package awso-async

  1. Overview
  2. Docs
AWS client for Async (400+ services, auto-generated from botocore)

Install 

dune-project
 Dependency

github.com Readme Changelog MIT License Edit opam file Versions (2)

Authors

  1. A
    Ashish Agarwal <ashish@solvuu.com>
  2. S
    Solvuu Inc.
  3. M
    Michael Bacarella <m@bacarella.com>

Maintainers

  1. M
    Michael Bacarella <m@bacarella.com>

Sources

awso-0.9.0.tbz
sha256=47224890900b1f5d2bd717000a02fa8918f92eafa99f702f7d59a1b053ff8e95
sha512=e187288f7c8fccb221f5417671732c8c8de95cdbacba1514db592b5700df2293468bde07956539bd44f3d460f6c75d38bd66ca161d0eae68a8b1b4e081882367

doc/awso-async.bedrock-agentcore-control/Awso_bedrock_agentcore_control_async/index.html

Module Awso_bedrock_agentcore_control_asyncSource

include module type of struct include Awso_bedrock_agentcore_control.Values end
Sourceval service : Awso.Service.t
Sourceval apiVersion : string
Sourceval endpointPrefix : string
Sourceval serviceFullName : string
Sourceval signatureVersion : string
Sourceval protocol : string
Sourceval globalEndpoint : string
Sourceval simple_to_json : ('a -> Awso__Botodata.value) -> 'a -> Yojson.Safe.t
Sourceval composed_to_json : ('a -> Awso__Botodata.value) -> 'a -> Yojson.Safe.t
Sourceval to_query : ('a -> Awso.Client.Query.value) -> 'a -> Awso.Client.Query.t
Sourceval structure_to_value_aux : ('a * 'b option) list -> f:(('a * 'b) list -> 'c) -> [> `Structure of 'c ]
Sourceval structure_to_value : ('a * 'b option) list -> [> `Structure of ('a * 'b) list ]
Sourceval structure_to_wrapped_value : wrapper:'a -> response:'a -> ('b * 'c option) list -> [> `Structure of ('a * [> `Structure of ('b * 'c) list ]) list ]

The agent card definition for an A2A descriptor. Contains the schema version and inline content for the agent card.

The Agent-to-Agent (A2A) protocol descriptor for a registry record. Contains the agent card definition as defined by the A2A protocol specification.

This exception is thrown when a request is denied per access permissions

An entry in a target traffic split configuration.

A weighted route that splits traffic between multiple gateway targets.

A static route to a single gateway target.

An action that routes requests to a gateway target, either statically or with weighted traffic splitting.

A reference to a specific version of a configuration bundle.

An entry in a traffic split configuration, defining a named variant with a weight and configuration bundle reference.

A weighted configuration bundle override that splits traffic between multiple bundle versions.

A static configuration bundle override.

An action that applies a configuration bundle override, either as a static override or a weighted split for A/B testing.

An action to take when a gateway rule's conditions are met.

Contains information about an agent runtime. An agent runtime is the execution environment for a Amazon Bedrock AgentCore Agent.

Representation of a container configuration.

The Amazon S3 location for storing data. This structure defines where in Amazon S3 data is stored.

The source code configuration that specifies the location and details of the code to be executed.

The configuration for the source code that defines how the agent runtime code should be executed, including the code location, runtime environment, and entry point.

The artifact of the agent.

Contains information about an agent runtime endpoint. An endpoint provides a way to connect to and interact with an agent runtime.

The skill markdown definition for an agent skills descriptor.

The structured skill definition with schema version and content.

The agent skills descriptor for a registry record. Contains an optional skill markdown definition in human-readable format and an optional structured skill definition.

Sourcemodule String_ = Awso_bedrock_agentcore_control.Values.String_

Settings to override configurations for a tool.

Specifies which operations from an API Gateway REST API are exposed as tools. Tool names and descriptions are derived from the operationId and description fields in the API's exported OpenAPI specification.

The configuration for defining REST API tool filters and overrides for the gateway target.

The configuration for an Amazon API Gateway target.

An API key credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using an API key.

Contains information about an API key credential provider.

The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.

Configuration for API schema.

Configuration for the registry record approval workflow. Controls whether records added to the registry require explicit approval before becoming active.

Configuration settings for connecting to Atlassian services using OAuth2 authentication. This includes the client credentials required to authenticate with Atlassian's OAuth2 authorization server.

Contains the authorization server metadata for an OAuth2 provider.

Contains the discovery information for an OAuth2 provider.

The configuration details returned for an Atlassian OAuth2 provider, including the client ID and OAuth2 discovery information.

OAuth2-specific authorization data, including the authorization URL and user identifier for the authorization session.

Contains the authorization data that is returned when a gateway target is configured with a credential provider with authorization code grant type and requires user federation.

Configuration for a self-managed VPC Lattice resource. You create and manage the VPC Lattice resource gateway and resource configuration, then provide the resource configuration identifier.

Configuration for a managed VPC Lattice resource. The gateway creates and manages the VPC Lattice resource gateway and resource configuration on your behalf using a service-linked role.

The private endpoint configuration for a gateway target. Defines how the gateway connects to private resources in your VPC.

A mapping of a specific domain to a private endpoint for secure connectivity through a VPC Lattice resource configuration.

The value or values to match for. Include a matchValueString with the EQUALS operator to specify a string that matches the claim field value. Include a matchValueArray to specify an array of string values. You can use the following operators: Use CONTAINS to yield a match if the claim field value is in the array. Use CONTAINS_ANY to yield a match if the claim field value contains any of the strings in the array.

Defines the value or values to match for and the relationship of the match.

Defines the name of a custom claim field and rules for finding matches to authenticate its value.

Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated.

Represents inbound authorization configuration options used to authenticate incoming requests.

The configuration parameters that control how the foundation model behaves during evaluation, including response generation settings.

The configuration for using Amazon Bedrock models in evaluator assessments, including model selection and inference parameters.

The location of a resource.

Browser enterprise policy configuration.

VpcConfig for the Agent.

The network configuration for a browser. This structure defines how the browser connects to the network.

Contains summary information about a browser profile. A browser profile stores persistent browser data that can be reused across browser sessions.

Configuration for enabling browser signing capabilities that allow agents to cryptographically identify themselves to websites using HTTP message signatures.

The current browser signing configuration that shows whether cryptographic agent identification is enabled for web bot authentication.

Contains summary information about a browser. A browser enables Amazon Bedrock AgentCore Agent to interact with web content.

The definition of a categorical rating scale option that provides a named category with its description for evaluation scoring.

Represents a Cedar policy statement within the AgentCore Policy system. Cedar is a policy language designed for authorization that provides human-readable, analyzable, and high-performance policy evaluation for controlling agent behavior and access decisions.

The Amazon Web Services Secrets Manager location configuration.

The location from which to retrieve a certificate.

A certificate to install in the browser or code interpreter.

The configuration for reading agent traces from CloudWatch logs as input for online evaluation.

The configuration for writing evaluation results to CloudWatch logs with embedded metric format (EMF) for monitoring.

Configuration for a Lambda function used as a code-based evaluator.

Configuration for a code-based evaluator. Specify the Lambda function to use for evaluation.

The network configuration for a code interpreter. This structure defines how the code interpreter connects to the network.

Contains summary information about a code interpreter. A code interpreter enables Amazon Bedrock AgentCore Agent to execute code.

Coinbase CDP configuration — credentials provided by Coinbase Developer Platform.

Contains information about a secret in AWS Secrets Manager.

Coinbase CDP configuration output with secret ARNs.

The configuration for a component within a configuration bundle. The component type is inferred from the component identifier ARN.

Exception thrown when a resource is modified concurrently by multiple requests.

An IAM principal specification for rule matching.

Union for principal matching. Currently supports IAM principal ARN glob matching.

A condition that matches requests based on the caller's identity.

A condition that matches requests based on the request path.

A condition that determines when a gateway rule applies. Conditions can match on principals or request paths.

Summary information about a configuration bundle.

The source that created a configuration bundle version.

The version lineage metadata that tracks parent versions and creation source. Supports git-like two-parent merges for branch management.

Summary information about a configuration bundle version.

This exception is thrown when there is a conflict performing an operation

Contains user preference consolidation override configuration.

Contains summary consolidation override configuration.

Contains semantic consolidation override configuration.

Contains configurations to override the default consolidation step for the episodic memory strategy.

Contains custom consolidation configuration information.

Contains consolidation configuration information for a memory strategy.

Sourcemodule Content = Awso_bedrock_agentcore_control.Values.Content

Represents content input for policy generation operations. This structure encapsulates the natural language descriptions or other content formats that are used as input for AI-powered policy generation.

Defines what content to stream and at what level of detail.

Creates an AgentCore Runtime endpoint.

Stores information about a field passed inside a request that resulted in an exception.

The input fails to satisfy the constraints specified by the service.

This exception is thrown when the number of requests exceeds the limit

This exception is thrown when a request is made beyond the service quota

This exception is thrown when a resource referenced by the operation does not exist

This exception is thrown if there was an unexpected error during processing of request

Creates an AgentCore Runtime endpoint.

Configuration for HTTP request headers that will be passed through to the runtime.

The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.

SecurityConfig for the Agent.

LifecycleConfiguration lets you manage the lifecycle of runtime sessions and resources in AgentCore Runtime. This configuration helps optimize resource utilization by automatically cleaning up idle sessions and preventing long-running instances from consuming resources indefinitely.

Configuration for a session storage filesystem mounted into the AgentCore Runtime. Session storage provides persistent storage that is preserved across AgentCore Runtime session invocations.

Configuration for an Amazon S3 Files access point filesystem mounted into the AgentCore Runtime. S3 Files access points provide shared file storage accessible from your AgentCore Runtime sessions.

Configuration for an Amazon EFS access point filesystem mounted into the AgentCore Runtime. EFS access points provide shared file storage accessible from your AgentCore Runtime sessions.

Configuration for a filesystem that can be mounted into the AgentCore Runtime.

Creates an Amazon Bedrock AgentCore Runtime.

The information about the workload identity.

Creates an Amazon Bedrock AgentCore Runtime.

Creates a new API key credential provider.

This exception is thrown when the JWT bearer token is invalid or not found for OAuth bearer token based access

Exception thrown when a resource limit is exceeded.

Exception thrown when encryption of a secret fails.

Exception thrown when decryption of a secret fails.

Creates a new API key credential provider.

Creates a browser profile in Amazon Bedrock AgentCore. A browser profile stores persistent browser data such as cookies, local storage, session storage, and browsing history that can be saved from browser sessions and reused in subsequent sessions.

Creates a browser profile in Amazon Bedrock AgentCore. A browser profile stores persistent browser data such as cookies, local storage, session storage, and browsing history that can be saved from browser sessions and reused in subsequent sessions.

The recording configuration for a browser. This structure defines how browser sessions are recorded.

Creates a custom browser.

Creates a custom browser.

Creates a custom code interpreter.

Creates a custom code interpreter.

Creates a new configuration bundle resource. A configuration bundle stores versioned component configurations for agent evaluation workflows.

Creates a new configuration bundle resource. A configuration bundle stores versioned component configurations for agent evaluation workflows.

The definition of a numerical rating scale option that provides a numeric value with its description for evaluation scoring.

The rating scale that defines how evaluators should score agent performance, supporting both numerical and categorical scales.

The model configuration that specifies which foundation model to use for evaluation and how to configure it.

The configuration for LLM-as-a-Judge evaluation that uses a language model to assess agent performance based on custom instructions and rating scales.

The configuration that defines how an evaluator assesses agent performance, including the evaluation method and parameters.

Creates a custom evaluator for agent quality assessment. Custom evaluators can use either LLM-as-a-Judge configurations with user-defined prompts, rating scales, and model settings, or code-based configurations with customer-managed Lambda functions to evaluate agent performance at tool call, trace, or session levels.

Creates a custom evaluator for agent quality assessment. Custom evaluators can use either LLM-as-a-Judge configurations with user-defined prompts, rating scales, and model settings, or code-based configurations with customer-managed Lambda functions to evaluate agent performance at tool call, trace, or session levels.

The streaming configuration for an MCP gateway. This structure defines settings that control response streaming behavior.

The session configuration for an MCP gateway. This structure defines settings that control session behavior.

The configuration for a Model Context Protocol (MCP) gateway. This structure defines how the gateway implements the MCP protocol.

The configuration for a gateway protocol. This structure defines how the gateway communicates with external services.

The configuration for a policy engine associated with a gateway. A policy engine is a collection of policies that evaluates and authorizes agent tool calls. When associated with a gateway, the policy engine intercepts all agent requests and determines whether to allow or deny each action based on the defined policies.

The input configuration of the interceptor.

The lambda configuration for the interceptor

The interceptor configuration.

The configuration for an interceptor on a gateway. This structure defines settings for an interceptor that will be invoked during the invocation of the gateway.

Creates a gateway for Amazon Bedrock Agent. A gateway serves as an integration point between your agent and external services. If you specify CUSTOM_JWT as the authorizerType, you must provide an authorizerConfiguration.

Creates a gateway for Amazon Bedrock Agent. A gateway serves as an integration point between your agent and external services. If you specify CUSTOM_JWT as the authorizerType, you must provide an authorizerConfiguration.

Creates a rule for a gateway. Rules define conditions and actions that control how requests are routed and processed through the gateway, including principal-based access control and path-based routing.

System-managed metadata for rules created by automated processes such as A/B tests.

Creates a rule for a gateway. Rules define conditions and actions that control how requests are routed and processed through the gateway, including principal-based access control and path-based routing.

The MCP tool schema configuration for an MCP server target. The tool schema must be aligned with the MCP specification.

The target configuration for the MCP server.

A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.

A tool definition for a gateway target. This structure defines a tool that the target exposes through the Model Context Protocol.

A tool schema for a gateway target. This structure defines the schema for a tool that the target exposes through the Model Context Protocol.

The Lambda configuration for a Model Context Protocol target. This structure defines how the gateway uses a Lambda function to communicate with the target.

The Model Context Protocol (MCP) configuration for a target. This structure defines how the gateway uses MCP to communicate with the target.

Configuration for an AgentCore Runtime target. Specifies the agent runtime to route requests to via HTTP.

The HTTP target configuration for a gateway target. Contains the configuration for HTTP-based target endpoints.

The configuration for a gateway target. This structure defines how the gateway connects to and interacts with the target endpoint.

Configuration for HTTP header and query parameter propagation between the gateway and target servers.

An OAuth credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using OAuth.

An IAM credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using IAM credentials and SigV4 signing.

A credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint.

The configuration for a credential provider. This structure defines how the gateway authenticates with the target endpoint.

Creates a target for a gateway. A target defines an endpoint that the gateway can connect to.

Details of a resource created and managed by the gateway for private endpoint connectivity.

Creates a target for a gateway. A target defines an endpoint that the gateway can connect to.

Sourcemodule Float_ = Awso_bedrock_agentcore_control.Values.Float_

Configuration for summarization-based truncation strategy.

Configuration for sliding window truncation strategy.

Strategy-specific truncation configuration.

Configuration for truncating conversation context when it exceeds model limits.

The value of an HTTP header.

The key of an HTTP header.

Configuration for connecting to a remote MCP server.

Configuration for an inline function tool. When the agent calls this tool, the tool call is returned to the caller for external execution.

Authentication method for calling a Gateway.

Configuration for AgentCore Gateway.

Configuration for AgentCore Code Interpreter.

Configuration for AgentCore Browser.

Configuration union for different tool types.

A tool available to the agent loop.

A content block in the system prompt.

A skill available to the agent.

Configuration for an OpenAI model provider. Requires an API key stored in AgentCore Identity.

Configuration for a Google Gemini model provider. Requires an API key stored in AgentCore Identity.

Configuration for an Amazon Bedrock model provider.

Specification of which model to use.

Configuration for memory retrieval within a namespace.

Configuration for AgentCore Memory integration.

The memory configuration for a harness.

The AgentCore Runtime environment request configuration.

The environment provider request configuration.

The environment artifact for a harness, such as a container image containing custom dependencies.

Operation to create a Harness.

The AgentCore Runtime environment for a harness.

The environment provider for a harness.

Representation of a Harness.

Operation to create a Harness.

Configuration for Kinesis Data Stream delivery.

Supported stream delivery resource types.

Configuration for streaming memory record data to external resources.

Validation for STRING fields.

Validation for STRINGLIST fields.

Validation for NUMBER fields.

Validation rules for extracted metadata values. Only one type can be specified, matching the field's data type.

Model-based metadata extraction configuration.

Configuration for metadata extraction from conversational content.

A metadata field definition within a strategy's schema.

Schema for metadata on memory records generated by a strategy.

Input for creating a user preference memory strategy.

Input for creating a summary memory strategy.

Input for creating a semantic memory strategy.

An episodic reflection configuration input.

Input for creating an episodic memory strategy.

Input for user preference override extraction configuration in a memory strategy.

Input for user preference override consolidation configuration in a memory strategy.

Input for user preference override configuration in a memory strategy.

Input for summary override consolidation configuration in a memory strategy.

Input for summary override configuration in a memory strategy.

Input for semantic override extraction configuration in a memory strategy.

Input for semantic override consolidation configuration in a memory strategy.

Input for semantic override configuration in a memory strategy.

Trigger configuration based on tokens.

Trigger configuration based on time.

The trigger configuration based on a message.

Condition that triggers memory processing.

Sourcemodule SelfManagedConfigurationInputHistoricalContextWindowSizeInteger = Awso_bedrock_agentcore_control.Values.SelfManagedConfigurationInputHistoricalContextWindowSizeInteger
Sourcemodule InvocationConfigurationInputPayloadDeliveryBucketNameString = Awso_bedrock_agentcore_control.Values.InvocationConfigurationInputPayloadDeliveryBucketNameString

The configuration to invoke a self-managed memory processing pipeline with.

Input configuration for a self-managed memory strategy.

Configurations for overriding the reflection step of the episodic memory strategy.

Configurations for overriding the extraction step of the episodic memory strategy.

Configurations for overriding the consolidation step of the episodic memory strategy.

Input for the configuration to override the episodic memory strategy.

Input for custom configuration of a memory strategy.

Input for creating a custom memory strategy.

Contains input information for creating a memory strategy.

A metadata key indexed for filtering.

Creates a new Amazon Bedrock AgentCore Memory resource.

API rate limit has been exceeded.

An internal error occurred.

Trigger configuration based on tokens.

Trigger configuration based on time.

The trigger configuration based on a message.

Condition that triggers memory processing.

The configuration to invoke a self-managed memory processing pipeline with.

A configuration for a self-managed memory strategy.

The configuration for the reflections created with the episodic memory strategy.

Contains configurations to override the default reflection step for the episodic memory strategy.

Contains configurations for a custom reflection strategy.

Contains reflection configuration information for a memory strategy.

Contains user preference extraction override configuration.

Contains semantic extraction override configuration.

Contains configurations to override the default extraction step for the episodic memory strategy.

Contains custom extraction configuration information.

Contains extraction configuration information for a memory strategy.

Contains configuration information for a memory strategy.

Contains information about a memory strategy.

Contains information about a memory resource.

Creates a new Amazon Bedrock AgentCore Memory resource.

Input configuration for a Slack OAuth2 provider.

Input configuration for a Salesforce OAuth2 provider.

Input configuration for a Microsoft OAuth2 provider.

Configuration settings for connecting to LinkedIn services using OAuth2 authentication. This includes the client credentials required to authenticate with LinkedIn's OAuth2 authorization server.

Configuration settings for connecting to a supported OAuth2 provider. This includes client credentials and OAuth2 discovery information for providers that have built-in support.

Input configuration for a Google OAuth2 provider.

Input configuration for a GitHub OAuth2 provider.

Configuration for RFC 8693 token exchange.

Configuration for on-behalf-of token exchange.

Input configuration for a custom OAuth2 provider.

Contains the input configuration for an OAuth2 provider.

Creates a new OAuth2 credential provider.

Output configuration for a Slack OAuth2 provider.

Output configuration for a Salesforce OAuth2 provider.

Output configuration for a Microsoft OAuth2 provider.

The configuration details returned for a LinkedIn OAuth2 provider, including the client ID and OAuth2 discovery information.

The configuration details returned for a supported OAuth2 provider, including client credentials and OAuth2 discovery information.

Output configuration for a Google OAuth2 provider.

Output configuration for a GitHub OAuth2 provider.

Output configuration for a custom OAuth2 provider.

Contains the output configuration for an OAuth2 provider.

Creates a new OAuth2 credential provider.

The configuration that defines how agent sessions are detected and when they are considered complete for evaluation.

The configuration that controls what percentage of agent traces are sampled for evaluation to manage evaluation volume and costs.

The value used in filter comparisons, supporting different data types for flexible filtering criteria.

The filter that applies conditions to agent traces during online evaluation to determine which traces should be evaluated.

The evaluation rule that defines sampling configuration, filtering criteria, and session detection settings for online evaluation.

The reference to an evaluator used in online evaluation configurations, containing the evaluator identifier.

The configuration that specifies where to read agent traces for online evaluation.

Creates an online evaluation configuration for continuous monitoring of agent performance. Online evaluation automatically samples live traffic from CloudWatch logs at specified rates and applies evaluators to assess agent quality in production.

The configuration that specifies where evaluation results should be written for monitoring and analysis.

Creates an online evaluation configuration for continuous monitoring of agent performance. Online evaluation automatically samples live traffic from CloudWatch logs at specified rates and applies evaluators to assess agent quality in production.

Configuration for a payment credential provider that stores authentication credentials for a payment provider.

The credential provider configuration for a payment connector. Specifies the payment provider type and its associated credential provider.

Creates a new payment connector for a payment manager. A payment connector integrates with a supported payment provider to enable payment processing capabilities.

Creates a new payment connector for a payment manager. A payment connector integrates with a supported payment provider to enable payment processing capabilities.

Stripe Privy configuration — credentials provided by Stripe and Privy.

Provider configuration input — contains secrets for creation and update. Varies by vendor type.

Creates a new payment credential provider for storing authentication credentials used by payment connectors to communicate with external payment providers.

Stripe Privy configuration output with secret ARNs.

Provider configuration output — no raw secrets, only ARNs. Varies by vendor type.

Creates a new payment credential provider for storing authentication credentials used by payment connectors to communicate with external payment providers.

Creates a new payment manager in your Amazon Web Services account. A payment manager serves as the top-level resource for managing payment processing capabilities, including payment connectors that integrate with supported payment providers. If you specify CUSTOM_JWT as the authorizerType, you must provide an authorizerConfiguration.

Creates a new payment manager in your Amazon Web Services account. A payment manager serves as the top-level resource for managing payment processing capabilities, including payment connectors that integrate with supported payment providers. If you specify CUSTOM_JWT as the authorizerType, you must provide an authorizerConfiguration.

Creates a new policy engine within the AgentCore Policy system. A policy engine is a collection of policies that evaluates and authorizes agent tool calls. When associated with Gateways (each Gateway can be associated with at most one policy engine, but multiple Gateways can be associated with the same engine), the policy engine intercepts all agent requests and determines whether to allow or deny each action based on the defined policies. This is an asynchronous operation. Use the GetPolicyEngine operation to poll the status field to track completion.

Creates a new policy engine within the AgentCore Policy system. A policy engine is a collection of policies that evaluates and authorizes agent tool calls. When associated with Gateways (each Gateway can be associated with at most one policy engine, but multiple Gateways can be associated with the same engine), the policy engine intercepts all agent requests and determines whether to allow or deny each action based on the defined policies. This is an asynchronous operation. Use the GetPolicyEngine operation to poll the status field to track completion.

Represents the information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Cedar policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.

Represents the definition structure for policies within the AgentCore Policy system. This structure encapsulates different policy formats and languages that can be used to define access control rules.

Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using the Cedar policy language, you can define fine-grained policies that specify which interactions with Gateway tools are permitted based on input parameters and OAuth claims, ensuring agents operate within defined boundaries and business rules. The policy is validated during creation against the Cedar schema generated from the Gateway's tools' input schemas, which defines the available tools, their parameters, and expected data types. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.

Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using the Cedar policy language, you can define fine-grained policies that specify which interactions with Gateway tools are permitted based on input parameters and OAuth claims, ensuring agents operate within defined boundaries and business rules. The policy is validated during creation against the Cedar schema generated from the Gateway's tools' input schemas, which defines the available tools, their parameters, and expected data types. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.

OAuth credential provider configuration for authenticating with an external source during synchronization.

IAM credential provider configuration for authenticating with an external source using SigV4 signing during synchronization.

Union of supported credential provider types for registry record synchronization.

A pairing of a credential provider type with its corresponding provider details for authenticating with external sources.

Configuration for synchronizing from a URL-based MCP server.

Configuration for synchronizing registry record metadata from an external source.

The tools definition for an MCP descriptor. Contains the protocol version and inline content describing the available tools.

The server definition for an MCP descriptor. Contains the schema version and inline content for the MCP server configuration.

The Model Context Protocol (MCP) descriptor for a registry record. Contains the server definition and tools definition for an MCP-compatible server. The schema is validated against the MCP protocol specification.

A custom descriptor for a registry record. Use this for resources such as APIs, Lambda functions, or servers that do not conform to a standard protocol like MCP or A2A.

Contains descriptor-type-specific configurations for a registry record. Only the descriptor matching the record's descriptorType should be populated.

Creates a new registry record within the specified registry. A registry record represents an individual AI resource's metadata in the registry. This could be an MCP server (and associated tools), A2A agent, agent skill, or a custom resource with a custom schema. The record is processed asynchronously and returns HTTP 202 Accepted.

Creates a new registry record within the specified registry. A registry record represents an individual AI resource's metadata in the registry. This could be an MCP server (and associated tools), A2A agent, agent skill, or a custom resource with a custom schema. The record is processed asynchronously and returns HTTP 202 Accepted.

Creates a new registry in your Amazon Web Services account. A registry serves as a centralized catalog for organizing and managing registry records, including MCP servers, A2A agents, agent skills, and custom resource types. If you specify CUSTOM_JWT as the authorizerType, you must provide an authorizerConfiguration.

Creates a new registry in your Amazon Web Services account. A registry serves as a centralized catalog for organizing and managing registry records, including MCP servers, A2A agents, agent skills, and custom resource types. If you specify CUSTOM_JWT as the authorizerType, you must provide an authorizerConfiguration.

Creates a new workload identity.

Creates a new workload identity.

Input for a custom consolidation configuration.

Input for a custom extraction configuration.

Input for a custom reflection configuration.

Deletes an AAgentCore Runtime endpoint.

Deletes an AAgentCore Runtime endpoint.

Deletes an Amazon Bedrock AgentCore Runtime.

Deletes an Amazon Bedrock AgentCore Runtime.

Deletes an API key credential provider.

Deletes an API key credential provider.

Deletes a browser profile.

Deletes a browser profile.

Deletes a custom browser.

Deletes a custom browser.

Deletes a custom code interpreter.

Deletes a custom code interpreter.

Deletes a configuration bundle and all of its versions.

Deletes a configuration bundle and all of its versions.

Deletes a custom evaluator. Builtin evaluators cannot be deleted. The evaluator must not be referenced by any active online evaluation configurations.

Deletes a custom evaluator. Builtin evaluators cannot be deleted. The evaluator must not be referenced by any active online evaluation configurations.

Deletes a gateway.

Deletes a gateway.

Deletes a gateway rule.

Deletes a gateway rule.

Deletes a gateway target. You cannot delete a target that is in a pending authorization state (CREATE_PENDING_AUTH, UPDATE_PENDING_AUTH, or SYNCHRONIZE_PENDING_AUTH). Wait for the authorization to complete or fail before deleting the target.

Deletes a gateway target. You cannot delete a target that is in a pending authorization state (CREATE_PENDING_AUTH, UPDATE_PENDING_AUTH, or SYNCHRONIZE_PENDING_AUTH). Wait for the authorization to complete or fail before deleting the target.

Operation to delete a Harness.

Operation to delete a Harness.

Deletes an Amazon Bedrock AgentCore Memory resource.

Deletes an Amazon Bedrock AgentCore Memory resource.

Input for deleting a memory strategy.

Deletes an OAuth2 credential provider.

Deletes an OAuth2 credential provider.

Deletes an online evaluation configuration and stops any ongoing evaluation processes associated with it.

Deletes an online evaluation configuration and stops any ongoing evaluation processes associated with it.

Deletes a payment connector.

Deletes a payment connector.

Deletes a payment credential provider and its associated stored credentials.

Deletes a payment credential provider and its associated stored credentials.

Deletes a payment manager. All payment connectors associated with the payment manager must be deleted before the payment manager can be deleted. This operation initiates the deletion process asynchronously.

Deletes a payment manager. All payment connectors associated with the payment manager must be deleted before the payment manager can be deleted. This operation initiates the deletion process asynchronously.

Deletes an existing policy engine from the AgentCore Policy system. The policy engine must not have any associated policies before deletion. Once deleted, the policy engine and all its configurations become unavailable for policy management and evaluation. This is an asynchronous operation. Use the GetPolicyEngine operation to poll the status field to track completion.

Deletes an existing policy engine from the AgentCore Policy system. The policy engine must not have any associated policies before deletion. Once deleted, the policy engine and all its configurations become unavailable for policy management and evaluation. This is an asynchronous operation. Use the GetPolicyEngine operation to poll the status field to track completion.

Deletes an existing policy from the AgentCore Policy system. Once deleted, the policy can no longer be used for agent behavior control and all references to it become invalid. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.

Deletes an existing policy from the AgentCore Policy system. Once deleted, the policy can no longer be used for agent behavior control and all references to it become invalid. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.

Deletes a registry record. The record's status transitions to DELETING and the record is removed asynchronously.

Deletes a registry record. The record's status transitions to DELETING and the record is removed asynchronously.

Deletes a registry. The registry must contain zero records before it can be deleted. This operation initiates the deletion process asynchronously.

Deletes a registry. The registry must contain zero records before it can be deleted. This operation initiates the deletion process asynchronously.

Deletes the resource-based policy for a specified resource. This feature is currently available only for AgentCore Runtime and Gateway.

Deletes the resource-based policy for a specified resource. This feature is currently available only for AgentCore Runtime and Gateway.

Deletes a workload identity.

Deletes a workload identity.

The summary information about an evaluator, including basic metadata and status information.

Represents a finding or issue discovered during policy generation or validation. Findings provide insights about potential problems, recommendations, or validation results from policy analysis operations. Finding types include: VALID (policy is ready to use), INVALID (policy has validation errors that must be fixed), NOT_TRANSLATABLE (input couldn't be converted to policy), ALLOW_ALL (policy would allow all actions, potential security risk), ALLOW_NONE (policy would allow no actions, unusable), DENY_ALL (policy would deny all actions, may be too restrictive), and DENY_NONE (policy would deny no actions, ineffective). Review all findings before creating policies from generated assets to ensure they match your security requirements.

Detailed information about a gateway rule.

Contains summary information about a gateway.

The gateway target.

Gets information about an Amazon Secure AgentEndpoint.

Gets information about an Amazon Secure AgentEndpoint.

Gets an Amazon Bedrock AgentCore Runtime.

Configuration for microVM metadata service settings.

Gets an Amazon Bedrock AgentCore Runtime.

Retrieves information about an API key credential provider.

Retrieves information about an API key credential provider.

Gets information about a browser profile.

Gets information about a browser profile.

Gets information about a custom browser.

Gets information about a custom browser.

Gets information about a custom code interpreter.

Gets information about a custom code interpreter.

Gets the latest version of a configuration bundle. By default, returns the latest version on the mainline branch. Use GetConfigurationBundleVersion to retrieve a specific historical version.

Gets the latest version of a configuration bundle. By default, returns the latest version on the mainline branch. Use GetConfigurationBundleVersion to retrieve a specific historical version.

Gets a specific version of a configuration bundle by its version identifier.

Gets a specific version of a configuration bundle by its version identifier.

Retrieves detailed information about an evaluator, including its configuration, status, and metadata. Works with both built-in and custom evaluators.

Retrieves detailed information about an evaluator, including its configuration, status, and metadata. Works with both built-in and custom evaluators.

Retrieves information about a specific Gateway.

Retrieves information about a specific Gateway.

Retrieves detailed information about a specific gateway rule.

Create response excludes updatedAt (redundant on create). Get/Update responses include it via their own output structures.

Retrieves information about a specific gateway target.

Retrieves information about a specific gateway target.

Operation to get a single Harness.

Operation to get a single Harness.

Retrieve an existing Amazon Bedrock AgentCore Memory resource.

Retrieve an existing Amazon Bedrock AgentCore Memory resource.

Retrieves information about an OAuth2 credential provider.

Retrieves information about an OAuth2 credential provider.

Retrieves detailed information about an online evaluation configuration, including its rules, data sources, evaluators, and execution status.

Retrieves detailed information about an online evaluation configuration, including its rules, data sources, evaluators, and execution status.

Retrieves information about a specific payment connector.

Retrieves information about a specific payment connector.

Retrieves information about a specific payment credential provider.

Retrieves information about a specific payment credential provider.

Retrieves information about a specific payment manager.

Retrieves information about a specific payment manager.

Retrieves detailed information about a specific policy engine within the AgentCore Policy system. This operation returns the complete policy engine configuration, metadata, and current status, allowing administrators to review and manage policy engine settings.

Retrieves detailed information about a specific policy engine within the AgentCore Policy system. This operation returns the complete policy engine configuration, metadata, and current status, allowing administrators to review and manage policy engine settings.

Retrieves a metadata-only summary of a specific policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and the encryption key ARN, but does not include the description or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves a metadata-only summary of a specific policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and the encryption key ARN, but does not include the description or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into Cedar policy statements using AI-powered translation, enabling non-technical users to create policies.

Represents a resource within the AgentCore Policy system. Resources are the targets of policy evaluation. Currently, only AgentCore Gateways are supported as resources for policy enforcement.

Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into Cedar policy statements using AI-powered translation, enabling non-technical users to create policies.

Retrieves a metadata-only summary of a specific policy generation request without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves a metadata-only summary of a specific policy generation request without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves detailed information about a specific policy within the AgentCore Policy system. This operation returns the complete policy definition, metadata, and current status, allowing administrators to review and manage policy configurations.

Retrieves detailed information about a specific policy within the AgentCore Policy system. This operation returns the complete policy definition, metadata, and current status, allowing administrators to review and manage policy configurations.

Retrieves a metadata-only summary of a specific policy without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps, but does not include the policy definition, description, or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves a metadata-only summary of a specific policy without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps, but does not include the policy definition, description, or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves information about a specific registry record.

Retrieves information about a specific registry record.

Retrieves information about a specific registry.

Retrieves information about a specific registry.

Retrieves the resource-based policy for a specified resource. This feature is currently available only for AgentCore Runtime and Gateway.

Retrieves the resource-based policy for a specified resource. This feature is currently available only for AgentCore Runtime and Gateway.

Retrieves information about a token vault.

Contains the KMS configuration for a resource.

Retrieves information about a token vault.

Retrieves information about a workload identity.

Retrieves information about a workload identity.

Summary information about a harness.

Lists all endpoints for a specific Amazon Secure Agent.

Lists all endpoints for a specific Amazon Secure Agent.

Lists all versions of a specific Amazon Secure Agent.

Lists all versions of a specific Amazon Secure Agent.

Lists all Amazon Secure Agents in your account.

Lists all Amazon Secure Agents in your account.

Lists all API key credential providers in your account.

Lists all API key credential providers in your account.

Lists all browser profiles in your account.

Lists all browser profiles in your account.

Lists all custom browsers in your account.

Lists all custom browsers in your account.

Lists all custom code interpreters in your account.

Lists all custom code interpreters in your account.

A filter for listing configuration bundle versions.

Lists all versions of a configuration bundle, with optional filtering by branch name or creation source.

Lists all versions of a configuration bundle, with optional filtering by branch name or creation source.

Lists all configuration bundles in the account.

Lists all configuration bundles in the account.

Lists all available evaluators, including both builtin evaluators provided by the service and custom evaluators created by the user.

Lists all available evaluators, including both builtin evaluators provided by the service and custom evaluators created by the user.

Lists all rules for a gateway.

Lists all rules for a gateway.

Lists all targets for a specific gateway.

Contains summary information about a gateway target. A target represents an endpoint that the gateway can connect to.

Lists all targets for a specific gateway.

Lists all gateways in the account.

Lists all gateways in the account.

Operation to list Harnesses.

Operation to list Harnesses.

Lists the available Amazon Bedrock AgentCore Memory resources in the current Amazon Web Services Region.

Contains summary information about a memory resource.

Lists the available Amazon Bedrock AgentCore Memory resources in the current Amazon Web Services Region.

Lists all OAuth2 credential providers in your account.

Contains information about an OAuth2 credential provider.

Lists all OAuth2 credential providers in your account.

Lists all online evaluation configurations in the account, providing summary information about each configuration's status and settings.

The summary information about an online evaluation configuration, including basic metadata and execution status.

Lists all online evaluation configurations in the account, providing summary information about each configuration's status and settings.

Lists all payment connectors for a specified payment manager.

Contains summary information about a payment connector.

Lists all payment connectors for a specified payment manager.

Lists all payment credential providers in the account.

Contains summary information about a payment credential provider.

Lists all payment credential providers in the account.

Lists all payment managers in the account.

Contains summary information about a payment manager.

Lists all payment managers in the account.

Retrieves a list of policies within the AgentCore Policy engine. This operation supports pagination and filtering to help administrators manage and discover policies across policy engines. Results can be filtered by policy engine or resource associations.

Represents a complete policy resource within the AgentCore Policy system. Policies are ARN-able resources that contain Cedar policy statements and associated metadata for controlling agent behavior and access decisions. Each policy belongs to a policy engine and defines fine-grained authorization rules that are evaluated in real-time as agents interact with tools through Gateway. Policies use the Cedar policy language to specify who (principals based on OAuth claims like username, role, or scope) can perform what actions (tool calls) on which resources (Gateways), with optional conditions for attribute-based access control. Multiple policies can apply to a single request, with Cedar's forbid-wins semantics ensuring that security restrictions are never accidentally overridden.

Retrieves a list of policies within the AgentCore Policy engine. This operation supports pagination and filtering to help administrators manage and discover policies across policy engines. Results can be filtered by policy engine or resource associations.

Retrieves a paginated list of metadata-only policy engine summaries without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps for each policy engine, but does not include descriptions or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Represents a metadata-only summary of a policy engine resource. This structure contains resource identifiers, status, and timestamps without customer-encrypted fields such as description or status reasons. Policy engine summaries are returned by operations that do not require access to the customer's KMS key.

Retrieves a paginated list of metadata-only policy engine summaries without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps for each policy engine, but does not include descriptions or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves a list of policy engines within the AgentCore Policy system. This operation supports pagination to help administrators discover and manage policy engines across their account. Each policy engine serves as a container for related policies.

Represents a policy engine resource within the AgentCore Policy system. Policy engines serve as containers for grouping related policies and provide the execution context for policy evaluation and management. Each policy engine can be associated with one Gateway (one engine per Gateway), where it intercepts all agent tool calls and evaluates them against the contained policies before allowing tools to execute. The policy engine maintains the Cedar schema generated from the Gateway's tool manifest, ensuring that policies are validated against the actual tools and parameters available. Policy engines support two enforcement modes that can be configured when associating with a Gateway: log-only mode for testing (evaluates decisions without blocking) and enforce mode for production (actively allows or denies based on policy evaluation).

Retrieves a list of policy engines within the AgentCore Policy system. This operation supports pagination to help administrators discover and manage policy engines across their account. Each policy engine serves as a container for related policies.

Retrieves a list of generated policy assets from a policy generation request within the AgentCore Policy system. This operation returns the actual Cedar policies and related artifacts produced by the AI-powered policy generation process, allowing users to review and select from multiple generated policy options.

Represents a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Cedar policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.

Retrieves a list of generated policy assets from a policy generation request within the AgentCore Policy system. This operation returns the actual Cedar policies and related artifacts produced by the AI-powered policy generation process, allowing users to review and select from multiple generated policy options.

Retrieves a paginated list of metadata-only policy generation summaries within a policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings for each policy generation, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Represents a metadata-only summary of a policy generation resource. This structure contains resource identifiers, status, timestamps, and findings without customer-encrypted fields such as status reasons. Policy generation summaries are returned by operations that do not require access to the customer's KMS key.

Retrieves a paginated list of metadata-only policy generation summaries within a policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings for each policy generation, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Retrieves a list of policy generation requests within the AgentCore Policy system. This operation supports pagination and filtering to help track and manage AI-powered policy generation operations.

Represents a policy generation request within the AgentCore Policy system. Tracks the AI-powered conversion of natural language descriptions into Cedar policy statements, enabling users to author policies by describing authorization requirements in plain English. The generation process analyzes the natural language input along with the Gateway's tool context and Cedar schema to produce one or more validated policy options. Each generation request tracks the status of the conversion process and maintains findings about the generated policies, including validation results and potential issues. Generated policy assets remain available for one week after successful generation, allowing time to review and create policies from the generated options.

Retrieves a list of policy generation requests within the AgentCore Policy system. This operation supports pagination and filtering to help track and manage AI-powered policy generation operations.

Retrieves a paginated list of metadata-only policy summaries within a policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps for each policy, but does not include policy definitions, descriptions, or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Represents a metadata-only summary of a policy resource. This structure contains resource identifiers, status, and timestamps without customer-encrypted fields such as definition, description, or status reasons. Policy summaries are returned by operations that do not require access to the customer's KMS key.

Retrieves a paginated list of metadata-only policy summaries within a policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps for each policy, but does not include policy definitions, descriptions, or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Lists all registries in the account. You can optionally filter results by status using the status parameter, or by authorizer type using the authorizerType parameter.

Contains summary information about a registry.

Lists all registries in the account. You can optionally filter results by status using the status parameter, or by authorizer type using the authorizerType parameter.

Lists registry records within a registry. You can optionally filter results using the name, status, and descriptorType parameters. When multiple filters are specified, they are combined using AND logic.

Contains summary information about a registry record.

Lists registry records within a registry. You can optionally filter results using the name, status, and descriptorType parameters. When multiple filters are specified, they are combined using AND logic.

Lists the tags associated with the specified resource. This feature is currently available only for AgentCore Runtime, Browser, Browser Profile, Code Interpreter tool, and Gateway.

Lists the tags associated with the specified resource. This feature is currently available only for AgentCore Runtime, Browser, Browser Profile, Code Interpreter tool, and Gateway.

Lists all workload identities in your account.

Contains information about a workload identity.

Lists all workload identities in your account.

Contains information for modifying a consolidation configuration.

Contains information for modifying an extraction configuration.

Sourcemodule ModifyInvocationConfigurationInputPayloadDeliveryBucketNameString = Awso_bedrock_agentcore_control.Values.ModifyInvocationConfigurationInputPayloadDeliveryBucketNameString

The configuration for updating invocation settings.

Sourcemodule ModifySelfManagedConfigurationHistoricalContextWindowSizeInteger = Awso_bedrock_agentcore_control.Values.ModifySelfManagedConfigurationHistoricalContextWindowSizeInteger

The configuration for updating the self-managed memory strategy.

Contains information for modifying a reflection configuration.

Contains information for modifying a strategy configuration.

Input for modifying a memory strategy.

Contains information for modifying memory strategies.

Creates or updates a resource-based policy for a resource with the specified resourceArn. This feature is currently available only for AgentCore Runtime and Gateway.

Creates or updates a resource-based policy for a resource with the specified resourceArn. This feature is currently available only for AgentCore Runtime and Gateway.

Sets the customer master key (CMK) for a token vault.

Sets the customer master key (CMK) for a token vault.

Initiates the AI-powered generation of Cedar policies from natural language descriptions within the AgentCore Policy system. This feature enables both technical and non-technical users to create policies by describing their authorization requirements in plain English, which is then automatically translated into formal Cedar policy statements. The generation process analyzes the natural language input along with the Gateway's tool context to produce validated policy options. Generated policy assets are automatically deleted after 7 days, so you should review and create policies from the generated assets within this timeframe. Once created, policies are permanent and not subject to this expiration. Generated policies should be reviewed and tested in log-only mode before deploying to production. Use this when you want to describe policy intent naturally rather than learning Cedar syntax, though generated policies may require refinement for complex scenarios.

Initiates the AI-powered generation of Cedar policies from natural language descriptions within the AgentCore Policy system. This feature enables both technical and non-technical users to create policies by describing their authorization requirements in plain English, which is then automatically translated into formal Cedar policy statements. The generation process analyzes the natural language input along with the Gateway's tool context to produce validated policy options. Generated policy assets are automatically deleted after 7 days, so you should review and create policies from the generated assets within this timeframe. Once created, policies are permanent and not subject to this expiration. Generated policies should be reviewed and tested in log-only mode before deploying to production. Use this when you want to describe policy intent naturally rather than learning Cedar syntax, though generated policies may require refinement for complex scenarios.

Submits a registry record for approval. This transitions the record from DRAFT status to PENDING_APPROVAL status. If the registry has auto-approval enabled, the record is automatically approved.

Submits a registry record for approval. This transitions the record from DRAFT status to PENDING_APPROVAL status. If the registry has auto-approval enabled, the record is automatically approved.

Synchronizes the gateway targets by fetching the latest tool definitions from the target endpoints. You cannot synchronize a target that is in a pending authorization state (CREATE_PENDING_AUTH, UPDATE_PENDING_AUTH, or SYNCHRONIZE_PENDING_AUTH). Wait for the authorization to complete or fail before synchronizing. You cannot synchronize a target that has a static tool schema (mcpToolSchema) configured. Remove the static schema through an UpdateGatewayTarget call to enable dynamic tool synchronization.

Synchronizes the gateway targets by fetching the latest tool definitions from the target endpoints. You cannot synchronize a target that is in a pending authorization state (CREATE_PENDING_AUTH, UPDATE_PENDING_AUTH, or SYNCHRONIZE_PENDING_AUTH). Wait for the authorization to complete or fail before synchronizing. You cannot synchronize a target that has a static tool schema (mcpToolSchema) configured. Remove the static schema through an UpdateGatewayTarget call to enable dynamic tool synchronization.

Associates the specified tags to a resource with the specified resourceArn. If existing tags on a resource are not specified in the request parameters, they are not changed. When a resource is deleted, the tags associated with that resource are also deleted. This feature is currently available only for AgentCore Runtime, Browser, Browser Profile, Code Interpreter tool, and Gateway.

Associates the specified tags to a resource with the specified resourceArn. If existing tags on a resource are not specified in the request parameters, they are not changed. When a resource is deleted, the tags associated with that resource are also deleted. This feature is currently available only for AgentCore Runtime, Browser, Browser Profile, Code Interpreter tool, and Gateway.

Removes the specified tags from the specified resource. This feature is currently available only for AgentCore Runtime, Browser, Browser Profile, Code Interpreter tool, and Gateway.

Removes the specified tags from the specified resource. This feature is currently available only for AgentCore Runtime, Browser, Browser Profile, Code Interpreter tool, and Gateway.

Updates an existing Amazon Bedrock AgentCore Runtime endpoint.

Updates an existing Amazon Bedrock AgentCore Runtime endpoint.

Updates an existing Amazon Secure Agent.

Updates an existing Amazon Secure Agent.

Updates an existing API key credential provider.

Updates an existing API key credential provider.

Updates a configuration bundle by creating a new version with the specified changes. Each update creates a new version in the version history.

Updates a configuration bundle by creating a new version with the specified changes. Each update creates a new version in the version history.

Updates a custom evaluator's configuration, description, or evaluation level. Built-in evaluators cannot be updated. The evaluator must not be locked for modification.

Updates a custom evaluator's configuration, description, or evaluation level. Built-in evaluators cannot be updated. The evaluator must not be locked for modification.

Updates an existing gateway.

Updates an existing gateway.

Updates a gateway rule's priority, conditions, actions, or description.

Create response excludes updatedAt (redundant on create). Get/Update responses include it via their own output structures.

Updates an existing gateway target. You cannot update a target that is in a pending authorization state (CREATE_PENDING_AUTH, UPDATE_PENDING_AUTH, or SYNCHRONIZE_PENDING_AUTH). Wait for the authorization to complete or fail before updating the target.

Updates an existing gateway target. You cannot update a target that is in a pending authorization state (CREATE_PENDING_AUTH, UPDATE_PENDING_AUTH, or SYNCHRONIZE_PENDING_AUTH). Wait for the authorization to complete or fail before updating the target.

Wrapper for updating the memory configuration.

Wrapper for updating the environment artifact configuration.

Wrapper for updating an optional AuthorizerConfiguration field with PATCH semantics. When present in an update request, the authorizer configuration is replaced with optionalValue. When absent, the authorizer configuration is left unchanged. To unset, include the wrapper with optionalValue not specified.

Operation to update a Harness.

Operation to update a Harness.

Update an Amazon Bedrock AgentCore Memory resource memory.

Update an Amazon Bedrock AgentCore Memory resource memory.

Updates an existing OAuth2 credential provider.

Updates an existing OAuth2 credential provider.

Updates an online evaluation configuration's settings, including rules, data sources, evaluators, and execution status. Changes take effect immediately for ongoing evaluations.

Updates an online evaluation configuration's settings, including rules, data sources, evaluators, and execution status. Changes take effect immediately for ongoing evaluations.

Updates an existing payment connector. This operation uses PATCH semantics, so you only need to specify the fields you want to change.

Updates an existing payment connector. This operation uses PATCH semantics, so you only need to specify the fields you want to change.

Updates an existing payment credential provider with new authentication credentials.

Updates an existing payment credential provider with new authentication credentials.

Updates an existing payment manager. This operation uses PATCH semantics, so you only need to specify the fields you want to change.

Updates an existing payment manager. This operation uses PATCH semantics, so you only need to specify the fields you want to change.

Wrapper for updating an optional Description field with PATCH semantics. When present in an update request, the description is replaced with optionalValue. When absent, the description is left unchanged. To unset the description, include the wrapper with optionalValue not specified.

Updates an existing policy engine within the AgentCore Policy system. This operation allows modification of the policy engine description while maintaining its identity. This is an asynchronous operation. Use the GetPolicyEngine operation to poll the status field to track completion.

Updates an existing policy engine within the AgentCore Policy system. This operation allows modification of the policy engine description while maintaining its identity. This is an asynchronous operation. Use the GetPolicyEngine operation to poll the status field to track completion.

Updates an existing policy within the AgentCore Policy system. This operation allows modification of the policy description and definition while maintaining the policy's identity. The updated policy is validated against the Cedar schema before being applied. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.

Updates an existing policy within the AgentCore Policy system. This operation allows modification of the policy description and definition while maintaining the policy's identity. The updated policy is validated against the Cedar schema before being applied. This is an asynchronous operation. Use the GetPolicy operation to poll the status field to track completion.

Wrapper for updating the synchronization type with PATCH semantics. Must be matched with UpdatedSynchronizationConfiguration.

Wrapper for updating the synchronization configuration with PATCH semantics. Must be matched with UpdatedSynchronizationType.

Wrapper for updating a tools definition with PATCH semantics. When present, the tools definition is replaced with the provided value. When absent, the tools definition is left unchanged. To unset, include the wrapper with the value set to null.

Wrapper for updating a server definition with PATCH semantics. When present, the server definition is replaced with the provided value. When absent, the server definition is left unchanged. To unset, include the wrapper with the value set to null.

Individual MCP descriptor fields that can be updated independently.

Wrapper for updating an MCP descriptor with PATCH semantics. When present with a value, individual MCP fields can be updated independently. When present with a null value, the entire MCP descriptor is unset. When absent, the MCP descriptor is left unchanged.

Wrapper for updating a custom descriptor with PATCH semantics. When present, the custom descriptor is replaced with the provided value. When absent, the custom descriptor is left unchanged. To unset, include the wrapper with the value set to null.

Wrapper for updating a skill markdown definition with PATCH semantics.

Wrapper for updating a skill definition with PATCH semantics.

Individual agent skills descriptor fields that can be updated independently.

Wrapper for updating an agent skills descriptor with PATCH semantics. When present with a value, individual fields can be updated independently. When present with a null value, the entire agent skills descriptor is unset. When absent, the agent skills descriptor is left unchanged.

Wrapper for updating an A2A descriptor with PATCH semantics. When present, the A2A descriptor is replaced with the provided value. When absent, the A2A descriptor is left unchanged. To unset, include the wrapper with the value set to null.

Contains per-descriptor-type wrappers for updating descriptors. Each descriptor type can be updated independently.

Wrapper for updating an optional descriptors field with PATCH semantics. When present with a value, individual descriptors can be updated. When present with a null value, all descriptors are unset. When absent, descriptors are left unchanged.

Updates an existing registry record. This operation uses PATCH semantics, so you only need to specify the fields you want to change. The update is processed asynchronously and returns HTTP 202 Accepted.

Updates an existing registry record. This operation uses PATCH semantics, so you only need to specify the fields you want to change. The update is processed asynchronously and returns HTTP 202 Accepted.

Updates the status of a registry record. Use this operation to approve, reject, or deprecate a registry record.

Updates the status of a registry record. Use this operation to approve, reject, or deprecate a registry record.

Wrapper for updating an optional approval configuration field with PATCH semantics. When present in an update request, the approval configuration is replaced with the provided value. When absent, the approval configuration is left unchanged.

Updates an existing registry. This operation uses PATCH semantics, so you only need to specify the fields you want to change.

Updates an existing registry. This operation uses PATCH semantics, so you only need to specify the fields you want to change.

Updates an existing workload identity.

Updates an existing workload identity.

Sourcemodule Cli : sig ... end