AWS API Changes

2025/09/19 - Amazon Bedrock Agent Core Control Plane Fronting Layer - 3 new8 updated api methods

Changes Add tagging and VPC support to AgentCore Runtime, Code Interpreter, and Browser resources. Add support for configuring request headers in Runtime. Fix AgentCore Runtime shape names.

TagResource (new)

Link ¶

Associates the specified tags to a resource with the specified resourceArn. If existing tags on a resource are not specified in the request parameters, they are not changed. When a resource is deleted, the tags associated with that resource are also deleted.

See also: AWS API Documentation

Request Syntax

client.tag_resource(
    resourceArn='string',
    tags={
        'string': 'string'
    }
)

type resourceArn:

string

param resourceArn:

[REQUIRED]

The Amazon Resource Name (ARN) of the resource that you want to tag.

type tags:

dict

param tags:

[REQUIRED]

The tags to add to the resource. A tag is a key-value pair.

(string) --
- (string) --

rtype:

dict

returns:

Response Syntax

{}

Response Structure

(dict) --

UntagResource (new)

Link ¶

Removes the specified tags from the specified resource.

See also: AWS API Documentation

Request Syntax

client.untag_resource(
    resourceArn='string',
    tagKeys=[
        'string',
    ]
)

type resourceArn:

string

param resourceArn:

[REQUIRED]

The Amazon Resource Name (ARN) of the resource that you want to untag.

type tagKeys:

list

param tagKeys:

[REQUIRED]

The tag keys of the tags to remove from the resource.

(string) --

rtype:

dict

returns:

Response Syntax

{}

Response Structure

(dict) --

ListTagsForResource (new)

Link ¶

Lists the tags associated with the specified resource.

See also: AWS API Documentation

Request Syntax

client.list_tags_for_resource(
    resourceArn='string'
)

type resourceArn:

string

param resourceArn:

[REQUIRED]

The Amazon Resource Name (ARN) of the resource for which you want to list tags.

rtype:

dict

returns:

Response Syntax

{
    'tags': {
        'string': 'string'
    }
}

Response Structure

(dict) --
- tags (dict) --
  
  The tags associated with the resource.
  - (string) --
    - (string) --

CreateAgentRuntime (updated)

Link ¶
Changes (request)

{'networkConfiguration': {'networkMode': {'VPC'},
                          'networkModeConfig': {'securityGroups': ['string'],
                                                'subnets': ['string']}},
 'requestHeaderConfiguration': {'requestHeaderAllowlist': ['string']},
 'tags': {'string': 'string'}}

Creates an Amazon Bedrock AgentCore Runtime.

See also: AWS API Documentation

Request Syntax

client.create_agent_runtime(
    agentRuntimeName='string',
    description='string',
    agentRuntimeArtifact={
        'containerConfiguration': {
            'containerUri': 'string'
        }
    },
    roleArn='string',
    networkConfiguration={
        'networkMode': 'PUBLIC'|'VPC',
        'networkModeConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    protocolConfiguration={
        'serverProtocol': 'MCP'|'HTTP'
    },
    clientToken='string',
    environmentVariables={
        'string': 'string'
    },
    authorizerConfiguration={
        'customJWTAuthorizer': {
            'discoveryUrl': 'string',
            'allowedAudience': [
                'string',
            ],
            'allowedClients': [
                'string',
            ]
        }
    },
    requestHeaderConfiguration={
        'requestHeaderAllowlist': [
            'string',
        ]
    },
    tags={
        'string': 'string'
    }
)

type agentRuntimeName:

string

param agentRuntimeName:

[REQUIRED]

The name of the AgentCore Runtime.

type description:

string

param description:

The description of the AgentCore Runtime.

type agentRuntimeArtifact:

dict

param agentRuntimeArtifact:

[REQUIRED]

The artifact of the AgentCore Runtime.

containerConfiguration (dict) --

The container configuration for the agent artifact.
- containerUri (string) -- [REQUIRED]
  
  The ECR URI of the container.

type roleArn:

string

param roleArn:

[REQUIRED]

The IAM role ARN that provides permissions for the AgentCore Runtime.

type networkConfiguration:

dict

param networkConfiguration:

[REQUIRED]

The network configuration for the AgentCore Runtime.

networkMode (string) -- [REQUIRED]

The network mode for the AgentCore Runtime.
networkModeConfig (dict) --

The network mode configuration for the AgentCore Runtime.
- securityGroups (list) -- [REQUIRED]
  
  The security groups associated with the VPC configuration.
  - (string) --
- subnets (list) -- [REQUIRED]
  
  The subnets associated with the VPC configuration.
  - (string) --

type protocolConfiguration:

dict

param protocolConfiguration:

The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.

serverProtocol (string) -- [REQUIRED]

The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.

type clientToken:

string

param clientToken:

A unique, case-sensitive identifier to ensure idempotency of the request.

This field is autopopulated if not provided.

type environmentVariables:

dict

param environmentVariables:

Environment variables to set in the AgentCore Runtime environment.

(string) --
- (string) --

type authorizerConfiguration:

dict

param authorizerConfiguration:

The authorizer configuration for the AgentCore Runtime.

customJWTAuthorizer (dict) --

The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
- discoveryUrl (string) -- [REQUIRED]
  
  This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
- allowedAudience (list) --
  
  Represents individual audience values that are validated in the incoming JWT token validation process.
  - (string) --
- allowedClients (list) --
  
  Represents individual client IDs that are validated in the incoming JWT token validation process.
  - (string) --

type requestHeaderConfiguration:

dict

param requestHeaderConfiguration:

Configuration for HTTP request headers that will be passed through to the runtime.

requestHeaderAllowlist (list) --

A list of HTTP request headers that are allowed to be passed through to the runtime.
- (string) --

type tags:

dict

param tags:

A map of tag keys and values to assign to the agent runtime. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.

(string) --
- (string) --

rtype:

dict

returns:

Response Syntax

{
    'agentRuntimeArn': 'string',
    'workloadIdentityDetails': {
        'workloadIdentityArn': 'string'
    },
    'agentRuntimeId': 'string',
    'agentRuntimeVersion': 'string',
    'createdAt': datetime(2015, 1, 1),
    'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING'
}

Response Structure

(dict) --
- agentRuntimeArn (string) --
  
  The Amazon Resource Name (ARN) of the AgentCore Runtime.
- workloadIdentityDetails (dict) --
  
  The workload identity details for the AgentCore Runtime.
  - workloadIdentityArn (string) --
    
    The ARN associated with the workload identity.
- agentRuntimeId (string) --
  
  The unique identifier of the AgentCore Runtime.
- agentRuntimeVersion (string) --
  
  The version of the AgentCore Runtime.
- createdAt (datetime) --
  
  The timestamp when the AgentCore Runtime was created.
- status (string) --
  
  The current status of the AgentCore Runtime.

CreateAgentRuntimeEndpoint (updated)

Link ¶
Changes (request)

{'tags': {'string': 'string'}}

Creates an AgentCore Runtime endpoint.

See also: AWS API Documentation

Request Syntax

client.create_agent_runtime_endpoint(
    agentRuntimeId='string',
    name='string',
    agentRuntimeVersion='string',
    description='string',
    clientToken='string',
    tags={
        'string': 'string'
    }
)

type agentRuntimeId:

string

param agentRuntimeId:

[REQUIRED]

The unique identifier of the AgentCore Runtime to create an endpoint for.

type name:

string

param name:

[REQUIRED]

The name of the AgentCore Runtime endpoint.

type agentRuntimeVersion:

string

param agentRuntimeVersion:

The version of the AgentCore Runtime to use for the endpoint.

type description:

string

param description:

The description of the AgentCore Runtime endpoint.

type clientToken:

string

param clientToken:

A unique, case-sensitive identifier to ensure idempotency of the request.

This field is autopopulated if not provided.

type tags:

dict

param tags:

A map of tag keys and values to assign to the agent runtime endpoint. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.

(string) --
- (string) --

rtype:

dict

returns:

Response Syntax

{
    'targetVersion': 'string',
    'agentRuntimeEndpointArn': 'string',
    'agentRuntimeArn': 'string',
    'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING',
    'createdAt': datetime(2015, 1, 1)
}

Response Structure

(dict) --
- targetVersion (string) --
  
  The target version of the AgentCore Runtime for the endpoint.
- agentRuntimeEndpointArn (string) --
  
  The Amazon Resource Name (ARN) of the AgentCore Runtime endpoint.
- agentRuntimeArn (string) --
  
  The Amazon Resource Name (ARN) of the AgentCore Runtime.
- status (string) --
  
  The current status of the AgentCore Runtime endpoint.
- createdAt (datetime) --
  
  The timestamp when the AgentCore Runtime endpoint was created.

CreateBrowser (updated)

Link ¶
Changes (request)

{'networkConfiguration': {'networkMode': {'VPC'},
                          'vpcConfig': {'securityGroups': ['string'],
                                        'subnets': ['string']}},
 'tags': {'string': 'string'}}

Creates a custom browser.

See also: AWS API Documentation

Request Syntax

client.create_browser(
    name='string',
    description='string',
    executionRoleArn='string',
    networkConfiguration={
        'networkMode': 'PUBLIC'|'VPC',
        'vpcConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    recording={
        'enabled': True|False,
        's3Location': {
            'bucket': 'string',
            'prefix': 'string'
        }
    },
    clientToken='string',
    tags={
        'string': 'string'
    }
)

type name:

string

param name:

[REQUIRED]

The name of the browser. The name must be unique within your account.

type description:

string

param description:

The description of the browser.

type executionRoleArn:

string

param executionRoleArn:

The Amazon Resource Name (ARN) of the IAM role that provides permissions for the browser to access Amazon Web Services services.

type networkConfiguration:

dict

param networkConfiguration:

[REQUIRED]

The network configuration for the browser. This configuration specifies the network mode for the browser.

networkMode (string) -- [REQUIRED]

The network mode for the browser. This field specifies how the browser connects to the network.
vpcConfig (dict) --

VpcConfig for the Agent.
- securityGroups (list) -- [REQUIRED]
  
  The security groups associated with the VPC configuration.
  - (string) --
- subnets (list) -- [REQUIRED]
  
  The subnets associated with the VPC configuration.
  - (string) --

type recording:

dict

param recording:

The recording configuration for the browser. When enabled, browser sessions are recorded and stored in the specified Amazon S3 location.

enabled (boolean) --

Indicates whether recording is enabled for the browser. When set to true, browser sessions are recorded.
s3Location (dict) --

The Amazon S3 location where browser recordings are stored. This location contains the recorded browser sessions.
- bucket (string) -- [REQUIRED]
  
  The name of the Amazon S3 bucket. This bucket contains the stored data.
- prefix (string) -- [REQUIRED]
  
  The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.

type clientToken:

string

param clientToken:

A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request but does not return an error.

This field is autopopulated if not provided.

type tags:

dict

param tags:

A map of tag keys and values to assign to the browser. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.

(string) --
- (string) --

rtype:

dict

returns:

Response Syntax

{
    'browserId': 'string',
    'browserArn': 'string',
    'createdAt': datetime(2015, 1, 1),
    'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED'
}

Response Structure

(dict) --
- browserId (string) --
  
  The unique identifier of the created browser.
- browserArn (string) --
  
  The Amazon Resource Name (ARN) of the created browser.
- createdAt (datetime) --
  
  The timestamp when the browser was created.
- status (string) --
  
  The current status of the browser.

CreateCodeInterpreter (updated)

Link ¶
Changes (request)

{'networkConfiguration': {'networkMode': {'VPC'},
                          'vpcConfig': {'securityGroups': ['string'],
                                        'subnets': ['string']}},
 'tags': {'string': 'string'}}

Creates a custom code interpreter.

See also: AWS API Documentation

Request Syntax

client.create_code_interpreter(
    name='string',
    description='string',
    executionRoleArn='string',
    networkConfiguration={
        'networkMode': 'PUBLIC'|'SANDBOX'|'VPC',
        'vpcConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    clientToken='string',
    tags={
        'string': 'string'
    }
)

type name:

string

param name:

[REQUIRED]

The name of the code interpreter. The name must be unique within your account.

type description:

string

param description:

The description of the code interpreter.

type executionRoleArn:

string

param executionRoleArn:

The Amazon Resource Name (ARN) of the IAM role that provides permissions for the code interpreter to access Amazon Web Services services.

type networkConfiguration:

dict

param networkConfiguration:

[REQUIRED]

The network configuration for the code interpreter. This configuration specifies the network mode for the code interpreter.

networkMode (string) -- [REQUIRED]

The network mode for the code interpreter. This field specifies how the code interpreter connects to the network.
vpcConfig (dict) --

VpcConfig for the Agent.
- securityGroups (list) -- [REQUIRED]
  
  The security groups associated with the VPC configuration.
  - (string) --
- subnets (list) -- [REQUIRED]
  
  The subnets associated with the VPC configuration.
  - (string) --

type clientToken:

string

param clientToken:

This field is autopopulated if not provided.

type tags:

dict

param tags:

A map of tag keys and values to assign to the code interpreter. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.

(string) --
- (string) --

rtype:

dict

returns:

Response Syntax

{
    'codeInterpreterId': 'string',
    'codeInterpreterArn': 'string',
    'createdAt': datetime(2015, 1, 1),
    'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED'
}

Response Structure

(dict) --
- codeInterpreterId (string) --
  
  The unique identifier of the created code interpreter.
- codeInterpreterArn (string) --
  
  The Amazon Resource Name (ARN) of the created code interpreter.
- createdAt (datetime) --
  
  The timestamp when the code interpreter was created.
- status (string) --
  
  The current status of the code interpreter.

GetAgentRuntime (updated)

Link ¶
Changes (response)

{'networkConfiguration': {'networkMode': {'VPC'},
                          'networkModeConfig': {'securityGroups': ['string'],
                                                'subnets': ['string']}},
 'requestHeaderConfiguration': {'requestHeaderAllowlist': ['string']}}

Gets an Amazon Bedrock AgentCore Runtime.

See also: AWS API Documentation

Request Syntax

client.get_agent_runtime(
    agentRuntimeId='string',
    agentRuntimeVersion='string'
)

type agentRuntimeId:

string

param agentRuntimeId:

[REQUIRED]

The unique identifier of the AgentCore Runtime to retrieve.

type agentRuntimeVersion:

string

param agentRuntimeVersion:

The version of the AgentCore Runtime to retrieve.

rtype:

dict

returns:

Response Syntax

{
    'agentRuntimeArn': 'string',
    'workloadIdentityDetails': {
        'workloadIdentityArn': 'string'
    },
    'agentRuntimeName': 'string',
    'description': 'string',
    'agentRuntimeId': 'string',
    'agentRuntimeVersion': 'string',
    'createdAt': datetime(2015, 1, 1),
    'lastUpdatedAt': datetime(2015, 1, 1),
    'roleArn': 'string',
    'agentRuntimeArtifact': {
        'containerConfiguration': {
            'containerUri': 'string'
        }
    },
    'networkConfiguration': {
        'networkMode': 'PUBLIC'|'VPC',
        'networkModeConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    'protocolConfiguration': {
        'serverProtocol': 'MCP'|'HTTP'
    },
    'environmentVariables': {
        'string': 'string'
    },
    'authorizerConfiguration': {
        'customJWTAuthorizer': {
            'discoveryUrl': 'string',
            'allowedAudience': [
                'string',
            ],
            'allowedClients': [
                'string',
            ]
        }
    },
    'requestHeaderConfiguration': {
        'requestHeaderAllowlist': [
            'string',
        ]
    },
    'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING'
}

Response Structure

(dict) --
- agentRuntimeArn (string) --
  
  The Amazon Resource Name (ARN) of the AgentCore Runtime.
- workloadIdentityDetails (dict) --
  
  The workload identity details for the AgentCore Runtime.
  - workloadIdentityArn (string) --
    
    The ARN associated with the workload identity.
- agentRuntimeName (string) --
  
  The name of the AgentCore Runtime.
- description (string) --
  
  The description of the AgentCore Runtime.
- agentRuntimeId (string) --
  
  The unique identifier of the AgentCore Runtime.
- agentRuntimeVersion (string) --
  
  The version of the AgentCore Runtime.
- createdAt (datetime) --
  
  The timestamp when the AgentCore Runtime was created.
- lastUpdatedAt (datetime) --
  
  The timestamp when the AgentCore Runtime was last updated.
- roleArn (string) --
  
  The IAM role ARN that provides permissions for the AgentCore Runtime.
- agentRuntimeArtifact (dict) --
  
  The artifact of the AgentCore Runtime.
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys will be set: containerConfiguration. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
```
'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
```
  - containerConfiguration (dict) --
    
    The container configuration for the agent artifact.
    - containerUri (string) --
      
      The ECR URI of the container.
- networkConfiguration (dict) --
  
  The network configuration for the AgentCore Runtime.
  - networkMode (string) --
    
    The network mode for the AgentCore Runtime.
  - networkModeConfig (dict) --
    
    The network mode configuration for the AgentCore Runtime.
    - securityGroups (list) --
      
      The security groups associated with the VPC configuration.
      - (string) --
    - subnets (list) --
      
      The subnets associated with the VPC configuration.
      - (string) --
- protocolConfiguration (dict) --
  
  The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
  - serverProtocol (string) --
    
    The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
- environmentVariables (dict) --
  
  Environment variables set in the AgentCore Runtime environment.
  - (string) --
    - (string) --
- authorizerConfiguration (dict) --
  
  The authorizer configuration for the AgentCore Runtime.
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys will be set: customJWTAuthorizer. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
```
'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
```
  - customJWTAuthorizer (dict) --
    
    The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
    - discoveryUrl (string) --
      
      This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
    - allowedAudience (list) --
      
      Represents individual audience values that are validated in the incoming JWT token validation process.
      - (string) --
    - allowedClients (list) --
      
      Represents individual client IDs that are validated in the incoming JWT token validation process.
      - (string) --
- requestHeaderConfiguration (dict) --
  
  Configuration for HTTP request headers that will be passed through to the runtime.
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys will be set: requestHeaderAllowlist. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
```
'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
```
  - requestHeaderAllowlist (list) --
    
    A list of HTTP request headers that are allowed to be passed through to the runtime.
    - (string) --
- status (string) --
  
  The current status of the AgentCore Runtime.

GetBrowser (updated)

Link ¶
Changes (response)

{'failureReason': 'string',
 'networkConfiguration': {'networkMode': {'VPC'},
                          'vpcConfig': {'securityGroups': ['string'],
                                        'subnets': ['string']}}}

Gets information about a custom browser.

See also: AWS API Documentation

Request Syntax

client.get_browser(
    browserId='string'
)

type browserId:

string

param browserId:

[REQUIRED]

The unique identifier of the browser to retrieve.

rtype:

dict

returns:

Response Syntax

{
    'browserId': 'string',
    'browserArn': 'string',
    'name': 'string',
    'description': 'string',
    'executionRoleArn': 'string',
    'networkConfiguration': {
        'networkMode': 'PUBLIC'|'VPC',
        'vpcConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    'recording': {
        'enabled': True|False,
        's3Location': {
            'bucket': 'string',
            'prefix': 'string'
        }
    },
    'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED',
    'failureReason': 'string',
    'createdAt': datetime(2015, 1, 1),
    'lastUpdatedAt': datetime(2015, 1, 1)
}

Response Structure

(dict) --
- browserId (string) --
  
  The unique identifier of the browser.
- browserArn (string) --
  
  The Amazon Resource Name (ARN) of the browser.
- name (string) --
  
  The name of the browser.
- description (string) --
  
  The description of the browser.
- executionRoleArn (string) --
  
  The IAM role ARN that provides permissions for the browser.
- networkConfiguration (dict) --
  
  The network configuration for a browser. This structure defines how the browser connects to the network.
  - networkMode (string) --
    
    The network mode for the browser. This field specifies how the browser connects to the network.
  - vpcConfig (dict) --
    
    VpcConfig for the Agent.
    - securityGroups (list) --
      
      The security groups associated with the VPC configuration.
      - (string) --
    - subnets (list) --
      
      The subnets associated with the VPC configuration.
      - (string) --
- recording (dict) --
  
  The recording configuration for a browser. This structure defines how browser sessions are recorded.
  - enabled (boolean) --
    
    Indicates whether recording is enabled for the browser. When set to true, browser sessions are recorded.
  - s3Location (dict) --
    
    The Amazon S3 location where browser recordings are stored. This location contains the recorded browser sessions.
    - bucket (string) --
      
      The name of the Amazon S3 bucket. This bucket contains the stored data.
    - prefix (string) --
      
      The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
- status (string) --
  
  The current status of the browser.
- failureReason (string) --
  
  The reason for failure if the browser is in a failed state.
- createdAt (datetime) --
  
  The timestamp when the browser was created.
- lastUpdatedAt (datetime) --
  
  The timestamp when the browser was last updated.

GetCodeInterpreter (updated)

Link ¶
Changes (response)

{'failureReason': 'string',
 'networkConfiguration': {'networkMode': {'VPC'},
                          'vpcConfig': {'securityGroups': ['string'],
                                        'subnets': ['string']}}}

Gets information about a custom code interpreter.

See also: AWS API Documentation

Request Syntax

client.get_code_interpreter(
    codeInterpreterId='string'
)

type codeInterpreterId:

string

param codeInterpreterId:

[REQUIRED]

The unique identifier of the code interpreter to retrieve.

rtype:

dict

returns:

Response Syntax

{
    'codeInterpreterId': 'string',
    'codeInterpreterArn': 'string',
    'name': 'string',
    'description': 'string',
    'executionRoleArn': 'string',
    'networkConfiguration': {
        'networkMode': 'PUBLIC'|'SANDBOX'|'VPC',
        'vpcConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED',
    'failureReason': 'string',
    'createdAt': datetime(2015, 1, 1),
    'lastUpdatedAt': datetime(2015, 1, 1)
}

Response Structure

(dict) --
- codeInterpreterId (string) --
  
  The unique identifier of the code interpreter.
- codeInterpreterArn (string) --
  
  The Amazon Resource Name (ARN) of the code interpreter.
- name (string) --
  
  The name of the code interpreter.
- description (string) --
  
  The description of the code interpreter.
- executionRoleArn (string) --
  
  The IAM role ARN that provides permissions for the code interpreter.
- networkConfiguration (dict) --
  
  The network configuration for a code interpreter. This structure defines how the code interpreter connects to the network.
  - networkMode (string) --
    
    The network mode for the code interpreter. This field specifies how the code interpreter connects to the network.
  - vpcConfig (dict) --
    
    VpcConfig for the Agent.
    - securityGroups (list) --
      
      The security groups associated with the VPC configuration.
      - (string) --
    - subnets (list) --
      
      The subnets associated with the VPC configuration.
      - (string) --
- status (string) --
  
  The current status of the code interpreter.
- failureReason (string) --
  
  The reason for failure if the code interpreter is in a failed state.
- createdAt (datetime) --
  
  The timestamp when the code interpreter was created.
- lastUpdatedAt (datetime) --
  
  The timestamp when the code interpreter was last updated.

UpdateAgentRuntime (updated)

Link ¶
Changes (request)

{'networkConfiguration': {'networkMode': {'VPC'},
                          'networkModeConfig': {'securityGroups': ['string'],
                                                'subnets': ['string']}},
 'requestHeaderConfiguration': {'requestHeaderAllowlist': ['string']}}

Updates an existing Amazon Secure Agent.

See also: AWS API Documentation

Request Syntax

client.update_agent_runtime(
    agentRuntimeId='string',
    description='string',
    agentRuntimeArtifact={
        'containerConfiguration': {
            'containerUri': 'string'
        }
    },
    roleArn='string',
    networkConfiguration={
        'networkMode': 'PUBLIC'|'VPC',
        'networkModeConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    protocolConfiguration={
        'serverProtocol': 'MCP'|'HTTP'
    },
    clientToken='string',
    environmentVariables={
        'string': 'string'
    },
    authorizerConfiguration={
        'customJWTAuthorizer': {
            'discoveryUrl': 'string',
            'allowedAudience': [
                'string',
            ],
            'allowedClients': [
                'string',
            ]
        }
    },
    requestHeaderConfiguration={
        'requestHeaderAllowlist': [
            'string',
        ]
    }
)

type agentRuntimeId:

string

param agentRuntimeId:

[REQUIRED]

The unique identifier of the AgentCore Runtime to update.

type description:

string

param description:

The updated description of the AgentCore Runtime.

type agentRuntimeArtifact:

dict

param agentRuntimeArtifact:

[REQUIRED]

The updated artifact of the AgentCore Runtime.

containerConfiguration (dict) --

The container configuration for the agent artifact.
- containerUri (string) -- [REQUIRED]
  
  The ECR URI of the container.

type roleArn:

string

param roleArn:

[REQUIRED]

The updated IAM role ARN that provides permissions for the AgentCore Runtime.

type networkConfiguration:

dict

param networkConfiguration:

[REQUIRED]

The updated network configuration for the AgentCore Runtime.

networkMode (string) -- [REQUIRED]

The network mode for the AgentCore Runtime.
networkModeConfig (dict) --

The network mode configuration for the AgentCore Runtime.
- securityGroups (list) -- [REQUIRED]
  
  The security groups associated with the VPC configuration.
  - (string) --
- subnets (list) -- [REQUIRED]
  
  The subnets associated with the VPC configuration.
  - (string) --

type protocolConfiguration:

dict

param protocolConfiguration:

The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.

serverProtocol (string) -- [REQUIRED]

The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.

type clientToken:

string

param clientToken:

A unique, case-sensitive identifier to ensure idempotency of the request.

This field is autopopulated if not provided.

type environmentVariables:

dict

param environmentVariables:

Updated environment variables to set in the AgentCore Runtime environment.

(string) --
- (string) --

type authorizerConfiguration:

dict

param authorizerConfiguration:

The updated authorizer configuration for the AgentCore Runtime.

customJWTAuthorizer (dict) --

The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
- discoveryUrl (string) -- [REQUIRED]
  
  This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
- allowedAudience (list) --
  
  Represents individual audience values that are validated in the incoming JWT token validation process.
  - (string) --
- allowedClients (list) --
  
  Represents individual client IDs that are validated in the incoming JWT token validation process.
  - (string) --

type requestHeaderConfiguration:

dict

param requestHeaderConfiguration:

The updated configuration for HTTP request headers that will be passed through to the runtime.

requestHeaderAllowlist (list) --

A list of HTTP request headers that are allowed to be passed through to the runtime.
- (string) --

rtype:

dict

returns:

Response Syntax

{
    'agentRuntimeArn': 'string',
    'agentRuntimeId': 'string',
    'workloadIdentityDetails': {
        'workloadIdentityArn': 'string'
    },
    'agentRuntimeVersion': 'string',
    'createdAt': datetime(2015, 1, 1),
    'lastUpdatedAt': datetime(2015, 1, 1),
    'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING'
}

Response Structure

(dict) --
- agentRuntimeArn (string) --
  
  The Amazon Resource Name (ARN) of the updated AgentCore Runtime.
- agentRuntimeId (string) --
  
  The unique identifier of the updated AgentCore Runtime.
- workloadIdentityDetails (dict) --
  
  The workload identity details for the updated AgentCore Runtime.
  - workloadIdentityArn (string) --
    
    The ARN associated with the workload identity.
- agentRuntimeVersion (string) --
  
  The version of the updated AgentCore Runtime.
- createdAt (datetime) --
  
  The timestamp when the AgentCore Runtime was created.
- lastUpdatedAt (datetime) --
  
  The timestamp when the AgentCore Runtime was last updated.
- status (string) --
  
  The current status of the updated AgentCore Runtime.