", + "smithy.api#required": {} + } + }, + "sessionBinding": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemorySessionBinding", + "traits": { + "smithy.api#documentation": "The short-term memory session whose history is restored for this retrieval. To persist the agent-generated answer to the session, omit persistenceMode or set it to DEFAULT. To leave the session unchanged, set persistenceMode to NONE. Supply session history through the existing messages parameter or through short-term memory, but not both.
" + } + }, + "retrievalConfigs": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryRetrievalConfigList", + "traits": { + "smithy.api#documentation": "Specifies the long-term memory configuration the agent can retrieve from. The agent decides whether to retrieve and composes its own query. This field currently accepts at most one entry.
" + } + }, + "persistenceMode": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryPersistenceMode", + "traits": { + "smithy.api#documentation": "Specifies whether the agent-generated answer is written back to the given short-term memory session, and applies only when sessionBinding is set. Valid values:
DEFAULT (default) – Specifies that the question and the agent-generated answer are persisted to the session as a single event. This value requires generateResponse to be true.
NONE – Specifies that the session is left unchanged.
Specifies an AgentCore Memory resource and how this retrieval uses it. Set sessionBinding to restore and continue a session. Set retrievalConfigs to let the agent retrieve from long-term memory. You must specify at least one of the two.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilter": { + "type": "structure", + "members": { + "left": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterLeft", + "traits": { + "smithy.api#documentation": "The metadata key that the expression evaluates.
", + "smithy.api#required": {} + } + }, + "operator": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterOperator", + "traits": { + "smithy.api#documentation": "The relationship that the metadata key and value must have for a memory record to match.
", + "smithy.api#required": {} + } + }, + "right": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterRight", + "traits": { + "smithy.api#documentation": "The value that the expression compares the metadata key against. Supply this value for every operator except EXISTS and NOT_EXISTS.
" + } + } + }, + "traits": { + "smithy.api#documentation": "A metadata filter expression, in the form accepted by the AgentCore Memory RetrieveMemoryRecords operation. The expression has a left operand that names the metadata key, an operator, and a right operand. For the EXISTS and NOT_EXISTS operators, omit the right operand.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterLeft": { + "type": "union", + "members": { + "metadataKey": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataKey", + "traits": { + "smithy.api#documentation": "The metadata key to filter on.
" + } + } + }, + "traits": { + "smithy.api#documentation": "The left operand of a metadata filter expression. Set exactly one member.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterList": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilter", + "traits": { + "smithy.api#documentation": "A metadata filter expression.
" + } + }, + "traits": { + "smithy.api#documentation": "The metadata filter expressions applied to long-term memory retrieval.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterOperator": { + "type": "enum", + "members": { + "EQUALS_TO": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The EQUALS_TO operator matches memory records whose metadata value equals the supplied value.
", + "smithy.api#enumValue": "EQUALS_TO" + } + }, + "EXISTS": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The EXISTS operator matches memory records that carry the metadata key, whatever its value. This operator takes no right operand.
", + "smithy.api#enumValue": "EXISTS" + } + }, + "NOT_EXISTS": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The NOT_EXISTS operator matches memory records that do not carry the metadata key. This operator takes no right operand.
", + "smithy.api#enumValue": "NOT_EXISTS" + } + }, + "BEFORE": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The BEFORE operator matches memory records whose timestamp metadata value falls before the supplied value.
", + "smithy.api#enumValue": "BEFORE" + } + }, + "AFTER": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The AFTER operator matches memory records whose timestamp metadata value falls after the supplied value.
", + "smithy.api#enumValue": "AFTER" + } + }, + "CONTAINS": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The CONTAINS operator matches memory records whose metadata value contains the supplied value.
", + "smithy.api#enumValue": "CONTAINS" + } + }, + "GREATER_THAN": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The GREATER_THAN operator matches memory records whose numeric metadata value is greater than the supplied value.
", + "smithy.api#enumValue": "GREATER_THAN" + } + }, + "GREATER_THAN_OR_EQUALS": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The GREATER_THAN_OR_EQUALS operator matches memory records whose numeric metadata value is greater than or equal to the supplied value.
", + "smithy.api#enumValue": "GREATER_THAN_OR_EQUALS" + } + }, + "LESS_THAN": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The LESS_THAN operator matches memory records whose numeric metadata value is less than the supplied value.
", + "smithy.api#enumValue": "LESS_THAN" + } + }, + "LESS_THAN_OR_EQUALS": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The LESS_THAN_OR_EQUALS operator matches memory records whose numeric metadata value is less than or equal to the supplied value.
", + "smithy.api#enumValue": "LESS_THAN_OR_EQUALS" + } + } + }, + "traits": { + "smithy.api#documentation": "Specifies the relationship that a metadata key and value must have for a memory record to match a filter expression.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterRight": { + "type": "union", + "members": { + "metadataValue": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataValue", + "traits": { + "smithy.api#documentation": "The value to compare the metadata key against.
" + } + } + }, + "traits": { + "smithy.api#documentation": "The right operand of a metadata filter expression. Set exactly one member.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataKey": { + "type": "string", + "traits": { + "smithy.api#documentation": "The metadata key that a filter expression evaluates.
", + "smithy.api#length": { + "min": 1, + "max": 128 + }, + "smithy.api#pattern": "^[a-zA-Z0-9\\s._:/=+@-]*$" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataStringList": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataStringListItem", + "traits": { + "smithy.api#documentation": "A string value within the list.
" + } + }, + "traits": { + "smithy.api#documentation": "The string values that a filter expression compares against.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataStringListItem": { + "type": "string", + "traits": { + "smithy.api#documentation": "A single string value within a metadata string list.
", + "smithy.api#length": { + "min": 1, + "max": 64 + }, + "smithy.api#pattern": "^[a-zA-Z0-9\\s._:/=+@-]*$" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataStringValue": { + "type": "string", + "traits": { + "smithy.api#documentation": "A single string metadata value that a filter expression compares against.
", + "smithy.api#length": { + "min": 1, + "max": 256 + }, + "smithy.api#pattern": "^[a-zA-Z0-9\\s._:/=+@-]*$" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataValue": { + "type": "union", + "members": { + "stringValue": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataStringValue", + "traits": { + "smithy.api#documentation": "A string value.
" + } + }, + "numberValue": { + "target": "smithy.api#Double", + "traits": { + "smithy.api#documentation": "A numeric value.
" + } + }, + "stringListValue": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataStringList", + "traits": { + "smithy.api#documentation": "A list of string values.
" + } + }, + "dateTimeValue": { + "target": "smithy.api#Timestamp", + "traits": { + "smithy.api#documentation": "A timestamp value in ISO 8601 UTC format.
" + } + } + }, + "traits": { + "smithy.api#documentation": "A metadata value that a filter expression compares against. Set exactly one member.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryPersistenceMode": { + "type": "enum", + "members": { + "DEFAULT": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "Specifies that the question and the agent-generated answer are persisted to the session. This is the default when persistenceMode is omitted.
", + "smithy.api#enumValue": "DEFAULT" + } + }, + "NONE": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "Specifies that the session is left unchanged.
", + "smithy.api#enumValue": "NONE" + } + } + }, + "traits": { + "smithy.api#documentation": "Specifies whether the agent-generated answer is written back to a short-term memory session.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryRetrievalConfig": { + "type": "structure", + "members": { + "namespace": { + "target": "com.amazonaws.bedrockagentruntime#MemoryNamespace", + "traits": { + "smithy.api#documentation": "The namespace prefix to filter memory records by. The agent retrieves memory records in namespaces that start with the provided prefix. You must specify either namespace or namespacePath.
" + } + }, + "namespacePath": { + "target": "com.amazonaws.bedrockagentruntime#MemoryNamespace", + "traits": { + "smithy.api#documentation": "The parent namespace to use for hierarchical retrievals. The agent retrieves all memory records whose namespace falls under the same parent hierarchy. You must specify either namespace or namespacePath.
" + } + }, + "strategyId": { + "target": "com.amazonaws.bedrockagentruntime#MemoryStrategyId", + "traits": { + "smithy.api#documentation": "The extraction strategy ID that restricts retrieval to memory records produced by a single strategy. Omit this parameter to retrieve records from every strategy on the memory resource.
" + } + }, + "metadataFilters": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryMetadataFilterList", + "traits": { + "smithy.api#documentation": "The metadata filter expressions that restrict retrieval to matching memory records. You can specify a maximum of 5 expressions.
" + } + } + }, + "traits": { + "smithy.api#documentation": "The long-term memory namespace that the agent might retrieve memory records from, and the filters applied to that retrieval. You must specify either namespace or namespacePath.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryRetrievalConfigList": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryRetrievalConfig", + "traits": { + "smithy.api#documentation": "A long-term memory namespace that the agent might retrieve memory records from.
" + } + }, + "traits": { + "smithy.api#documentation": "The long-term memory namespaces that the agent might retrieve memory records from.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryRetrieveDetails": { + "type": "structure", + "members": { + "inputQuery": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMessageContent", + "traits": { + "smithy.api#documentation": "The query that the agent composed.
", + "smithy.api#required": {} + } + }, + "memoryId": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The identifier of the AgentCore Memory resource retrieved from.
", + "smithy.api#required": {} + } + }, + "namespace": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The namespace prefix retrieved from, as supplied in the request. This field is present when the request specified namespace.
" + } + }, + "namespacePath": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The parent namespace retrieved from hierarchically, as supplied in the request. This field is present when the request specified namespacePath.
" + } + }, + "strategyId": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The extraction strategy that restricted retrieval, if the request specified one.
" + } + } + }, + "traits": { + "smithy.api#documentation": "A long-term memory retrieval that the agent chose to perform. The record reports the query and the namespace. The corresponding Retrieval step reports the results.
" + } + }, + "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemorySessionBinding": { + "type": "structure", + "members": { + "actorId": { + "target": "com.amazonaws.bedrockagentruntime#AgentCoreMemoryActorId", + "traits": { + "smithy.api#documentation": "The identifier of the end user or agent that the session belongs to. This identifier scopes session history so that one actor's history is never returned for another. You are responsible for sending the correct actor value.
", + "smithy.api#required": {} + } + }, + "sessionId": { + "target": "com.amazonaws.bedrockagentruntime#AgentCoreMemorySessionId", + "traits": { + "smithy.api#documentation": "The identifier of the session to restore and continue. You are responsible for sending the correct session value.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#documentation": "The short-term memory session that this retrieval reads from and writes to.
" + } + }, "com.amazonaws.bedrockagentruntime#AgenticRetrieveMessage": { "type": "structure", "members": { @@ -1156,6 +1579,13 @@ "smithy.api#documentation": "The full document expansion phase.
", "smithy.api#enumValue": "FullDocumentExpansion" } + }, + "SESSION_HISTORY_LOAD": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "The phase that restores prior session history from AgentCore Memory short-term memory, before the agent begins work.
", + "smithy.api#enumValue": "SessionHistoryLoad" + } } }, "traits": { @@ -1256,6 +1686,12 @@ "smithy.api#documentation": "Contains information about the user making the request. This is used for access control filtering to ensure that retrieval results only include documents the user is authorized to access.
" } }, + "memoryConfiguration": { + "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveMemoryConfiguration", + "traits": { + "smithy.api#documentation": "The configuration for using an Amazon Bedrock AgentCore Memory resource with this retrieval.
" + } + }, "generateResponse": { "target": "smithy.api#Boolean", "traits": { @@ -1510,6 +1946,13 @@ "smithy.api#documentation": "A Bedrock knowledge base retrieval source.
", "smithy.api#enumValue": "BedrockKnowledgeBase" } + }, + "BEDROCK_AGENT_CORE_MEMORY": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "An AgentCore Memory resource. Long-term memory retrievals report under the Retrieval step with this source type.
", + "smithy.api#enumValue": "BedrockAgentCoreMemory" + } } }, "traits": { @@ -1606,6 +2049,9 @@ { "target": "com.amazonaws.bedrockagentruntime#AgenticRetrieveStreamResource" }, + { + "target": "com.amazonaws.bedrockagentruntime#CheckIngestedDocumentAclResource" + }, { "target": "com.amazonaws.bedrockagentruntime#FlowExecutionResource" }, @@ -1618,6 +2064,9 @@ { "target": "com.amazonaws.bedrockagentruntime#GetDocumentContentResource" }, + { + "target": "com.amazonaws.bedrockagentruntime#GetIngestedDocumentAclResource" + }, { "target": "com.amazonaws.bedrockagentruntime#InferenceResource" }, @@ -1669,7 +2118,7 @@ "http/1.1" ] }, - "smithy.api#documentation": "Contains APIs related to model invocation and querying of knowledge bases.
", + "smithy.api#documentation": "Amazon Bedrock Agents (now Amazon Bedrock Agents Classic) is no longer open to new customers. For capabilities similar to Bedrock Agents Classic, explore Amazon Bedrock AgentCore. Existing customers can continue to use the service as normal. For more information, see Amazon Bedrock Agents Classic availability change.
Contains APIs related to model invocation and querying of knowledge bases.
", "smithy.api#title": "Agents for Amazon Bedrock Runtime", "smithy.rules#endpointBdd": { "version": "1.1", @@ -2976,21 +3425,117 @@ "com.amazonaws.bedrockagentruntime#Caller": { "type": "union", "members": { - "agentAliasArn": { - "target": "com.amazonaws.bedrockagentruntime#AgentAliasArn", + "agentAliasArn": { + "target": "com.amazonaws.bedrockagentruntime#AgentAliasArn", + "traits": { + "smithy.api#documentation": "The caller's agent alias ARN.
" + } + } + }, + "traits": { + "smithy.api#documentation": "Details about a caller.
" + } + }, + "com.amazonaws.bedrockagentruntime#CallerChain": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentruntime#Caller" + } + }, + "com.amazonaws.bedrockagentruntime#CheckIngestedDocumentAcl": { + "type": "operation", + "input": { + "target": "com.amazonaws.bedrockagentruntime#CheckIngestedDocumentAclRequest" + }, + "output": { + "target": "com.amazonaws.bedrockagentruntime#CheckIngestedDocumentAclResponse" + }, + "errors": [ + { + "target": "com.amazonaws.bedrockagentruntime#AccessDeniedException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#InternalServerException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#ResourceNotFoundException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#ThrottlingException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#ValidationException" + } + ], + "traits": { + "smithy.api#documentation": "Checks whether a user has access to a specific document by verifying against the ingested access control list (ACL) in a knowledge base. Use this operation to validate that document-level access control is working as expected after ingestion. To use this operation, you must have the bedrock:CheckIngestedDocumentAcl permission.
The unique identifier of the knowledge base that contains the document.
", + "smithy.api#httpLabel": {}, + "smithy.api#required": {} + } + }, + "dataSourceId": { + "target": "com.amazonaws.bedrockagentruntime#DataSourceId", + "traits": { + "smithy.api#documentation": "The unique identifier of the data source that contains the document.
", + "smithy.api#httpLabel": {}, + "smithy.api#required": {} + } + }, + "documentId": { + "target": "com.amazonaws.bedrockagentruntime#DocumentId", + "traits": { + "smithy.api#documentation": "The unique identifier of the document to check access for.
", + "smithy.api#required": {} + } + }, + "userContext": { + "target": "com.amazonaws.bedrockagentruntime#UserContext", + "traits": { + "smithy.api#documentation": "The context object containing identity information for access control filtering, including user ID and optional group memberships used to evaluate the document access control list (ACL).
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#input": {} + } + }, + "com.amazonaws.bedrockagentruntime#CheckIngestedDocumentAclResource": { + "type": "resource", + "operations": [ + { + "target": "com.amazonaws.bedrockagentruntime#CheckIngestedDocumentAcl" + } + ] + }, + "com.amazonaws.bedrockagentruntime#CheckIngestedDocumentAclResponse": { + "type": "structure", + "members": { + "hasAccess": { + "target": "smithy.api#Boolean", "traits": { - "smithy.api#documentation": "The caller's agent alias ARN.
" + "smithy.api#documentation": "Specifies whether the user has access to the document based on the ingested access control list (ACL). Returns true if the user is allowed access, and false otherwise.
Details about a caller.
" - } - }, - "com.amazonaws.bedrockagentruntime#CallerChain": { - "type": "list", - "member": { - "target": "com.amazonaws.bedrockagentruntime#Caller" + "smithy.api#output": {} } }, "com.amazonaws.bedrockagentruntime#Citation": { @@ -3850,6 +4395,194 @@ "smithy.api#httpError": 424 } }, + "com.amazonaws.bedrockagentruntime#DocumentAcl": { + "type": "structure", + "members": { + "allowList": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclMembership", + "traits": { + "smithy.api#documentation": "The list of principals allowed access to the document.
" + } + }, + "denyList": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclMembership", + "traits": { + "smithy.api#documentation": "The list of principals denied access to the document.
" + } + } + }, + "traits": { + "smithy.api#documentation": "The access control list for a document, containing allow and deny membership lists. Each list specifies conditions that determine which users and groups are granted or denied access.
", + "smithy.api#sensitive": {} + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclCondition": { + "type": "structure", + "members": { + "conditionOperator": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclMemberRelation", + "traits": { + "smithy.api#documentation": "The logical operator for combining users and groups within this condition. Valid values: AND – Both a user match and a group match are required. OR – Either a user match or a group match is sufficient.
The list of user entries in this condition.
", + "smithy.api#length": { + "max": 3000 + } + } + }, + "groups": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclGroupList", + "traits": { + "smithy.api#documentation": "The list of group entries in this condition.
", + "smithy.api#length": { + "max": 3000 + } + } + } + }, + "traits": { + "smithy.api#documentation": "A condition within a document access control list (ACL) membership, specifying users and groups that are evaluated together.
" + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclConditionList": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclCondition" + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclGroup": { + "type": "structure", + "members": { + "id": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The identifier of the group.
", + "smithy.api#length": { + "min": 1, + "max": 1024 + }, + "smithy.api#pattern": "^\\P{C}*$", + "smithy.api#required": {} + } + }, + "type": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclMembershipType", + "traits": { + "smithy.api#documentation": "The membership type indicating the scope of the group entry.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#documentation": "A group entry within a document access control list (ACL) condition.
" + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclGroupList": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclGroup" + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclMemberRelation": { + "type": "enum", + "members": { + "AND": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "AND" + } + }, + "OR": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "OR" + } + } + }, + "traits": { + "smithy.api#documentation": "The logical relation for combining access control list (ACL) membership conditions.
" + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclMembership": { + "type": "structure", + "members": { + "memberRelation": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclMemberRelation", + "traits": { + "smithy.api#documentation": "The logical relation between conditions. Valid values: AND – All conditions must match. OR – At least one condition must match.
The list of conditions that determine membership.
", + "smithy.api#length": { + "max": 100 + } + } + } + }, + "traits": { + "smithy.api#documentation": "The membership entry for a document access control list (ACL), containing conditions and their logical relation.
" + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclMembershipType": { + "type": "enum", + "members": { + "KNOWLEDGE_BASE": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "KNOWLEDGE_BASE" + } + }, + "DATA_SOURCE": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "DATA_SOURCE" + } + } + }, + "traits": { + "smithy.api#documentation": "The scope type for a document access control list (ACL) membership condition. Valid values: KNOWLEDGE_BASE – The entry applies at the knowledge base level. DATA_SOURCE – The entry applies at the data source level.
The identifier of the user.
", + "smithy.api#length": { + "min": 1, + "max": 1024 + }, + "smithy.api#pattern": "^\\P{C}*$", + "smithy.api#required": {} + } + }, + "type": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclMembershipType", + "traits": { + "smithy.api#documentation": "The membership type indicating the scope of the user entry.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#documentation": "A user entry within a document access control list (ACL) condition.
" + } + }, + "com.amazonaws.bedrockagentruntime#DocumentAclUserList": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAclUser" + } + }, "com.amazonaws.bedrockagentruntime#DocumentId": { "type": "string", "traits": { @@ -6322,7 +7055,10 @@ } }, "userContext": { - "target": "com.amazonaws.bedrockagentruntime#UserContext" + "target": "com.amazonaws.bedrockagentruntime#UserContext", + "traits": { + "smithy.api#documentation": "Contains information about the user making the request. This is used for access control filtering to ensure that results only include documents the user is authorized to access.
" + } } }, "traits": { @@ -6610,6 +7346,95 @@ "smithy.api#output": {} } }, + "com.amazonaws.bedrockagentruntime#GetIngestedDocumentAcl": { + "type": "operation", + "input": { + "target": "com.amazonaws.bedrockagentruntime#GetIngestedDocumentAclRequest" + }, + "output": { + "target": "com.amazonaws.bedrockagentruntime#GetIngestedDocumentAclResponse" + }, + "errors": [ + { + "target": "com.amazonaws.bedrockagentruntime#AccessDeniedException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#InternalServerException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#ResourceNotFoundException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#ThrottlingException" + }, + { + "target": "com.amazonaws.bedrockagentruntime#ValidationException" + } + ], + "traits": { + "smithy.api#documentation": "Retrieves the ingested access control list (ACL) for a specific document in a knowledge base. Use this operation to inspect the allow and deny lists that were ingested for a document to troubleshoot access control issues. To use this operation, you must have the bedrock:GetIngestedDocumentAcl permission.
The unique identifier of the knowledge base that contains the document.
", + "smithy.api#httpLabel": {}, + "smithy.api#required": {} + } + }, + "dataSourceId": { + "target": "com.amazonaws.bedrockagentruntime#DataSourceId", + "traits": { + "smithy.api#documentation": "The unique identifier of the data source that contains the document.
", + "smithy.api#httpLabel": {}, + "smithy.api#required": {} + } + }, + "documentId": { + "target": "com.amazonaws.bedrockagentruntime#DocumentId", + "traits": { + "smithy.api#documentation": "The unique identifier of the document to retrieve the ingested access control list (ACL) for.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#input": {} + } + }, + "com.amazonaws.bedrockagentruntime#GetIngestedDocumentAclResource": { + "type": "resource", + "operations": [ + { + "target": "com.amazonaws.bedrockagentruntime#GetIngestedDocumentAcl" + } + ] + }, + "com.amazonaws.bedrockagentruntime#GetIngestedDocumentAclResponse": { + "type": "structure", + "members": { + "documentAcl": { + "target": "com.amazonaws.bedrockagentruntime#DocumentAcl", + "traits": { + "smithy.api#documentation": "The ingested document access control list (ACL) containing allow and deny membership information.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#output": {} + } + }, "com.amazonaws.bedrockagentruntime#GetInvocationStep": { "type": "operation", "input": { @@ -8619,7 +9444,7 @@ } ], "traits": { - "smithy.api#documentation": "Sends a prompt for the agent to process and respond to. Note the following fields for the request:
To continue the same conversation with an agent, use the same sessionId value in the request.
To activate trace enablement, turn enableTrace to true. Trace enablement helps you follow the agent's reasoning process that led it to the information it processed, the actions it took, and the final result it yielded. For more information, see Trace enablement.
End a conversation by setting endSession to true.
In the sessionState object, you can include attributes for the session or prompt or, if you configured an action group to return control, results from invocation of the action group.
The response contains both chunk and trace attributes.
The final response is returned in the bytes field of the chunk object. The InvokeAgent returns one chunk for the entire interaction.
The attribution object contains citations for parts of the response.
If you set enableTrace to true in the request, you can trace the agent's steps and reasoning process that led it to the response.
If the action predicted was configured to return control, the response returns parameters for the action, elicited from the user, in the returnControl field.
Errors are also surfaced in the response.
Amazon Bedrock Agents (now Amazon Bedrock Agents Classic) is no longer open to new customers. For capabilities similar to Bedrock Agents Classic, explore Amazon Bedrock AgentCore. Existing customers can continue to use the service as normal. For more information, see Amazon Bedrock Agents Classic availability change.
Sends a prompt for the agent to process and respond to. Note the following fields for the request:
To continue the same conversation with an agent, use the same sessionId value in the request.
To activate trace enablement, turn enableTrace to true. Trace enablement helps you follow the agent's reasoning process that led it to the information it processed, the actions it took, and the final result it yielded. For more information, see Trace enablement.
End a conversation by setting endSession to true.
In the sessionState object, you can include attributes for the session or prompt or, if you configured an action group to return control, results from invocation of the action group.
The response contains both chunk and trace attributes.
The final response is returned in the bytes field of the chunk object. The InvokeAgent returns one chunk for the entire interaction.
The attribution object contains citations for parts of the response.
If you set enableTrace to true in the request, you can trace the agent's steps and reasoning process that led it to the response.
If the action predicted was configured to return control, the response returns parameters for the action, elicited from the user, in the returnControl field.
Errors are also surfaced in the response.
Filters the metadata of the retrieved results so that Amazon Bedrock returns only results that match the filter.
" + } }, "rerankingModelType": { "target": "com.amazonaws.bedrockagentruntime#RerankingModelType", @@ -10211,6 +11039,17 @@ "smithy.api#pattern": "^[0-9a-zA-Z._:-]+$" } }, + "com.amazonaws.bedrockagentruntime#MemoryNamespace": { + "type": "string", + "traits": { + "smithy.api#documentation": "A namespace in an AgentCore Memory resource, supplied exactly as configured on the memory strategy. The service does not accept placeholder templates such as {actorId}. Supply the resolved value.
", + "smithy.api#length": { + "min": 1, + "max": 1024 + }, + "smithy.api#pattern": "^[a-zA-Z0-9/*][a-zA-Z0-9\\-_/*]*(?::[a-zA-Z0-9\\-_/*]+)*[a-zA-Z0-9\\-_/*]*$" + } + }, "com.amazonaws.bedrockagentruntime#MemoryResource": { "type": "resource", "operations": [ @@ -10260,6 +11099,17 @@ "smithy.api#documentation": "Contains details of a session summary.
" } }, + "com.amazonaws.bedrockagentruntime#MemoryStrategyId": { + "type": "string", + "traits": { + "smithy.api#documentation": "The identifier of an extraction strategy configured on the memory resource. Omit this value to retrieve records from every strategy on the memory resource.
", + "smithy.api#length": { + "min": 1, + "max": 100 + }, + "smithy.api#pattern": "^[a-zA-Z0-9][a-zA-Z0-9\\-_]*$" + } + }, "com.amazonaws.bedrockagentruntime#MemoryType": { "type": "enum", "members": { @@ -13750,7 +14600,10 @@ } }, "userContext": { - "target": "com.amazonaws.bedrockagentruntime#UserContext" + "target": "com.amazonaws.bedrockagentruntime#UserContext", + "traits": { + "smithy.api#documentation": "Contains information about the user making the request. This is used for access control filtering to ensure that retrieval results only include documents the user is authorized to access.
" + } } }, "traits": { @@ -13889,7 +14742,10 @@ } }, "userContext": { - "target": "com.amazonaws.bedrockagentruntime#UserContext" + "target": "com.amazonaws.bedrockagentruntime#UserContext", + "traits": { + "smithy.api#documentation": "Contains information about the user making the request. This is used for access control filtering to ensure that retrieval results only include documents the user is authorized to access.
" + } } }, "traits": { @@ -14063,7 +14919,10 @@ } }, "userContext": { - "target": "com.amazonaws.bedrockagentruntime#UserContext" + "target": "com.amazonaws.bedrockagentruntime#UserContext", + "traits": { + "smithy.api#documentation": "Contains information about the user making the request. This is used for access control filtering to ensure that retrieval results only include documents the user is authorized to access.
" + } } }, "traits": { diff --git a/codegen/aws-models/bedrock-agentcore-control.json b/codegen/aws-models/bedrock-agentcore-control.json index 63500e1..86ccd46 100644 --- a/codegen/aws-models/bedrock-agentcore-control.json +++ b/codegen/aws-models/bedrock-agentcore-control.json @@ -967,6 +967,9 @@ { "target": "com.amazonaws.bedrockagentcorecontrol#OnlineEvaluationConfig" }, + { + "target": "com.amazonaws.bedrockagentcorecontrol#PaymentConnectionResource" + }, { "target": "com.amazonaws.bedrockagentcorecontrol#PaymentCredentialProvider" }, @@ -2342,7 +2345,7 @@ "rateLimits": { "target": "com.amazonaws.bedrockagentcorecontrol#BatchPutLimitEntries", "traits": { - "smithy.api#documentation": "Complete set of rate limits for this gateway. Replaces all existing limits atomically.", + "smithy.api#documentation": "The complete set of rate limits for this gateway. This operation replaces all existing rate limits in a single request. If the operation fails, no rate limits are changed.
", "smithy.api#required": {} } } @@ -2357,7 +2360,7 @@ "rateLimits": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimits", "traits": { - "smithy.api#documentation": "The resulting set of rate limits after the batch operation.", + "smithy.api#documentation": "The resulting set of rate limits after the batch operation.
", "smithy.api#required": {} } } @@ -2384,30 +2387,32 @@ "rateLimitId": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId", "traits": { - "smithy.api#documentation": "Optional — if provided, used for upsert matching against existing limits." + "smithy.api#documentation": "The unique identifier of the rate limit. If provided, the service uses it for upsert matching against existing rate limits.
" } }, "description": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription", "traits": { - "smithy.api#documentation": "Optional human-readable description for this limit." + "smithy.api#documentation": "An optional human-readable description for this rate limit. If not provided, the rate limit is created without a description.
" } }, "dimensionKeys": { "target": "com.amazonaws.bedrockagentcorecontrol#DimensionKeys", "traits": { + "smithy.api#documentation": "The ordered list of dimension key names that define the scope of this rate limit.
", "smithy.api#required": {} } }, "entries": { "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntries", "traits": { + "smithy.api#documentation": "The list of rule entries that map dimension values to rate configurations.
", "smithy.api#required": {} } } }, "traits": { - "smithy.api#documentation": "A limit definition within a BatchPut request (rateLimitId used for upsert matching)" + "smithy.api#documentation": "A rate limit definition within a batch put request. If you provide a rateLimitId, the service uses it for upsert matching against existing rate limits.
The Amazon Resource Name (ARN) of the capacity provider to use for the AgentCore Runtime.
" + "smithy.api#clientOptional": {}, + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the capacity provider to use for the AgentCore Runtime.
", + "smithy.api#required": {} } } }, @@ -3858,6 +3865,28 @@ "smithy.api#pattern": "^[a-zA-Z][a-zA-Z0-9_:/.\\-]{0,2047}$" } }, + "com.amazonaws.bedrockagentcorecontrol#CompositeIdentifierEntry": { + "type": "string", + "traits": { + "smithy.api#length": { + "min": 1, + "max": 256 + } + } + }, + "com.amazonaws.bedrockagentcorecontrol#CompositeIdentifierList": { + "type": "list", + "member": { + "target": "com.amazonaws.bedrockagentcorecontrol#CompositeIdentifierEntry" + }, + "traits": { + "smithy.api#length": { + "min": 1, + "max": 5 + }, + "smithy.api#uniqueItems": {} + } + }, "com.amazonaws.bedrockagentcorecontrol#ComputeConfiguration": { "type": "union", "members": { @@ -6045,26 +6074,26 @@ "rateLimitId": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId", "traits": { - "smithy.api#documentation": "Optional customer-defined limit ID. If not provided, system generates one." + "smithy.api#documentation": "An optional customer-defined identifier for the rate limit. If not provided, the system generates one.
" } }, "description": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription", "traits": { - "smithy.api#documentation": "Optional human-readable description for this limit." + "smithy.api#documentation": "An optional human-readable description for this rate limit. If not provided, the rate limit is created without a description.
" } }, "dimensionKeys": { "target": "com.amazonaws.bedrockagentcorecontrol#DimensionKeys", "traits": { - "smithy.api#documentation": "Ordered list of dimension names defining the scope of this limit.\nUnique per gateway — no two limits can share the same dimensionKeys.", + "smithy.api#documentation": "The ordered list of dimension key names that define the scope of this rate limit. Must be unique per gateway—no two rate limits can share the same dimension keys.
", "smithy.api#required": {} } }, "entries": { "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntries", "traits": { - "smithy.api#documentation": "Rule entries mapping dimension values to rate configurations.", + "smithy.api#documentation": "The rule entries that map dimension values to rate configurations.
", "smithy.api#required": {} } } @@ -6079,6 +6108,7 @@ "rateLimitId": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId", "traits": { + "smithy.api#documentation": "The unique identifier of the created rate limit.
", "smithy.api#required": {} } }, @@ -6092,24 +6122,27 @@ "description": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription", "traits": { - "smithy.api#documentation": "Optional human-readable description for this limit." + "smithy.api#documentation": "The human-readable description of the rate limit.
" } }, "dimensionKeys": { "target": "com.amazonaws.bedrockagentcorecontrol#DimensionKeys", "traits": { + "smithy.api#documentation": "The ordered list of dimension key names that define the scope of this rate limit.
", "smithy.api#required": {} } }, "entries": { "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntries", "traits": { + "smithy.api#documentation": "The list of rule entries that map dimension values to rate configurations.
", "smithy.api#required": {} } }, "status": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitStatus", "traits": { + "smithy.api#documentation": "The current status of the rate limit.
", "smithy.api#required": {} } }, @@ -6129,7 +6162,7 @@ } }, "traits": { - "smithy.api#documentation": "Shared fields for GatewayRateLimit responses", + "smithy.api#documentation": "Shared fields for GatewayRateLimit responses.
Metadata keys to index for filtering. Once declared, indexed keys cannot be removed.
" } }, + "namespaceKeys": { + "target": "com.amazonaws.bedrockagentcorecontrol#NamespaceKeysList", + "traits": { + "smithy.api#documentation": "The namespace variable key definitions with optional validation rules. Use these namespaceKeys in namespaceTemplates to control namespace hierarchy.
The provision mode for creating the payment connector. If you don't specify a value, the default is MANUAL.
MANUAL - You provide the credential provider configurations directly.
QUICK_CREATE - The service orchestrates OAuth consent and provisions the credential provider for you.
The current status of the payment connector. Possible values include CREATING, READY, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED, and DELETE_FAILED.
The URL that the user must open to complete OAuth consent. This field is only present when the payment connector status is PENDING_AUTHENTICATION.
A map of tag keys and values to assign to the payment manager.
" } + }, + "kmsKeyArn": { + "target": "com.amazonaws.bedrockagentcorecontrol#KmsKeyArn", + "traits": { + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the customer managed KMS key to use for encrypting sensitive payment manager data at rest. If you don't specify a key, the data is encrypted with an Amazon Web Services owned key.
" + } } }, "traits": { @@ -7902,6 +7962,12 @@ "traits": { "smithy.api#documentation": "The tags associated with the created payment manager.
" } + }, + "kmsKeyArn": { + "target": "com.amazonaws.bedrockagentcorecontrol#KmsKeyArn", + "traits": { + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the KMS key used to encrypt sensitive payment manager data at rest, if configured.
" + } } }, "traits": { @@ -7940,7 +8006,7 @@ } ], "traits": { - "smithy.api#documentation": "Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using the Cedar policy language, you can define fine-grained policies that specify which interactions with Gateway tools are permitted based on input parameters and OAuth claims, ensuring agents operate within defined boundaries and business rules. The policy is validated during creation against the Cedar schema generated from the Gateway's tools' input schemas, which defines the available tools, their parameters, and expected data types. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.
Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using the Cedar policy language, you can define fine-grained policies that specify which interactions with Gateway tools are permitted based on input parameters and OAuth claims, ensuring agents operate within defined boundaries and business rules. The policy is validated during creation against the Cedar schema generated from the Gateway's tools' input schemas, which defines the available tools, their parameters, and expected data types. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.
If the new policy is a temporal policy, creating it invalidates the policy engine's active temporal sessions. For more information about temporal policy sessions, see session-based temporal policies. The policy engine returns an HTTP 409 ConflictException to in-flight sessions. To resume, you must start a new session with a new session ID.
The private_key_jwt client authentication configuration for this credential provider. When specified, the credential provider uses JWT client assertions to authenticate with the token endpoint.
" + } }, "privateEndpoint": { "target": "com.amazonaws.bedrockagentcorecontrol#PrivateEndpoint", @@ -9322,7 +9391,10 @@ } }, "privateKeyJwtConfig": { - "target": "com.amazonaws.bedrockagentcorecontrol#PrivateKeyJwtConfig" + "target": "com.amazonaws.bedrockagentcorecontrol#PrivateKeyJwtConfig", + "traits": { + "smithy.api#documentation": "The configuration for private_key_jwt client authentication used by this OAuth2 credential provider.
" + } } }, "traits": { @@ -9500,6 +9572,13 @@ "smithy.api#documentation": "AgentCore simulated evaluation schema, version 1. Dataset for synthetic data generation where each example is a scenario used to generate full conversations.
", "smithy.api#enumValue": "AGENTCORE_EVALUATION_SIMULATED_V1" } + }, + "THIRD_PARTY_EVALUATION_V1": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#documentation": "Third-party evaluation schema, version 1. Supports single-turn (string input) and multi-turn (message list input) across third-party evaluation frameworks.
", + "smithy.api#enumValue": "THIRD_PARTY_EVALUATION_V1" + } } }, "traits": { @@ -10895,12 +10974,14 @@ "rateLimitId": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId", "traits": { + "smithy.api#documentation": "The unique identifier of the deleted rate limit.
", "smithy.api#required": {} } }, "status": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitStatus", "traits": { + "smithy.api#documentation": "The current status of the rate limit deletion.
", "smithy.api#required": {} } } @@ -11331,7 +11412,7 @@ } ], "traits": { - "smithy.api#documentation": "Deletes an Amazon Bedrock AgentCore Memory resource.
", + "smithy.api#documentation": "Deletes an Amazon Bedrock AgentCore Memory resource. When you delete a memory resource, it is permanently removed.
", "smithy.api#http": { "code": 202, "method": "DELETE", @@ -12320,6 +12401,28 @@ "smithy.api#output": {} } }, + "com.amazonaws.bedrockagentcorecontrol#DerivedEvaluatorConfig": { + "type": "structure", + "members": { + "baseEvaluatorId": { + "target": "com.amazonaws.bedrockagentcorecontrol#EvaluatorId", + "traits": { + "smithy.api#documentation": " The identifier of the base evaluator whose logic to run (a Builtin.* or ThirdParty.* evaluator).
The configuration of the evaluator model that you supply.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#documentation": "The configuration for a derived evaluator. It reuses an existing evaluator's logic on your own model.
" + } + }, "com.amazonaws.bedrockagentcorecontrol#Description": { "type": "string", "traits": { @@ -12404,7 +12507,7 @@ "com.amazonaws.bedrockagentcorecontrol#DimensionKey": { "type": "string", "traits": { - "smithy.api#documentation": "A dimension key specifying the scope dimension for rate limiting.\nAllowed values: \"targetName\", \"toolName\", \"qualifiedModelId\",\nor context-path expressions: \"$.context.iam.principal\", \"$.context.iam.sourceIdentity\",\n\"$.context.jwt.A dimension key specifying the scope dimension for rate limiting.
Allowed values: targetName, toolName, qualifiedModelId, or context-path expressions: $.context.iam.principal, $.context.iam.sourceIdentity, $.context.jwt.<claim> where <claim> is a JWT claim name (for example, $.context.jwt.sub). Validated server-side to enforce allowed prefixes and patterns.
An ordered list of dimension key names defining the scope of a limit.
", "smithy.api#length": { "min": 1, "max": 10 @@ -12428,7 +12531,7 @@ "com.amazonaws.bedrockagentcorecontrol#DimensionValue": { "type": "string", "traits": { - "smithy.api#documentation": "A dimension value in a rule entry (exact value or \"*\" wildcard)", + "smithy.api#documentation": "A dimension value in a rule entry (exact value or * wildcard).
A map of dimension name to dimension value for a rule entry.
", "smithy.api#length": { "min": 1, "max": 10 @@ -13319,7 +13422,7 @@ "aws.api#arnReference": { "type": "AWS::BedrockAgentCore::Evaluator" }, - "smithy.api#pattern": "^arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:evaluator\\/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}$|^arn:aws[a-zA-Z-]*:bedrock-agentcore:::evaluator/Builtin.[a-zA-Z0-9_-]+$" + "smithy.api#pattern": "^arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:evaluator\\/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}$|^arn:aws[a-zA-Z-]*:bedrock-agentcore:::evaluator/(Builtin|ThirdParty)\\.[a-zA-Z0-9._-]+$" } }, "com.amazonaws.bedrockagentcorecontrol#EvaluatorConfig": { @@ -13336,6 +13439,12 @@ "traits": { "smithy.api#documentation": "Configuration for a code-based evaluator that uses a customer-managed Lambda function to programmatically assess agent performance.
" } + }, + "derived": { + "target": "com.amazonaws.bedrockagentcorecontrol#DerivedEvaluatorConfig", + "traits": { + "smithy.api#documentation": "The configuration for an evaluator derived from an existing base evaluator (a built-in or third-party evaluator), run on your own model. The base evaluator supplies the prompt and scoring.
" + } } }, "traits": { @@ -13355,7 +13464,11 @@ "com.amazonaws.bedrockagentcorecontrol#EvaluatorId": { "type": "string", "traits": { - "smithy.api#pattern": "^(Builtin.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10})$" + "smithy.api#length": { + "min": 1, + "max": 111 + }, + "smithy.api#pattern": "^(Builtin\\.[a-zA-Z0-9._-]+|ThirdParty\\.[a-zA-Z0-9_-]+\\.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10})$" } }, "com.amazonaws.bedrockagentcorecontrol#EvaluatorInstructions": { @@ -13422,7 +13535,11 @@ "com.amazonaws.bedrockagentcorecontrol#EvaluatorName": { "type": "string", "traits": { - "smithy.api#pattern": "^(Builtin.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9_]{0,47})$" + "smithy.api#length": { + "min": 1, + "max": 48 + }, + "smithy.api#pattern": "^(Builtin\\.[a-zA-Z0-9._-]+|ThirdParty\\.[a-zA-Z0-9_-]+\\.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9_]{0,47})$" } }, "com.amazonaws.bedrockagentcorecontrol#EvaluatorReference": { @@ -13520,6 +13637,12 @@ "smithy.api#required": {} } }, + "provider": { + "target": "com.amazonaws.bedrockagentcorecontrol#Provider", + "traits": { + "smithy.api#documentation": "The source of the evaluator's logic: Amazon Web Services, a third-party library, or you.
" + } + }, "level": { "target": "com.amazonaws.bedrockagentcorecontrol#EvaluatorLevel", "traits": { @@ -13579,6 +13702,12 @@ "smithy.api#enumValue": "Builtin" } }, + "THIRD_PARTY": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "ThirdParty" + } + }, "CUSTOM": { "target": "smithy.api#Unit", "traits": { @@ -13590,6 +13719,12 @@ "traits": { "smithy.api#enumValue": "CustomCode" } + }, + "CUSTOM_DERIVED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "CustomDerived" + } } } }, @@ -14174,7 +14309,7 @@ "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription": { "type": "string", "traits": { - "smithy.api#documentation": "Optional human-readable description for a gateway limit.", + "smithy.api#documentation": "An optional human-readable description for a gateway limit.
", "smithy.api#length": { "min": 0, "max": 512 @@ -14187,6 +14322,7 @@ "rateLimitId": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId", "traits": { + "smithy.api#documentation": "The unique identifier of the rate limit.
", "smithy.api#required": {} } }, @@ -14200,24 +14336,27 @@ "description": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription", "traits": { - "smithy.api#documentation": "Optional human-readable description for this limit." + "smithy.api#documentation": "The human-readable description of the rate limit.
" } }, "dimensionKeys": { "target": "com.amazonaws.bedrockagentcorecontrol#DimensionKeys", "traits": { + "smithy.api#documentation": "The ordered list of dimension key names that define the scope of this rate limit.
", "smithy.api#required": {} } }, "entries": { "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntries", "traits": { + "smithy.api#documentation": "The list of rule entries that map dimension values to rate configurations.
", "smithy.api#required": {} } }, "status": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitStatus", "traits": { + "smithy.api#documentation": "The current status of the rate limit.
", "smithy.api#required": {} } }, @@ -14237,13 +14376,13 @@ } }, "traits": { - "smithy.api#documentation": "Shared fields for GatewayRateLimit responses" + "smithy.api#documentation": "Contains detailed information about a gateway rate limit, including its configuration and current status.
" } }, "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId": { "type": "string", "traits": { - "smithy.api#documentation": "Limit identifier. Optional on Create (system-generates if not provided by customer).\nAlways present in responses.", + "smithy.api#documentation": "The limit identifier. Optional on create (the system generates it if not provided by the customer). Always present in responses.
", "smithy.api#length": { "min": 2, "max": 64 @@ -14322,7 +14461,7 @@ } }, "traits": { - "smithy.api#documentation": "Status of a gateway limit" + "smithy.api#documentation": "The status of a gateway limit.
" } }, "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimits": { @@ -15037,8 +15176,7 @@ "networkConfiguration": { "target": "com.amazonaws.bedrockagentcorecontrol#NetworkConfiguration", "traits": { - "smithy.api#documentation": "The network configuration for the AgentCore Runtime.
", - "smithy.api#required": {} + "smithy.api#documentation": "The network configuration for the AgentCore Runtime.
" } }, "status": { @@ -16316,6 +16454,18 @@ "smithy.api#required": {} } }, + "evaluatorType": { + "target": "com.amazonaws.bedrockagentcorecontrol#EvaluatorType", + "traits": { + "smithy.api#documentation": "The kind of evaluator resource. Valid values:
Builtin – An Amazon Web Services-managed global evaluator.
ThirdParty – An Amazon Web Services-managed global evaluator from a third-party provider.
Custom – A customer-created evaluator.
CustomCode – A customer-created code-based evaluator.
CustomDerived – A customer-created evaluator derived from an existing base evaluator.
The source of the evaluator's logic: Amazon Web Services, a third-party library, or you.
" + } + }, "level": { "target": "com.amazonaws.bedrockagentcorecontrol#EvaluatorLevel", "traits": { @@ -16461,6 +16611,7 @@ "rateLimitId": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId", "traits": { + "smithy.api#documentation": "The unique identifier of the rate limit.
", "smithy.api#required": {} } }, @@ -16474,24 +16625,27 @@ "description": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription", "traits": { - "smithy.api#documentation": "Optional human-readable description for this limit." + "smithy.api#documentation": "The human-readable description of the rate limit.
" } }, "dimensionKeys": { "target": "com.amazonaws.bedrockagentcorecontrol#DimensionKeys", "traits": { + "smithy.api#documentation": "The ordered list of dimension key names that define the scope of this rate limit.
", "smithy.api#required": {} } }, "entries": { "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntries", "traits": { + "smithy.api#documentation": "The list of rule entries that map dimension values to rate configurations.
", "smithy.api#required": {} } }, "status": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitStatus", "traits": { + "smithy.api#documentation": "The current status of the rate limit.
", "smithy.api#required": {} } }, @@ -16511,7 +16665,7 @@ } }, "traits": { - "smithy.api#documentation": "Shared fields for GatewayRateLimit responses", + "smithy.api#documentation": "Shared fields for GatewayRateLimit responses.
The current status of the payment connector. Possible values include CREATING, READY, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED, and DELETE_FAILED.
The URL that the user must open to complete OAuth consent. This field is only present when the payment connector status is PENDING_AUTHENTICATION.
The tags associated with the payment manager.
" } + }, + "kmsKeyArn": { + "target": "com.amazonaws.bedrockagentcorecontrol#KmsKeyArn", + "traits": { + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the KMS key used to encrypt sensitive payment manager data at rest, if configured.
" + } } }, "traits": { @@ -22477,7 +22643,7 @@ "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntry" }, "traits": { - "smithy.api#documentation": "List of rule entries within a limit", + "smithy.api#documentation": "A list of rule entries within a limit.
", "smithy.api#length": { "min": 1, "max": 1000 @@ -22490,7 +22656,7 @@ "dimensions": { "target": "com.amazonaws.bedrockagentcorecontrol#Dimensions", "traits": { - "smithy.api#documentation": "Map of dimension name to dimension value, matching the parent limit's dimensionKeys.\nKeys must exactly match the dimensionKeys. Values may be \"*\" as a wildcard.\n\"*\" may only appear at trailing positions (based on dimensionKeys ordering).", + "smithy.api#documentation": "A map of dimension names to dimension values for this rule entry. Keys must match the parent rate limit's dimension keys. Values may use * as a wildcard, but only in trailing positions based on the dimension keys ordering.
The request rate limit configuration. Specifies the maximum number of requests allowed per time period.
" } }, "tokens": { "target": "com.amazonaws.bedrockagentcorecontrol#RateConfigs", "traits": { - "smithy.api#documentation": "Token rate limits (TPM). Limited to 1 entry for now. — P1" + "smithy.api#documentation": "The token rate limit configuration. Specifies the maximum number of tokens allowed per time period.
" } }, "connections": { "target": "com.amazonaws.bedrockagentcorecontrol#RateConfigs", "traits": { - "smithy.api#documentation": "Connection rate limits (per second only). Limited to 1 entry for now. — P2" + "smithy.api#documentation": "The connection rate limit configuration. Specifies the maximum number of concurrent connections allowed.
" } } }, "traits": { - "smithy.api#documentation": "A single rule entry within a limit, mapping dimension values to rate configurations" + "smithy.api#documentation": "A single rule entry within a rate limit that maps dimension values to rate configurations. Each entry defines the rate limits for a specific combination of dimension values.
" } }, "com.amazonaws.bedrockagentcorecontrol#LinkedinOauth2ProviderConfigInput": { @@ -26698,6 +26864,12 @@ "smithy.api#documentation": "The indexed metadata keys for this memory. Only indexed keys can be used in metadata filters.
" } }, + "namespaceKeys": { + "target": "com.amazonaws.bedrockagentcorecontrol#NamespaceKeysList", + "traits": { + "smithy.api#documentation": "The namespace variable key definitions for this memory. Namespace keys define custom variables used in namespaceTemplates with optional validation rules.
The namespace variable key name.
", + "smithy.api#required": {} + } + }, + "validation": { + "target": "com.amazonaws.bedrockagentcorecontrol#NamespaceKeyValidation", + "traits": { + "smithy.api#documentation": "The validation rules that constrain values for this namespace variable at runtime (CreateEvent API).
A namespace variable key definition with optional NamespaceKeyValidation rules.
The allowed values for this namespace variable key.
" + } + }, + "regexPattern": { + "target": "com.amazonaws.bedrockagentcorecontrol#NamespaceRegexPattern", + "traits": { + "smithy.api#documentation": "A regex pattern that the namespace variable key-value must match.
" + } + } + }, + "traits": { + "smithy.api#documentation": "The validation rules for namespace variable values. When you specify multiple rules, the service enforces a logical AND across all provided key-value pairs.
The session stickiness configuration for the passthrough target. This configuration routes requests within the same session to the same target.
" } + }, + "staticQueryParameters": { + "target": "com.amazonaws.bedrockagentcorecontrol#StaticQueryParameters", + "traits": { + "smithy.api#documentation": "A map of static query parameters that the gateway always appends to the outbound URL when forwarding requests to the target. The total outbound URL length, which includes the endpoint and the percent-encoded query parameters, is enforced by the service.
" + } + }, + "staticQueryParameterConflictResolution": { + "target": "com.amazonaws.bedrockagentcorecontrol#StaticQueryParameterConflictResolution", + "traits": { + "smithy.api#documentation": "Controls precedence when a client request supplies a query parameter whose name matches a configured static query parameter. If not set, defaults to CLIENT_OVERRIDE:
CLIENT_OVERRIDE - The client-supplied value overrides the configured static value for that parameter name.
STATIC_OVERRIDE - The configured static value is retained, overriding the client-supplied value for that parameter name.
The configuration for an HTTP passthrough target. A passthrough target forwards requests directly to an external HTTP endpoint.
" } }, + "com.amazonaws.bedrockagentcorecontrol#PaymentConnectionResource": { + "type": "resource" + }, + "com.amazonaws.bedrockagentcorecontrol#PaymentConnectorAuthorizationUrl": { + "type": "string", + "traits": { + "smithy.api#length": { + "min": 1, + "max": 4096 + }, + "smithy.api#pattern": "^https://[^\\p{C}]*$" + } + }, "com.amazonaws.bedrockagentcorecontrol#PaymentConnectorId": { "type": "string", "traits": { @@ -28621,7 +28912,7 @@ "min": 12, "max": 211 }, - "smithy.api#pattern": "^([0-9a-z][-]?){1,100}-[0-9a-z]{10}$" + "smithy.api#pattern": "^([0-9a-z_][-]?){1,100}-[0-9a-z]{10}$" } }, "com.amazonaws.bedrockagentcorecontrol#PaymentConnectorName": { @@ -28634,6 +28925,23 @@ "smithy.api#pattern": "^[a-zA-Z][a-zA-Z0-9_]{0,47}$" } }, + "com.amazonaws.bedrockagentcorecontrol#PaymentConnectorProvisionMode": { + "type": "enum", + "members": { + "MANUAL": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "MANUAL" + } + }, + "QUICK_CREATE": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "QUICK_CREATE" + } + } + } + }, "com.amazonaws.bedrockagentcorecontrol#PaymentConnectorResource": { "type": "resource", "identifiers": { @@ -28704,6 +29012,36 @@ "traits": { "smithy.api#enumValue": "DELETE_FAILED" } + }, + "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" + } + }, + "PENDING_AUTHENTICATION": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "PENDING_AUTHENTICATION" + } + }, + "PROVISIONING": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "PROVISIONING" + } + }, + "AUTHENTICATION_EXPIRED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "AUTHENTICATION_EXPIRED" + } + }, + "AUTHENTICATION_FAILED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "AUTHENTICATION_FAILED" + } } } }, @@ -29100,6 +29438,12 @@ "smithy.api#documentation": "The timestamp when the payment manager was last updated.
", "smithy.api#required": {} } + }, + "kmsKeyArn": { + "target": "com.amazonaws.bedrockagentcorecontrol#KmsKeyArn", + "traits": { + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the KMS key used to encrypt sensitive payment manager data at rest, if configured.
" + } } }, "traits": { @@ -29170,7 +29514,7 @@ "min": 1, "max": 4096 }, - "smithy.api#pattern": "^[a-zA-Z0-9\\s]+$" + "smithy.api#pattern": "^[^\\p{C}]*$" } }, "com.amazonaws.bedrockagentcorecontrol#Period": { @@ -29190,7 +29534,7 @@ } }, "traits": { - "smithy.api#documentation": "Time period for rate limiting" + "smithy.api#documentation": "The time period for rate limiting.
" } }, "com.amazonaws.bedrockagentcorecontrol#PermissionsConfiguration": { @@ -30252,7 +30596,7 @@ } }, "traits": { - "smithy.api#documentation": "Configuration for private_key_jwt client authentication (RFC 7523).\nOn Create: privateKeySource and signingAlgorithm are required (enforced server-side).\nOn Update: all fields are optional — only provided fields are updated." + "smithy.api#documentation": "The private key configuration for private_key_jwt client authentication.
" } }, "com.amazonaws.bedrockagentcorecontrol#PrivateKeySource": { @@ -30294,6 +30638,35 @@ "smithy.api#documentation": "The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
" } }, + "com.amazonaws.bedrockagentcorecontrol#Provider": { + "type": "enum", + "members": { + "AWS": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "AWS" + } + }, + "DEEP_EVAL": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "DeepEval" + } + }, + "AUTO_EVAL": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "AutoEval" + } + }, + "CUSTOM": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "Custom" + } + } + } + }, "com.amazonaws.bedrockagentcorecontrol#ProviderPrefix": { "type": "structure", "members": { @@ -30410,12 +30783,13 @@ "period": { "target": "com.amazonaws.bedrockagentcorecontrol#Period", "traits": { + "smithy.api#documentation": "The time period for the rate limit. Valid values:
second—Measures the rate limit over a one-second window.
minute—Measures the rate limit over a one-minute window.
Contains the rate configuration for a rate limit metric, specifying the allowed rate and time period.
" } }, "com.amazonaws.bedrockagentcorecontrol#RateConfigs": { @@ -30424,7 +30798,7 @@ "target": "com.amazonaws.bedrockagentcorecontrol#RateConfig" }, "traits": { - "smithy.api#documentation": "List of rate configs (limited to 1 for now, array for future multi-period support)", + "smithy.api#documentation": "A list of rate configurations for the limit. Currently supports one entry per limit.
", "smithy.api#length": { "min": 1, "max": 1 @@ -32808,6 +33182,57 @@ "smithy.api#documentation": "A static configuration bundle override.
" } }, + "com.amazonaws.bedrockagentcorecontrol#StaticQueryParameterConflictResolution": { + "type": "enum", + "members": { + "CLIENT_OVERRIDE": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "CLIENT_OVERRIDE" + } + }, + "STATIC_OVERRIDE": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "STATIC_OVERRIDE" + } + } + }, + "traits": { + "smithy.api#documentation": "The precedence used when a client-supplied query parameter has the same name as a configured static query parameter:
CLIENT_OVERRIDE - The client-supplied value overrides the configured static value for that parameter name. This is the default.
STATIC_OVERRIDE - The configured static value is retained, overriding the client-supplied value for that parameter name.
The name of a static query parameter. Allowed characters are letters, digits, _, ., and -.
The value of a static query parameter. Control characters (ASCII 0x00-0x1F and 0x7F) are not permitted. URI-reserved characters are allowed and are percent-encoded by the gateway. Empty values are allowed.
A map of static query parameter names to values that the gateway always appends to the outbound URL. The total outbound URL length, which includes the endpoint and the percent-encoded query parameters, is enforced by the service.
" + } + }, "com.amazonaws.bedrockagentcorecontrol#StaticRoute": { "type": "structure", "members": { @@ -32908,6 +33333,12 @@ "traits": { "smithy.api#documentation": "The session stickiness timeout, in seconds. After this duration of inactivity, the session affinity expires. Valid values range from 1 to 86400.
" } + }, + "compositeIdentifier": { + "target": "com.amazonaws.bedrockagentcorecontrol#CompositeIdentifierList", + "traits": { + "smithy.api#documentation": "Additional headers to include in session affinity routing. When set, requests are only considered part of the same session if both the identifier and all composite identifier values match.
The request failed because it requires an active Amazon Web Services Marketplace subscription that is not present. Subscribe to the required product in Amazon Web Services Marketplace and try again.
", + "smithy.api#error": "client", + "smithy.api#httpError": 403 + } + }, "com.amazonaws.bedrockagentcorecontrol#SummaryConsolidationOverride": { "type": "structure", "members": { @@ -35797,13 +36256,13 @@ "description": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription", "traits": { - "smithy.api#documentation": "Optional human-readable description for this limit." + "smithy.api#documentation": "The updated human-readable description for this rate limit.
" } }, "entries": { "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntries", "traits": { - "smithy.api#documentation": "Updated rule entries. key and dimensionKeys are immutable and cannot be changed.", + "smithy.api#documentation": "The updated rule entries. The dimension keys are immutable after creation and cannot be changed.
", "smithy.api#required": {} } } @@ -35818,6 +36277,7 @@ "rateLimitId": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitId", "traits": { + "smithy.api#documentation": "The unique identifier of the rate limit.
", "smithy.api#required": {} } }, @@ -35831,24 +36291,27 @@ "description": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitDescription", "traits": { - "smithy.api#documentation": "Optional human-readable description for this limit." + "smithy.api#documentation": "The human-readable description of the rate limit.
" } }, "dimensionKeys": { "target": "com.amazonaws.bedrockagentcorecontrol#DimensionKeys", "traits": { + "smithy.api#documentation": "The ordered list of dimension key names that define the scope of this rate limit.
", "smithy.api#required": {} } }, "entries": { "target": "com.amazonaws.bedrockagentcorecontrol#LimitEntries", "traits": { + "smithy.api#documentation": "The list of rule entries that map dimension values to rate configurations.
", "smithy.api#required": {} } }, "status": { "target": "com.amazonaws.bedrockagentcorecontrol#GatewayRateLimitStatus", "traits": { + "smithy.api#documentation": "The current status of the rate limit.
", "smithy.api#required": {} } }, @@ -35868,7 +36331,7 @@ } }, "traits": { - "smithy.api#documentation": "Shared fields for GatewayRateLimit responses", + "smithy.api#documentation": "Shared fields for GatewayRateLimit responses.
Additional metadata keys to index. Previously indexed keys cannot be removed.
" } }, + "namespaceKeys": { + "target": "com.amazonaws.bedrockagentcorecontrol#NamespaceKeysList", + "traits": { + "smithy.api#documentation": "The namespace variable key definitions with validation rules for this memory. This value fully replaces the existing set — any key you omit is removed. Any referenced namespaceKey omission will throw ValidationException.
The current status of the updated payment connector. Possible values include CREATING, READY, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED, and DELETE_FAILED.
The URL that the user must open to complete OAuth consent. This field is only present when the payment connector status is PENDING_AUTHENTICATION.
A unique, case-sensitive identifier to ensure that the API request completes no more than one time. If you don't specify this field, a value is randomly generated for you. If this token matches a previous request, the service ignores the request, but doesn't return an error. For more information, see Ensuring idempotency.
", "smithy.api#idempotencyToken": {} } + }, + "kmsKeyArn": { + "target": "com.amazonaws.bedrockagentcorecontrol#KmsKeyArn", + "traits": { + "smithy.api#documentation": "The updated Amazon Resource Name (ARN) of the customer managed KMS key used to encrypt sensitive payment manager data at rest.
" + } } }, "traits": { @@ -37612,6 +38096,12 @@ "smithy.api#documentation": "The current status of the updated payment manager. Possible values include CREATING, READY, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED, and DELETE_FAILED.
The Amazon Resource Name (ARN) of the KMS key used to encrypt sensitive payment manager data at rest, if configured.
" + } } }, "traits": { @@ -37650,7 +38140,7 @@ } ], "traits": { - "smithy.api#documentation": "Updates an existing policy within the AgentCore Policy system. This operation allows modification of the policy description and definition while maintaining the policy's identity. The updated policy is validated against the Cedar schema before being applied. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.
Updates an existing policy within the AgentCore Policy system. This operation allows modification of the policy description and definition while maintaining the policy's identity. The updated policy is validated against the Cedar schema before being applied. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.
If the updated policy is a temporal policy, the policy engine invalidates all active temporal sessions. If the update adds or removes temporal operators, the policy engine also invalidates active temporal sessions. For more information about temporal policy sessions, see session-based temporal policies. The policy engine returns an HTTP 409 ConflictException to in-flight sessions. To resume, you must start a new session with a new session ID.
The content payload of the event. This can include conversational data or binary content.
", + "smithy.api#documentation": "The content payload of the event. This can include conversational data, JSON data, or binary content.
", "smithy.api#required": {} } }, @@ -3727,6 +3727,12 @@ "traits": { "smithy.api#documentation": "Controls long-term memory extraction for this event. When set to SKIP, the event is stored in short-term memory but is excluded from long-term memory extraction. If not specified, the event is processed for extraction as usual.
The extraction configuration for long-term memory records. Use this parameter to specify namespace variable keys and their values for namespace substitution during extraction.
" + } } }, "traits": { @@ -3766,9 +3772,15 @@ { "target": "com.amazonaws.bedrockagentcore#InternalServerException" }, + { + "target": "com.amazonaws.bedrockagentcore#ResourceNotFoundException" + }, { "target": "com.amazonaws.bedrockagentcore#ServiceQuotaExceededException" }, + { + "target": "com.amazonaws.bedrockagentcore#SubscriptionRequiredException" + }, { "target": "com.amazonaws.bedrockagentcore#ThrottlingException" }, @@ -3881,6 +3893,9 @@ { "target": "com.amazonaws.bedrockagentcore#ServiceQuotaExceededException" }, + { + "target": "com.amazonaws.bedrockagentcore#SubscriptionRequiredException" + }, { "target": "com.amazonaws.bedrockagentcore#ThrottlingException" }, @@ -4014,6 +4029,12 @@ "smithy.api#documentation": "The X402 payment payload.
", "smithy.api#required": {} } + }, + "permit2AllowanceLimit": { + "target": "com.amazonaws.bedrockagentcore#Permit2AllowanceLimit", + "traits": { + "smithy.api#documentation": "The maximum on-chain Permit2 allowance to grant before signing the payment authorization, in the asset's smallest denomination. This field is valid only for the upto (metered) scheme; supplying it for the exact scheme returns a validation error.
When set, the service approves an ERC-20 allowance for this amount before processing the payment. The approval sets, rather than adds to, the wallet's allowance. Set this field only when the wallet needs approving, for example on its first upto payment, to avoid a redundant on-chain transaction. Omit the field to skip allowance handling. This is the default, and the only behavior for the exact scheme.
The namespace of the memory record to delete. This value is used for IAM condition key authorization.
", + "smithy.api#httpQuery": "namespace" + } } }, "traits": { @@ -5512,13 +5540,17 @@ "aws.api#arnReference": { "type": "AWS::BedrockAgentCore::Evaluator" }, - "smithy.api#pattern": "^arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:evaluator\\/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}$|^arn:aws[a-zA-Z-]*:bedrock-agentcore:::evaluator/Builtin.[a-zA-Z0-9_-]+$" + "smithy.api#pattern": "^arn:aws[a-zA-Z-]*:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:evaluator\\/[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}$|^arn:aws[a-zA-Z-]*:bedrock-agentcore:::evaluator/(Builtin|ThirdParty)\\.[a-zA-Z0-9._-]+$" } }, "com.amazonaws.bedrockagentcore#EvaluatorId": { "type": "string", "traits": { - "smithy.api#pattern": "^(Builtin.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10})$" + "smithy.api#length": { + "min": 1, + "max": 111 + }, + "smithy.api#pattern": "^(Builtin\\.[a-zA-Z0-9._-]+|ThirdParty\\.[a-zA-Z0-9_-]+\\.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10})$" } }, "com.amazonaws.bedrockagentcore#EvaluatorList": { @@ -5565,7 +5597,11 @@ "com.amazonaws.bedrockagentcore#EvaluatorName": { "type": "string", "traits": { - "smithy.api#pattern": "^(Builtin.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9_]{0,47})$" + "smithy.api#length": { + "min": 1, + "max": 48 + }, + "smithy.api#pattern": "^(Builtin\\.[a-zA-Z0-9._-]+|ThirdParty\\.[a-zA-Z0-9_-]+\\.[a-zA-Z0-9_-]+|[a-zA-Z][a-zA-Z0-9_]{0,47})$" } }, "com.amazonaws.bedrockagentcore#EvaluatorStatistics": { @@ -5895,6 +5931,20 @@ "smithy.api#documentation": "Configuration for a customer-managed external proxy server. Includes server location, optional domain-based routing patterns, and authentication credentials.
" } }, + "com.amazonaws.bedrockagentcore#ExtractionConfig": { + "type": "structure", + "members": { + "namespaceVariables": { + "target": "com.amazonaws.bedrockagentcore#NamespaceVariablesMap", + "traits": { + "smithy.api#documentation": "A map of namespaceKeys to their values. The service substitutes these values into namespaceTemplates during long-term memory extraction to control namespace hierarchy.
The configuration for extraction behavior. Use this structure to specify namespace variable keys and their values for namespace substitution during long-term memory extraction.
" + } + }, "com.amazonaws.bedrockagentcore#ExtractionJob": { "type": "structure", "members": { @@ -7169,6 +7219,13 @@ "smithy.api#httpLabel": {}, "smithy.api#required": {} } + }, + "namespace": { + "target": "com.amazonaws.bedrockagentcore#Namespace", + "traits": { + "smithy.api#documentation": "The namespace of the memory record to retrieve. This value is used for IAM condition key authorization.
", + "smithy.api#httpQuery": "namespace" + } } }, "traits": { @@ -12825,6 +12882,28 @@ "smithy.api#pattern": "^(arn:(aws|aws-cn|aws-us-gov):bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:memory/)?[a-zA-Z][a-zA-Z0-9-_]{0,99}-[a-zA-Z0-9]{10}$" } }, + "com.amazonaws.bedrockagentcore#MemoryJsonData": { + "type": "structure", + "members": { + "content": { + "target": "com.amazonaws.bedrockagentcore#MemoryJsonDataContent", + "traits": { + "smithy.api#documentation": "The JSON content of the payload. Accepts any JSON value, including objects, arrays, strings, numbers, booleans, and null. The maximum size is 100 KB.
", + "smithy.api#required": {} + } + } + }, + "traits": { + "smithy.api#documentation": "Contains non-conversational, JSON-formatted content for an event payload. JSON payloads are extracted into long-term memory.
", + "smithy.api#sensitive": {} + } + }, + "com.amazonaws.bedrockagentcore#MemoryJsonDataContent": { + "type": "document", + "traits": { + "smithy.api#sensitive": {} + } + }, "com.amazonaws.bedrockagentcore#MemoryMetadataFilterExpression": { "type": "structure", "members": { @@ -12971,6 +13050,12 @@ "smithy.api#documentation": "The unique ID of the memory record to be deleted.
", "smithy.api#required": {} } + }, + "namespace": { + "target": "com.amazonaws.bedrockagentcore#Namespace", + "traits": { + "smithy.api#documentation": "The namespace of the memory record being deleted. This value is used for IAM condition key authorization.
" + } } }, "traits": { @@ -13274,6 +13359,12 @@ "smithy.api#documentation": "The updated list of namespace identifiers for categorizing the memory record.
" } }, + "sourceNamespaces": { + "target": "com.amazonaws.bedrockagentcore#NamespacesList", + "traits": { + "smithy.api#documentation": "The namespaces of the source memory record being updated. This value is used for IAM condition key authorization.
" + } + }, "memoryStrategyId": { "target": "com.amazonaws.bedrockagentcore#MemoryStrategyId", "traits": { @@ -13744,6 +13835,78 @@ "smithy.api#documentation": "The result of a mouse scroll action.
" } }, + "com.amazonaws.bedrockagentcore#MppPaymentCredential": { + "type": "string", + "traits": { + "smithy.api#documentation": "Ready-to-send Authorization: Payment <base64url-token> value. This is a bearer-like payment credential and must not appear in logs, traces, or error messages.
The MPP protocol version, for example \"1\" or \"2\".
", + "smithy.api#required": {} + } + }, + "wwwAuthenticateHeaders": { + "target": "com.amazonaws.bedrockagentcore#WwwAuthenticateHeaderList", + "traits": { + "smithy.api#documentation": "The raw WWW-Authenticate: Payment header value from the 402 response, passed verbatim. Provide exactly one entry. The service uses this value to generate the payment credential.
Authorizes the service to sign a payment whose blockchain network (gas) fees are charged to your wallet, on top of the payment amount.
The challenge indicates who sponsors the network fees. When the challenge does not sponsor them, the service signs the payment only if this field is true. Otherwise it returns a validation error, so you can decide whether to pay the fees or obtain a challenge that sponsors them.
Optional. When omitted or false, you decline to pay network fees. This field has no effect on challenges that already sponsor the fees.
Contains the payment challenge from a 402 Payment Required response. Forward the raw WWW-Authenticate: Payment header value verbatim. In response, you receive a payment credential that satisfies the challenge. Provide exactly one challenge per request.
The MPP protocol version, for example \"1\" or \"2\".
", + "smithy.api#required": {} + } + }, + "selectedPaymentId": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The id of the challenge that was paid, echoed from the input challenge so you can correlate the result without decoding the credential.
", + "smithy.api#length": { + "min": 1, + "max": 512 + }, + "smithy.api#required": {} + } + }, + "paymentCredential": { + "target": "com.amazonaws.bedrockagentcore#MppPaymentCredential", + "traits": { + "smithy.api#documentation": "Ready-to-send value for the Authorization header, in the form \"Payment <base64url-token>\". Attach this header and retry the original request. To inspect the full credential, base64url-decode the token.
Contains the payment credential, ready to retry the request.
" + } + }, "com.amazonaws.bedrockagentcore#Name": { "type": "string", "traits": { @@ -13763,6 +13926,44 @@ "smithy.api#pattern": "^[a-zA-Z0-9/*][a-zA-Z0-9-_/*]*(?::[a-zA-Z0-9-_/*]+)*[a-zA-Z0-9-_/*]*$" } }, + "com.amazonaws.bedrockagentcore#NamespaceVariableName": { + "type": "string", + "traits": { + "smithy.api#documentation": "The name of the namespace variable key. The name cannot be a built-in variable name (actorId, sessionId, or memoryStrategyId).
The value of a namespace variable key.
", + "smithy.api#length": { + "min": 1, + "max": 64 + }, + "smithy.api#pattern": "^[a-z0-9][a-z0-9-_]*$" + } + }, + "com.amazonaws.bedrockagentcore#NamespaceVariablesMap": { + "type": "map", + "key": { + "target": "com.amazonaws.bedrockagentcore#NamespaceVariableName" + }, + "value": { + "target": "com.amazonaws.bedrockagentcore#NamespaceVariableValue" + }, + "traits": { + "smithy.api#documentation": "A map of namespaceKeys to their values for namespace substitution.
The binary content of the payload.
" } + }, + "json": { + "target": "com.amazonaws.bedrockagentcore#MemoryJsonData", + "traits": { + "smithy.api#documentation": "The JSON content of the payload. Use this type to store non-conversational, JSON-formatted data, such as behavioral events, activity logs, or system events.
" + } } }, "traits": { @@ -14203,6 +14410,9 @@ "traits": { "smithy.api#documentation": "Input for a crypto X402 payment.
" } + }, + "mpp": { + "target": "com.amazonaws.bedrockagentcore#MppPaymentInput" } }, "traits": { @@ -14358,6 +14568,12 @@ "traits": { "smithy.api#enumValue": "DELETED" } + }, + "BLOCKED": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "BLOCKED" + } } }, "traits": { @@ -14469,6 +14685,9 @@ "traits": { "smithy.api#documentation": "Output from a crypto X402 payment.
" } + }, + "mpp": { + "target": "com.amazonaws.bedrockagentcore#MppPaymentOutput" } }, "traits": { @@ -14734,6 +14953,12 @@ "traits": { "smithy.api#enumValue": "CRYPTO_X402" } + }, + "MPP": { + "target": "smithy.api#Unit", + "traits": { + "smithy.api#enumValue": "MPP" + } } }, "traits": { @@ -14774,6 +14999,17 @@ } } }, + "com.amazonaws.bedrockagentcore#Permit2AllowanceLimit": { + "type": "string", + "traits": { + "smithy.api#documentation": "The maximum on-chain Permit2 allowance to grant, in the asset's smallest denomination. Pass the value as a numeric string. For example, \"1000000\" is 1 USDC at 6 decimals. To grant an unlimited allowance, pass the uint256 maximum, which is a 78-digit number.
", + "smithy.api#length": { + "min": 1, + "max": 78 + }, + "smithy.api#pattern": "^[0-9]+$" + } + }, "com.amazonaws.bedrockagentcore#PhoneNumber": { "type": "string", "traits": { @@ -14804,9 +15040,15 @@ { "target": "com.amazonaws.bedrockagentcore#InternalServerException" }, + { + "target": "com.amazonaws.bedrockagentcore#ResourceNotFoundException" + }, { "target": "com.amazonaws.bedrockagentcore#ServiceQuotaExceededException" }, + { + "target": "com.amazonaws.bedrockagentcore#SubscriptionRequiredException" + }, { "target": "com.amazonaws.bedrockagentcore#ThrottlingException" }, @@ -16813,7 +17055,7 @@ "traits": { "smithy.api#length": { "min": 1, - "max": 1000 + "max": 20000 }, "smithy.api#sensitive": {} } @@ -18228,6 +18470,42 @@ "smithy.api#documentation": "Stripe Privy token response containing appId, basicAuthToken, and optionally authorizationSignature.
" } }, + "com.amazonaws.bedrockagentcore#SubscriptionRequiredException": { + "type": "structure", + "members": { + "message": { + "target": "smithy.api#String", + "traits": { + "smithy.api#required": {} + } + }, + "subscriptionUrl": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The URL to the Marketplace listing where you can subscribe.
", + "smithy.api#length": { + "min": 1, + "max": 2048 + } + } + }, + "productName": { + "target": "smithy.api#String", + "traits": { + "smithy.api#documentation": "The name of the product that requires a Marketplace subscription.
", + "smithy.api#length": { + "min": 1, + "max": 256 + } + } + } + }, + "traits": { + "smithy.api#documentation": "Returned when you attempt a wallet operation against a Coinbase Marketplace connector whose account does not hold an active Marketplace subscription and is not within the legacy exception period. Subscribe to the Marketplace listing before you retry the operation.
", + "smithy.api#error": "client", + "smithy.api#httpError": 403 + } + }, "com.amazonaws.bedrockagentcore#SystemPromptConfig": { "type": "union", "members": { @@ -19696,6 +19974,17 @@ "target": "com.amazonaws.bedrockagentcore#VariantResult" } }, + "com.amazonaws.bedrockagentcore#Version": { + "type": "string", + "traits": { + "smithy.api#documentation": "A protocol version identifier, as a bare numeric string. For example, \"1\" or \"2\".
", + "smithy.api#length": { + "min": 1, + "max": 10 + }, + "smithy.api#pattern": "^[0-9]+$" + } + }, "com.amazonaws.bedrockagentcore#ViewPort": { "type": "structure", "members": { @@ -19755,6 +20044,29 @@ }, "smithy.api#sensitive": {} } + }, + "com.amazonaws.bedrockagentcore#WwwAuthenticateHeader": { + "type": "string", + "traits": { + "smithy.api#documentation": "A raw WWW-Authenticate: Payment header value from a 402 response, containing RFC 9110 auth-params such as id, realm, method, intent, and request. Pass this value in the request body, not as an HTTP header.
The raw WWW-Authenticate header value to fulfill. Provide exactly one entry.
", + "smithy.api#length": { + "min": 1, + "max": 1 + } + } } } } \ No newline at end of file diff --git a/codegen/aws-models/lambda.json b/codegen/aws-models/lambda.json index 4d6e5f6..0dcbe35 100644 --- a/codegen/aws-models/lambda.json +++ b/codegen/aws-models/lambda.json @@ -11,12 +11,18 @@ { "target": "com.amazonaws.lambda#DeleteFunctionEventInvokeConfig" }, + { + "target": "com.amazonaws.lambda#DeleteResourcePolicy" + }, { "target": "com.amazonaws.lambda#GetAccountSettings" }, { "target": "com.amazonaws.lambda#GetFunctionEventInvokeConfig" }, + { + "target": "com.amazonaws.lambda#GetResourcePolicy" + }, { "target": "com.amazonaws.lambda#ListFunctionEventInvokeConfigs" }, @@ -26,6 +32,9 @@ { "target": "com.amazonaws.lambda#PutFunctionEventInvokeConfig" }, + { + "target": "com.amazonaws.lambda#PutResourcePolicy" + }, { "target": "com.amazonaws.lambda#SendDurableExecutionCallbackFailure" }, @@ -4880,7 +4889,7 @@ "BatchSize": 5, "EventSourceArn": "arn:aws:sqs:us-west-2:123456789012:my-queue", "FunctionArn": "arn:aws:lambda:us-west-2:123456789012:function:my-function", - "LastModified": 1.569284520333E9, + "LastModified": 1569284520.333, "State": "Creating", "StateTransitionReason": "USER_INITIATED", "UUID": "a1b2c3d4-5678-90ab-cdef-11111EXAMPLE" @@ -6755,6 +6764,94 @@ ] } }, + "com.amazonaws.lambda#DeleteResourcePolicy": { + "type": "operation", + "input": { + "target": "com.amazonaws.lambda#DeleteResourcePolicyRequest" + }, + "output": { + "target": "smithy.api#Unit" + }, + "errors": [ + { + "target": "com.amazonaws.lambda#InvalidParameterValueException" + }, + { + "target": "com.amazonaws.lambda#PreconditionFailedException" + }, + { + "target": "com.amazonaws.lambda#ResourceConflictException" + }, + { + "target": "com.amazonaws.lambda#ResourceNotFoundException" + }, + { + "target": "com.amazonaws.lambda#ServiceException" + }, + { + "target": "com.amazonaws.lambda#TooManyRequestsException" + } + ], + "traits": { + "aws.iam#conditionKeys": [ + "lambda:Principal" + ], + "aws.iam#iamAction": { + "documentation": "Grants permission to detach a policy from an AWS Lambda resource", + "relativeDocumentation": "API_DeleteResourcePolicy.html", + "requiredActions": [ + "lambda:RemovePermission" + ], + "resources": { + "required": { + "function": {} + } + } + }, + "smithy.api#documentation": "Deletes a resource-based policy from a Lambda resource.
", + "smithy.api#http": { + "method": "DELETE", + "uri": "/2026-07-09/resource-policy/{ResourceArn}", + "code": 204 + }, + "smithy.api#idempotent": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "com.amazonaws.lambda#DeleteResourcePolicyRequest": { + "type": "structure", + "members": { + "ResourceArn": { + "target": "com.amazonaws.lambda#PolicyResourceArn", + "traits": { + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the Lambda resource you want to delete the policy from. You can use a qualified or an unqualified ARN. The value must be a complete ARN, and the operation does not accept wildcard characters.
", + "smithy.api#httpLabel": {}, + "smithy.api#required": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "RevisionId": { + "target": "com.amazonaws.lambda#RevisionId", + "traits": { + "smithy.api#documentation": "The revision ID that the existing policy must match for the deletion to proceed. If the revision ID doesn't match, the operation fails with a PreconditionFailedException error. To retrieve the current revision ID, use the GetResourcePolicy operation.
The ARN of the Key Management Service (KMS) customer managed key that is used to encrypt your durable execution's payload data, including input, output, and error payloads.
", "smithy.api#tags": [ - "feature:public" + "feature:dar-cmkms" ] } }, @@ -6914,6 +7011,9 @@ "template": "durable-execution:{DurableExecutionArn}", "absolute": true }, + "aws.iam#conditionKeys": [ + "aws:ResourceTag/${TagKey}" + ], "aws.iam#iamResource": { "disableConditionKeyInheritance": true, "name": "durable execution", @@ -7515,7 +7615,7 @@ "traits": { "smithy.api#range": { "min": 512, - "max": 10240 + "max": 32768 }, "smithy.api#tags": [ "feature:public" @@ -13250,7 +13350,7 @@ "smithy.api#documentation": "Retrieves the provisioned concurrency configuration for a function's alias or version.
", "smithy.api#examples": [ { - "documentation": "The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified function.", + "documentation": "The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified function.", "input": { "FunctionName": "my-function", "Qualifier": "BLUE" @@ -13262,10 +13362,10 @@ "RequestedProvisionedConcurrentExecutions": 100, "Status": "READY" }, - "title": "To get a provisioned concurrency configuration" + "title": "To view a provisioned concurrency configuration" }, { - "documentation": "The following example displays details for the provisioned concurrency configuration for the BLUE alias of the specified function.", + "documentation": "The following example returns details for the provisioned concurrency configuration for the BLUE alias of the specified function.", "input": { "FunctionName": "my-function", "Qualifier": "BLUE" @@ -13277,7 +13377,7 @@ "RequestedProvisionedConcurrentExecutions": 100, "Status": "READY" }, - "title": "To view a provisioned concurrency configuration" + "title": "To get a provisioned concurrency configuration" } ], "smithy.api#http": { @@ -13389,6 +13489,104 @@ ] } }, + "com.amazonaws.lambda#GetResourcePolicy": { + "type": "operation", + "input": { + "target": "com.amazonaws.lambda#GetResourcePolicyRequest" + }, + "output": { + "target": "com.amazonaws.lambda#GetResourcePolicyResponse" + }, + "errors": [ + { + "target": "com.amazonaws.lambda#InvalidParameterValueException" + }, + { + "target": "com.amazonaws.lambda#ResourceNotFoundException" + }, + { + "target": "com.amazonaws.lambda#ServiceException" + }, + { + "target": "com.amazonaws.lambda#TooManyRequestsException" + } + ], + "traits": { + "aws.iam#iamAction": { + "documentation": "Grants permission to view a policy for an AWS Lambda resource", + "relativeDocumentation": "API_GetResourcePolicy.html", + "requiredActions": [ + "lambda:GetPolicy" + ], + "resources": { + "required": { + "function": {} + } + } + }, + "smithy.api#documentation": "Retrieves the resource-based policy attached to a Lambda resource.
", + "smithy.api#http": { + "method": "GET", + "uri": "/2026-07-09/resource-policy/{ResourceArn}", + "code": 200 + }, + "smithy.api#readonly": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "com.amazonaws.lambda#GetResourcePolicyRequest": { + "type": "structure", + "members": { + "ResourceArn": { + "target": "com.amazonaws.lambda#PolicyResourceArn", + "traits": { + "smithy.api#documentation": "The Amazon Resource Name (ARN) of the Lambda resource you want to retrieve the policy for. You can use a qualified or an unqualified ARN. The value must be a complete ARN, and the operation does not accept wildcard characters.
", + "smithy.api#httpLabel": {}, + "smithy.api#required": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + } + }, + "traits": { + "smithy.api#input": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "com.amazonaws.lambda#GetResourcePolicyResponse": { + "type": "structure", + "members": { + "Policy": { + "target": "com.amazonaws.lambda#ResourcePolicy", + "traits": { + "smithy.api#documentation": "The resource-based policy attached to the Lambda resource you specified.
", + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "RevisionId": { + "target": "com.amazonaws.lambda#RevisionId", + "traits": { + "smithy.api#documentation": "The revision ID of the policy. Pass this value as the RevisionId in a PutResourcePolicy or DeleteResourcePolicy request. Doing so ensures the operation acts on the expected version of the policy.
The maximum number of event pollers this event source can scale up to. For Amazon SQS events source mappings, default is 200, and minimum value allowed is 2. For Amazon MSK and self-managed Apache Kafka event source mappings, default is 200, and minimum value allowed is 1.
", + "smithy.api#documentation": "The maximum number of event pollers this event source can scale up to. For Amazon SQS event source mappings, the accepted range is between 2 and 10,000, with a default of 200. For Amazon MSK and self-managed Apache Kafka event source mappings, the accepted range is between 1 and 2,000, with a default of 200.
", "smithy.api#tags": [ "feature:public" ] @@ -20093,7 +20304,7 @@ } }, "traits": { - "smithy.api#documentation": "The resource-based policy you tried to add to the Lambda function would grant public access to it, and your account's BlockPublicAccess setting prevents public access. For more information about blocking public access to Lambda functions, see Block public access to Lambda resources.
The resource-based policy you tried to add to the Lambda resource would grant public access to it, which isn't allowed.
", "smithy.api#error": "client", "smithy.api#httpError": 400, "smithy.api#tags": [ @@ -21223,6 +21434,139 @@ ] } }, + "com.amazonaws.lambda#PutResourcePolicy": { + "type": "operation", + "input": { + "target": "com.amazonaws.lambda#PutResourcePolicyRequest" + }, + "output": { + "target": "com.amazonaws.lambda#PutResourcePolicyResponse" + }, + "errors": [ + { + "target": "com.amazonaws.lambda#InvalidParameterValueException" + }, + { + "target": "com.amazonaws.lambda#PolicyLengthExceededException" + }, + { + "target": "com.amazonaws.lambda#PreconditionFailedException" + }, + { + "target": "com.amazonaws.lambda#PublicPolicyException" + }, + { + "target": "com.amazonaws.lambda#ResourceConflictException" + }, + { + "target": "com.amazonaws.lambda#ResourceNotFoundException" + }, + { + "target": "com.amazonaws.lambda#ServiceException" + }, + { + "target": "com.amazonaws.lambda#TooManyRequestsException" + } + ], + "traits": { + "aws.iam#conditionKeys": [ + "lambda:Principal" + ], + "aws.iam#iamAction": { + "documentation": "Grants permission to attach a policy to an AWS Lambda resource", + "relativeDocumentation": "API_PutResourcePolicy.html", + "requiredActions": [ + "lambda:AddPermission", + "lambda:RemovePermission" + ], + "resources": { + "required": { + "function": {} + } + } + }, + "smithy.api#documentation": "Adds a resource-based policy to a Lambda resource. Resource-based policies grant access to other Amazon Web Services accounts, organizations, or services. Resource-based policies apply to a single Lambda resource (for example, a function, function version, or function alias).
This operation replaces any existing policy on the Lambda resource. If you previously added permissions using the AddPermission operation, the new policy overwrites those permissions.
The Amazon Resource Name (ARN) of the Lambda resource you want to add the policy to. You can use a qualified or an unqualified ARN. The value must be a complete ARN, and the operation does not accept wildcard characters.
", + "smithy.api#httpLabel": {}, + "smithy.api#required": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "Policy": { + "target": "com.amazonaws.lambda#ResourcePolicy", + "traits": { + "smithy.api#documentation": "The policy document you want to add to your Lambda resource. This is formatted as a JSON string.
For more information, see Working with resource-based policies in Lambda in the Lambda Developer Guide.
", + "smithy.api#required": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "RevisionId": { + "target": "com.amazonaws.lambda#RevisionId", + "traits": { + "smithy.api#documentation": "The revision ID that the existing policy must match for the replacement to proceed. If the revision ID doesn't match, the operation fails with a PreconditionFailedException error. To retrieve the current revision ID, use the GetResourcePolicy operation.
The resource-based policy that Lambda adds to the resource.
", + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, + "RevisionId": { + "target": "com.amazonaws.lambda#RevisionId", + "traits": { + "smithy.api#documentation": "The revision ID of the policy that Lambda adds to your Lambda resource.
", + "smithy.api#tags": [ + "feature:rbp" + ] + } + } + }, + "traits": { + "smithy.api#output": {}, + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, "com.amazonaws.lambda#PutRuntimeManagementConfig": { "type": "operation", "input": { @@ -21915,6 +22259,19 @@ ] } }, + "com.amazonaws.lambda#ResourcePolicy": { + "type": "string", + "traits": { + "smithy.api#length": { + "min": 1, + "max": 20480 + }, + "smithy.api#pattern": "^[\\s\\S]+$", + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, "com.amazonaws.lambda#ResponseStreamingInvocationType": { "type": "enum", "members": { @@ -21993,6 +22350,19 @@ ] } }, + "com.amazonaws.lambda#RevisionId": { + "type": "string", + "traits": { + "smithy.api#length": { + "min": 36, + "max": 36 + }, + "smithy.api#pattern": "^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$", + "smithy.api#tags": [ + "feature:rbp" + ] + } + }, "com.amazonaws.lambda#RoleArn": { "type": "string", "traits": { @@ -22446,7 +22816,7 @@ "traits": { "smithy.api#enumValue": "java8.al2023", "smithy.api#tags": [ - "feature:public" + "feature:java-al2023" ] } }, @@ -22455,7 +22825,7 @@ "traits": { "smithy.api#enumValue": "java11.al2023", "smithy.api#tags": [ - "feature:public" + "feature:java-al2023" ] } }, @@ -22464,7 +22834,7 @@ "traits": { "smithy.api#enumValue": "java17.al2023", "smithy.api#tags": [ - "feature:public" + "feature:java-al2023" ] } } @@ -26509,7 +26879,7 @@ "OnSuccess": {} }, "FunctionArn": "arn:aws:lambda:us-east-2:123456789012:function:my-function:$LATEST", - "LastModified": 1.573687896493E9, + "LastModified": 1573687896.493, "MaximumEventAgeInSeconds": 3600, "MaximumRetryAttempts": 0 }, From 582b933d081e906f348d95bbb26e5fed1ffce8a0 Mon Sep 17 00:00:00 2001 From: Antonio Aranda <102337110+arandito@users.noreply.github.com> Date: Mon, 24 Aug 2026 14:55:19 -0400 Subject: [PATCH 2/4] Update bedrock model --- ...i-change-4fbb50881d8943a1a6191703eae05441.json | 4 ++++ codegen/aws-models/bedrock.json | 15 ++++++++++++--- 2 files changed, 16 insertions(+), 3 deletions(-) create mode 100644 clients/aws-sdk-bedrock/.changes/next-release/aws-sdk-bedrock-api-change-4fbb50881d8943a1a6191703eae05441.json diff --git a/clients/aws-sdk-bedrock/.changes/next-release/aws-sdk-bedrock-api-change-4fbb50881d8943a1a6191703eae05441.json b/clients/aws-sdk-bedrock/.changes/next-release/aws-sdk-bedrock-api-change-4fbb50881d8943a1a6191703eae05441.json new file mode 100644 index 0000000..a603b4c --- /dev/null +++ b/clients/aws-sdk-bedrock/.changes/next-release/aws-sdk-bedrock-api-change-4fbb50881d8943a1a6191703eae05441.json @@ -0,0 +1,4 @@ +{ + "type": "api-change", + "description": "Adds support for specifying an inference profile ID or ARN, or an application inference profile ARN as the target model in CreateAdvancedPromptOptimizationJob." +} \ No newline at end of file diff --git a/codegen/aws-models/bedrock.json b/codegen/aws-models/bedrock.json index d608f7a..8eef7e5 100644 --- a/codegen/aws-models/bedrock.json +++ b/codegen/aws-models/bedrock.json @@ -382,6 +382,15 @@ "smithy.api#documentation": "Contains a summary of an advanced prompt optimization job.
" } }, + "com.amazonaws.bedrock#AdvancedPromptOptimizationModelIdentifier": { + "type": "string", + "traits": { + "smithy.api#length": { + "max": 2048 + }, + "smithy.api#pattern": "^(([a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([a-z0-9-]{1,63}[.]){0,2}[a-z0-9-]{1,63}([:][a-z0-9-]{1,63}){0,2}(/[a-z0-9]{12}|))|(arn:aws(|-us-gov|-cn|-iso|-iso-b|-iso-f):bedrock:[a-z0-9-]{1,20}:[0-9]{12}:application-inference-profile/[a-zA-Z0-9-:.]+)|(arn:aws(|-us-gov|-cn|-iso|-iso-b|-iso-f):bedrock:[a-z0-9-]{1,20}:([0-9]{12})?:inference-profile/[a-zA-Z0-9-:.]+)|(arn:aws(-[^:]+)?:bedrock:[a-z0-9-]{1,20}::foundation-model/[a-z0-9-]{1,63}[.]{1}[a-z0-9-]{1,63}([.:]?[a-z0-9-]{1,63})))$" + } + }, "com.amazonaws.bedrock#AdvancedPromptOptimizationOutputConfig": { "type": "structure", "members": { @@ -19461,9 +19470,9 @@ "type": "structure", "members": { "modelId": { - "target": "com.amazonaws.bedrock#BedrockModelId", + "target": "com.amazonaws.bedrock#AdvancedPromptOptimizationModelIdentifier", "traits": { - "smithy.api#documentation": "The ID of the model to use for optimization.
", + "smithy.api#documentation": "The model to use for optimization. The value depends on the resource that you use:
If you use a base model, specify the model ID or its ARN. For a list of model IDs, see Models at a glance in the Amazon Bedrock User Guide.
If you use a cross-Region (system-defined) inference profile, specify the inference profile ID or its ARN. For a list of inference profile IDs, see Supported Regions and models for inference profiles in the Amazon Bedrock User Guide.
If you use an application inference profile, specify its full ARN, including the account ID and Region.