AWS API Changes

2026/09/25 - Agents for Amazon Bedrock - 4 new api methods

Changes Adds support for calling VPC configuration API's in Bedrock. These configurations allow the use of On Prem connectors in Bedrock Managed Knowledge bases

ListVpcConfigurations (new)

Link ¶

Returns a paginated list of the VPC configurations for a knowledge base. You can optionally filter by status. Use the nextToken parameter to retrieve additional results.

See also: AWS API Documentation

Request Syntax

client.list_vpc_configurations(
    knowledgeBaseId='string',
    statusFilter='CREATING'|'CREATED'|'DELETING'|'CREATE_FAILED'|'DELETE_FAILED',
    maxResults=123,
    nextToken='string'
)

type knowledgeBaseId:

string

param knowledgeBaseId:

[REQUIRED]

The unique identifier of the knowledge base whose VPC configurations you want to list.

type statusFilter:

string

param statusFilter:

The status to filter the results by. Only VPC configurations with the specified status are returned.

type maxResults:

integer

param maxResults:

The maximum number of results to return in the response. If more results are available, the response returns a nextToken.

type nextToken:

string

param nextToken:

A pagination token to retrieve the next page of results, returned in a previous response when more results are available.

rtype:

dict

returns:

Response Syntax

{
    'items': [
        {
            'vpcConfigurationId': 'string',
            'status': 'CREATING'|'CREATED'|'DELETING'|'CREATE_FAILED'|'DELETE_FAILED',
            'statusMessage': 'string',
            'vpcId': 'string',
            'resourceTarget': 'string',
            'port': 123,
            'protocol': 'HTTP'|'HTTPS',
            'resolutionMode': 'PUBLIC'|'IN_VPC',
            'hostHeader': 'string',
            'tlsServerName': 'string',
            'name': 'string',
            'description': 'string',
            'createdAt': datetime(2015, 1, 1)
        },
    ],
    'nextToken': 'string'
}

Response Structure

(dict) --
- items (list) --
  
  A list of VPC configuration summaries.
  - (dict) --
    
    A summary of a VPC configuration returned by ListVpcConfigurations.
    - vpcConfigurationId (string) --
      
      The unique identifier of the VPC configuration.
    - status (string) --
      
      The current lifecycle status of the VPC configuration.
    - statusMessage (string) --
      
      Additional detail about the current status, such as the cause of a failure.
    - vpcId (string) --
      
      The identifier of the VPC that the knowledge base connects through to reach the resource.
    - resourceTarget (string) --
      
      The private IPv4 address or DNS name of the resource.
    - port (integer) --
      
      The port on which the resource is reached.
    - protocol (string) --
      
      The protocol used to connect to the resource.
    - resolutionMode (string) --
      
      Specifies how the resource target is resolved.
    - hostHeader (string) --
      
      The HTTP Host header value sent when invoking the resource, if configured.
    - tlsServerName (string) --
      
      The expected TLS server name that the service matches against the Subject Alternative Names on the resource's TLS certificate. Present when protocol is HTTPS.
    - name (string) --
      
      The human-readable name of the VPC configuration, if provided.
    - description (string) --
      
      The description of the VPC configuration, if provided.
    - createdAt (datetime) --
      
      The time at which the VPC configuration was created.
- nextToken (string) --
  
  A pagination token to retrieve the next page of results, present when the total number of results exceeds the maximum number of results.

GetVpcConfiguration (new)

Link ¶

Returns the details and current status of a single VPC configuration. Use this operation to poll for the outcome of an asynchronous create or delete.

See also: AWS API Documentation

Request Syntax

client.get_vpc_configuration(
    knowledgeBaseId='string',
    vpcConfigurationId='string'
)

type knowledgeBaseId:

string

param knowledgeBaseId:

[REQUIRED]

The unique identifier of the knowledge base that owns the VPC configuration.

type vpcConfigurationId:

string

param vpcConfigurationId:

[REQUIRED]

The unique identifier of the VPC configuration to retrieve.

rtype:

dict

returns:

Response Syntax

{
    'vpcConfiguration': {
        'vpcConfigurationId': 'string',
        'status': 'CREATING'|'CREATED'|'DELETING'|'CREATE_FAILED'|'DELETE_FAILED',
        'statusMessage': 'string',
        'vpcId': 'string',
        'subnetIds': [
            'string',
        ],
        'resourceTarget': 'string',
        'port': 123,
        'protocol': 'HTTP'|'HTTPS',
        'resolutionMode': 'PUBLIC'|'IN_VPC',
        'hostHeader': 'string',
        'tlsServerName': 'string',
        'name': 'string',
        'description': 'string',
        'createdAt': datetime(2015, 1, 1),
        'updatedAt': datetime(2015, 1, 1)
    }
}

Response Structure

(dict) --
- vpcConfiguration (dict) --
  
  The VPC configuration, including its connection settings, resolution mode, and current lifecycle status.
  - vpcConfigurationId (string) --
    
    The unique identifier of the VPC configuration.
  - status (string) --
    
    The current lifecycle status of the VPC configuration.
  - statusMessage (string) --
    
    Additional detail about the current status, such as the cause of a CREATE_FAILED or DELETE_FAILED status.
  - vpcId (string) --
    
    The identifier of the VPC that the knowledge base connects through to reach the resource.
  - subnetIds (list) --
    
    The subnets that the knowledge base uses to connect to the resource.
    - (string) --
  - resourceTarget (string) --
    
    The private IPv4 address or DNS name of the resource.
  - port (integer) --
    
    The port on which the resource is reached.
  - protocol (string) --
    
    The protocol used to connect to the resource.
  - resolutionMode (string) --
    
    Specifies how the resource target is resolved.
  - hostHeader (string) --
    
    The HTTP Host header value sent when invoking the resource, if configured.
  - tlsServerName (string) --
    
    The expected TLS server name that the service matches against the Subject Alternative Names on the resource's TLS certificate. Present when protocol is HTTPS.
  - name (string) --
    
    The human-readable name of the VPC configuration, if provided.
  - description (string) --
    
    The description of the VPC configuration, if provided.
  - createdAt (datetime) --
    
    The time at which the VPC configuration was created.
  - updatedAt (datetime) --
    
    The time at which the VPC configuration was last updated.

DeleteVpcConfiguration (new)

Link ¶

Deletes a VPC configuration. This operation is asynchronous: it returns status DELETING. Poll GetVpcConfiguration until it returns a ResourceNotFoundException, indicating the configuration is deleted. Delete requests are idempotent and safe to retry.

See also: AWS API Documentation

Request Syntax

client.delete_vpc_configuration(
    knowledgeBaseId='string',
    vpcConfigurationId='string'
)

type knowledgeBaseId:

string

param knowledgeBaseId:

[REQUIRED]

The unique identifier of the knowledge base that owns the VPC configuration.

type vpcConfigurationId:

string

param vpcConfigurationId:

[REQUIRED]

The unique identifier of the VPC configuration to delete.

rtype:

dict

returns:

Response Syntax

{
    'vpcConfigurationId': 'string',
    'status': 'CREATING'|'CREATED'|'DELETING'|'CREATE_FAILED'|'DELETE_FAILED'
}

Response Structure

(dict) --
- vpcConfigurationId (string) --
  
  The unique identifier of the VPC configuration being deleted.
- status (string) --
  
  The current status of the VPC configuration. Immediately after a delete request this is DELETING.

CreateVpcConfiguration (new)

Link ¶

Creates a VPC configuration that lets a knowledge base connect to a resource in your private VPC. This operation is asynchronous: it returns a vpcConfigurationId with status CREATING. Poll GetVpcConfiguration until the status becomes CREATED or CREATE_FAILED.

See also: AWS API Documentation

Request Syntax

client.create_vpc_configuration(
    knowledgeBaseId='string',
    clientToken='string',
    vpcId='string',
    subnetIds=[
        'string',
    ],
    resourceTarget='string',
    port=123,
    protocol='HTTP'|'HTTPS',
    resolutionMode='PUBLIC'|'IN_VPC',
    hostHeader='string',
    tlsServerName='string',
    name='string',
    description='string'
)

type knowledgeBaseId:

string

param knowledgeBaseId:

[REQUIRED]

The unique identifier of the knowledge base to associate this VPC configuration with.

type clientToken:

string

param clientToken:

A unique, case-sensitive identifier to ensure that the operation completes no more than one time. If this token matches a previous request, the service ignores the request but does not return an error.

This field is autopopulated if not provided.

type vpcId:

string

param vpcId:

[REQUIRED]

The identifier of the VPC that the knowledge base connects through to reach the resource.

type subnetIds:

list

param subnetIds:

[REQUIRED]

The subnets, in the VPC identified by vpcId, that the knowledge base uses to connect to the resource.

(string) --

type resourceTarget:

string

param resourceTarget:

[REQUIRED]

The private IPv4 address or DNS name of the resource you want the knowledge base to reach. The target must be privately reachable from inside your VPC, such as an internal load balancer or a private IP. The following are not supported:

Internet-facing endpoints
Loopback addresses
Link-local addresses
Wildcard addresses
Multicast addresses
IPv6 literals

type port:

integer

param port:

[REQUIRED]

The port on which to reach the resource.

type protocol:

string

param protocol:

[REQUIRED]

The protocol used to connect to the resource. Specify HTTP for plaintext or HTTPS for TLS. When you specify HTTPS, you must also provide tlsServerName.

type resolutionMode:

string

param resolutionMode:

[REQUIRED]

Controls how a domain-name resourceTarget is resolved. This applies only when the target is a domain name; it has no effect for IP-address targets, which have no name to resolve. In all cases the resolved address must be reachable from inside your VPC. Valid values:

IN_VPC (default, recommended) – The target domain name is resolved privately, using the DNS resolvers of the VPC, such as private Route 53 hosted zones or on-premises DNS reachable from the VPC. Use this for targets that are private to your VPC, such as internal load balancers, private hosted-zone names, or on-premises hosts.
PUBLIC – The target domain name is resolved against public DNS resolvers. Select this only when the target's domain name must be resolved through public DNS and the resulting address is still reachable from the VPC, an uncommon split-horizon configuration. If you are unsure, use IN_VPC.

type hostHeader:

string

param hostHeader:

An optional HTTP Host header value to send when invoking the resource. Set this only if your resource (or an upstream router or ingress) routes by the Host header and that host differs from the target. This setting is independent of tlsServerName.

type tlsServerName:

string

param tlsServerName:

The expected TLS server name. The service matches this value against the Subject Alternative Names on your resource's TLS certificate during invocation. This field is required when protocol is HTTPS. Set it to a hostname on your certificate, such as app.internal.example.com. You can use a single leftmost wildcard, such as *.example.com. The value must be a hostname without a port.

type name:

string

param name:

An optional human-readable name for the VPC configuration. If you don't specify a name, the VPC configuration has no name.

type description:

string

param description:

An optional description of the VPC configuration. If you don't specify a description, the VPC configuration has no description.

rtype:

dict

returns:

Response Syntax

{
    'vpcConfigurationId': 'string',
    'status': 'CREATING'|'CREATED'|'DELETING'|'CREATE_FAILED'|'DELETE_FAILED'
}

Response Structure

(dict) --
- vpcConfigurationId (string) --
  
  The unique identifier of the VPC configuration that was created.
- status (string) --
  
  The current status of the VPC configuration. Immediately after creation this is CREATING.