2026/05/19 - AWS DevOps Agent Service - 10 updated api methods
Changes Added a new serviceType mcpserversigv4 service and association. This provides feature to register MCP sigv4 authorization based MCPs
{'configuration': {'mcpserversigv4': {'tools': ['string']}}}
Response {'association': {'configuration': {'mcpserversigv4': {'tools': ['string']}}}}
Adds a specific service association to an AgentSpace. It overwrites the existing association of the same service. Returns 201 Created on success.
See also: AWS API Documentation
Request Syntax
client.associate_service(
agentSpaceId='string',
serviceId='string',
configuration={
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {}
,
'mcpserver': {
'tools': [
'string',
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string'
},
'mcpserversplunk': {}
,
'eventChannel': {}
,
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
]
}
}
)
string
[REQUIRED]
The unique identifier of the AgentSpace
string
[REQUIRED]
The unique identifier of the service.
dict
[REQUIRED]
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'monitor' for AIDevOps monitoring.
github (dict) --
GitHub repository integration configuration.
repoName (string) -- [REQUIRED]
Associated Github repo name
repoId (string) -- [REQUIRED]
Associated Github repo ID
owner (string) -- [REQUIRED]
The GitHub repository owner name.
ownerType (string) -- [REQUIRED]
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) -- [REQUIRED]
Associated Slack workspace ID
workspaceName (string) -- [REQUIRED]
Associated Slack workspace name
transmissionTarget (dict) -- [REQUIRED]
Transmission targets for agent notifications
opsOncallTarget (dict) -- [REQUIRED]
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) -- [REQUIRED]
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) -- [REQUIRED]
New Relic Account ID
endpoint (string) -- [REQUIRED]
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools can be used with the association.
(string) --
gitlab (dict) --
GitLab project integration configuration.
projectId (string) -- [REQUIRED]
GitLab numeric project ID.
projectPath (string) -- [REQUIRED]
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) -- [REQUIRED]
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) -- [REQUIRED]
Azure DevOps organization name.
projectId (string) -- [REQUIRED]
Azure DevOps project ID.
projectName (string) -- [REQUIRED]
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) -- [REQUIRED]
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
pagerduty (dict) --
PagerDuty integration configuration
services (list) -- [REQUIRED]
List of Pagerduty service available for the association.
(string) --
customerEmail (string) -- [REQUIRED]
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools available for the association.
(string) --
dict
Response Syntax
{
'association': {
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {},
'mcpserver': {
'tools': [
'string',
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
]
}
}
},
'webhook': {
'webhookUrl': 'string',
'webhookId': 'string',
'webhookType': 'hmac'|'apikey'|'gitlab'|'pagerduty',
'webhookSecret': 'string',
'apiKey': 'string'
}
}
Response Structure
(dict) --
Output containing the newly created association and optional webhook configuration.
association (dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
webhook (dict) --
Generic webhook configuration
webhookUrl (string) --
The webhook URL endpoint
webhookId (string) --
The unique webhook identifier
webhookType (string) --
The webhook authentication type
webhookSecret (string) --
The webhook secret for authentication
apiKey (string) --
API Key for API Key webhook authentication
{'association': {'configuration': {'mcpserversigv4': {'tools': ['string']}}}}
Retrieves given associations configured for a specific AgentSpace.
See also: AWS API Documentation
Request Syntax
client.get_association(
agentSpaceId='string',
associationId='string'
)
string
[REQUIRED]
The unique identifier of the AgentSpace
string
[REQUIRED]
The unique identifier of the given association.
dict
Response Syntax
{
'association': {
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {},
'mcpserver': {
'tools': [
'string',
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
]
}
}
}
}
Response Structure
(dict) --
Output containing the requested association details.
association (dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
{'recommendation': {'rankPosition': 'integer', 'rankedAt': 'timestamp'}}
Retrieves a specific recommendation by its ID
See also: AWS API Documentation
Request Syntax
client.get_recommendation(
agentSpaceId='string',
recommendationId='string',
recommendationVersion=123
)
string
[REQUIRED]
The unique identifier for the agent space containing the recommendation
string
[REQUIRED]
The unique identifier for the recommendation to retrieve
integer
Specific version of the recommendation to retrieve. If not specified, returns the latest version.
dict
Response Syntax
{
'recommendation': {
'agentSpaceArn': 'string',
'recommendationId': 'string',
'taskId': 'string',
'goalId': 'string',
'title': 'string',
'content': {
'summary': 'string',
'spec': 'string'
},
'status': 'PROPOSED'|'ACCEPTED'|'REJECTED'|'CLOSED'|'COMPLETED'|'UPDATE_IN_PROGRESS',
'priority': 'HIGH'|'MEDIUM'|'LOW',
'goalVersion': 123,
'additionalContext': 'string',
'rankPosition': 123,
'rankedAt': datetime(2015, 1, 1),
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'version': 123
}
}
Response Structure
(dict) --
Response structure containing the requested recommendation
recommendation (dict) --
The requested recommendation
agentSpaceArn (string) --
ARN of the agent space this recommendation belongs to
recommendationId (string) --
The unique identifier for this recommendation
taskId (string) --
ID of the task that generated the recommendation
goalId (string) --
ID of the goal this recommendation is associated with
title (string) --
The title of the recommendation
content (dict) --
Content of the recommendation
summary (string) --
A brief summary of the recommendation.
spec (string) --
Agent-ready specification with detailed implementation steps
status (string) --
Current status of the recommendation
priority (string) --
Priority level of the recommendation
goalVersion (integer) --
Version of the goal at the time this recommendation was generated
additionalContext (string) --
Additional context for recommendation
rankPosition (integer) --
Position in ranked list (1 = highest priority)
rankedAt (datetime) --
Timestamp when the recommendation was last ranked
createdAt (datetime) --
Timestamp when this recommendation was created
updatedAt (datetime) --
Timestamp when this recommendation was last updated
version (integer) --
Version number for optimistic locking
{'service': {'additionalServiceDetails': {'mcpserversigv4': {'customHeaders': {'string': 'string'},
'description': 'string',
'endpoint': 'string',
'name': 'string',
'region': 'string',
'roleArn': 'string',
'service': 'string'}},
'serviceType': {'mcpserversigv4'}}}
Retrieves given service by it's unique identifier
See also: AWS API Documentation
Request Syntax
client.get_service(
serviceId='string'
)
string
[REQUIRED]
The unique identifier of the given service.
dict
Response Syntax
{
'service': {
'serviceId': 'string',
'serviceType': 'github'|'slack'|'azure'|'azuredevops'|'dynatrace'|'servicenow'|'pagerduty'|'gitlab'|'eventChannel'|'mcpservernewrelic'|'mcpservergrafana'|'mcpserverdatadog'|'mcpserver'|'mcpserversplunk'|'azureidentity'|'mcpserversigv4',
'name': 'string',
'accessibleResources': [
{...}|[...]|123|123.4|'string'|True|None,
],
'additionalServiceDetails': {
'github': {
'owner': 'string',
'ownerType': 'organization'|'user',
'targetUrl': 'string'
},
'slack': {
'teamId': 'string',
'teamName': 'string'
},
'mcpserverdatadog': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token',
'description': 'string',
'apiKeyHeader': 'string'
},
'mcpserver': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token',
'description': 'string',
'apiKeyHeader': 'string'
},
'servicenow': {
'instanceUrl': 'string'
},
'gitlab': {
'targetUrl': 'string',
'tokenType': 'personal'|'group',
'groupId': 'string'
},
'mcpserversplunk': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token',
'description': 'string',
'apiKeyHeader': 'string'
},
'mcpservernewrelic': {
'accountId': 'string',
'region': 'US'|'EU',
'description': 'string'
},
'azuredevops': {
'organizationName': 'string'
},
'azureidentity': {
'tenantId': 'string',
'clientId': 'string',
'webIdentityRoleArn': 'string',
'webIdentityTokenAudiences': [
'string',
]
},
'mcpservergrafana': {
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'
},
'pagerduty': {
'scopes': [
'string',
]
},
'mcpserversigv4': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'region': 'string',
'service': 'string',
'roleArn': 'string',
'customHeaders': {
'string': 'string'
}
}
},
'kmsKeyArn': 'string',
'privateConnectionName': 'string'
},
'tags': {
'string': 'string'
}
}
Response Structure
(dict) --
Output containing the requested service details.
service (dict) --
Represents a registered service with its configuration and accessible resources.
serviceId (string) --
The unique identifier of a service.
serviceType (string) --
The service type e.g github or dynatrace
name (string) --
The display name of the registered service.
accessibleResources (list) --
List of accessible resources for this service.
(:ref:`document<document>`) --
additionalServiceDetails (dict) --
Additional details specific to the service type.
github (dict) --
GitHub-specific service details.
owner (string) --
The GitHub repository owner name.
ownerType (string) --
The GitHub repository owner type.
targetUrl (string) --
The GitHub Enterprise Server instance URL (absent for github.com).
slack (dict) --
Slack-specific service details.
teamId (string) --
The Slack team ID.
teamName (string) --
The Slack team name.
mcpserverdatadog (dict) --
Datadog MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
mcpserver (dict) --
MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
servicenow (dict) --
ServiceNow-specific service details.
instanceUrl (string) --
The ServiceNow instance url
gitlab (dict) --
GitLab-specific service details.
targetUrl (string) --
The GitLab instance URL.
tokenType (string) --
Type of GitLab access token
groupId (string) --
Optional GitLab group ID for group-level access tokens
mcpserversplunk (dict) --
Splunk MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
mcpservernewrelic (dict) --
New Relic MCP server-specific service details.
accountId (string) --
The NewRelic account ID.
region (string) --
The NewRelic region (determines API endpoint).
description (string) --
Optional user description.
azuredevops (dict) --
Azure DevOps specific service details.
organizationName (string) --
The Azure DevOps Organization name associated with the service.
azureidentity (dict) --
Azure identity details for services using Azure authentication.
tenantId (string) --
The Azure Active Directory tenant ID for the identity.
clientId (string) --
The client ID of the service principal or managed identity used for authentication.
webIdentityRoleArn (string) --
The role ARN to be assumed by DevOps Agent for requesting Web Identity Token.
webIdentityTokenAudiences (list) --
The audiences for the Web Identity Token.
(string) --
mcpservergrafana (dict) --
Grafana MCP server-specific service details.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
authorizationMethod (string) --
The authz method used by the MCP server.
pagerduty (dict) --
Pagerduty service details.
scopes (list) --
The scopes that were assigned to the service
(string) --
mcpserversigv4 (dict) --
SigV4-authenticated MCP server-specific service details.
name (string) --
MCP server name.
endpoint (string) --
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
region (string) --
AWS region for SigV4 signing. Use '*' for SigV4a multi-region signing.
service (string) --
AWS service name for SigV4 signing.
roleArn (string) --
IAM role ARN to assume for SigV4 signing.
customHeaders (dict) --
Custom headers for the SigV4 MCP server.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
(string) --
Value type for custom headers.
kmsKeyArn (string) --
The ARN of the AWS Key Management Service (AWS KMS) customer managed key that's used to encrypt resources.
privateConnectionName (string) --
The name of the private connection used for VPC connectivity.
tags (dict) --
Tags associated with the Service.
(string) --
Tag key string.
(string) --
Tag value string.
{'associations': {'configuration': {'mcpserversigv4': {'tools': ['string']}}}}
List all associations for given AgentSpace
See also: AWS API Documentation
Request Syntax
client.list_associations(
agentSpaceId='string',
maxResults=123,
nextToken='string',
filterServiceTypes='string'
)
string
[REQUIRED]
The unique identifier of the AgentSpace
integer
Maximum number of results to return in a single call.
string
Token for the next page of results.
string
A comma-separated list of service types to filter list associations output
dict
Response Syntax
{
'nextToken': 'string',
'associations': [
{
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {},
'mcpserver': {
'tools': [
'string',
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
]
}
}
},
]
}
Response Structure
(dict) --
Output containing a list of service associations and pagination token.
nextToken (string) --
Token to retrieve the next page of results, if there are more results.
associations (list) --
The list of associations.
(dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
{'recommendations': {'rankPosition': 'integer', 'rankedAt': 'timestamp'}}
Lists recommendations for the specified agent space
See also: AWS API Documentation
Request Syntax
client.list_recommendations(
agentSpaceId='string',
taskId='string',
goalId='string',
status='PROPOSED'|'ACCEPTED'|'REJECTED'|'CLOSED'|'COMPLETED'|'UPDATE_IN_PROGRESS',
priority='HIGH'|'MEDIUM'|'LOW',
limit=123,
nextToken='string'
)
string
[REQUIRED]
The unique identifier for the agent space containing the recommendations
string
Optional task ID to filter recommendations by specific task
string
Optional goal ID to filter recommendations by specific goal
string
Optional status to filter recommendations by their current status
string
Optional priority to filter recommendations by priority level
integer
Maximum number of recommendations to return in a single response
string
Token for retrieving the next page of results
dict
Response Syntax
{
'recommendations': [
{
'agentSpaceArn': 'string',
'recommendationId': 'string',
'taskId': 'string',
'goalId': 'string',
'title': 'string',
'content': {
'summary': 'string',
'spec': 'string'
},
'status': 'PROPOSED'|'ACCEPTED'|'REJECTED'|'CLOSED'|'COMPLETED'|'UPDATE_IN_PROGRESS',
'priority': 'HIGH'|'MEDIUM'|'LOW',
'goalVersion': 123,
'additionalContext': 'string',
'rankPosition': 123,
'rankedAt': datetime(2015, 1, 1),
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'version': 123
},
],
'nextToken': 'string'
}
Response Structure
(dict) --
Response structure containing a list of recommendations
recommendations (list) --
List of recommendations matching the request criteria
(dict) --
Represents a recommendation with all its properties and metadata
agentSpaceArn (string) --
ARN of the agent space this recommendation belongs to
recommendationId (string) --
The unique identifier for this recommendation
taskId (string) --
ID of the task that generated the recommendation
goalId (string) --
ID of the goal this recommendation is associated with
title (string) --
The title of the recommendation
content (dict) --
Content of the recommendation
summary (string) --
A brief summary of the recommendation.
spec (string) --
Agent-ready specification with detailed implementation steps
status (string) --
Current status of the recommendation
priority (string) --
Priority level of the recommendation
goalVersion (integer) --
Version of the goal at the time this recommendation was generated
additionalContext (string) --
Additional context for recommendation
rankPosition (integer) --
Position in ranked list (1 = highest priority)
rankedAt (datetime) --
Timestamp when the recommendation was last ranked
createdAt (datetime) --
Timestamp when this recommendation was created
updatedAt (datetime) --
Timestamp when this recommendation was last updated
version (integer) --
Version number for optimistic locking
nextToken (string) --
Token for retrieving the next page of results, if more results are available
{'filterServiceType': {'mcpserversigv4'}}
Response {'services': {'additionalServiceDetails': {'mcpserversigv4': {'customHeaders': {'string': 'string'},
'description': 'string',
'endpoint': 'string',
'name': 'string',
'region': 'string',
'roleArn': 'string',
'service': 'string'}},
'serviceType': {'mcpserversigv4'}}}
List a list of registered service on the account level.
See also: AWS API Documentation
Request Syntax
client.list_services(
maxResults=123,
nextToken='string',
filterServiceType='github'|'slack'|'azure'|'azuredevops'|'dynatrace'|'servicenow'|'pagerduty'|'gitlab'|'eventChannel'|'mcpservernewrelic'|'mcpservergrafana'|'mcpserverdatadog'|'mcpserver'|'mcpserversplunk'|'azureidentity'|'mcpserversigv4'
)
integer
Maximum number of results to return in a single call.
string
Token for the next page of results.
string
Optional filter to list only services of a specific type.
dict
Response Syntax
{
'nextToken': 'string',
'services': [
{
'serviceId': 'string',
'serviceType': 'github'|'slack'|'azure'|'azuredevops'|'dynatrace'|'servicenow'|'pagerduty'|'gitlab'|'eventChannel'|'mcpservernewrelic'|'mcpservergrafana'|'mcpserverdatadog'|'mcpserver'|'mcpserversplunk'|'azureidentity'|'mcpserversigv4',
'name': 'string',
'accessibleResources': [
{...}|[...]|123|123.4|'string'|True|None,
],
'additionalServiceDetails': {
'github': {
'owner': 'string',
'ownerType': 'organization'|'user',
'targetUrl': 'string'
},
'slack': {
'teamId': 'string',
'teamName': 'string'
},
'mcpserverdatadog': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token',
'description': 'string',
'apiKeyHeader': 'string'
},
'mcpserver': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token',
'description': 'string',
'apiKeyHeader': 'string'
},
'servicenow': {
'instanceUrl': 'string'
},
'gitlab': {
'targetUrl': 'string',
'tokenType': 'personal'|'group',
'groupId': 'string'
},
'mcpserversplunk': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token',
'description': 'string',
'apiKeyHeader': 'string'
},
'mcpservernewrelic': {
'accountId': 'string',
'region': 'US'|'EU',
'description': 'string'
},
'azuredevops': {
'organizationName': 'string'
},
'azureidentity': {
'tenantId': 'string',
'clientId': 'string',
'webIdentityRoleArn': 'string',
'webIdentityTokenAudiences': [
'string',
]
},
'mcpservergrafana': {
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'
},
'pagerduty': {
'scopes': [
'string',
]
},
'mcpserversigv4': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'region': 'string',
'service': 'string',
'roleArn': 'string',
'customHeaders': {
'string': 'string'
}
}
},
'kmsKeyArn': 'string',
'privateConnectionName': 'string'
},
]
}
Response Structure
(dict) --
Output containing a list of registered services and pagination token.
nextToken (string) --
Token to retrieve the next page of results, if there are more results.
services (list) --
List of registered services.
(dict) --
Represents a registered service with its configuration and accessible resources.
serviceId (string) --
The unique identifier of a service.
serviceType (string) --
The service type e.g github or dynatrace
name (string) --
The display name of the registered service.
accessibleResources (list) --
List of accessible resources for this service.
(:ref:`document<document>`) --
additionalServiceDetails (dict) --
Additional details specific to the service type.
github (dict) --
GitHub-specific service details.
owner (string) --
The GitHub repository owner name.
ownerType (string) --
The GitHub repository owner type.
targetUrl (string) --
The GitHub Enterprise Server instance URL (absent for github.com).
slack (dict) --
Slack-specific service details.
teamId (string) --
The Slack team ID.
teamName (string) --
The Slack team name.
mcpserverdatadog (dict) --
Datadog MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
mcpserver (dict) --
MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
servicenow (dict) --
ServiceNow-specific service details.
instanceUrl (string) --
The ServiceNow instance url
gitlab (dict) --
GitLab-specific service details.
targetUrl (string) --
The GitLab instance URL.
tokenType (string) --
Type of GitLab access token
groupId (string) --
Optional GitLab group ID for group-level access tokens
mcpserversplunk (dict) --
Splunk MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
mcpservernewrelic (dict) --
New Relic MCP server-specific service details.
accountId (string) --
The NewRelic account ID.
region (string) --
The NewRelic region (determines API endpoint).
description (string) --
Optional user description.
azuredevops (dict) --
Azure DevOps specific service details.
organizationName (string) --
The Azure DevOps Organization name associated with the service.
azureidentity (dict) --
Azure identity details for services using Azure authentication.
tenantId (string) --
The Azure Active Directory tenant ID for the identity.
clientId (string) --
The client ID of the service principal or managed identity used for authentication.
webIdentityRoleArn (string) --
The role ARN to be assumed by DevOps Agent for requesting Web Identity Token.
webIdentityTokenAudiences (list) --
The audiences for the Web Identity Token.
(string) --
mcpservergrafana (dict) --
Grafana MCP server-specific service details.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
authorizationMethod (string) --
The authz method used by the MCP server.
pagerduty (dict) --
Pagerduty service details.
scopes (list) --
The scopes that were assigned to the service
(string) --
mcpserversigv4 (dict) --
SigV4-authenticated MCP server-specific service details.
name (string) --
MCP server name.
endpoint (string) --
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
region (string) --
AWS region for SigV4 signing. Use '*' for SigV4a multi-region signing.
service (string) --
AWS service name for SigV4 signing.
roleArn (string) --
IAM role ARN to assume for SigV4 signing.
customHeaders (dict) --
Custom headers for the SigV4 MCP server.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
(string) --
Value type for custom headers.
kmsKeyArn (string) --
The ARN of the AWS Key Management Service (AWS KMS) customer managed key that's used to encrypt resources.
privateConnectionName (string) --
The name of the private connection used for VPC connectivity.
{'service': {'mcpserversigv4'},
'serviceDetails': {'mcpserversigv4': {'authorizationConfig': {'customHeaders': {'string': 'string'},
'region': 'string',
'roleArn': 'string',
'service': 'string'},
'description': 'string',
'endpoint': 'string',
'name': 'string'}}}
This operation registers the specified service
See also: AWS API Documentation
Request Syntax
client.register_service(
service='dynatrace'|'servicenow'|'pagerduty'|'gitlab'|'eventChannel'|'mcpservernewrelic'|'mcpservergrafana'|'mcpserverdatadog'|'mcpserver'|'mcpserversplunk'|'azureidentity'|'mcpserversigv4',
serviceDetails={
'dynatrace': {
'accountUrn': 'string',
'authorizationConfig': {
'oAuthClientCredentials': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'clientSecret': 'string'
}
}
},
'servicenow': {
'instanceUrl': 'string',
'authorizationConfig': {
'oAuthClientCredentials': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'clientSecret': 'string'
}
}
},
'mcpserverdatadog': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'authorizationConfig': {
'authorizationDiscovery': {
'returnToEndpoint': 'string'
}
}
},
'mcpserver': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'authorizationConfig': {
'oAuthClientCredentials': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'clientSecret': 'string',
'exchangeUrl': 'string',
'scopes': [
'string',
]
},
'oAuth3LO': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'returnToEndpoint': 'string',
'authorizationUrl': 'string',
'exchangeUrl': 'string',
'clientSecret': 'string',
'supportCodeChallenge': True|False,
'scopes': [
'string',
]
},
'apiKey': {
'apiKeyName': 'string',
'apiKeyValue': 'string',
'apiKeyHeader': 'string'
},
'bearerToken': {
'tokenName': 'string',
'tokenValue': 'string',
'authorizationHeader': 'string'
},
'authorizationDiscovery': {
'returnToEndpoint': 'string'
}
}
},
'gitlab': {
'targetUrl': 'string',
'tokenType': 'personal'|'group',
'tokenValue': 'string',
'groupId': 'string'
},
'mcpserversplunk': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'authorizationConfig': {
'oAuthClientCredentials': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'clientSecret': 'string',
'exchangeUrl': 'string',
'scopes': [
'string',
]
},
'oAuth3LO': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'returnToEndpoint': 'string',
'authorizationUrl': 'string',
'exchangeUrl': 'string',
'clientSecret': 'string',
'supportCodeChallenge': True|False,
'scopes': [
'string',
]
},
'apiKey': {
'apiKeyName': 'string',
'apiKeyValue': 'string',
'apiKeyHeader': 'string'
},
'bearerToken': {
'tokenName': 'string',
'tokenValue': 'string',
'authorizationHeader': 'string'
},
'authorizationDiscovery': {
'returnToEndpoint': 'string'
}
}
},
'mcpservernewrelic': {
'authorizationConfig': {
'apiKey': {
'apiKey': 'string',
'accountId': 'string',
'region': 'US'|'EU',
'applicationIds': [
'string',
],
'entityGuids': [
'string',
],
'alertPolicyIds': [
'string',
]
}
}
},
'eventChannel': {
'type': 'webhook'
},
'mcpservergrafana': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'authorizationConfig': {
'oAuthClientCredentials': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'clientSecret': 'string',
'exchangeUrl': 'string',
'scopes': [
'string',
]
},
'oAuth3LO': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'returnToEndpoint': 'string',
'authorizationUrl': 'string',
'exchangeUrl': 'string',
'clientSecret': 'string',
'supportCodeChallenge': True|False,
'scopes': [
'string',
]
},
'apiKey': {
'apiKeyName': 'string',
'apiKeyValue': 'string',
'apiKeyHeader': 'string'
},
'bearerToken': {
'tokenName': 'string',
'tokenValue': 'string',
'authorizationHeader': 'string'
},
'authorizationDiscovery': {
'returnToEndpoint': 'string'
}
}
},
'pagerduty': {
'scopes': [
'string',
],
'authorizationConfig': {
'oAuthClientCredentials': {
'clientName': 'string',
'clientId': 'string',
'exchangeParameters': {
'string': 'string'
},
'clientSecret': 'string'
}
}
},
'azureidentity': {
'tenantId': 'string',
'clientId': 'string',
'webIdentityRoleArn': 'string',
'webIdentityTokenAudiences': [
'string',
]
},
'mcpserversigv4': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'authorizationConfig': {
'region': 'string',
'service': 'string',
'roleArn': 'string',
'customHeaders': {
'string': 'string'
}
}
}
},
kmsKeyArn='string',
privateConnectionName='string',
name='string',
tags={
'string': 'string'
}
)
string
[REQUIRED]
Services that can be registered via the post-registration API (excludes OAuth 3LO services).
dict
[REQUIRED]
Service-specific authorization configuration parameters
dynatrace (dict) --
Dynatrace-specific service details.
accountUrn (string) -- [REQUIRED]
Dynatrace resource account urn.
authorizationConfig (dict) --
Dynatrace OAuth client credentials configuration. Use this when registering with OAuth client credentials flow.
oAuthClientCredentials (dict) --
OAuth client credentials configuration.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
clientSecret (string) -- [REQUIRED]
OAuth client secret for authenticating with the service.
servicenow (dict) --
ServiceNow-specific service details.
instanceUrl (string) -- [REQUIRED]
ServiceNow instance URL.
authorizationConfig (dict) --
ServiceNow OAuth client credentials configuration. Use this when registering with OAuth client credentials flow.
oAuthClientCredentials (dict) --
OAuth client credentials configuration.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
clientSecret (string) -- [REQUIRED]
OAuth client secret for authenticating with the service.
mcpserverdatadog (dict) --
Datadog MCP server-specific service details.
name (string) -- [REQUIRED]
MCP server name.
endpoint (string) -- [REQUIRED]
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
authorizationConfig (dict) -- [REQUIRED]
Datadog MCP server authorization configuration (only authorization discovery is supported).
authorizationDiscovery (dict) --
Datadog MCP server authorization discovery configuration.
returnToEndpoint (string) -- [REQUIRED]
The endpoint to return to after OAuth flow completes (must be AWS console domain)
mcpserver (dict) --
MCP server-specific service details.
name (string) -- [REQUIRED]
MCP server name.
endpoint (string) -- [REQUIRED]
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
authorizationConfig (dict) -- [REQUIRED]
MCP server authorization configuration.
oAuthClientCredentials (dict) --
MCP server configuration with OAuth client credentials.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
clientSecret (string) -- [REQUIRED]
OAuth client secret for authenticating with the service.
exchangeUrl (string) -- [REQUIRED]
OAuth token exchange URL.
scopes (list) --
OAuth scopes for 3LO authentication. The service will always request scope offline_access.
(string) --
oAuth3LO (dict) --
MCP server configuration with OAuth 3LO.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
returnToEndpoint (string) -- [REQUIRED]
The endpoint to return to after OAuth flow completes (must be AWS console domain)
authorizationUrl (string) -- [REQUIRED]
OAuth authorization URL for 3LO authentication.
exchangeUrl (string) -- [REQUIRED]
OAuth token exchange URL.
clientSecret (string) --
OAuth client secret for authenticating with the service. Required for confidential clients or when PKCE is not supported. Optional for public clients using PKCE.
supportCodeChallenge (boolean) --
Whether the service supports PKCE (Proof Key for Code Exchange) for enhanced security during the OAuth flow.
scopes (list) --
OAuth scopes for 3LO authentication. The service will always request scope offline_access.
(string) --
apiKey (dict) --
MCP server configuration with API key authentication.
apiKeyName (string) -- [REQUIRED]
User friendly API key name specified by end user.
apiKeyValue (string) -- [REQUIRED]
API key value for authenticating with the service.
apiKeyHeader (string) -- [REQUIRED]
HTTP header name to send the API key in requests to the service.
bearerToken (dict) --
MCP server configuration with Bearer token (RFC 6750).
tokenName (string) -- [REQUIRED]
User friendly bearer token name specified by end user.
tokenValue (string) -- [REQUIRED]
Bearer token value in alphanumeric for authenticating with the service.
authorizationHeader (string) --
HTTP header name to send the bearer token in requests to the service. Defaults to 'Authorization' per RFC 6750.
authorizationDiscovery (dict) --
MCP server authorization discovery configuration.
returnToEndpoint (string) -- [REQUIRED]
The endpoint to return to after OAuth flow completes (must be AWS console domain)
gitlab (dict) --
GitLab-specific service details.
targetUrl (string) -- [REQUIRED]
GitLab instance URL (e.g., https://gitlab.com or self-hosted instance).
tokenType (string) -- [REQUIRED]
Type of GitLab access token
tokenValue (string) -- [REQUIRED]
GitLab access token value
groupId (string) --
Optional GitLab group ID for group-level access tokens
mcpserversplunk (dict) --
Splunk MCP server-specific service details.
name (string) -- [REQUIRED]
MCP server name.
endpoint (string) -- [REQUIRED]
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
authorizationConfig (dict) -- [REQUIRED]
MCP server authorization configuration.
oAuthClientCredentials (dict) --
MCP server configuration with OAuth client credentials.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
clientSecret (string) -- [REQUIRED]
OAuth client secret for authenticating with the service.
exchangeUrl (string) -- [REQUIRED]
OAuth token exchange URL.
scopes (list) --
OAuth scopes for 3LO authentication. The service will always request scope offline_access.
(string) --
oAuth3LO (dict) --
MCP server configuration with OAuth 3LO.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
returnToEndpoint (string) -- [REQUIRED]
The endpoint to return to after OAuth flow completes (must be AWS console domain)
authorizationUrl (string) -- [REQUIRED]
OAuth authorization URL for 3LO authentication.
exchangeUrl (string) -- [REQUIRED]
OAuth token exchange URL.
clientSecret (string) --
OAuth client secret for authenticating with the service. Required for confidential clients or when PKCE is not supported. Optional for public clients using PKCE.
supportCodeChallenge (boolean) --
Whether the service supports PKCE (Proof Key for Code Exchange) for enhanced security during the OAuth flow.
scopes (list) --
OAuth scopes for 3LO authentication. The service will always request scope offline_access.
(string) --
apiKey (dict) --
MCP server configuration with API key authentication.
apiKeyName (string) -- [REQUIRED]
User friendly API key name specified by end user.
apiKeyValue (string) -- [REQUIRED]
API key value for authenticating with the service.
apiKeyHeader (string) -- [REQUIRED]
HTTP header name to send the API key in requests to the service.
bearerToken (dict) --
MCP server configuration with Bearer token (RFC 6750).
tokenName (string) -- [REQUIRED]
User friendly bearer token name specified by end user.
tokenValue (string) -- [REQUIRED]
Bearer token value in alphanumeric for authenticating with the service.
authorizationHeader (string) --
HTTP header name to send the bearer token in requests to the service. Defaults to 'Authorization' per RFC 6750.
authorizationDiscovery (dict) --
MCP server authorization discovery configuration.
returnToEndpoint (string) -- [REQUIRED]
The endpoint to return to after OAuth flow completes (must be AWS console domain)
mcpservernewrelic (dict) --
New Relic-specific service details.
authorizationConfig (dict) -- [REQUIRED]
New Relic MCP server authorization configuration.
apiKey (dict) --
New Relic API Key authentication (apiKey, accountId, region).
apiKey (string) -- [REQUIRED]
New Relic User API Key
accountId (string) -- [REQUIRED]
New Relic Account ID
region (string) -- [REQUIRED]
New Relic region (US or EU)
applicationIds (list) --
List of monitored APM application IDs in New Relic
(string) --
entityGuids (list) --
List of globally unique IDs for New Relic resources (apps, hosts, services)
(string) --
alertPolicyIds (list) --
List of alert policy IDs grouping related conditions
(string) --
eventChannel (dict) --
Event Channel specific service details.
type (string) --
The type of event channel
mcpservergrafana (dict) --
Datadog MCP server-specific service details.
name (string) -- [REQUIRED]
MCP server name.
endpoint (string) -- [REQUIRED]
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
authorizationConfig (dict) -- [REQUIRED]
Grafana MCP server authorization configuration (experimental).
oAuthClientCredentials (dict) --
MCP server configuration with OAuth client credentials.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
clientSecret (string) -- [REQUIRED]
OAuth client secret for authenticating with the service.
exchangeUrl (string) -- [REQUIRED]
OAuth token exchange URL.
scopes (list) --
OAuth scopes for 3LO authentication. The service will always request scope offline_access.
(string) --
oAuth3LO (dict) --
MCP server configuration with OAuth 3LO.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
returnToEndpoint (string) -- [REQUIRED]
The endpoint to return to after OAuth flow completes (must be AWS console domain)
authorizationUrl (string) -- [REQUIRED]
OAuth authorization URL for 3LO authentication.
exchangeUrl (string) -- [REQUIRED]
OAuth token exchange URL.
clientSecret (string) --
OAuth client secret for authenticating with the service. Required for confidential clients or when PKCE is not supported. Optional for public clients using PKCE.
supportCodeChallenge (boolean) --
Whether the service supports PKCE (Proof Key for Code Exchange) for enhanced security during the OAuth flow.
scopes (list) --
OAuth scopes for 3LO authentication. The service will always request scope offline_access.
(string) --
apiKey (dict) --
MCP server configuration with API key authentication.
apiKeyName (string) -- [REQUIRED]
User friendly API key name specified by end user.
apiKeyValue (string) -- [REQUIRED]
API key value for authenticating with the service.
apiKeyHeader (string) -- [REQUIRED]
HTTP header name to send the API key in requests to the service.
bearerToken (dict) --
MCP server configuration with Bearer token (RFC 6750).
tokenName (string) -- [REQUIRED]
User friendly bearer token name specified by end user.
tokenValue (string) -- [REQUIRED]
Bearer token value in alphanumeric for authenticating with the service.
authorizationHeader (string) --
HTTP header name to send the bearer token in requests to the service. Defaults to 'Authorization' per RFC 6750.
authorizationDiscovery (dict) --
MCP server authorization discovery configuration.
returnToEndpoint (string) -- [REQUIRED]
The endpoint to return to after OAuth flow completes (must be AWS console domain)
pagerduty (dict) --
PagerDuty specific service details.
scopes (list) -- [REQUIRED]
PagerDuty scopes.
(string) --
authorizationConfig (dict) -- [REQUIRED]
PagerDuty authorization configuration
oAuthClientCredentials (dict) --
OAuth client credentials configuration.
clientName (string) --
User friendly OAuth client name specified by end user.
clientId (string) -- [REQUIRED]
OAuth client ID for authenticating with the service.
exchangeParameters (dict) --
OAuth token exchange parameters for authenticating with the service.
(string) --
(string) --
Exchange Parameter value for MCP authentication
clientSecret (string) -- [REQUIRED]
OAuth client secret for authenticating with the service.
azureidentity (dict) --
Azure integration with AWS Outbound Identity Federation specific service details.
tenantId (string) -- [REQUIRED]
The Azure Active Directory tenant ID for the identity.
clientId (string) -- [REQUIRED]
The client ID of the service principal or managed identity used for authentication.
webIdentityRoleArn (string) -- [REQUIRED]
The role ARN to be assumed by DevOps Agent for requesting Web Identity Token.
webIdentityTokenAudiences (list) -- [REQUIRED]
The audiences for the Web Identity Token.
(string) --
mcpserversigv4 (dict) --
SigV4-authenticated MCP server-specific service details.
name (string) -- [REQUIRED]
MCP server name.
endpoint (string) -- [REQUIRED]
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
authorizationConfig (dict) -- [REQUIRED]
MCP Server SigV4 authorization configuration.
region (string) -- [REQUIRED]
AWS region for SigV4 signing. Use '*' for SigV4a multi-region signing.
service (string) -- [REQUIRED]
AWS service name for SigV4 signing.
roleArn (string) -- [REQUIRED]
IAM role ARN to assume for SigV4 signing.
customHeaders (dict) --
Custom headers for the SigV4 MCP server.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
(string) --
Value type for custom headers.
string
The ARN of the AWS Key Management Service (AWS KMS) customer managed key that's used to encrypt resources.
string
The name of the private connection to use for VPC connectivity.
string
The display name for the service registration.
dict
Tags to add to the Service at registration time.
(string) --
Tag key string.
(string) --
Tag value string.
dict
Response Syntax
{
'serviceId': 'string',
'additionalStep': {
'oauth': {
'authorizationUrl': 'string'
}
},
'kmsKeyArn': 'string',
'tags': {
'string': 'string'
}
}
Response Structure
(dict) --
Output containing the service ID and any additional steps required for registration.
serviceId (string) --
Service ID - present when registration is complete, absent when additional steps are required
additionalStep (dict) --
Indicates if additional steps are required to complete service registration (e.g., 3-legged OAuth)
oauth (dict) --
OAuth authorization step required.
authorizationUrl (string) --
The URL to redirect the user to for OAuth authorization.
kmsKeyArn (string) --
The ARN of the AWS Key Management Service (AWS KMS) customer managed key that's used to encrypt resources.
tags (dict) --
Tags associated with the registered Service.
(string) --
Tag key string.
(string) --
Tag value string.
{'configuration': {'mcpserversigv4': {'tools': ['string']}}}
Response {'association': {'configuration': {'mcpserversigv4': {'tools': ['string']}}}}
Partially updates the configuration of an existing service association for an AgentSpace. Present fields are fully replaced; absent fields are left unchanged. Returns 200 OK on success.
See also: AWS API Documentation
Request Syntax
client.update_association(
agentSpaceId='string',
associationId='string',
configuration={
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {}
,
'mcpserver': {
'tools': [
'string',
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string'
},
'mcpserversplunk': {}
,
'eventChannel': {}
,
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
]
}
}
)
string
[REQUIRED]
The unique identifier of the AgentSpace
string
[REQUIRED]
The unique identifier of the given association.
dict
[REQUIRED]
The configuration that directs how AgentSpace interacts with the given service. The entire configuration is replaced on update.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'monitor' for AIDevOps monitoring.
github (dict) --
GitHub repository integration configuration.
repoName (string) -- [REQUIRED]
Associated Github repo name
repoId (string) -- [REQUIRED]
Associated Github repo ID
owner (string) -- [REQUIRED]
The GitHub repository owner name.
ownerType (string) -- [REQUIRED]
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) -- [REQUIRED]
Associated Slack workspace ID
workspaceName (string) -- [REQUIRED]
Associated Slack workspace name
transmissionTarget (dict) -- [REQUIRED]
Transmission targets for agent notifications
opsOncallTarget (dict) -- [REQUIRED]
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) -- [REQUIRED]
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) -- [REQUIRED]
New Relic Account ID
endpoint (string) -- [REQUIRED]
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools can be used with the association.
(string) --
gitlab (dict) --
GitLab project integration configuration.
projectId (string) -- [REQUIRED]
GitLab numeric project ID.
projectPath (string) -- [REQUIRED]
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) -- [REQUIRED]
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) -- [REQUIRED]
Azure DevOps organization name.
projectId (string) -- [REQUIRED]
Azure DevOps project ID.
projectName (string) -- [REQUIRED]
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) -- [REQUIRED]
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
pagerduty (dict) --
PagerDuty integration configuration
services (list) -- [REQUIRED]
List of Pagerduty service available for the association.
(string) --
customerEmail (string) -- [REQUIRED]
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools available for the association.
(string) --
dict
Response Syntax
{
'association': {
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {},
'mcpserver': {
'tools': [
'string',
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
]
}
}
},
'webhook': {
'webhookUrl': 'string',
'webhookId': 'string',
'webhookType': 'hmac'|'apikey'|'gitlab'|'pagerduty',
'webhookSecret': 'string',
'apiKey': 'string'
}
}
Response Structure
(dict) --
Output containing the updated association and optional webhook configuration.
association (dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
webhook (dict) --
Generic webhook configuration
webhookUrl (string) --
The webhook URL endpoint
webhookId (string) --
The unique webhook identifier
webhookType (string) --
The webhook authentication type
webhookSecret (string) --
The webhook secret for authentication
apiKey (string) --
API Key for API Key webhook authentication
{'recommendation': {'rankPosition': 'integer', 'rankedAt': 'timestamp'}}
Updates an existing recommendation with new content, status, or metadata
See also: AWS API Documentation
Request Syntax
client.update_recommendation(
agentSpaceId='string',
recommendationId='string',
status='PROPOSED'|'ACCEPTED'|'REJECTED'|'CLOSED'|'COMPLETED'|'UPDATE_IN_PROGRESS',
additionalContext='string',
clientToken='string'
)
string
[REQUIRED]
The unique identifier for the agent space containing the recommendation
string
[REQUIRED]
The unique identifier for the recommendation to update
string
Current status of the recommendation
string
Additional context for recommendation
string
A unique token that ensures idempotency of the request
This field is autopopulated if not provided.
dict
Response Syntax
{
'recommendation': {
'agentSpaceArn': 'string',
'recommendationId': 'string',
'taskId': 'string',
'goalId': 'string',
'title': 'string',
'content': {
'summary': 'string',
'spec': 'string'
},
'status': 'PROPOSED'|'ACCEPTED'|'REJECTED'|'CLOSED'|'COMPLETED'|'UPDATE_IN_PROGRESS',
'priority': 'HIGH'|'MEDIUM'|'LOW',
'goalVersion': 123,
'additionalContext': 'string',
'rankPosition': 123,
'rankedAt': datetime(2015, 1, 1),
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'version': 123
}
}
Response Structure
(dict) --
Response structure containing the updated recommendation
recommendation (dict) --
The updated recommendation
agentSpaceArn (string) --
ARN of the agent space this recommendation belongs to
recommendationId (string) --
The unique identifier for this recommendation
taskId (string) --
ID of the task that generated the recommendation
goalId (string) --
ID of the goal this recommendation is associated with
title (string) --
The title of the recommendation
content (dict) --
Content of the recommendation
summary (string) --
A brief summary of the recommendation.
spec (string) --
Agent-ready specification with detailed implementation steps
status (string) --
Current status of the recommendation
priority (string) --
Priority level of the recommendation
goalVersion (integer) --
Version of the goal at the time this recommendation was generated
additionalContext (string) --
Additional context for recommendation
rankPosition (integer) --
Position in ranked list (1 = highest priority)
rankedAt (datetime) --
Timestamp when the recommendation was last ranked
createdAt (datetime) --
Timestamp when this recommendation was created
updatedAt (datetime) --
Timestamp when this recommendation was last updated
version (integer) --
Version number for optimistic locking