2025/07/16 - Amazon Bedrock Agent Core Control Plane Fronting Layer - 51 new api methods
Changes Initial release of Amazon Bedrock AgentCore SDK including Runtime, Built-In Tools, Memory, Gateway and Identity.
Gets information about an Amazon Secure AgentEndpoint.
See also: AWS API Documentation
Request Syntax
client.get_agent_runtime_endpoint( agentRuntimeId='string', endpointName='string' )
string
[REQUIRED]
The unique identifier of the agent runtime associated with the endpoint.
string
[REQUIRED]
The name of the agent runtime endpoint to retrieve.
dict
Response Syntax
{ 'liveVersion': 'string', 'targetVersion': 'string', 'agentRuntimeEndpointArn': 'string', 'agentRuntimeArn': 'string', 'description': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1), 'failureReason': 'string', 'name': 'string', 'id': 'string' }
Response Structure
(dict) --
liveVersion (string) --
The currently deployed version of the agent runtime on the endpoint.
targetVersion (string) --
The target version of the agent runtime for the endpoint.
agentRuntimeEndpointArn (string) --
The Amazon Resource Name (ARN) of the agent runtime endpoint.
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime.
description (string) --
The description of the agent runtime endpoint.
status (string) --
The current status of the agent runtime endpoint.
createdAt (datetime) --
The timestamp when the agent runtime endpoint was created.
lastUpdatedAt (datetime) --
The timestamp when the agent runtime endpoint was last updated.
failureReason (string) --
The reason for failure if the agent runtime endpoint is in a failed state.
name (string) --
The name of the agent runtime endpoint.
id (string) --
The unique identifier of the agent runtime endpoint.
Lists all OAuth2 credential providers in your account.
See also: AWS API Documentation
Request Syntax
client.list_oauth2_credential_providers( nextToken='string', maxResults=123 )
string
Pagination token.
integer
Maximum number of results to return.
dict
Response Syntax
{ 'credentialProviders': [ { 'name': 'string', 'credentialProviderVendor': 'GoogleOauth2'|'GithubOauth2'|'SlackOauth2'|'SalesforceOauth2'|'MicrosoftOauth2'|'CustomOauth2', 'credentialProviderArn': 'string', 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }, ], 'nextToken': 'string' }
Response Structure
(dict) --
credentialProviders (list) --
The list of OAuth2 credential providers.
(dict) --
Contains information about an OAuth2 credential provider.
name (string) --
The name of the OAuth2 credential provider.
credentialProviderVendor (string) --
The vendor of the OAuth2 credential provider.
credentialProviderArn (string) --
The Amazon Resource Name (ARN) of the OAuth2 credential provider.
createdTime (datetime) --
The timestamp when the OAuth2 credential provider was created.
lastUpdatedTime (datetime) --
The timestamp when the OAuth2 credential provider was last updated.
nextToken (string) --
Pagination token for the next page of results.
Deletes an API key credential provider.
See also: AWS API Documentation
Request Syntax
client.delete_api_key_credential_provider( name='string' )
string
[REQUIRED]
The name of the API key credential provider to delete.
dict
Response Syntax
{}
Response Structure
(dict) --
Gets information about a custom code interpreter.
See also: AWS API Documentation
Request Syntax
client.get_code_interpreter( codeInterpreterId='string' )
string
[REQUIRED]
The unique identifier of the code interpreter to retrieve.
dict
Response Syntax
{ 'codeInterpreterId': 'string', 'codeInterpreterArn': 'string', 'name': 'string', 'description': 'string', 'executionRoleArn': 'string', 'networkConfiguration': { 'networkMode': 'PUBLIC'|'SANDBOX' }, 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1) }
Response Structure
(dict) --
codeInterpreterId (string) --
The unique identifier of the code interpreter.
codeInterpreterArn (string) --
The Amazon Resource Name (ARN) of the code interpreter.
name (string) --
The name of the code interpreter.
description (string) --
The description of the code interpreter.
executionRoleArn (string) --
The IAM role ARN that provides permissions for the code interpreter.
networkConfiguration (dict) --
The network configuration for a code interpreter. This structure defines how the code interpreter connects to the network.
networkMode (string) --
The network mode for the code interpreter. This field specifies how the code interpreter connects to the network.
status (string) --
The current status of the code interpreter.
createdAt (datetime) --
The timestamp when the code interpreter was created.
lastUpdatedAt (datetime) --
The timestamp when the code interpreter was last updated.
Creates an Amazon Secure Agent.
See also: AWS API Documentation
Request Syntax
client.create_agent_runtime( agentRuntimeName='string', description='string', agentRuntimeArtifact={ 'containerConfiguration': { 'containerUri': 'string' } }, roleArn='string', networkConfiguration={ 'networkMode': 'PUBLIC' }, protocolConfiguration={ 'serverProtocol': 'MCP'|'HTTP' }, clientToken='string', environmentVariables={ 'string': 'string' }, authorizerConfiguration={ 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } } )
string
[REQUIRED]
The name of the secure agent.
string
The description of the agent runtime.
dict
[REQUIRED]
The artifact of the agent.
containerConfiguration (dict) --
The container configuration for the agent artifact.
containerUri (string) -- [REQUIRED]
The ECR URI of the container.
string
[REQUIRED]
The IAM role ARN that provides permissions for the agent runtime.
dict
[REQUIRED]
The network configuration for the agent runtime.
networkMode (string) -- [REQUIRED]
The network mode for the agent runtime.
dict
The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
serverProtocol (string) -- [REQUIRED]
The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
string
A unique, case-sensitive identifier to ensure idempotency of the request.
This field is autopopulated if not provided.
dict
Environment variables to set in the agent runtime environment.
(string) --
(string) --
dict
The authorizer configuration for the agent runtime.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) -- [REQUIRED]
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
dict
Response Syntax
{ 'agentRuntimeArn': 'string', 'workloadIdentityDetails': { 'workloadIdentityArn': 'string' }, 'agentRuntimeId': 'string', 'agentRuntimeVersion': 'string', 'createdAt': datetime(2015, 1, 1), 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING' }
Response Structure
(dict) --
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime.
workloadIdentityDetails (dict) --
The workload identity details for the agent runtime.
workloadIdentityArn (string) --
The ARN associated with the workload identity.
agentRuntimeId (string) --
The unique identifier of the agent runtime.
agentRuntimeVersion (string) --
The version of the agent runtime.
createdAt (datetime) --
The timestamp when the agent runtime was created.
status (string) --
The current status of the agent runtime.
Lists all custom browsers in your account.
See also: AWS API Documentation
Request Syntax
client.list_browsers( maxResults=123, nextToken='string', type='SYSTEM'|'CUSTOM' )
integer
The maximum number of results to return in a single call. The default value is 10. The maximum value is 50.
string
The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results.
string
The type of browsers to list. If not specified, all browser types are returned.
dict
Response Syntax
{ 'browserSummaries': [ { 'browserId': 'string', 'browserArn': 'string', 'name': 'string', 'description': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1) }, ], 'nextToken': 'string' }
Response Structure
(dict) --
browserSummaries (list) --
The list of browser summaries.
(dict) --
Contains summary information about a browser. A browser enables Amazon Bedrock Agent to interact with web content.
browserId (string) --
The unique identifier of the browser.
browserArn (string) --
The Amazon Resource Name (ARN) of the browser.
name (string) --
The name of the browser.
description (string) --
The description of the browser.
status (string) --
The current status of the browser.
createdAt (datetime) --
The timestamp when the browser was created.
lastUpdatedAt (datetime) --
The timestamp when the browser was last updated.
nextToken (string) --
A token to retrieve the next page of results.
Sets the customer master key (CMK) for a token vault.
See also: AWS API Documentation
Request Syntax
client.set_token_vault_cmk( tokenVaultId='string', kmsConfiguration={ 'keyType': 'CustomerManagedKey'|'ServiceManagedKey', 'kmsKeyArn': 'string' } )
string
The unique identifier of the token vault to update.
dict
[REQUIRED]
The KMS configuration for the token vault, including the key type and KMS key ARN.
keyType (string) -- [REQUIRED]
The type of KMS key (CustomerManagedKey or ServiceManagedKey).
kmsKeyArn (string) --
The Amazon Resource Name (ARN) of the KMS key.
dict
Response Syntax
{ 'tokenVaultId': 'string', 'kmsConfiguration': { 'keyType': 'CustomerManagedKey'|'ServiceManagedKey', 'kmsKeyArn': 'string' }, 'lastModifiedDate': datetime(2015, 1, 1) }
Response Structure
(dict) --
tokenVaultId (string) --
The ID of the token vault.
kmsConfiguration (dict) --
The KMS configuration for the token vault.
keyType (string) --
The type of KMS key (CustomerManagedKey or ServiceManagedKey).
kmsKeyArn (string) --
The Amazon Resource Name (ARN) of the KMS key.
lastModifiedDate (datetime) --
The timestamp when the token vault was last modified.
Creates a target for a gateway. A target defines an endpoint that the gateway can connect to.
To create a target, you must specify the gateway identifier and target configuration.
See also: AWS API Documentation
Request Syntax
client.create_gateway_target( gatewayIdentifier='string', name='string', description='string', clientToken='string', targetConfiguration={ 'mcp': { 'openApiSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'smithyModel': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'lambda': { 'lambdaArn': 'string', 'toolSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': [ { 'name': 'string', 'description': 'string', 'inputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' }, 'outputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' } }, ] } } } }, credentialProviderConfigurations=[ { 'credentialProviderType': 'GATEWAY_IAM_ROLE'|'OAUTH'|'API_KEY', 'credentialProvider': { 'oauthCredentialProvider': { 'providerArn': 'string', 'scopes': [ 'string', ], 'customParameters': { 'string': 'string' } }, 'apiKeyCredentialProvider': { 'providerArn': 'string', 'credentialParameterName': 'string', 'credentialPrefix': 'string', 'credentialLocation': 'HEADER'|'QUERY_PARAMETER' } } }, ] )
string
[REQUIRED]
The identifier of the gateway to create a target for. This can be either the gateway ID or the gateway ARN.
string
[REQUIRED]
The name of the gateway target. The name must be unique within the gateway.
string
The description of the gateway target.
string
A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request but does not return an error.
This field is autopopulated if not provided.
dict
[REQUIRED]
The configuration settings for the target, including endpoint information and schema definitions.
mcp (dict) --
The Model Context Protocol (MCP) configuration for the target. This configuration defines how the gateway uses MCP to communicate with the target.
openApiSchema (dict) --
The OpenAPI schema for the Model Context Protocol target. This schema defines the API structure of the target.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
smithyModel (dict) --
The Smithy model for the Model Context Protocol target. This model defines the API structure of the target using the Smithy specification.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
lambda (dict) --
The Lambda configuration for the Model Context Protocol target. This configuration defines how the gateway uses a Lambda function to communicate with the target.
lambdaArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the Lambda function. This function is invoked by the gateway to communicate with the target.
toolSchema (dict) -- [REQUIRED]
The tool schema for the Lambda function. This schema defines the structure of the tools that the Lambda function provides.
s3 (dict) --
The Amazon S3 location of the tool schema. This location contains the schema definition file.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (list) --
The inline payload of the tool schema. This payload contains the schema definition directly in the request.
(dict) --
A tool definition for a gateway target. This structure defines a tool that the target exposes through the Model Context Protocol.
name (string) -- [REQUIRED]
The name of the tool. This name identifies the tool in the Model Context Protocol.
description (string) -- [REQUIRED]
The description of the tool. This description provides information about the purpose and usage of the tool.
inputSchema (dict) -- [REQUIRED]
The input schema for the tool. This schema defines the structure of the input that the tool accepts.
type (string) -- [REQUIRED]
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
outputSchema (dict) --
The output schema for the tool. This schema defines the structure of the output that the tool produces.
type (string) -- [REQUIRED]
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
list
[REQUIRED]
The credential provider configurations for the target. These configurations specify how the gateway authenticates with the target endpoint.
(dict) --
The configuration for a credential provider. This structure defines how the gateway authenticates with the target endpoint.
credentialProviderType (string) -- [REQUIRED]
The type of credential provider. This field specifies which authentication method the gateway uses.
credentialProvider (dict) --
The credential provider. This field contains the specific configuration for the credential provider type.
oauthCredentialProvider (dict) --
The OAuth credential provider. This provider uses OAuth authentication to access the target endpoint.
providerArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the OAuth credential provider. This ARN identifies the provider in Amazon Web Services.
scopes (list) -- [REQUIRED]
The OAuth scopes for the credential provider. These scopes define the level of access requested from the OAuth provider.
(string) --
customParameters (dict) --
The custom parameters for the OAuth credential provider. These parameters provide additional configuration for the OAuth authentication process.
(string) --
(string) --
apiKeyCredentialProvider (dict) --
The API key credential provider. This provider uses an API key to authenticate with the target endpoint.
providerArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the API key credential provider. This ARN identifies the provider in Amazon Web Services.
credentialParameterName (string) --
The name of the credential parameter for the API key. This parameter name is used when sending the API key to the target endpoint.
credentialPrefix (string) --
The prefix for the API key credential. This prefix is added to the API key when sending it to the target endpoint.
credentialLocation (string) --
The location of the API key credential. This field specifies where in the request the API key should be placed.
dict
Response Syntax
{ 'gatewayArn': 'string', 'targetId': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ], 'name': 'string', 'description': 'string', 'targetConfiguration': { 'mcp': { 'openApiSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'smithyModel': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'lambda': { 'lambdaArn': 'string', 'toolSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': [ { 'name': 'string', 'description': 'string', 'inputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' }, 'outputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' } }, ] } } } }, 'credentialProviderConfigurations': [ { 'credentialProviderType': 'GATEWAY_IAM_ROLE'|'OAUTH'|'API_KEY', 'credentialProvider': { 'oauthCredentialProvider': { 'providerArn': 'string', 'scopes': [ 'string', ], 'customParameters': { 'string': 'string' } }, 'apiKeyCredentialProvider': { 'providerArn': 'string', 'credentialParameterName': 'string', 'credentialPrefix': 'string', 'credentialLocation': 'HEADER'|'QUERY_PARAMETER' } } }, ] }
Response Structure
(dict) --
gatewayArn (string) --
The Amazon Resource Name (ARN) of the gateway.
targetId (string) --
The unique identifier of the created target.
createdAt (datetime) --
The timestamp when the target was created.
updatedAt (datetime) --
The timestamp when the target was last updated.
status (string) --
The current status of the target.
statusReasons (list) --
The reasons for the current status of the target.
(string) --
name (string) --
The name of the target.
description (string) --
The description of the target.
targetConfiguration (dict) --
The configuration settings for the target.
mcp (dict) --
The Model Context Protocol (MCP) configuration for the target. This configuration defines how the gateway uses MCP to communicate with the target.
openApiSchema (dict) --
The OpenAPI schema for the Model Context Protocol target. This schema defines the API structure of the target.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
smithyModel (dict) --
The Smithy model for the Model Context Protocol target. This model defines the API structure of the target using the Smithy specification.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
lambda (dict) --
The Lambda configuration for the Model Context Protocol target. This configuration defines how the gateway uses a Lambda function to communicate with the target.
lambdaArn (string) --
The Amazon Resource Name (ARN) of the Lambda function. This function is invoked by the gateway to communicate with the target.
toolSchema (dict) --
The tool schema for the Lambda function. This schema defines the structure of the tools that the Lambda function provides.
s3 (dict) --
The Amazon S3 location of the tool schema. This location contains the schema definition file.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (list) --
The inline payload of the tool schema. This payload contains the schema definition directly in the request.
(dict) --
A tool definition for a gateway target. This structure defines a tool that the target exposes through the Model Context Protocol.
name (string) --
The name of the tool. This name identifies the tool in the Model Context Protocol.
description (string) --
The description of the tool. This description provides information about the purpose and usage of the tool.
inputSchema (dict) --
The input schema for the tool. This schema defines the structure of the input that the tool accepts.
type (string) --
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
outputSchema (dict) --
The output schema for the tool. This schema defines the structure of the output that the tool produces.
type (string) --
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
credentialProviderConfigurations (list) --
The credential provider configurations for the target.
(dict) --
The configuration for a credential provider. This structure defines how the gateway authenticates with the target endpoint.
credentialProviderType (string) --
The type of credential provider. This field specifies which authentication method the gateway uses.
credentialProvider (dict) --
The credential provider. This field contains the specific configuration for the credential provider type.
oauthCredentialProvider (dict) --
The OAuth credential provider. This provider uses OAuth authentication to access the target endpoint.
providerArn (string) --
The Amazon Resource Name (ARN) of the OAuth credential provider. This ARN identifies the provider in Amazon Web Services.
scopes (list) --
The OAuth scopes for the credential provider. These scopes define the level of access requested from the OAuth provider.
(string) --
customParameters (dict) --
The custom parameters for the OAuth credential provider. These parameters provide additional configuration for the OAuth authentication process.
(string) --
(string) --
apiKeyCredentialProvider (dict) --
The API key credential provider. This provider uses an API key to authenticate with the target endpoint.
providerArn (string) --
The Amazon Resource Name (ARN) of the API key credential provider. This ARN identifies the provider in Amazon Web Services.
credentialParameterName (string) --
The name of the credential parameter for the API key. This parameter name is used when sending the API key to the target endpoint.
credentialPrefix (string) --
The prefix for the API key credential. This prefix is added to the API key when sending it to the target endpoint.
credentialLocation (string) --
The location of the API key credential. This field specifies where in the request the API key should be placed.
Deletes an OAuth2 credential provider.
See also: AWS API Documentation
Request Syntax
client.delete_oauth2_credential_provider( name='string' )
string
[REQUIRED]
The name of the OAuth2 credential provider to delete.
dict
Response Syntax
{}
Response Structure
(dict) --
Retrieves information about a token vault.
See also: AWS API Documentation
Request Syntax
client.get_token_vault( tokenVaultId='string' )
string
The unique identifier of the token vault to retrieve.
dict
Response Syntax
{ 'tokenVaultId': 'string', 'kmsConfiguration': { 'keyType': 'CustomerManagedKey'|'ServiceManagedKey', 'kmsKeyArn': 'string' }, 'lastModifiedDate': datetime(2015, 1, 1) }
Response Structure
(dict) --
tokenVaultId (string) --
The ID of the token vault.
kmsConfiguration (dict) --
The KMS configuration for the token vault.
keyType (string) --
The type of KMS key (CustomerManagedKey or ServiceManagedKey).
kmsKeyArn (string) --
The Amazon Resource Name (ARN) of the KMS key.
lastModifiedDate (datetime) --
The timestamp when the token vault was last modified.
Lists all targets for a specific Gateway.
See also: AWS API Documentation
Request Syntax
client.list_gateway_targets( gatewayIdentifier='string', maxResults=123, nextToken='string' )
string
[REQUIRED]
The identifier of the gateway to list targets for. This can be either the gateway ID or the gateway ARN.
integer
The maximum number of results to return in a single call. The default value is 10. The maximum value is 50.
string
The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results.
dict
Response Syntax
{ 'items': [ { 'targetId': 'string', 'name': 'string', 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'description': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1) }, ], 'nextToken': 'string' }
Response Structure
(dict) --
items (list) --
The list of Gateway Target summaries.
(dict) --
Contains summary information about a gateway target. A target represents an endpoint that the gateway can connect to.
targetId (string) --
The unique identifier of the target.
name (string) --
The name of the target.
status (string) --
The current status of the target.
description (string) --
The description of the target.
createdAt (datetime) --
The timestamp when the target was created.
updatedAt (datetime) --
The timestamp when the target was last updated.
nextToken (string) --
Opaque continuation token for the next paginated response.
Deletes an Amazon Secure Agent.
See also: AWS API Documentation
Request Syntax
client.delete_agent_runtime( agentRuntimeId='string' )
string
[REQUIRED]
The unique identifier of the agent runtime to delete.
dict
Response Syntax
{ 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING' }
Response Structure
(dict) --
status (string) --
The current status of the agent runtime deletion.
Updates an existing OAuth2 credential provider.
See also: AWS API Documentation
Request Syntax
client.update_oauth2_credential_provider( name='string', credentialProviderVendor='GoogleOauth2'|'GithubOauth2'|'SlackOauth2'|'SalesforceOauth2'|'MicrosoftOauth2'|'CustomOauth2', oauth2ProviderConfigInput={ 'customOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } }, 'clientId': 'string', 'clientSecret': 'string' }, 'googleOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'githubOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'slackOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'salesforceOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'microsoftOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' } } )
string
[REQUIRED]
The name of the OAuth2 credential provider to update.
string
[REQUIRED]
The vendor of the OAuth2 credential provider.
dict
[REQUIRED]
The configuration input for the OAuth2 provider.
customOauth2ProviderConfig (dict) --
The configuration for a custom OAuth2 provider.
oauthDiscovery (dict) -- [REQUIRED]
The OAuth2 discovery information for the custom provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) -- [REQUIRED]
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) -- [REQUIRED]
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) -- [REQUIRED]
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
clientId (string) -- [REQUIRED]
The client ID for the custom OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the custom OAuth2 provider.
googleOauth2ProviderConfig (dict) --
The configuration for a Google OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Google OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Google OAuth2 provider.
githubOauth2ProviderConfig (dict) --
The configuration for a GitHub OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the GitHub OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the GitHub OAuth2 provider.
slackOauth2ProviderConfig (dict) --
The configuration for a Slack OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Slack OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Slack OAuth2 provider.
salesforceOauth2ProviderConfig (dict) --
The configuration for a Salesforce OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Salesforce OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Salesforce OAuth2 provider.
microsoftOauth2ProviderConfig (dict) --
The configuration for a Microsoft OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Microsoft OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Microsoft OAuth2 provider.
dict
Response Syntax
{ 'clientSecretArn': { 'secretArn': 'string' }, 'name': 'string', 'credentialProviderVendor': 'GoogleOauth2'|'GithubOauth2'|'SlackOauth2'|'SalesforceOauth2'|'MicrosoftOauth2'|'CustomOauth2', 'credentialProviderArn': 'string', 'oauth2ProviderConfigOutput': { 'customOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'googleOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'githubOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'slackOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'salesforceOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'microsoftOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } } }, 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }
Response Structure
(dict) --
clientSecretArn (dict) --
The Amazon Resource Name (ARN) of the client secret in AWS Secrets Manager.
secretArn (string) --
The Amazon Resource Name (ARN) of the secret in AWS Secrets Manager.
name (string) --
The name of the OAuth2 credential provider.
credentialProviderVendor (string) --
The vendor of the OAuth2 credential provider.
credentialProviderArn (string) --
The Amazon Resource Name (ARN) of the OAuth2 credential provider.
oauth2ProviderConfigOutput (dict) --
The configuration output for the OAuth2 provider.
customOauth2ProviderConfig (dict) --
The output configuration for a custom OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the custom provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
googleOauth2ProviderConfig (dict) --
The output configuration for a Google OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Google provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
githubOauth2ProviderConfig (dict) --
The output configuration for a GitHub OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the GitHub provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
slackOauth2ProviderConfig (dict) --
The output configuration for a Slack OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Slack provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
salesforceOauth2ProviderConfig (dict) --
The output configuration for a Salesforce OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Salesforce provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
microsoftOauth2ProviderConfig (dict) --
The output configuration for a Microsoft OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Microsoft provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
createdTime (datetime) --
The timestamp when the OAuth2 credential provider was created.
lastUpdatedTime (datetime) --
The timestamp when the OAuth2 credential provider was last updated.
Deletes a Gateway.
See also: AWS API Documentation
Request Syntax
client.delete_gateway( gatewayIdentifier='string' )
string
[REQUIRED]
The identifier of the gateway to delete. This can be either the gateway ID or the gateway ARN.
dict
Response Syntax
{ 'gatewayId': 'string', 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ] }
Response Structure
(dict) --
gatewayId (string) --
The unique identifier of the deleted Gateway.
status (string) --
The current status of the Gateway deletion.
statusReasons (list) --
The reasons for the current status of the Gateway deletion.
(string) --
Retrieve an existing memory.
See also: AWS API Documentation
Request Syntax
client.get_memory( memoryId='string' )
string
[REQUIRED]
The unique identifier of the memory to retrieve.
dict
Response Syntax
{ 'memory': { 'arn': 'string', 'id': 'string', 'name': 'string', 'description': 'string', 'encryptionKeyArn': 'string', 'memoryExecutionRoleArn': 'string', 'eventExpiryDuration': 123, 'status': 'CREATING'|'ACTIVE'|'FAILED'|'DELETING', 'failureReason': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'strategies': [ { 'strategyId': 'string', 'name': 'string', 'description': 'string', 'configuration': { 'type': 'SEMANTIC_OVERRIDE'|'SUMMARY_OVERRIDE'|'USER_PREFERENCE_OVERRIDE', 'extraction': { 'customExtractionConfiguration': { 'semanticExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } }, 'consolidation': { 'customConsolidationConfiguration': { 'semanticConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'summaryConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } } }, 'type': 'SEMANTIC'|'SUMMARIZATION'|'USER_PREFERENCE'|'CUSTOM', 'namespaces': [ 'string', ], 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'ACTIVE'|'DELETING'|'FAILED' }, ] } }
Response Structure
(dict) --
memory (dict) --
The retrieved memory details.
arn (string) --
The Amazon Resource Name (ARN) of the memory.
id (string) --
The unique identifier of the memory.
name (string) --
The name of the memory.
description (string) --
The description of the memory.
encryptionKeyArn (string) --
The ARN of the KMS key used to encrypt the memory.
memoryExecutionRoleArn (string) --
The ARN of the IAM role that provides permissions for the memory.
eventExpiryDuration (integer) --
The number of days after which memory events will expire.
status (string) --
The current status of the memory.
failureReason (string) --
The reason for failure if the memory is in a failed state.
createdAt (datetime) --
The timestamp when the memory was created.
updatedAt (datetime) --
The timestamp when the memory was last updated.
strategies (list) --
The list of memory strategies associated with this memory.
(dict) --
Contains information about a memory strategy.
strategyId (string) --
The unique identifier of the memory strategy.
name (string) --
The name of the memory strategy.
description (string) --
The description of the memory strategy.
configuration (dict) --
The configuration of the memory strategy.
type (string) --
The type of override for the strategy configuration.
extraction (dict) --
The extraction configuration for the memory strategy.
customExtractionConfiguration (dict) --
The custom extraction configuration.
semanticExtractionOverride (dict) --
The semantic extraction override configuration.
appendToPrompt (string) --
The text to append to the prompt for semantic extraction.
modelId (string) --
The model ID to use for semantic extraction.
userPreferenceExtractionOverride (dict) --
The user preference extraction override configuration.
appendToPrompt (string) --
The text to append to the prompt for user preference extraction.
modelId (string) --
The model ID to use for user preference extraction.
consolidation (dict) --
The consolidation configuration for the memory strategy.
customConsolidationConfiguration (dict) --
The custom consolidation configuration.
semanticConsolidationOverride (dict) --
The semantic consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for semantic consolidation.
modelId (string) --
The model ID to use for semantic consolidation.
summaryConsolidationOverride (dict) --
The summary consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for summary consolidation.
modelId (string) --
The model ID to use for summary consolidation.
userPreferenceConsolidationOverride (dict) --
The user preference consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for user preference consolidation.
modelId (string) --
The model ID to use for user preference consolidation.
type (string) --
The type of the memory strategy.
namespaces (list) --
The namespaces associated with the memory strategy.
(string) --
createdAt (datetime) --
The timestamp when the memory strategy was created.
updatedAt (datetime) --
The timestamp when the memory strategy was last updated.
status (string) --
The current status of the memory strategy.
Deletes a memory.
See also: AWS API Documentation
Request Syntax
client.delete_memory( clientToken='string', memoryId='string' )
string
A client token is used for keeping track of idempotent requests. It can contain a session id which can be around 250 chars, combined with a unique AWS identifier.
This field is autopopulated if not provided.
string
[REQUIRED]
The unique identifier of the memory to delete.
dict
Response Syntax
{ 'memoryId': 'string', 'status': 'CREATING'|'ACTIVE'|'FAILED'|'DELETING' }
Response Structure
(dict) --
memoryId (string) --
The unique identifier of the deleted memory.
status (string) --
The current status of the memory deletion.
Creates a new OAuth2 credential provider.
See also: AWS API Documentation
Request Syntax
client.create_oauth2_credential_provider( name='string', credentialProviderVendor='GoogleOauth2'|'GithubOauth2'|'SlackOauth2'|'SalesforceOauth2'|'MicrosoftOauth2'|'CustomOauth2', oauth2ProviderConfigInput={ 'customOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } }, 'clientId': 'string', 'clientSecret': 'string' }, 'googleOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'githubOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'slackOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'salesforceOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' }, 'microsoftOauth2ProviderConfig': { 'clientId': 'string', 'clientSecret': 'string' } } )
string
[REQUIRED]
The name of the OAuth2 credential provider. The name must be unique within your account.
string
[REQUIRED]
The vendor of the OAuth2 credential provider. This specifies which OAuth2 implementation to use.
dict
[REQUIRED]
The configuration settings for the OAuth2 provider, including client ID, client secret, and other vendor-specific settings.
customOauth2ProviderConfig (dict) --
The configuration for a custom OAuth2 provider.
oauthDiscovery (dict) -- [REQUIRED]
The OAuth2 discovery information for the custom provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) -- [REQUIRED]
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) -- [REQUIRED]
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) -- [REQUIRED]
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
clientId (string) -- [REQUIRED]
The client ID for the custom OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the custom OAuth2 provider.
googleOauth2ProviderConfig (dict) --
The configuration for a Google OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Google OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Google OAuth2 provider.
githubOauth2ProviderConfig (dict) --
The configuration for a GitHub OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the GitHub OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the GitHub OAuth2 provider.
slackOauth2ProviderConfig (dict) --
The configuration for a Slack OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Slack OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Slack OAuth2 provider.
salesforceOauth2ProviderConfig (dict) --
The configuration for a Salesforce OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Salesforce OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Salesforce OAuth2 provider.
microsoftOauth2ProviderConfig (dict) --
The configuration for a Microsoft OAuth2 provider.
clientId (string) -- [REQUIRED]
The client ID for the Microsoft OAuth2 provider.
clientSecret (string) -- [REQUIRED]
The client secret for the Microsoft OAuth2 provider.
dict
Response Syntax
{ 'clientSecretArn': { 'secretArn': 'string' }, 'name': 'string', 'credentialProviderArn': 'string' }
Response Structure
(dict) --
clientSecretArn (dict) --
The Amazon Resource Name (ARN) of the client secret in AWS Secrets Manager.
secretArn (string) --
The Amazon Resource Name (ARN) of the secret in AWS Secrets Manager.
name (string) --
The name of the OAuth2 credential provider.
credentialProviderArn (string) --
The Amazon Resource Name (ARN) of the OAuth2 credential provider.
Gets information about a custom browser.
See also: AWS API Documentation
Request Syntax
client.get_browser( browserId='string' )
string
[REQUIRED]
The unique identifier of the browser to retrieve.
dict
Response Syntax
{ 'browserId': 'string', 'browserArn': 'string', 'name': 'string', 'description': 'string', 'executionRoleArn': 'string', 'networkConfiguration': { 'networkMode': 'PUBLIC' }, 'recording': { 'enabled': True|False, 's3Location': { 'bucket': 'string', 'prefix': 'string' } }, 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1) }
Response Structure
(dict) --
browserId (string) --
The unique identifier of the browser.
browserArn (string) --
The Amazon Resource Name (ARN) of the browser.
name (string) --
The name of the browser.
description (string) --
The description of the browser.
executionRoleArn (string) --
The IAM role ARN that provides permissions for the browser.
networkConfiguration (dict) --
The network configuration for a browser. This structure defines how the browser connects to the network.
networkMode (string) --
The network mode for the browser. This field specifies how the browser connects to the network.
recording (dict) --
The recording configuration for a browser. This structure defines how browser sessions are recorded.
enabled (boolean) --
Indicates whether recording is enabled for the browser. When set to true, browser sessions are recorded.
s3Location (dict) --
The Amazon S3 location where browser recordings are stored. This location contains the recorded browser sessions.
bucket (string) --
The name of the Amazon S3 bucket. This bucket contains the stored data.
prefix (string) --
The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
status (string) --
The current status of the browser.
createdAt (datetime) --
The timestamp when the browser was created.
lastUpdatedAt (datetime) --
The timestamp when the browser was last updated.
Creates a new API key credential provider.
See also: AWS API Documentation
Request Syntax
client.create_api_key_credential_provider( name='string', apiKey='string' )
string
[REQUIRED]
The name of the API key credential provider. The name must be unique within your account.
string
[REQUIRED]
The API key to use for authentication. This value is encrypted and stored securely.
dict
Response Syntax
{ 'apiKeySecretArn': { 'secretArn': 'string' }, 'name': 'string', 'credentialProviderArn': 'string' }
Response Structure
(dict) --
apiKeySecretArn (dict) --
The Amazon Resource Name (ARN) of the secret containing the API key.
secretArn (string) --
The Amazon Resource Name (ARN) of the secret in AWS Secrets Manager.
name (string) --
The name of the created API key credential provider.
credentialProviderArn (string) --
The Amazon Resource Name (ARN) of the created API key credential provider.
Creates a new memory.
See also: AWS API Documentation
Request Syntax
client.create_memory( clientToken='string', name='string', description='string', encryptionKeyArn='string', memoryExecutionRoleArn='string', eventExpiryDuration=123, memoryStrategies=[ { 'semanticMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ] }, 'summaryMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ] }, 'userPreferenceMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ] }, 'customMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ], 'configuration': { 'semanticOverride': { 'extraction': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'consolidation': { 'appendToPrompt': 'string', 'modelId': 'string' } }, 'summaryOverride': { 'consolidation': { 'appendToPrompt': 'string', 'modelId': 'string' } }, 'userPreferenceOverride': { 'extraction': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'consolidation': { 'appendToPrompt': 'string', 'modelId': 'string' } } } } }, ] )
string
A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request but does not return an error.
This field is autopopulated if not provided.
string
[REQUIRED]
The name of the memory. The name must be unique within your account.
string
The description of the memory.
string
The Amazon Resource Name (ARN) of the KMS key used to encrypt the memory data.
string
The Amazon Resource Name (ARN) of the IAM role that provides permissions for the memory to access Amazon Web Services services.
integer
[REQUIRED]
The duration after which memory events expire. Specified as an ISO 8601 duration.
list
The memory strategies to use for this memory. Strategies define how information is extracted, processed, and consolidated.
(dict) --
Contains input information for creating a memory strategy.
semanticMemoryStrategy (dict) --
Input for creating a semantic memory strategy.
name (string) -- [REQUIRED]
The name of the semantic memory strategy.
description (string) --
The description of the semantic memory strategy.
namespaces (list) --
The namespaces associated with the semantic memory strategy.
(string) --
summaryMemoryStrategy (dict) --
Input for creating a summary memory strategy.
name (string) -- [REQUIRED]
The name of the summary memory strategy.
description (string) --
The description of the summary memory strategy.
namespaces (list) --
The namespaces associated with the summary memory strategy.
(string) --
userPreferenceMemoryStrategy (dict) --
Input for creating a user preference memory strategy.
name (string) -- [REQUIRED]
The name of the user preference memory strategy.
description (string) --
The description of the user preference memory strategy.
namespaces (list) --
The namespaces associated with the user preference memory strategy.
(string) --
customMemoryStrategy (dict) --
Input for creating a custom memory strategy.
name (string) -- [REQUIRED]
The name of the custom memory strategy.
description (string) --
The description of the custom memory strategy.
namespaces (list) --
The namespaces associated with the custom memory strategy.
(string) --
configuration (dict) --
The configuration for the custom memory strategy.
semanticOverride (dict) --
The semantic override configuration for a custom memory strategy.
extraction (dict) --
The extraction configuration for a semantic override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for semantic extraction.
modelId (string) -- [REQUIRED]
The model ID to use for semantic extraction.
consolidation (dict) --
The consolidation configuration for a semantic override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for semantic consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for semantic consolidation.
summaryOverride (dict) --
The summary override configuration for a custom memory strategy.
consolidation (dict) --
The consolidation configuration for a summary override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for summary consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for summary consolidation.
userPreferenceOverride (dict) --
The user preference override configuration for a custom memory strategy.
extraction (dict) --
The extraction configuration for a user preference override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for user preference extraction.
modelId (string) -- [REQUIRED]
The model ID to use for user preference extraction.
consolidation (dict) --
The consolidation configuration for a user preference override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for user preference consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for user preference consolidation.
dict
Response Syntax
{ 'memory': { 'arn': 'string', 'id': 'string', 'name': 'string', 'description': 'string', 'encryptionKeyArn': 'string', 'memoryExecutionRoleArn': 'string', 'eventExpiryDuration': 123, 'status': 'CREATING'|'ACTIVE'|'FAILED'|'DELETING', 'failureReason': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'strategies': [ { 'strategyId': 'string', 'name': 'string', 'description': 'string', 'configuration': { 'type': 'SEMANTIC_OVERRIDE'|'SUMMARY_OVERRIDE'|'USER_PREFERENCE_OVERRIDE', 'extraction': { 'customExtractionConfiguration': { 'semanticExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } }, 'consolidation': { 'customConsolidationConfiguration': { 'semanticConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'summaryConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } } }, 'type': 'SEMANTIC'|'SUMMARIZATION'|'USER_PREFERENCE'|'CUSTOM', 'namespaces': [ 'string', ], 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'ACTIVE'|'DELETING'|'FAILED' }, ] } }
Response Structure
(dict) --
memory (dict) --
The details of the created memory, including its ID, ARN, name, description, and configuration settings.
arn (string) --
The Amazon Resource Name (ARN) of the memory.
id (string) --
The unique identifier of the memory.
name (string) --
The name of the memory.
description (string) --
The description of the memory.
encryptionKeyArn (string) --
The ARN of the KMS key used to encrypt the memory.
memoryExecutionRoleArn (string) --
The ARN of the IAM role that provides permissions for the memory.
eventExpiryDuration (integer) --
The number of days after which memory events will expire.
status (string) --
The current status of the memory.
failureReason (string) --
The reason for failure if the memory is in a failed state.
createdAt (datetime) --
The timestamp when the memory was created.
updatedAt (datetime) --
The timestamp when the memory was last updated.
strategies (list) --
The list of memory strategies associated with this memory.
(dict) --
Contains information about a memory strategy.
strategyId (string) --
The unique identifier of the memory strategy.
name (string) --
The name of the memory strategy.
description (string) --
The description of the memory strategy.
configuration (dict) --
The configuration of the memory strategy.
type (string) --
The type of override for the strategy configuration.
extraction (dict) --
The extraction configuration for the memory strategy.
customExtractionConfiguration (dict) --
The custom extraction configuration.
semanticExtractionOverride (dict) --
The semantic extraction override configuration.
appendToPrompt (string) --
The text to append to the prompt for semantic extraction.
modelId (string) --
The model ID to use for semantic extraction.
userPreferenceExtractionOverride (dict) --
The user preference extraction override configuration.
appendToPrompt (string) --
The text to append to the prompt for user preference extraction.
modelId (string) --
The model ID to use for user preference extraction.
consolidation (dict) --
The consolidation configuration for the memory strategy.
customConsolidationConfiguration (dict) --
The custom consolidation configuration.
semanticConsolidationOverride (dict) --
The semantic consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for semantic consolidation.
modelId (string) --
The model ID to use for semantic consolidation.
summaryConsolidationOverride (dict) --
The summary consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for summary consolidation.
modelId (string) --
The model ID to use for summary consolidation.
userPreferenceConsolidationOverride (dict) --
The user preference consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for user preference consolidation.
modelId (string) --
The model ID to use for user preference consolidation.
type (string) --
The type of the memory strategy.
namespaces (list) --
The namespaces associated with the memory strategy.
(string) --
createdAt (datetime) --
The timestamp when the memory strategy was created.
updatedAt (datetime) --
The timestamp when the memory strategy was last updated.
status (string) --
The current status of the memory strategy.
Gets an Amazon Secure Agent.
See also: AWS API Documentation
Request Syntax
client.get_agent_runtime( agentRuntimeId='string', agentRuntimeVersion='string' )
string
[REQUIRED]
The unique identifier of the agent runtime to retrieve.
string
The version of the agent runtime to retrieve.
dict
Response Syntax
{ 'agentRuntimeArn': 'string', 'workloadIdentityDetails': { 'workloadIdentityArn': 'string' }, 'agentRuntimeName': 'string', 'description': 'string', 'agentRuntimeId': 'string', 'agentRuntimeVersion': 'string', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1), 'roleArn': 'string', 'agentRuntimeArtifact': { 'containerConfiguration': { 'containerUri': 'string' } }, 'networkConfiguration': { 'networkMode': 'PUBLIC' }, 'protocolConfiguration': { 'serverProtocol': 'MCP'|'HTTP' }, 'environmentVariables': { 'string': 'string' }, 'authorizerConfiguration': { 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } }, 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING' }
Response Structure
(dict) --
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime.
workloadIdentityDetails (dict) --
The workload identity details for the agent runtime.
workloadIdentityArn (string) --
The ARN associated with the workload identity.
agentRuntimeName (string) --
The name of the agent runtime.
description (string) --
The description of the agent runtime.
agentRuntimeId (string) --
The unique identifier of the agent runtime.
agentRuntimeVersion (string) --
The version of the agent runtime.
createdAt (datetime) --
The timestamp when the agent runtime was created.
lastUpdatedAt (datetime) --
The timestamp when the agent runtime was last updated.
roleArn (string) --
The IAM role ARN that provides permissions for the agent runtime.
agentRuntimeArtifact (dict) --
The artifact of the agent runtime.
containerConfiguration (dict) --
The container configuration for the agent artifact.
containerUri (string) --
The ECR URI of the container.
networkConfiguration (dict) --
The network configuration for the agent runtime.
networkMode (string) --
The network mode for the agent runtime.
protocolConfiguration (dict) --
The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
serverProtocol (string) --
The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
environmentVariables (dict) --
Environment variables set in the agent runtime environment.
(string) --
(string) --
authorizerConfiguration (dict) --
The authorizer configuration for the agent runtime.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) --
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
status (string) --
The current status of the agent runtime.
Lists all endpoints for a specific Amazon Secure Agent.
See also: AWS API Documentation
Request Syntax
client.list_agent_runtime_endpoints( agentRuntimeId='string', maxResults=123, nextToken='string' )
string
[REQUIRED]
The unique identifier of the agent runtime to list endpoints for.
integer
The maximum number of results to return in the response.
string
A token to retrieve the next page of results.
dict
Response Syntax
{ 'runtimeEndpoints': [ { 'name': 'string', 'liveVersion': 'string', 'targetVersion': 'string', 'agentRuntimeEndpointArn': 'string', 'agentRuntimeArn': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING', 'id': 'string', 'description': 'string', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1) }, ], 'nextToken': 'string' }
Response Structure
(dict) --
runtimeEndpoints (list) --
The list of agent runtime endpoints.
(dict) --
Contains information about an agent runtime endpoint. An endpoint provides a way to connect to and interact with an agent runtime.
name (string) --
The name of the agent runtime endpoint.
liveVersion (string) --
The live version of the agent runtime endpoint. This is the version that is currently serving requests.
targetVersion (string) --
The target version of the agent runtime endpoint. This is the version that the endpoint is being updated to.
agentRuntimeEndpointArn (string) --
The Amazon Resource Name (ARN) of the agent runtime endpoint.
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime associated with the endpoint.
status (string) --
The current status of the agent runtime endpoint.
id (string) --
The unique identifier of the agent runtime endpoint.
description (string) --
The description of the agent runtime endpoint.
createdAt (datetime) --
The timestamp when the agent runtime endpoint was created.
lastUpdatedAt (datetime) --
The timestamp when the agent runtime endpoint was last updated.
nextToken (string) --
A token to retrieve the next page of results.
Lists all workload identities in your account.
See also: AWS API Documentation
Request Syntax
client.list_workload_identities( nextToken='string', maxResults=123 )
string
Pagination token.
integer
Maximum number of results to return.
dict
Response Syntax
{ 'workloadIdentities': [ { 'name': 'string', 'workloadIdentityArn': 'string' }, ], 'nextToken': 'string' }
Response Structure
(dict) --
workloadIdentities (list) --
The list of workload identities.
(dict) --
Contains information about a workload identity.
name (string) --
The name of the workload identity.
workloadIdentityArn (string) --
The Amazon Resource Name (ARN) of the workload identity.
nextToken (string) --
Pagination token for the next page of results.
Updates an existing Amazon Secure Agent.
See also: AWS API Documentation
Request Syntax
client.update_agent_runtime( agentRuntimeId='string', description='string', agentRuntimeArtifact={ 'containerConfiguration': { 'containerUri': 'string' } }, roleArn='string', networkConfiguration={ 'networkMode': 'PUBLIC' }, protocolConfiguration={ 'serverProtocol': 'MCP'|'HTTP' }, clientToken='string', environmentVariables={ 'string': 'string' }, authorizerConfiguration={ 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } } )
string
[REQUIRED]
The unique identifier of the agent runtime to update.
string
The updated description of the agent runtime.
dict
[REQUIRED]
The updated artifact of the agent runtime.
containerConfiguration (dict) --
The container configuration for the agent artifact.
containerUri (string) -- [REQUIRED]
The ECR URI of the container.
string
[REQUIRED]
The updated IAM role ARN that provides permissions for the agent runtime.
dict
[REQUIRED]
The updated network configuration for the agent runtime.
networkMode (string) -- [REQUIRED]
The network mode for the agent runtime.
dict
The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
serverProtocol (string) -- [REQUIRED]
The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
string
A unique, case-sensitive identifier to ensure idempotency of the request.
This field is autopopulated if not provided.
dict
Updated environment variables to set in the agent runtime environment.
(string) --
(string) --
dict
The updated authorizer configuration for the agent runtime.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) -- [REQUIRED]
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
dict
Response Syntax
{ 'agentRuntimeArn': 'string', 'agentRuntimeId': 'string', 'workloadIdentityDetails': { 'workloadIdentityArn': 'string' }, 'agentRuntimeVersion': 'string', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING' }
Response Structure
(dict) --
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the updated agent runtime.
agentRuntimeId (string) --
The unique identifier of the updated agent runtime.
workloadIdentityDetails (dict) --
The workload identity details for the updated agent runtime.
workloadIdentityArn (string) --
The ARN associated with the workload identity.
agentRuntimeVersion (string) --
The version of the updated agent runtime.
createdAt (datetime) --
The timestamp when the agent runtime was created.
lastUpdatedAt (datetime) --
The timestamp when the agent runtime was last updated.
status (string) --
The current status of the updated agent runtime.
Creates a custom browser.
See also: AWS API Documentation
Request Syntax
client.create_browser( name='string', description='string', executionRoleArn='string', networkConfiguration={ 'networkMode': 'PUBLIC' }, recording={ 'enabled': True|False, 's3Location': { 'bucket': 'string', 'prefix': 'string' } }, clientToken='string' )
string
[REQUIRED]
The name of the browser. The name must be unique within your account.
string
The description of the browser.
string
The Amazon Resource Name (ARN) of the IAM role that provides permissions for the browser to access Amazon Web Services services.
dict
[REQUIRED]
The network configuration for the browser. This configuration specifies the network mode for the browser.
networkMode (string) -- [REQUIRED]
The network mode for the browser. This field specifies how the browser connects to the network.
dict
The recording configuration for the browser. When enabled, browser sessions are recorded and stored in the specified Amazon S3 location.
enabled (boolean) --
Indicates whether recording is enabled for the browser. When set to true, browser sessions are recorded.
s3Location (dict) --
The Amazon S3 location where browser recordings are stored. This location contains the recorded browser sessions.
bucket (string) -- [REQUIRED]
The name of the Amazon S3 bucket. This bucket contains the stored data.
prefix (string) -- [REQUIRED]
The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
string
A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request but does not return an error.
This field is autopopulated if not provided.
dict
Response Syntax
{ 'browserId': 'string', 'browserArn': 'string', 'createdAt': datetime(2015, 1, 1), 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED' }
Response Structure
(dict) --
browserId (string) --
The unique identifier of the created browser.
browserArn (string) --
The Amazon Resource Name (ARN) of the created browser.
createdAt (datetime) --
The timestamp when the browser was created.
status (string) --
The current status of the browser.
Retrieves information about a workload identity.
See also: AWS API Documentation
Request Syntax
client.get_workload_identity( name='string' )
string
[REQUIRED]
The name of the workload identity to retrieve.
dict
Response Syntax
{ 'name': 'string', 'workloadIdentityArn': 'string', 'allowedResourceOauth2ReturnUrls': [ 'string', ], 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }
Response Structure
(dict) --
name (string) --
The name of the workload identity.
workloadIdentityArn (string) --
The Amazon Resource Name (ARN) of the workload identity.
allowedResourceOauth2ReturnUrls (list) --
The list of allowed OAuth2 return URLs for resources associated with this workload identity.
(string) --
createdTime (datetime) --
The timestamp when the workload identity was created.
lastUpdatedTime (datetime) --
The timestamp when the workload identity was last updated.
Lists all Amazon Secure Agents in your account.
See also: AWS API Documentation
Request Syntax
client.list_agent_runtimes( maxResults=123, nextToken='string' )
integer
The maximum number of results to return in the response.
string
A token to retrieve the next page of results.
dict
Response Syntax
{ 'agentRuntimes': [ { 'agentRuntimeArn': 'string', 'agentRuntimeId': 'string', 'agentRuntimeVersion': 'string', 'agentRuntimeName': 'string', 'description': 'string', 'lastUpdatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING' }, ], 'nextToken': 'string' }
Response Structure
(dict) --
agentRuntimes (list) --
The list of agent runtimes.
(dict) --
Contains information about an agent runtime. An agent runtime is the execution environment for a Amazon Bedrock Agent.
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime.
agentRuntimeId (string) --
The unique identifier of the agent runtime.
agentRuntimeVersion (string) --
The version of the agent runtime.
agentRuntimeName (string) --
The name of the agent runtime.
description (string) --
The description of the agent runtime.
lastUpdatedAt (datetime) --
The timestamp when the agent runtime was last updated.
status (string) --
The current status of the agent runtime.
nextToken (string) --
A token to retrieve the next page of results.
Deletes a custom code interpreter.
See also: AWS API Documentation
Request Syntax
client.delete_code_interpreter( codeInterpreterId='string', clientToken='string' )
string
[REQUIRED]
The unique identifier of the code interpreter to delete.
string
A unique, case-sensitive identifier to ensure idempotency of the request.
This field is autopopulated if not provided.
dict
Response Syntax
{ 'codeInterpreterId': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED', 'lastUpdatedAt': datetime(2015, 1, 1) }
Response Structure
(dict) --
codeInterpreterId (string) --
The unique identifier of the deleted code interpreter.
status (string) --
The current status of the code interpreter deletion.
lastUpdatedAt (datetime) --
The timestamp when the code interpreter was last updated.
Lists all versions of a specific Amazon Secure Agent.
See also: AWS API Documentation
Request Syntax
client.list_agent_runtime_versions( agentRuntimeId='string', maxResults=123, nextToken='string' )
string
[REQUIRED]
The unique identifier of the agent runtime to list versions for.
integer
The maximum number of results to return in the response.
string
A token to retrieve the next page of results.
dict
Response Syntax
{ 'agentRuntimes': [ { 'agentRuntimeArn': 'string', 'agentRuntimeId': 'string', 'agentRuntimeVersion': 'string', 'agentRuntimeName': 'string', 'description': 'string', 'lastUpdatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING' }, ], 'nextToken': 'string' }
Response Structure
(dict) --
agentRuntimes (list) --
The list of agent runtime versions.
(dict) --
Contains information about an agent runtime. An agent runtime is the execution environment for a Amazon Bedrock Agent.
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime.
agentRuntimeId (string) --
The unique identifier of the agent runtime.
agentRuntimeVersion (string) --
The version of the agent runtime.
agentRuntimeName (string) --
The name of the agent runtime.
description (string) --
The description of the agent runtime.
lastUpdatedAt (datetime) --
The timestamp when the agent runtime was last updated.
status (string) --
The current status of the agent runtime.
nextToken (string) --
A token to retrieve the next page of results.
Lists the memory present.
See also: AWS API Documentation
Request Syntax
client.list_memories( maxResults=123, nextToken='string' )
integer
The maximum number of results to return in a single call. The default value is 10. The maximum value is 50.
string
The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results.
dict
Response Syntax
{ 'memories': [ { 'arn': 'string', 'id': 'string', 'status': 'CREATING'|'ACTIVE'|'FAILED'|'DELETING', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1) }, ], 'nextToken': 'string' }
Response Structure
(dict) --
memories (list) --
The list of memory summaries.
(dict) --
Contains summary information about a memory resource.
arn (string) --
The Amazon Resource Name (ARN) of the memory.
id (string) --
The unique identifier of the memory.
status (string) --
The current status of the memory.
createdAt (datetime) --
The timestamp when the memory was created.
updatedAt (datetime) --
The timestamp when the memory was last updated.
nextToken (string) --
A token to retrieve the next page of results.
Creates a gateway for Amazon Bedrock Agent. A gateway serves as an integration point between your agent and external services.
To create a gateway, you must specify a name, protocol type, and IAM role. The role grants the gateway permission to access Amazon Web Services services and resources.
See also: AWS API Documentation
Request Syntax
client.create_gateway( name='string', description='string', clientToken='string', roleArn='string', protocolType='MCP', protocolConfiguration={ 'mcp': { 'supportedVersions': [ 'string', ], 'instructions': 'string', 'searchType': 'SEMANTIC' } }, authorizerType='CUSTOM_JWT', authorizerConfiguration={ 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } }, kmsKeyArn='string', exceptionLevel='DEBUG' )
string
[REQUIRED]
The name of the gateway. The name must be unique within your account.
string
The description of the gateway.
string
A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request but does not return an error.
This field is autopopulated if not provided.
string
[REQUIRED]
The Amazon Resource Name (ARN) of the IAM role that provides permissions for the gateway to access Amazon Web Services services.
string
[REQUIRED]
The protocol type for the gateway. Currently supports MCP (Model Context Protocol).
dict
The configuration settings for the protocol specified in the protocolType parameter.
mcp (dict) --
The configuration for the Model Context Protocol (MCP). This protocol enables communication between Amazon Bedrock Agent and external tools.
supportedVersions (list) --
The supported versions of the Model Context Protocol. This field specifies which versions of the protocol the gateway can use.
(string) --
instructions (string) --
The instructions for using the Model Context Protocol gateway. These instructions provide guidance on how to interact with the gateway.
searchType (string) --
The search type for the Model Context Protocol gateway. This field specifies how the gateway handles search operations.
string
[REQUIRED]
The type of authorizer to use for the gateway.
dict
[REQUIRED]
The authorizer configuration for the Gateway.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) -- [REQUIRED]
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
string
The Amazon Resource Name (ARN) of the KMS key used to encrypt data associated with the gateway.
string
The verbosity of exception messages. Use DEBUG mode to see granular exception messages from a Gateway. If this parameter is not set, exception messages are by default sanitized for presentation to end users.
dict
Response Syntax
{ 'gatewayArn': 'string', 'gatewayId': 'string', 'gatewayUrl': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ], 'name': 'string', 'description': 'string', 'roleArn': 'string', 'protocolType': 'MCP', 'protocolConfiguration': { 'mcp': { 'supportedVersions': [ 'string', ], 'instructions': 'string', 'searchType': 'SEMANTIC' } }, 'authorizerType': 'CUSTOM_JWT', 'authorizerConfiguration': { 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } }, 'kmsKeyArn': 'string', 'workloadIdentityDetails': { 'workloadIdentityArn': 'string' }, 'exceptionLevel': 'DEBUG' }
Response Structure
(dict) --
gatewayArn (string) --
The Amazon Resource Name (ARN) of the created gateway.
gatewayId (string) --
The unique identifier of the created gateway.
gatewayUrl (string) --
The URL endpoint for the created gateway.
createdAt (datetime) --
The timestamp when the gateway was created.
updatedAt (datetime) --
The timestamp when the gateway was last updated.
status (string) --
The current status of the gateway.
statusReasons (list) --
The reasons for the current status of the gateway.
(string) --
name (string) --
The name of the gateway.
description (string) --
The description of the gateway.
roleArn (string) --
The Amazon Resource Name (ARN) of the IAM role associated with the gateway.
protocolType (string) --
The protocol type of the gateway.
protocolConfiguration (dict) --
The configuration settings for the protocol used by the gateway.
mcp (dict) --
The configuration for the Model Context Protocol (MCP). This protocol enables communication between Amazon Bedrock Agent and external tools.
supportedVersions (list) --
The supported versions of the Model Context Protocol. This field specifies which versions of the protocol the gateway can use.
(string) --
instructions (string) --
The instructions for using the Model Context Protocol gateway. These instructions provide guidance on how to interact with the gateway.
searchType (string) --
The search type for the Model Context Protocol gateway. This field specifies how the gateway handles search operations.
authorizerType (string) --
The type of authorizer used by the gateway.
authorizerConfiguration (dict) --
The authorizer configuration for the created Gateway.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) --
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
kmsKeyArn (string) --
The Amazon Resource Name (ARN) of the KMS key used to encrypt data associated with the gateway.
workloadIdentityDetails (dict) --
The workload identity details for the created Gateway.
workloadIdentityArn (string) --
The ARN associated with the workload identity.
exceptionLevel (string) --
The verbosity of exception messages. Use DEBUG mode to see granular exception messages from a Gateway. If this parameter is not set, exception messages are by default sanitized for presentation to end users.
Lists all Gateways in the account.
See also: AWS API Documentation
Request Syntax
client.list_gateways( maxResults=123, nextToken='string' )
integer
The maximum number of results to return in a single call. The default value is 10. The maximum value is 50.
string
The token for the next set of results. Use the value returned in the previous response in the next request to retrieve the next set of results.
dict
Response Syntax
{ 'items': [ { 'gatewayId': 'string', 'name': 'string', 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'description': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'authorizerType': 'CUSTOM_JWT', 'protocolType': 'MCP' }, ], 'nextToken': 'string' }
Response Structure
(dict) --
items (list) --
The list of Gateway summaries.
(dict) --
Contains summary information about a gateway.
gatewayId (string) --
The unique identifier of the gateway.
name (string) --
The name of the gateway.
status (string) --
The current status of the gateway.
description (string) --
The description of the gateway.
createdAt (datetime) --
The timestamp when the gateway was created.
updatedAt (datetime) --
The timestamp when the gateway was last updated.
authorizerType (string) --
The type of authorizer used by the gateway.
protocolType (string) --
The protocol type used by the gateway.
nextToken (string) --
Opaque continuation token for the next paginated response.
Deletes a custom browser.
See also: AWS API Documentation
Request Syntax
client.delete_browser( browserId='string', clientToken='string' )
string
[REQUIRED]
The unique identifier of the browser to delete.
string
A unique, case-sensitive identifier to ensure idempotency of the request.
This field is autopopulated if not provided.
dict
Response Syntax
{ 'browserId': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED', 'lastUpdatedAt': datetime(2015, 1, 1) }
Response Structure
(dict) --
browserId (string) --
The unique identifier of the deleted browser.
status (string) --
The current status of the browser deletion.
lastUpdatedAt (datetime) --
The timestamp when the browser was last updated.
Lists all custom code interpreters in your account.
See also: AWS API Documentation
Request Syntax
client.list_code_interpreters( maxResults=123, nextToken='string', type='SYSTEM'|'CUSTOM' )
integer
The maximum number of results to return in the response.
string
A token to retrieve the next page of results.
string
The type of code interpreters to list.
dict
Response Syntax
{ 'codeInterpreterSummaries': [ { 'codeInterpreterId': 'string', 'codeInterpreterArn': 'string', 'name': 'string', 'description': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1) }, ], 'nextToken': 'string' }
Response Structure
(dict) --
codeInterpreterSummaries (list) --
The list of code interpreter summaries.
(dict) --
Contains summary information about a code interpreter. A code interpreter enables Amazon Bedrock Agent to execute code.
codeInterpreterId (string) --
The unique identifier of the code interpreter.
codeInterpreterArn (string) --
The Amazon Resource Name (ARN) of the code interpreter.
name (string) --
The name of the code interpreter.
description (string) --
The description of the code interpreter.
status (string) --
The current status of the code interpreter.
createdAt (datetime) --
The timestamp when the code interpreter was created.
lastUpdatedAt (datetime) --
The timestamp when the code interpreter was last updated.
nextToken (string) --
A token to retrieve the next page of results.
Deletes an Amazon Secure AgentEndpoint.
See also: AWS API Documentation
Request Syntax
client.delete_agent_runtime_endpoint( agentRuntimeId='string', endpointName='string', clientToken='string' )
string
[REQUIRED]
The unique identifier of the agent runtime associated with the endpoint.
string
[REQUIRED]
The name of the agent runtime endpoint to delete.
string
A unique, case-sensitive identifier to ensure idempotency of the request.
This field is autopopulated if not provided.
dict
Response Syntax
{ 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING' }
Response Structure
(dict) --
status (string) --
The current status of the agent runtime endpoint deletion.
Updates an existing Amazon Secure AgentEndpoint.
See also: AWS API Documentation
Request Syntax
client.update_agent_runtime_endpoint( agentRuntimeId='string', endpointName='string', agentRuntimeVersion='string', description='string', clientToken='string' )
string
[REQUIRED]
The unique identifier of the agent runtime associated with the endpoint.
string
[REQUIRED]
The name of the agent runtime endpoint to update.
string
The updated version of the agent runtime for the endpoint.
string
The updated description of the agent runtime endpoint.
string
A unique, case-sensitive identifier to ensure idempotency of the request.
This field is autopopulated if not provided.
dict
Response Syntax
{ 'liveVersion': 'string', 'targetVersion': 'string', 'agentRuntimeEndpointArn': 'string', 'agentRuntimeArn': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING', 'createdAt': datetime(2015, 1, 1), 'lastUpdatedAt': datetime(2015, 1, 1) }
Response Structure
(dict) --
liveVersion (string) --
The currently deployed version of the agent runtime on the endpoint.
targetVersion (string) --
The target version of the agent runtime for the endpoint.
agentRuntimeEndpointArn (string) --
The Amazon Resource Name (ARN) of the agent runtime endpoint.
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime.
status (string) --
The current status of the updated agent runtime endpoint.
createdAt (datetime) --
The timestamp when the agent runtime endpoint was created.
lastUpdatedAt (datetime) --
The timestamp when the agent runtime endpoint was last updated.
Update memory.
See also: AWS API Documentation
Request Syntax
client.update_memory( clientToken='string', memoryId='string', description='string', eventExpiryDuration=123, memoryExecutionRoleArn='string', memoryStrategies={ 'addMemoryStrategies': [ { 'semanticMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ] }, 'summaryMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ] }, 'userPreferenceMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ] }, 'customMemoryStrategy': { 'name': 'string', 'description': 'string', 'namespaces': [ 'string', ], 'configuration': { 'semanticOverride': { 'extraction': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'consolidation': { 'appendToPrompt': 'string', 'modelId': 'string' } }, 'summaryOverride': { 'consolidation': { 'appendToPrompt': 'string', 'modelId': 'string' } }, 'userPreferenceOverride': { 'extraction': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'consolidation': { 'appendToPrompt': 'string', 'modelId': 'string' } } } } }, ], 'modifyMemoryStrategies': [ { 'memoryStrategyId': 'string', 'description': 'string', 'namespaces': [ 'string', ], 'configuration': { 'extraction': { 'customExtractionConfiguration': { 'semanticExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } }, 'consolidation': { 'customConsolidationConfiguration': { 'semanticConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'summaryConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } } } }, ], 'deleteMemoryStrategies': [ { 'memoryStrategyId': 'string' }, ] } )
string
A client token is used for keeping track of idempotent requests. It can contain a session id which can be around 250 chars, combined with a unique AWS identifier.
This field is autopopulated if not provided.
string
[REQUIRED]
The unique identifier of the memory to update.
string
The updated description of the memory.
integer
The number of days after which memory events will expire, between 7 and 365 days.
string
The ARN of the IAM role that provides permissions for the memory.
dict
The memory strategies to add, modify, or delete.
addMemoryStrategies (list) --
The list of memory strategies to add.
(dict) --
Contains input information for creating a memory strategy.
semanticMemoryStrategy (dict) --
Input for creating a semantic memory strategy.
name (string) -- [REQUIRED]
The name of the semantic memory strategy.
description (string) --
The description of the semantic memory strategy.
namespaces (list) --
The namespaces associated with the semantic memory strategy.
(string) --
summaryMemoryStrategy (dict) --
Input for creating a summary memory strategy.
name (string) -- [REQUIRED]
The name of the summary memory strategy.
description (string) --
The description of the summary memory strategy.
namespaces (list) --
The namespaces associated with the summary memory strategy.
(string) --
userPreferenceMemoryStrategy (dict) --
Input for creating a user preference memory strategy.
name (string) -- [REQUIRED]
The name of the user preference memory strategy.
description (string) --
The description of the user preference memory strategy.
namespaces (list) --
The namespaces associated with the user preference memory strategy.
(string) --
customMemoryStrategy (dict) --
Input for creating a custom memory strategy.
name (string) -- [REQUIRED]
The name of the custom memory strategy.
description (string) --
The description of the custom memory strategy.
namespaces (list) --
The namespaces associated with the custom memory strategy.
(string) --
configuration (dict) --
The configuration for the custom memory strategy.
semanticOverride (dict) --
The semantic override configuration for a custom memory strategy.
extraction (dict) --
The extraction configuration for a semantic override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for semantic extraction.
modelId (string) -- [REQUIRED]
The model ID to use for semantic extraction.
consolidation (dict) --
The consolidation configuration for a semantic override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for semantic consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for semantic consolidation.
summaryOverride (dict) --
The summary override configuration for a custom memory strategy.
consolidation (dict) --
The consolidation configuration for a summary override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for summary consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for summary consolidation.
userPreferenceOverride (dict) --
The user preference override configuration for a custom memory strategy.
extraction (dict) --
The extraction configuration for a user preference override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for user preference extraction.
modelId (string) -- [REQUIRED]
The model ID to use for user preference extraction.
consolidation (dict) --
The consolidation configuration for a user preference override.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for user preference consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for user preference consolidation.
modifyMemoryStrategies (list) --
The list of memory strategies to modify.
(dict) --
Input for modifying a memory strategy.
memoryStrategyId (string) -- [REQUIRED]
The unique identifier of the memory strategy to modify.
description (string) --
The updated description of the memory strategy.
namespaces (list) --
The updated namespaces for the memory strategy.
(string) --
configuration (dict) --
The updated configuration for the memory strategy.
extraction (dict) --
The updated extraction configuration.
customExtractionConfiguration (dict) --
The updated custom extraction configuration.
semanticExtractionOverride (dict) --
The semantic extraction override configuration input.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for semantic extraction.
modelId (string) -- [REQUIRED]
The model ID to use for semantic extraction.
userPreferenceExtractionOverride (dict) --
The user preference extraction override configuration input.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for user preference extraction.
modelId (string) -- [REQUIRED]
The model ID to use for user preference extraction.
consolidation (dict) --
The updated consolidation configuration.
customConsolidationConfiguration (dict) --
The updated custom consolidation configuration.
semanticConsolidationOverride (dict) --
The semantic consolidation override configuration input.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for semantic consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for semantic consolidation.
summaryConsolidationOverride (dict) --
The summary consolidation override configuration input.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for summary consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for summary consolidation.
userPreferenceConsolidationOverride (dict) --
The user preference consolidation override configuration input.
appendToPrompt (string) -- [REQUIRED]
The text to append to the prompt for user preference consolidation.
modelId (string) -- [REQUIRED]
The model ID to use for user preference consolidation.
deleteMemoryStrategies (list) --
The list of memory strategies to delete.
(dict) --
Input for deleting a memory strategy.
memoryStrategyId (string) -- [REQUIRED]
The unique identifier of the memory strategy to delete.
dict
Response Syntax
{ 'memory': { 'arn': 'string', 'id': 'string', 'name': 'string', 'description': 'string', 'encryptionKeyArn': 'string', 'memoryExecutionRoleArn': 'string', 'eventExpiryDuration': 123, 'status': 'CREATING'|'ACTIVE'|'FAILED'|'DELETING', 'failureReason': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'strategies': [ { 'strategyId': 'string', 'name': 'string', 'description': 'string', 'configuration': { 'type': 'SEMANTIC_OVERRIDE'|'SUMMARY_OVERRIDE'|'USER_PREFERENCE_OVERRIDE', 'extraction': { 'customExtractionConfiguration': { 'semanticExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceExtractionOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } }, 'consolidation': { 'customConsolidationConfiguration': { 'semanticConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'summaryConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' }, 'userPreferenceConsolidationOverride': { 'appendToPrompt': 'string', 'modelId': 'string' } } } }, 'type': 'SEMANTIC'|'SUMMARIZATION'|'USER_PREFERENCE'|'CUSTOM', 'namespaces': [ 'string', ], 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'ACTIVE'|'DELETING'|'FAILED' }, ] } }
Response Structure
(dict) --
memory (dict) --
The updated memory details.
arn (string) --
The Amazon Resource Name (ARN) of the memory.
id (string) --
The unique identifier of the memory.
name (string) --
The name of the memory.
description (string) --
The description of the memory.
encryptionKeyArn (string) --
The ARN of the KMS key used to encrypt the memory.
memoryExecutionRoleArn (string) --
The ARN of the IAM role that provides permissions for the memory.
eventExpiryDuration (integer) --
The number of days after which memory events will expire.
status (string) --
The current status of the memory.
failureReason (string) --
The reason for failure if the memory is in a failed state.
createdAt (datetime) --
The timestamp when the memory was created.
updatedAt (datetime) --
The timestamp when the memory was last updated.
strategies (list) --
The list of memory strategies associated with this memory.
(dict) --
Contains information about a memory strategy.
strategyId (string) --
The unique identifier of the memory strategy.
name (string) --
The name of the memory strategy.
description (string) --
The description of the memory strategy.
configuration (dict) --
The configuration of the memory strategy.
type (string) --
The type of override for the strategy configuration.
extraction (dict) --
The extraction configuration for the memory strategy.
customExtractionConfiguration (dict) --
The custom extraction configuration.
semanticExtractionOverride (dict) --
The semantic extraction override configuration.
appendToPrompt (string) --
The text to append to the prompt for semantic extraction.
modelId (string) --
The model ID to use for semantic extraction.
userPreferenceExtractionOverride (dict) --
The user preference extraction override configuration.
appendToPrompt (string) --
The text to append to the prompt for user preference extraction.
modelId (string) --
The model ID to use for user preference extraction.
consolidation (dict) --
The consolidation configuration for the memory strategy.
customConsolidationConfiguration (dict) --
The custom consolidation configuration.
semanticConsolidationOverride (dict) --
The semantic consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for semantic consolidation.
modelId (string) --
The model ID to use for semantic consolidation.
summaryConsolidationOverride (dict) --
The summary consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for summary consolidation.
modelId (string) --
The model ID to use for summary consolidation.
userPreferenceConsolidationOverride (dict) --
The user preference consolidation override configuration.
appendToPrompt (string) --
The text to append to the prompt for user preference consolidation.
modelId (string) --
The model ID to use for user preference consolidation.
type (string) --
The type of the memory strategy.
namespaces (list) --
The namespaces associated with the memory strategy.
(string) --
createdAt (datetime) --
The timestamp when the memory strategy was created.
updatedAt (datetime) --
The timestamp when the memory strategy was last updated.
status (string) --
The current status of the memory strategy.
Retrieves information about a specific Gateway.
See also: AWS API Documentation
Request Syntax
client.get_gateway( gatewayIdentifier='string' )
string
[REQUIRED]
The identifier of the gateway to retrieve. This can be either the gateway ID or the gateway ARN.
dict
Response Syntax
{ 'gatewayArn': 'string', 'gatewayId': 'string', 'gatewayUrl': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ], 'name': 'string', 'description': 'string', 'roleArn': 'string', 'protocolType': 'MCP', 'protocolConfiguration': { 'mcp': { 'supportedVersions': [ 'string', ], 'instructions': 'string', 'searchType': 'SEMANTIC' } }, 'authorizerType': 'CUSTOM_JWT', 'authorizerConfiguration': { 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } }, 'kmsKeyArn': 'string', 'workloadIdentityDetails': { 'workloadIdentityArn': 'string' }, 'exceptionLevel': 'DEBUG' }
Response Structure
(dict) --
gatewayArn (string) --
The Amazon Resource Name (ARN) of the Gateway.
gatewayId (string) --
The unique identifier of the Gateway.
gatewayUrl (string) --
An endpoint for invoking Gateway.
createdAt (datetime) --
The timestamp when the Gateway was created.
updatedAt (datetime) --
The timestamp when the Gateway was last updated.
status (string) --
The current status of the Gateway.
statusReasons (list) --
The reasons for the current status of the Gateway.
(string) --
name (string) --
The name of the Gateway.
description (string) --
The description of the Gateway.
roleArn (string) --
The IAM role ARN that provides permissions for the Gateway.
protocolType (string) --
Protocol applied to a Gateway.
protocolConfiguration (dict) --
The configuration for a gateway protocol. This structure defines how the gateway communicates with external services.
mcp (dict) --
The configuration for the Model Context Protocol (MCP). This protocol enables communication between Amazon Bedrock Agent and external tools.
supportedVersions (list) --
The supported versions of the Model Context Protocol. This field specifies which versions of the protocol the gateway can use.
(string) --
instructions (string) --
The instructions for using the Model Context Protocol gateway. These instructions provide guidance on how to interact with the gateway.
searchType (string) --
The search type for the Model Context Protocol gateway. This field specifies how the gateway handles search operations.
authorizerType (string) --
Authorizer type for the gateway.
authorizerConfiguration (dict) --
The authorizer configuration for the Gateway.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) --
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
kmsKeyArn (string) --
The ARN of the KMS key used to encrypt the Gateway.
workloadIdentityDetails (dict) --
The workload identity details for the Gateway.
workloadIdentityArn (string) --
The ARN associated with the workload identity.
exceptionLevel (string) --
The verbosity of exception messages. Use DEBUG mode to see granular exception messages from a Gateway. If this parameter is not set, exception messages are by default sanitized for presentation to end users.
Creates a custom code interpreter.
See also: AWS API Documentation
Request Syntax
client.create_code_interpreter( name='string', description='string', executionRoleArn='string', networkConfiguration={ 'networkMode': 'PUBLIC'|'SANDBOX' }, clientToken='string' )
string
[REQUIRED]
The name of the code interpreter. The name must be unique within your account.
string
The description of the code interpreter.
string
The Amazon Resource Name (ARN) of the IAM role that provides permissions for the code interpreter to access Amazon Web Services services.
dict
[REQUIRED]
The network configuration for the code interpreter. This configuration specifies the network mode for the code interpreter.
networkMode (string) -- [REQUIRED]
The network mode for the code interpreter. This field specifies how the code interpreter connects to the network.
string
A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, Amazon Bedrock ignores the request but does not return an error.
This field is autopopulated if not provided.
dict
Response Syntax
{ 'codeInterpreterId': 'string', 'codeInterpreterArn': 'string', 'createdAt': datetime(2015, 1, 1), 'status': 'CREATING'|'CREATE_FAILED'|'READY'|'DELETING'|'DELETE_FAILED'|'DELETED' }
Response Structure
(dict) --
codeInterpreterId (string) --
The unique identifier of the created code interpreter.
codeInterpreterArn (string) --
The Amazon Resource Name (ARN) of the created code interpreter.
createdAt (datetime) --
The timestamp when the code interpreter was created.
status (string) --
The current status of the code interpreter.
Deletes a workload identity.
See also: AWS API Documentation
Request Syntax
client.delete_workload_identity( name='string' )
string
[REQUIRED]
The name of the workload identity to delete.
dict
Response Syntax
{}
Response Structure
(dict) --
Creates a new workload identity.
See also: AWS API Documentation
Request Syntax
client.create_workload_identity( name='string', allowedResourceOauth2ReturnUrls=[ 'string', ] )
string
[REQUIRED]
The name of the workload identity. The name must be unique within your account.
list
The list of allowed OAuth2 return URLs for resources associated with this workload identity.
(string) --
dict
Response Syntax
{ 'name': 'string', 'workloadIdentityArn': 'string', 'allowedResourceOauth2ReturnUrls': [ 'string', ] }
Response Structure
(dict) --
name (string) --
The name of the workload identity.
workloadIdentityArn (string) --
The Amazon Resource Name (ARN) of the workload identity.
allowedResourceOauth2ReturnUrls (list) --
The list of allowed OAuth2 return URLs for resources associated with this workload identity.
(string) --
Creates an Amazon Secure AgentEndpoint.
See also: AWS API Documentation
Request Syntax
client.create_agent_runtime_endpoint( agentRuntimeId='string', name='string', agentRuntimeVersion='string', description='string', clientToken='string' )
string
[REQUIRED]
The unique identifier of the agent runtime to create an endpoint for.
string
[REQUIRED]
The name of the agent runtime endpoint.
string
The version of the agent runtime to use for the endpoint.
string
The description of the agent runtime endpoint.
string
A unique, case-sensitive identifier to ensure idempotency of the request.
This field is autopopulated if not provided.
dict
Response Syntax
{ 'targetVersion': 'string', 'agentRuntimeEndpointArn': 'string', 'agentRuntimeArn': 'string', 'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING', 'createdAt': datetime(2015, 1, 1) }
Response Structure
(dict) --
targetVersion (string) --
The target version of the agent runtime for the endpoint.
agentRuntimeEndpointArn (string) --
The Amazon Resource Name (ARN) of the agent runtime endpoint.
agentRuntimeArn (string) --
The Amazon Resource Name (ARN) of the agent runtime.
status (string) --
The current status of the agent runtime endpoint.
createdAt (datetime) --
The timestamp when the agent runtime endpoint was created.
Lists all API key credential providers in your account.
See also: AWS API Documentation
Request Syntax
client.list_api_key_credential_providers( nextToken='string', maxResults=123 )
string
Pagination token.
integer
Maximum number of results to return.
dict
Response Syntax
{ 'credentialProviders': [ { 'name': 'string', 'credentialProviderArn': 'string', 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }, ], 'nextToken': 'string' }
Response Structure
(dict) --
credentialProviders (list) --
The list of API key credential providers.
(dict) --
Contains information about an API key credential provider.
name (string) --
The name of the API key credential provider.
credentialProviderArn (string) --
The Amazon Resource Name (ARN) of the API key credential provider.
createdTime (datetime) --
The timestamp when the API key credential provider was created.
lastUpdatedTime (datetime) --
The timestamp when the API key credential provider was last updated.
nextToken (string) --
Pagination token for the next page of results.
Retrieves information about a specific Gateway Target.
See also: AWS API Documentation
Request Syntax
client.get_gateway_target( gatewayIdentifier='string', targetId='string' )
string
[REQUIRED]
The identifier of the gateway that contains the target. This can be either the gateway ID or the gateway ARN.
string
[REQUIRED]
The unique identifier of the target to retrieve.
dict
Response Syntax
{ 'gatewayArn': 'string', 'targetId': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ], 'name': 'string', 'description': 'string', 'targetConfiguration': { 'mcp': { 'openApiSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'smithyModel': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'lambda': { 'lambdaArn': 'string', 'toolSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': [ { 'name': 'string', 'description': 'string', 'inputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' }, 'outputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' } }, ] } } } }, 'credentialProviderConfigurations': [ { 'credentialProviderType': 'GATEWAY_IAM_ROLE'|'OAUTH'|'API_KEY', 'credentialProvider': { 'oauthCredentialProvider': { 'providerArn': 'string', 'scopes': [ 'string', ], 'customParameters': { 'string': 'string' } }, 'apiKeyCredentialProvider': { 'providerArn': 'string', 'credentialParameterName': 'string', 'credentialPrefix': 'string', 'credentialLocation': 'HEADER'|'QUERY_PARAMETER' } } }, ] }
Response Structure
(dict) --
gatewayArn (string) --
The Amazon Resource Name (ARN) of the Gateway.
targetId (string) --
The unique identifier of the Gateway Target.
createdAt (datetime) --
The timestamp when the Gateway Target was created.
updatedAt (datetime) --
The timestamp when the Gateway Target was last updated.
status (string) --
The current status of the Gateway Target.
statusReasons (list) --
The reasons for the current status of the Gateway Target.
(string) --
name (string) --
The name of the Gateway Target.
description (string) --
The description of the Gateway Target.
targetConfiguration (dict) --
The configuration for a gateway target. This structure defines how the gateway connects to and interacts with the target endpoint.
mcp (dict) --
The Model Context Protocol (MCP) configuration for the target. This configuration defines how the gateway uses MCP to communicate with the target.
openApiSchema (dict) --
The OpenAPI schema for the Model Context Protocol target. This schema defines the API structure of the target.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
smithyModel (dict) --
The Smithy model for the Model Context Protocol target. This model defines the API structure of the target using the Smithy specification.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
lambda (dict) --
The Lambda configuration for the Model Context Protocol target. This configuration defines how the gateway uses a Lambda function to communicate with the target.
lambdaArn (string) --
The Amazon Resource Name (ARN) of the Lambda function. This function is invoked by the gateway to communicate with the target.
toolSchema (dict) --
The tool schema for the Lambda function. This schema defines the structure of the tools that the Lambda function provides.
s3 (dict) --
The Amazon S3 location of the tool schema. This location contains the schema definition file.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (list) --
The inline payload of the tool schema. This payload contains the schema definition directly in the request.
(dict) --
A tool definition for a gateway target. This structure defines a tool that the target exposes through the Model Context Protocol.
name (string) --
The name of the tool. This name identifies the tool in the Model Context Protocol.
description (string) --
The description of the tool. This description provides information about the purpose and usage of the tool.
inputSchema (dict) --
The input schema for the tool. This schema defines the structure of the input that the tool accepts.
type (string) --
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
outputSchema (dict) --
The output schema for the tool. This schema defines the structure of the output that the tool produces.
type (string) --
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
credentialProviderConfigurations (list) --
The credential provider configurations for the Gateway Target.
(dict) --
The configuration for a credential provider. This structure defines how the gateway authenticates with the target endpoint.
credentialProviderType (string) --
The type of credential provider. This field specifies which authentication method the gateway uses.
credentialProvider (dict) --
The credential provider. This field contains the specific configuration for the credential provider type.
oauthCredentialProvider (dict) --
The OAuth credential provider. This provider uses OAuth authentication to access the target endpoint.
providerArn (string) --
The Amazon Resource Name (ARN) of the OAuth credential provider. This ARN identifies the provider in Amazon Web Services.
scopes (list) --
The OAuth scopes for the credential provider. These scopes define the level of access requested from the OAuth provider.
(string) --
customParameters (dict) --
The custom parameters for the OAuth credential provider. These parameters provide additional configuration for the OAuth authentication process.
(string) --
(string) --
apiKeyCredentialProvider (dict) --
The API key credential provider. This provider uses an API key to authenticate with the target endpoint.
providerArn (string) --
The Amazon Resource Name (ARN) of the API key credential provider. This ARN identifies the provider in Amazon Web Services.
credentialParameterName (string) --
The name of the credential parameter for the API key. This parameter name is used when sending the API key to the target endpoint.
credentialPrefix (string) --
The prefix for the API key credential. This prefix is added to the API key when sending it to the target endpoint.
credentialLocation (string) --
The location of the API key credential. This field specifies where in the request the API key should be placed.
Updates an existing Gateway Target.
See also: AWS API Documentation
Request Syntax
client.update_gateway_target( gatewayIdentifier='string', targetId='string', name='string', description='string', targetConfiguration={ 'mcp': { 'openApiSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'smithyModel': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'lambda': { 'lambdaArn': 'string', 'toolSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': [ { 'name': 'string', 'description': 'string', 'inputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' }, 'outputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' } }, ] } } } }, credentialProviderConfigurations=[ { 'credentialProviderType': 'GATEWAY_IAM_ROLE'|'OAUTH'|'API_KEY', 'credentialProvider': { 'oauthCredentialProvider': { 'providerArn': 'string', 'scopes': [ 'string', ], 'customParameters': { 'string': 'string' } }, 'apiKeyCredentialProvider': { 'providerArn': 'string', 'credentialParameterName': 'string', 'credentialPrefix': 'string', 'credentialLocation': 'HEADER'|'QUERY_PARAMETER' } } }, ] )
string
[REQUIRED]
The unique identifier of the Gateway associated with the target.
string
[REQUIRED]
The unique identifier of the Gateway Target to update.
string
[REQUIRED]
The updated name for the Gateway Target.
string
The updated description for the Gateway Target.
dict
[REQUIRED]
The configuration for a gateway target. This structure defines how the gateway connects to and interacts with the target endpoint.
mcp (dict) --
The Model Context Protocol (MCP) configuration for the target. This configuration defines how the gateway uses MCP to communicate with the target.
openApiSchema (dict) --
The OpenAPI schema for the Model Context Protocol target. This schema defines the API structure of the target.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
smithyModel (dict) --
The Smithy model for the Model Context Protocol target. This model defines the API structure of the target using the Smithy specification.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
lambda (dict) --
The Lambda configuration for the Model Context Protocol target. This configuration defines how the gateway uses a Lambda function to communicate with the target.
lambdaArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the Lambda function. This function is invoked by the gateway to communicate with the target.
toolSchema (dict) -- [REQUIRED]
The tool schema for the Lambda function. This schema defines the structure of the tools that the Lambda function provides.
s3 (dict) --
The Amazon S3 location of the tool schema. This location contains the schema definition file.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (list) --
The inline payload of the tool schema. This payload contains the schema definition directly in the request.
(dict) --
A tool definition for a gateway target. This structure defines a tool that the target exposes through the Model Context Protocol.
name (string) -- [REQUIRED]
The name of the tool. This name identifies the tool in the Model Context Protocol.
description (string) -- [REQUIRED]
The description of the tool. This description provides information about the purpose and usage of the tool.
inputSchema (dict) -- [REQUIRED]
The input schema for the tool. This schema defines the structure of the input that the tool accepts.
type (string) -- [REQUIRED]
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
outputSchema (dict) --
The output schema for the tool. This schema defines the structure of the output that the tool produces.
type (string) -- [REQUIRED]
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
list
[REQUIRED]
The updated credential provider configurations for the Gateway Target.
(dict) --
The configuration for a credential provider. This structure defines how the gateway authenticates with the target endpoint.
credentialProviderType (string) -- [REQUIRED]
The type of credential provider. This field specifies which authentication method the gateway uses.
credentialProvider (dict) --
The credential provider. This field contains the specific configuration for the credential provider type.
oauthCredentialProvider (dict) --
The OAuth credential provider. This provider uses OAuth authentication to access the target endpoint.
providerArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the OAuth credential provider. This ARN identifies the provider in Amazon Web Services.
scopes (list) -- [REQUIRED]
The OAuth scopes for the credential provider. These scopes define the level of access requested from the OAuth provider.
(string) --
customParameters (dict) --
The custom parameters for the OAuth credential provider. These parameters provide additional configuration for the OAuth authentication process.
(string) --
(string) --
apiKeyCredentialProvider (dict) --
The API key credential provider. This provider uses an API key to authenticate with the target endpoint.
providerArn (string) -- [REQUIRED]
The Amazon Resource Name (ARN) of the API key credential provider. This ARN identifies the provider in Amazon Web Services.
credentialParameterName (string) --
The name of the credential parameter for the API key. This parameter name is used when sending the API key to the target endpoint.
credentialPrefix (string) --
The prefix for the API key credential. This prefix is added to the API key when sending it to the target endpoint.
credentialLocation (string) --
The location of the API key credential. This field specifies where in the request the API key should be placed.
dict
Response Syntax
{ 'gatewayArn': 'string', 'targetId': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ], 'name': 'string', 'description': 'string', 'targetConfiguration': { 'mcp': { 'openApiSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'smithyModel': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': 'string' }, 'lambda': { 'lambdaArn': 'string', 'toolSchema': { 's3': { 'uri': 'string', 'bucketOwnerAccountId': 'string' }, 'inlinePayload': [ { 'name': 'string', 'description': 'string', 'inputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' }, 'outputSchema': { 'type': 'string'|'number'|'object'|'array'|'boolean'|'integer', 'properties': { 'string': {'... recursive ...'} }, 'required': [ 'string', ], 'items': {'... recursive ...'}, 'description': 'string' } }, ] } } } }, 'credentialProviderConfigurations': [ { 'credentialProviderType': 'GATEWAY_IAM_ROLE'|'OAUTH'|'API_KEY', 'credentialProvider': { 'oauthCredentialProvider': { 'providerArn': 'string', 'scopes': [ 'string', ], 'customParameters': { 'string': 'string' } }, 'apiKeyCredentialProvider': { 'providerArn': 'string', 'credentialParameterName': 'string', 'credentialPrefix': 'string', 'credentialLocation': 'HEADER'|'QUERY_PARAMETER' } } }, ] }
Response Structure
(dict) --
gatewayArn (string) --
The Amazon Resource Name (ARN) of the Gateway.
targetId (string) --
The unique identifier of the updated Gateway Target.
createdAt (datetime) --
The timestamp when the Gateway Target was created.
updatedAt (datetime) --
The timestamp when the Gateway Target was last updated.
status (string) --
The current status of the updated Gateway Target.
statusReasons (list) --
The reasons for the current status of the updated Gateway Target.
(string) --
name (string) --
The updated name of the Gateway Target.
description (string) --
The updated description of the Gateway Target.
targetConfiguration (dict) --
The configuration for a gateway target. This structure defines how the gateway connects to and interacts with the target endpoint.
mcp (dict) --
The Model Context Protocol (MCP) configuration for the target. This configuration defines how the gateway uses MCP to communicate with the target.
openApiSchema (dict) --
The OpenAPI schema for the Model Context Protocol target. This schema defines the API structure of the target.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
smithyModel (dict) --
The Smithy model for the Model Context Protocol target. This model defines the API structure of the target using the Smithy specification.
s3 (dict) --
The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (string) --
The inline payload containing the API schema definition.
lambda (dict) --
The Lambda configuration for the Model Context Protocol target. This configuration defines how the gateway uses a Lambda function to communicate with the target.
lambdaArn (string) --
The Amazon Resource Name (ARN) of the Lambda function. This function is invoked by the gateway to communicate with the target.
toolSchema (dict) --
The tool schema for the Lambda function. This schema defines the structure of the tools that the Lambda function provides.
s3 (dict) --
The Amazon S3 location of the tool schema. This location contains the schema definition file.
uri (string) --
The URI of the Amazon S3 object. This URI specifies the location of the object in Amazon S3.
bucketOwnerAccountId (string) --
The account ID of the Amazon S3 bucket owner. This ID is used for cross-account access to the bucket.
inlinePayload (list) --
The inline payload of the tool schema. This payload contains the schema definition directly in the request.
(dict) --
A tool definition for a gateway target. This structure defines a tool that the target exposes through the Model Context Protocol.
name (string) --
The name of the tool. This name identifies the tool in the Model Context Protocol.
description (string) --
The description of the tool. This description provides information about the purpose and usage of the tool.
inputSchema (dict) --
The input schema for the tool. This schema defines the structure of the input that the tool accepts.
type (string) --
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
outputSchema (dict) --
The output schema for the tool. This schema defines the structure of the output that the tool produces.
type (string) --
The type of the schema definition. This field specifies the data type of the schema.
properties (dict) --
The properties of the schema definition. These properties define the fields in the schema.
(string) --
(dict) --
A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.
required (list) --
The required fields in the schema definition. These fields must be provided when using the schema.
(string) --
items (dict) --
The items in the schema definition. This field is used for array types to define the structure of the array elements.
description (string) --
The description of the schema definition. This description provides information about the purpose and usage of the schema.
credentialProviderConfigurations (list) --
The updated credential provider configurations for the Gateway Target.
(dict) --
The configuration for a credential provider. This structure defines how the gateway authenticates with the target endpoint.
credentialProviderType (string) --
The type of credential provider. This field specifies which authentication method the gateway uses.
credentialProvider (dict) --
The credential provider. This field contains the specific configuration for the credential provider type.
oauthCredentialProvider (dict) --
The OAuth credential provider. This provider uses OAuth authentication to access the target endpoint.
providerArn (string) --
The Amazon Resource Name (ARN) of the OAuth credential provider. This ARN identifies the provider in Amazon Web Services.
scopes (list) --
The OAuth scopes for the credential provider. These scopes define the level of access requested from the OAuth provider.
(string) --
customParameters (dict) --
The custom parameters for the OAuth credential provider. These parameters provide additional configuration for the OAuth authentication process.
(string) --
(string) --
apiKeyCredentialProvider (dict) --
The API key credential provider. This provider uses an API key to authenticate with the target endpoint.
providerArn (string) --
The Amazon Resource Name (ARN) of the API key credential provider. This ARN identifies the provider in Amazon Web Services.
credentialParameterName (string) --
The name of the credential parameter for the API key. This parameter name is used when sending the API key to the target endpoint.
credentialPrefix (string) --
The prefix for the API key credential. This prefix is added to the API key when sending it to the target endpoint.
credentialLocation (string) --
The location of the API key credential. This field specifies where in the request the API key should be placed.
Deletes a Gateway Target.
See also: AWS API Documentation
Request Syntax
client.delete_gateway_target( gatewayIdentifier='string', targetId='string' )
string
[REQUIRED]
The unique identifier of the Gateway associated with the target.
string
[REQUIRED]
The unique identifier of the Gateway Target to delete.
dict
Response Syntax
{ 'gatewayArn': 'string', 'targetId': 'string', 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ] }
Response Structure
(dict) --
gatewayArn (string) --
The Amazon Resource Name (ARN) of the Gateway.
targetId (string) --
The unique identifier of the deleted Gateway Target.
status (string) --
The current status of the Gateway Target deletion.
statusReasons (list) --
The reasons for the current status of the Gateway Target deletion.
(string) --
Retrieves information about an OAuth2 credential provider.
See also: AWS API Documentation
Request Syntax
client.get_oauth2_credential_provider( name='string' )
string
[REQUIRED]
The name of the OAuth2 credential provider to retrieve.
dict
Response Syntax
{ 'clientSecretArn': { 'secretArn': 'string' }, 'name': 'string', 'credentialProviderArn': 'string', 'credentialProviderVendor': 'GoogleOauth2'|'GithubOauth2'|'SlackOauth2'|'SalesforceOauth2'|'MicrosoftOauth2'|'CustomOauth2', 'oauth2ProviderConfigOutput': { 'customOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'googleOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'githubOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'slackOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'salesforceOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } }, 'microsoftOauth2ProviderConfig': { 'oauthDiscovery': { 'discoveryUrl': 'string', 'authorizationServerMetadata': { 'issuer': 'string', 'authorizationEndpoint': 'string', 'tokenEndpoint': 'string', 'responseTypes': [ 'string', ] } } } }, 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }
Response Structure
(dict) --
clientSecretArn (dict) --
The Amazon Resource Name (ARN) of the client secret in AWS Secrets Manager.
secretArn (string) --
The Amazon Resource Name (ARN) of the secret in AWS Secrets Manager.
name (string) --
The name of the OAuth2 credential provider.
credentialProviderArn (string) --
ARN of the credential provider requested.
credentialProviderVendor (string) --
The vendor of the OAuth2 credential provider.
oauth2ProviderConfigOutput (dict) --
The configuration output for the OAuth2 provider.
customOauth2ProviderConfig (dict) --
The output configuration for a custom OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the custom provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
googleOauth2ProviderConfig (dict) --
The output configuration for a Google OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Google provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
githubOauth2ProviderConfig (dict) --
The output configuration for a GitHub OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the GitHub provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
slackOauth2ProviderConfig (dict) --
The output configuration for a Slack OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Slack provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
salesforceOauth2ProviderConfig (dict) --
The output configuration for a Salesforce OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Salesforce provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
microsoftOauth2ProviderConfig (dict) --
The output configuration for a Microsoft OAuth2 provider.
oauthDiscovery (dict) --
The OAuth2 discovery information for the Microsoft provider.
discoveryUrl (string) --
The discovery URL for the OAuth2 provider.
authorizationServerMetadata (dict) --
The authorization server metadata for the OAuth2 provider.
issuer (string) --
The issuer URL for the OAuth2 authorization server.
authorizationEndpoint (string) --
The authorization endpoint URL for the OAuth2 authorization server.
tokenEndpoint (string) --
The token endpoint URL for the OAuth2 authorization server.
responseTypes (list) --
The supported response types for the OAuth2 authorization server.
(string) --
createdTime (datetime) --
The timestamp when the OAuth2 credential provider was created.
lastUpdatedTime (datetime) --
The timestamp when the OAuth2 credential provider was last updated.
Updates an existing API key credential provider.
See also: AWS API Documentation
Request Syntax
client.update_api_key_credential_provider( name='string', apiKey='string' )
string
[REQUIRED]
The name of the API key credential provider to update.
string
[REQUIRED]
The new API key to use for authentication. This value replaces the existing API key and is encrypted and stored securely.
dict
Response Syntax
{ 'apiKeySecretArn': { 'secretArn': 'string' }, 'name': 'string', 'credentialProviderArn': 'string', 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }
Response Structure
(dict) --
apiKeySecretArn (dict) --
The Amazon Resource Name (ARN) of the API key secret in AWS Secrets Manager.
secretArn (string) --
The Amazon Resource Name (ARN) of the secret in AWS Secrets Manager.
name (string) --
The name of the API key credential provider.
credentialProviderArn (string) --
The Amazon Resource Name (ARN) of the API key credential provider.
createdTime (datetime) --
The timestamp when the API key credential provider was created.
lastUpdatedTime (datetime) --
The timestamp when the API key credential provider was last updated.
Updates an existing Gateway.
See also: AWS API Documentation
Request Syntax
client.update_gateway( gatewayIdentifier='string', name='string', description='string', roleArn='string', protocolType='MCP', protocolConfiguration={ 'mcp': { 'supportedVersions': [ 'string', ], 'instructions': 'string', 'searchType': 'SEMANTIC' } }, authorizerType='CUSTOM_JWT', authorizerConfiguration={ 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } }, kmsKeyArn='string', exceptionLevel='DEBUG' )
string
[REQUIRED]
The identifier of the gateway to update. This can be either the gateway ID or the gateway ARN.
string
[REQUIRED]
The updated name for the Gateway.
string
The updated description for the Gateway.
string
[REQUIRED]
The updated IAM role ARN that provides permissions for the Gateway.
string
[REQUIRED]
The updated protocol type for the Gateway.
dict
The configuration for a gateway protocol. This structure defines how the gateway communicates with external services.
mcp (dict) --
The configuration for the Model Context Protocol (MCP). This protocol enables communication between Amazon Bedrock Agent and external tools.
supportedVersions (list) --
The supported versions of the Model Context Protocol. This field specifies which versions of the protocol the gateway can use.
(string) --
instructions (string) --
The instructions for using the Model Context Protocol gateway. These instructions provide guidance on how to interact with the gateway.
searchType (string) --
The search type for the Model Context Protocol gateway. This field specifies how the gateway handles search operations.
string
[REQUIRED]
The updated authorizer type for the Gateway.
dict
[REQUIRED]
The updated authorizer configuration for the Gateway.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) -- [REQUIRED]
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
string
The updated ARN of the KMS key used to encrypt the Gateway.
string
The verbosity of exception messages. Use DEBUG mode to see granular exception messages from a Gateway. If this parameter is not set, exception messages are by default sanitized for presentation to end users.
dict
Response Syntax
{ 'gatewayArn': 'string', 'gatewayId': 'string', 'gatewayUrl': 'string', 'createdAt': datetime(2015, 1, 1), 'updatedAt': datetime(2015, 1, 1), 'status': 'CREATING'|'UPDATING'|'UPDATE_UNSUCCESSFUL'|'DELETING'|'READY'|'FAILED', 'statusReasons': [ 'string', ], 'name': 'string', 'description': 'string', 'roleArn': 'string', 'protocolType': 'MCP', 'protocolConfiguration': { 'mcp': { 'supportedVersions': [ 'string', ], 'instructions': 'string', 'searchType': 'SEMANTIC' } }, 'authorizerType': 'CUSTOM_JWT', 'authorizerConfiguration': { 'customJWTAuthorizer': { 'discoveryUrl': 'string', 'allowedAudience': [ 'string', ], 'allowedClients': [ 'string', ] } }, 'kmsKeyArn': 'string', 'workloadIdentityDetails': { 'workloadIdentityArn': 'string' }, 'exceptionLevel': 'DEBUG' }
Response Structure
(dict) --
gatewayArn (string) --
The Amazon Resource Name (ARN) of the updated Gateway.
gatewayId (string) --
The unique identifier of the updated Gateway.
gatewayUrl (string) --
An endpoint for invoking the updated Gateway.
createdAt (datetime) --
The timestamp when the Gateway was created.
updatedAt (datetime) --
The timestamp when the Gateway was last updated.
status (string) --
The current status of the updated Gateway.
statusReasons (list) --
The reasons for the current status of the updated Gateway.
(string) --
name (string) --
The updated name of the Gateway.
description (string) --
The updated description of the Gateway.
roleArn (string) --
The updated IAM role ARN that provides permissions for the Gateway.
protocolType (string) --
The updated protocol type for the Gateway.
protocolConfiguration (dict) --
The configuration for a gateway protocol. This structure defines how the gateway communicates with external services.
mcp (dict) --
The configuration for the Model Context Protocol (MCP). This protocol enables communication between Amazon Bedrock Agent and external tools.
supportedVersions (list) --
The supported versions of the Model Context Protocol. This field specifies which versions of the protocol the gateway can use.
(string) --
instructions (string) --
The instructions for using the Model Context Protocol gateway. These instructions provide guidance on how to interact with the gateway.
searchType (string) --
The search type for the Model Context Protocol gateway. This field specifies how the gateway handles search operations.
authorizerType (string) --
The updated authorizer type for the Gateway.
authorizerConfiguration (dict) --
The updated authorizer configuration for the Gateway.
customJWTAuthorizer (dict) --
The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
discoveryUrl (string) --
This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
allowedAudience (list) --
Represents individual audience values that are validated in the incoming JWT token validation process.
(string) --
allowedClients (list) --
Represents individual client IDs that are validated in the incoming JWT token validation process.
(string) --
kmsKeyArn (string) --
The updated ARN of the KMS key used to encrypt the Gateway.
workloadIdentityDetails (dict) --
The workload identity details for the updated Gateway.
workloadIdentityArn (string) --
The ARN associated with the workload identity.
exceptionLevel (string) --
The verbosity of exception messages. Use DEBUG mode to see granular exception messages from a Gateway. If this parameter is not set, exception messages are by default sanitized for presentation to end users.
Updates an existing workload identity.
See also: AWS API Documentation
Request Syntax
client.update_workload_identity( name='string', allowedResourceOauth2ReturnUrls=[ 'string', ] )
string
[REQUIRED]
The name of the workload identity to update.
list
The new list of allowed OAuth2 return URLs for resources associated with this workload identity. This list replaces the existing list.
(string) --
dict
Response Syntax
{ 'name': 'string', 'workloadIdentityArn': 'string', 'allowedResourceOauth2ReturnUrls': [ 'string', ], 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }
Response Structure
(dict) --
name (string) --
The name of the workload identity.
workloadIdentityArn (string) --
The Amazon Resource Name (ARN) of the workload identity.
allowedResourceOauth2ReturnUrls (list) --
The list of allowed OAuth2 return URLs for resources associated with this workload identity.
(string) --
createdTime (datetime) --
The timestamp when the workload identity was created.
lastUpdatedTime (datetime) --
The timestamp when the workload identity was last updated.
Retrieves information about an API key credential provider.
See also: AWS API Documentation
Request Syntax
client.get_api_key_credential_provider( name='string' )
string
[REQUIRED]
The name of the API key credential provider to retrieve.
dict
Response Syntax
{ 'apiKeySecretArn': { 'secretArn': 'string' }, 'name': 'string', 'credentialProviderArn': 'string', 'createdTime': datetime(2015, 1, 1), 'lastUpdatedTime': datetime(2015, 1, 1) }
Response Structure
(dict) --
apiKeySecretArn (dict) --
The Amazon Resource Name (ARN) of the API key secret in AWS Secrets Manager.
secretArn (string) --
The Amazon Resource Name (ARN) of the secret in AWS Secrets Manager.
name (string) --
The name of the API key credential provider.
credentialProviderArn (string) --
The Amazon Resource Name (ARN) of the API key credential provider.
createdTime (datetime) --
The timestamp when the API key credential provider was created.
lastUpdatedTime (datetime) --
The timestamp when the API key credential provider was last updated.