AWS API Changes

2026/03/24 - Amazon Bedrock AgentCore Control - 4 updated api methods

Changes Adds SDK support for 1) Persist session state in AgentCore Runtime via filesystemConfigurations in CreateAgentRuntime, UpdateAgentRuntime, and GetAgentRuntime APIs, 2) Optional name-based filtering on AgentCore ListBrowserProfiles API.

CreateAgentRuntime (updated)

Link ¶
Changes (request)

{'filesystemConfigurations': [{'sessionStorage': {'mountPath': 'string'}}]}

Creates an Amazon Bedrock AgentCore Runtime.

See also: AWS API Documentation

Request Syntax

client.create_agent_runtime(
    agentRuntimeName='string',
    agentRuntimeArtifact={
        'containerConfiguration': {
            'containerUri': 'string'
        },
        'codeConfiguration': {
            'code': {
                's3': {
                    'bucket': 'string',
                    'prefix': 'string',
                    'versionId': 'string'
                }
            },
            'runtime': 'PYTHON_3_10'|'PYTHON_3_11'|'PYTHON_3_12'|'PYTHON_3_13'|'PYTHON_3_14',
            'entryPoint': [
                'string',
            ]
        }
    },
    roleArn='string',
    networkConfiguration={
        'networkMode': 'PUBLIC'|'VPC',
        'networkModeConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    clientToken='string',
    description='string',
    authorizerConfiguration={
        'customJWTAuthorizer': {
            'discoveryUrl': 'string',
            'allowedAudience': [
                'string',
            ],
            'allowedClients': [
                'string',
            ],
            'allowedScopes': [
                'string',
            ],
            'customClaims': [
                {
                    'inboundTokenClaimName': 'string',
                    'inboundTokenClaimValueType': 'STRING'|'STRING_ARRAY',
                    'authorizingClaimMatchValue': {
                        'claimMatchValue': {
                            'matchValueString': 'string',
                            'matchValueStringList': [
                                'string',
                            ]
                        },
                        'claimMatchOperator': 'EQUALS'|'CONTAINS'|'CONTAINS_ANY'
                    }
                },
            ]
        }
    },
    requestHeaderConfiguration={
        'requestHeaderAllowlist': [
            'string',
        ]
    },
    protocolConfiguration={
        'serverProtocol': 'MCP'|'HTTP'|'A2A'|'AGUI'
    },
    lifecycleConfiguration={
        'idleRuntimeSessionTimeout': 123,
        'maxLifetime': 123
    },
    environmentVariables={
        'string': 'string'
    },
    filesystemConfigurations=[
        {
            'sessionStorage': {
                'mountPath': 'string'
            }
        },
    ],
    tags={
        'string': 'string'
    }
)

type agentRuntimeName:

string

param agentRuntimeName:

[REQUIRED]

The name of the AgentCore Runtime.

type agentRuntimeArtifact:

dict

param agentRuntimeArtifact:

[REQUIRED]

The artifact of the AgentCore Runtime.

containerConfiguration (dict) --

The container configuration for the agent artifact.
- containerUri (string) -- [REQUIRED]
  
  The ECR URI of the container.
codeConfiguration (dict) --

The code configuration for the agent runtime artifact, including the source code location and execution settings.
- code (dict) -- [REQUIRED]
  
  The source code location and configuration details.
  
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys can be set: s3.
  - s3 (dict) --
    
    The Amazon Amazon S3 object that contains the source code for the agent runtime.
    - bucket (string) -- [REQUIRED]
      
      The name of the Amazon S3 bucket. This bucket contains the stored data.
    - prefix (string) -- [REQUIRED]
      
      The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
    - versionId (string) --
      
      The version ID of the Amazon Amazon S3 object. If not specified, the latest version of the object is used.
- runtime (string) -- [REQUIRED]
  
  The runtime environment for executing the code (for example, Python 3.9 or Node.js 18).
- entryPoint (list) -- [REQUIRED]
  
  The entry point for the code execution, specifying the function or method that should be invoked when the code runs.
  - (string) --

type roleArn:

string

param roleArn:

[REQUIRED]

The IAM role ARN that provides permissions for the AgentCore Runtime.

type networkConfiguration:

dict

param networkConfiguration:

[REQUIRED]

The network configuration for the AgentCore Runtime.

networkMode (string) -- [REQUIRED]

The network mode for the AgentCore Runtime.
networkModeConfig (dict) --

The network mode configuration for the AgentCore Runtime.
- securityGroups (list) -- [REQUIRED]
  
  The security groups associated with the VPC configuration.
  - (string) --
- subnets (list) -- [REQUIRED]
  
  The subnets associated with the VPC configuration.
  - (string) --

type clientToken:

string

param clientToken:

A unique, case-sensitive identifier to ensure idempotency of the request.

This field is autopopulated if not provided.

type description:

string

param description:

The description of the AgentCore Runtime.

type authorizerConfiguration:

dict

param authorizerConfiguration:

The authorizer configuration for the AgentCore Runtime.

customJWTAuthorizer (dict) --

The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
- discoveryUrl (string) -- [REQUIRED]
  
  This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
- allowedAudience (list) --
  
  Represents individual audience values that are validated in the incoming JWT token validation process.
  - (string) --
- allowedClients (list) --
  
  Represents individual client IDs that are validated in the incoming JWT token validation process.
  - (string) --
- allowedScopes (list) --
  
  An array of scopes that are allowed to access the token.
  - (string) --
- customClaims (list) --
  
  An array of objects that define a custom claim validation name, value, and operation
  - (dict) --
    
    Defines the name of a custom claim field and rules for finding matches to authenticate its value.
    - inboundTokenClaimName (string) -- [REQUIRED]
      
      The name of the custom claim field to check.
    - inboundTokenClaimValueType (string) -- [REQUIRED]
      
      The data type of the claim value to check for.
      - Use STRING if you want to find an exact match to a string you define.
      - Use STRING_ARRAY if you want to fnd a match to at least one value in an array you define.
    - authorizingClaimMatchValue (dict) -- [REQUIRED]
      
      Defines the value or values to match for and the relationship of the match.
      - claimMatchValue (dict) -- [REQUIRED]
        
        The value or values to match for.
        
        Note
        
        This is a Tagged Union structure. Only one of the following top level keys can be set: matchValueString, matchValueStringList.
        
        matchValueString (string) --
        
        The string value to match for.
        
        matchValueStringList (list) --
        
        An array of strings to check for a match.
        
        (string) --
      - claimMatchOperator (string) -- [REQUIRED]
        
        Defines the relationship between the claim field value and the value or values you're matching for.

type requestHeaderConfiguration:

dict

param requestHeaderConfiguration:

Configuration for HTTP request headers that will be passed through to the runtime.

requestHeaderAllowlist (list) --

A list of HTTP request headers that are allowed to be passed through to the runtime.
- (string) --

type protocolConfiguration:

dict

param protocolConfiguration:

The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.

serverProtocol (string) -- [REQUIRED]

The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.

type lifecycleConfiguration:

dict

param lifecycleConfiguration:

The life cycle configuration for the AgentCore Runtime.

idleRuntimeSessionTimeout (integer) --

Timeout in seconds for idle runtime sessions. When a session remains idle for this duration, it will be automatically terminated. Default: 900 seconds (15 minutes).
maxLifetime (integer) --

Maximum lifetime for the instance in seconds. Once reached, instances will be automatically terminated and replaced. Default: 28800 seconds (8 hours).

type environmentVariables:

dict

param environmentVariables:

Environment variables to set in the AgentCore Runtime environment.

(string) --
- (string) --

type filesystemConfigurations:

list

param filesystemConfigurations:

The filesystem configurations to mount into the AgentCore Runtime. Use filesystem configurations to provide persistent storage to your AgentCore Runtime sessions.

(dict) --

Configuration for a filesystem that can be mounted into the AgentCore Runtime.

Note

This is a Tagged Union structure. Only one of the following top level keys can be set: sessionStorage.
- sessionStorage (dict) --
  
  Configuration for session storage. Session storage provides persistent storage that is preserved across AgentCore Runtime session invocations.
  - mountPath (string) -- [REQUIRED]
    
    The mount path for the session storage filesystem inside the AgentCore Runtime. The path must be under /mnt with exactly one subdirectory level (for example, /mnt/data).

type tags:

dict

param tags:

A map of tag keys and values to assign to the agent runtime. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.

(string) --
- (string) --

rtype:

dict

returns:

Response Syntax

{
    'agentRuntimeArn': 'string',
    'workloadIdentityDetails': {
        'workloadIdentityArn': 'string'
    },
    'agentRuntimeId': 'string',
    'agentRuntimeVersion': 'string',
    'createdAt': datetime(2015, 1, 1),
    'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING'
}

Response Structure

(dict) --
- agentRuntimeArn (string) --
  
  The Amazon Resource Name (ARN) of the AgentCore Runtime.
- workloadIdentityDetails (dict) --
  
  The workload identity details for the AgentCore Runtime.
  - workloadIdentityArn (string) --
    
    The ARN associated with the workload identity.
- agentRuntimeId (string) --
  
  The unique identifier of the AgentCore Runtime.
- agentRuntimeVersion (string) --
  
  The version of the AgentCore Runtime.
- createdAt (datetime) --
  
  The timestamp when the AgentCore Runtime was created.
- status (string) --
  
  The current status of the AgentCore Runtime.

GetAgentRuntime (updated)

Link ¶
Changes (response)

{'filesystemConfigurations': [{'sessionStorage': {'mountPath': 'string'}}]}

Gets an Amazon Bedrock AgentCore Runtime.

See also: AWS API Documentation

Request Syntax

client.get_agent_runtime(
    agentRuntimeId='string',
    agentRuntimeVersion='string'
)

type agentRuntimeId:

string

param agentRuntimeId:

[REQUIRED]

The unique identifier of the AgentCore Runtime to retrieve.

type agentRuntimeVersion:

string

param agentRuntimeVersion:

The version of the AgentCore Runtime to retrieve.

rtype:

dict

returns:

Response Syntax

{
    'agentRuntimeArn': 'string',
    'agentRuntimeName': 'string',
    'agentRuntimeId': 'string',
    'agentRuntimeVersion': 'string',
    'createdAt': datetime(2015, 1, 1),
    'lastUpdatedAt': datetime(2015, 1, 1),
    'roleArn': 'string',
    'networkConfiguration': {
        'networkMode': 'PUBLIC'|'VPC',
        'networkModeConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING',
    'lifecycleConfiguration': {
        'idleRuntimeSessionTimeout': 123,
        'maxLifetime': 123
    },
    'failureReason': 'string',
    'description': 'string',
    'workloadIdentityDetails': {
        'workloadIdentityArn': 'string'
    },
    'agentRuntimeArtifact': {
        'containerConfiguration': {
            'containerUri': 'string'
        },
        'codeConfiguration': {
            'code': {
                's3': {
                    'bucket': 'string',
                    'prefix': 'string',
                    'versionId': 'string'
                }
            },
            'runtime': 'PYTHON_3_10'|'PYTHON_3_11'|'PYTHON_3_12'|'PYTHON_3_13'|'PYTHON_3_14',
            'entryPoint': [
                'string',
            ]
        }
    },
    'protocolConfiguration': {
        'serverProtocol': 'MCP'|'HTTP'|'A2A'|'AGUI'
    },
    'environmentVariables': {
        'string': 'string'
    },
    'authorizerConfiguration': {
        'customJWTAuthorizer': {
            'discoveryUrl': 'string',
            'allowedAudience': [
                'string',
            ],
            'allowedClients': [
                'string',
            ],
            'allowedScopes': [
                'string',
            ],
            'customClaims': [
                {
                    'inboundTokenClaimName': 'string',
                    'inboundTokenClaimValueType': 'STRING'|'STRING_ARRAY',
                    'authorizingClaimMatchValue': {
                        'claimMatchValue': {
                            'matchValueString': 'string',
                            'matchValueStringList': [
                                'string',
                            ]
                        },
                        'claimMatchOperator': 'EQUALS'|'CONTAINS'|'CONTAINS_ANY'
                    }
                },
            ]
        }
    },
    'requestHeaderConfiguration': {
        'requestHeaderAllowlist': [
            'string',
        ]
    },
    'metadataConfiguration': {
        'requireMMDSV2': True|False
    },
    'filesystemConfigurations': [
        {
            'sessionStorage': {
                'mountPath': 'string'
            }
        },
    ]
}

Response Structure

(dict) --
- agentRuntimeArn (string) --
  
  The Amazon Resource Name (ARN) of the AgentCore Runtime.
- agentRuntimeName (string) --
  
  The name of the AgentCore Runtime.
- agentRuntimeId (string) --
  
  The unique identifier of the AgentCore Runtime.
- agentRuntimeVersion (string) --
  
  The version of the AgentCore Runtime.
- createdAt (datetime) --
  
  The timestamp when the AgentCore Runtime was created.
- lastUpdatedAt (datetime) --
  
  The timestamp when the AgentCore Runtime was last updated.
- roleArn (string) --
  
  The IAM role ARN that provides permissions for the AgentCore Runtime.
- networkConfiguration (dict) --
  
  The network configuration for the AgentCore Runtime.
  - networkMode (string) --
    
    The network mode for the AgentCore Runtime.
  - networkModeConfig (dict) --
    
    The network mode configuration for the AgentCore Runtime.
    - securityGroups (list) --
      
      The security groups associated with the VPC configuration.
      - (string) --
    - subnets (list) --
      
      The subnets associated with the VPC configuration.
      - (string) --
- status (string) --
  
  The current status of the AgentCore Runtime.
- lifecycleConfiguration (dict) --
  
  The life cycle configuration for the AgentCore Runtime.
  - idleRuntimeSessionTimeout (integer) --
    
    Timeout in seconds for idle runtime sessions. When a session remains idle for this duration, it will be automatically terminated. Default: 900 seconds (15 minutes).
  - maxLifetime (integer) --
    
    Maximum lifetime for the instance in seconds. Once reached, instances will be automatically terminated and replaced. Default: 28800 seconds (8 hours).
- failureReason (string) --
  
  The reason for failure if the AgentCore Runtime is in a failed state.
- description (string) --
  
  The description of the AgentCore Runtime.
- workloadIdentityDetails (dict) --
  
  The workload identity details for the AgentCore Runtime.
  - workloadIdentityArn (string) --
    
    The ARN associated with the workload identity.
- agentRuntimeArtifact (dict) --
  
  The artifact of the AgentCore Runtime.
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys will be set: containerConfiguration, codeConfiguration. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
```
'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
```
  - containerConfiguration (dict) --
    
    The container configuration for the agent artifact.
    - containerUri (string) --
      
      The ECR URI of the container.
  - codeConfiguration (dict) --
    
    The code configuration for the agent runtime artifact, including the source code location and execution settings.
    - code (dict) --
      
      The source code location and configuration details.
      Note
      
      This is a Tagged Union structure. Only one of the following top level keys will be set: s3. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
      
      'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
      - s3 (dict) --
        
        The Amazon Amazon S3 object that contains the source code for the agent runtime.
        
        bucket (string) --
        
        The name of the Amazon S3 bucket. This bucket contains the stored data.
        
        prefix (string) --
        
        The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
        
        versionId (string) --
        
        The version ID of the Amazon Amazon S3 object. If not specified, the latest version of the object is used.
    - runtime (string) --
      
      The runtime environment for executing the code (for example, Python 3.9 or Node.js 18).
    - entryPoint (list) --
      
      The entry point for the code execution, specifying the function or method that should be invoked when the code runs.
      - (string) --
- protocolConfiguration (dict) --
  
  The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.
  - serverProtocol (string) --
    
    The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.
- environmentVariables (dict) --
  
  Environment variables set in the AgentCore Runtime environment.
  - (string) --
    - (string) --
- authorizerConfiguration (dict) --
  
  The authorizer configuration for the AgentCore Runtime.
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys will be set: customJWTAuthorizer. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
```
'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
```
  - customJWTAuthorizer (dict) --
    
    The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
    - discoveryUrl (string) --
      
      This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
    - allowedAudience (list) --
      
      Represents individual audience values that are validated in the incoming JWT token validation process.
      - (string) --
    - allowedClients (list) --
      
      Represents individual client IDs that are validated in the incoming JWT token validation process.
      - (string) --
    - allowedScopes (list) --
      
      An array of scopes that are allowed to access the token.
      - (string) --
    - customClaims (list) --
      
      An array of objects that define a custom claim validation name, value, and operation
      - (dict) --
        
        Defines the name of a custom claim field and rules for finding matches to authenticate its value.
        
        inboundTokenClaimName (string) --
        
        The name of the custom claim field to check.
        
        inboundTokenClaimValueType (string) --
        
        The data type of the claim value to check for.
        
        Use STRING if you want to find an exact match to a string you define.
        
        Use STRING_ARRAY if you want to fnd a match to at least one value in an array you define.
        
        authorizingClaimMatchValue (dict) --
        
        Defines the value or values to match for and the relationship of the match.
        
        claimMatchValue (dict) --
        
        The value or values to match for.
        
        Note
        
        This is a Tagged Union structure. Only one of the following top level keys will be set: matchValueString, matchValueStringList. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
        
        'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
        
        matchValueString (string) --
        
        The string value to match for.
        
        matchValueStringList (list) --
        
        An array of strings to check for a match.
        
        (string) --
        
        claimMatchOperator (string) --
        
        Defines the relationship between the claim field value and the value or values you're matching for.
- requestHeaderConfiguration (dict) --
  
  Configuration for HTTP request headers that will be passed through to the runtime.
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys will be set: requestHeaderAllowlist. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
```
'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
```
  - requestHeaderAllowlist (list) --
    
    A list of HTTP request headers that are allowed to be passed through to the runtime.
    - (string) --
- metadataConfiguration (dict) --
  
  Configuration for microVM Metadata Service (MMDS) settings for the AgentCore Runtime.
  - requireMMDSV2 (boolean) --
    
    Enables MMDSv2 (microVM Metadata Service Version 2) requirement for the agent runtime. When set to true, the runtime microVM will only accept MMDSv2 requests.
- filesystemConfigurations (list) --
  
  The filesystem configurations mounted into the AgentCore Runtime.
  - (dict) --
    
    Configuration for a filesystem that can be mounted into the AgentCore Runtime.
    Note
    
    This is a Tagged Union structure. Only one of the following top level keys will be set: sessionStorage. If a client receives an unknown member it will set SDK_UNKNOWN_MEMBER as the top level key, which maps to the name or tag of the unknown member. The structure of SDK_UNKNOWN_MEMBER is as follows:
```
'SDK_UNKNOWN_MEMBER': {'name': 'UnknownMemberName'}
```
    - sessionStorage (dict) --
      
      Configuration for session storage. Session storage provides persistent storage that is preserved across AgentCore Runtime session invocations.
      - mountPath (string) --
        
        The mount path for the session storage filesystem inside the AgentCore Runtime. The path must be under /mnt with exactly one subdirectory level (for example, /mnt/data).

ListBrowserProfiles (updated)

Link ¶
Changes (request)

{'name': 'string'}

Lists all browser profiles in your account.

See also: AWS API Documentation

Request Syntax

client.list_browser_profiles(
    maxResults=123,
    nextToken='string',
    name='string'
)

type maxResults:

integer

param maxResults:

The maximum number of results to return in the response.

type nextToken:

string

param nextToken:

A token to retrieve the next page of results.

type name:

string

param name:

The name of the browser profile to filter results by.

rtype:

dict

returns:

Response Syntax

{
    'profileSummaries': [
        {
            'profileId': 'string',
            'profileArn': 'string',
            'name': 'string',
            'description': 'string',
            'status': 'READY'|'DELETING'|'DELETED'|'SAVING',
            'createdAt': datetime(2015, 1, 1),
            'lastUpdatedAt': datetime(2015, 1, 1),
            'lastSavedAt': datetime(2015, 1, 1),
            'lastSavedBrowserSessionId': 'string',
            'lastSavedBrowserId': 'string'
        },
    ],
    'nextToken': 'string'
}

Response Structure

(dict) --
- profileSummaries (list) --
  
  The list of browser profile summaries.
  - (dict) --
    
    Contains summary information about a browser profile. A browser profile stores persistent browser data that can be reused across browser sessions.
    - profileId (string) --
      
      The unique identifier of the browser profile.
    - profileArn (string) --
      
      The Amazon Resource Name (ARN) of the browser profile.
    - name (string) --
      
      The name of the browser profile.
    - description (string) --
      
      The description of the browser profile.
    - status (string) --
      
      The current status of the browser profile. Possible values include READY, SAVING, DELETING, and DELETED.
    - createdAt (datetime) --
      
      The timestamp when the browser profile was created.
    - lastUpdatedAt (datetime) --
      
      The timestamp when the browser profile was last updated.
    - lastSavedAt (datetime) --
      
      The timestamp when browser session data was last saved to this profile.
    - lastSavedBrowserSessionId (string) --
      
      The identifier of the browser session from which data was last saved to this profile.
    - lastSavedBrowserId (string) --
      
      The identifier of the browser from which data was last saved to this profile.
- nextToken (string) --
  
  A token to retrieve the next page of results.

UpdateAgentRuntime (updated)

Link ¶
Changes (request)

{'filesystemConfigurations': [{'sessionStorage': {'mountPath': 'string'}}]}

Updates an existing Amazon Secure Agent.

See also: AWS API Documentation

Request Syntax

client.update_agent_runtime(
    agentRuntimeId='string',
    agentRuntimeArtifact={
        'containerConfiguration': {
            'containerUri': 'string'
        },
        'codeConfiguration': {
            'code': {
                's3': {
                    'bucket': 'string',
                    'prefix': 'string',
                    'versionId': 'string'
                }
            },
            'runtime': 'PYTHON_3_10'|'PYTHON_3_11'|'PYTHON_3_12'|'PYTHON_3_13'|'PYTHON_3_14',
            'entryPoint': [
                'string',
            ]
        }
    },
    roleArn='string',
    networkConfiguration={
        'networkMode': 'PUBLIC'|'VPC',
        'networkModeConfig': {
            'securityGroups': [
                'string',
            ],
            'subnets': [
                'string',
            ]
        }
    },
    description='string',
    authorizerConfiguration={
        'customJWTAuthorizer': {
            'discoveryUrl': 'string',
            'allowedAudience': [
                'string',
            ],
            'allowedClients': [
                'string',
            ],
            'allowedScopes': [
                'string',
            ],
            'customClaims': [
                {
                    'inboundTokenClaimName': 'string',
                    'inboundTokenClaimValueType': 'STRING'|'STRING_ARRAY',
                    'authorizingClaimMatchValue': {
                        'claimMatchValue': {
                            'matchValueString': 'string',
                            'matchValueStringList': [
                                'string',
                            ]
                        },
                        'claimMatchOperator': 'EQUALS'|'CONTAINS'|'CONTAINS_ANY'
                    }
                },
            ]
        }
    },
    requestHeaderConfiguration={
        'requestHeaderAllowlist': [
            'string',
        ]
    },
    protocolConfiguration={
        'serverProtocol': 'MCP'|'HTTP'|'A2A'|'AGUI'
    },
    lifecycleConfiguration={
        'idleRuntimeSessionTimeout': 123,
        'maxLifetime': 123
    },
    metadataConfiguration={
        'requireMMDSV2': True|False
    },
    environmentVariables={
        'string': 'string'
    },
    filesystemConfigurations=[
        {
            'sessionStorage': {
                'mountPath': 'string'
            }
        },
    ],
    clientToken='string'
)

type agentRuntimeId:

string

param agentRuntimeId:

[REQUIRED]

The unique identifier of the AgentCore Runtime to update.

type agentRuntimeArtifact:

dict

param agentRuntimeArtifact:

[REQUIRED]

The updated artifact of the AgentCore Runtime.

containerConfiguration (dict) --

The container configuration for the agent artifact.
- containerUri (string) -- [REQUIRED]
  
  The ECR URI of the container.
codeConfiguration (dict) --

The code configuration for the agent runtime artifact, including the source code location and execution settings.
- code (dict) -- [REQUIRED]
  
  The source code location and configuration details.
  
  Note
  
  This is a Tagged Union structure. Only one of the following top level keys can be set: s3.
  - s3 (dict) --
    
    The Amazon Amazon S3 object that contains the source code for the agent runtime.
    - bucket (string) -- [REQUIRED]
      
      The name of the Amazon S3 bucket. This bucket contains the stored data.
    - prefix (string) -- [REQUIRED]
      
      The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.
    - versionId (string) --
      
      The version ID of the Amazon Amazon S3 object. If not specified, the latest version of the object is used.
- runtime (string) -- [REQUIRED]
  
  The runtime environment for executing the code (for example, Python 3.9 or Node.js 18).
- entryPoint (list) -- [REQUIRED]
  
  The entry point for the code execution, specifying the function or method that should be invoked when the code runs.
  - (string) --

type roleArn:

string

param roleArn:

[REQUIRED]

The updated IAM role ARN that provides permissions for the AgentCore Runtime.

type networkConfiguration:

dict

param networkConfiguration:

[REQUIRED]

The updated network configuration for the AgentCore Runtime.

networkMode (string) -- [REQUIRED]

The network mode for the AgentCore Runtime.
networkModeConfig (dict) --

The network mode configuration for the AgentCore Runtime.
- securityGroups (list) -- [REQUIRED]
  
  The security groups associated with the VPC configuration.
  - (string) --
- subnets (list) -- [REQUIRED]
  
  The subnets associated with the VPC configuration.
  - (string) --

type description:

string

param description:

The updated description of the AgentCore Runtime.

type authorizerConfiguration:

dict

param authorizerConfiguration:

The updated authorizer configuration for the AgentCore Runtime.

customJWTAuthorizer (dict) --

The inbound JWT-based authorization, specifying how incoming requests should be authenticated.
- discoveryUrl (string) -- [REQUIRED]
  
  This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens.
- allowedAudience (list) --
  
  Represents individual audience values that are validated in the incoming JWT token validation process.
  - (string) --
- allowedClients (list) --
  
  Represents individual client IDs that are validated in the incoming JWT token validation process.
  - (string) --
- allowedScopes (list) --
  
  An array of scopes that are allowed to access the token.
  - (string) --
- customClaims (list) --
  
  An array of objects that define a custom claim validation name, value, and operation
  - (dict) --
    
    Defines the name of a custom claim field and rules for finding matches to authenticate its value.
    - inboundTokenClaimName (string) -- [REQUIRED]
      
      The name of the custom claim field to check.
    - inboundTokenClaimValueType (string) -- [REQUIRED]
      
      The data type of the claim value to check for.
      - Use STRING if you want to find an exact match to a string you define.
      - Use STRING_ARRAY if you want to fnd a match to at least one value in an array you define.
    - authorizingClaimMatchValue (dict) -- [REQUIRED]
      
      Defines the value or values to match for and the relationship of the match.
      - claimMatchValue (dict) -- [REQUIRED]
        
        The value or values to match for.
        
        Note
        
        This is a Tagged Union structure. Only one of the following top level keys can be set: matchValueString, matchValueStringList.
        
        matchValueString (string) --
        
        The string value to match for.
        
        matchValueStringList (list) --
        
        An array of strings to check for a match.
        
        (string) --
      - claimMatchOperator (string) -- [REQUIRED]
        
        Defines the relationship between the claim field value and the value or values you're matching for.

type requestHeaderConfiguration:

dict

param requestHeaderConfiguration:

The updated configuration for HTTP request headers that will be passed through to the runtime.

requestHeaderAllowlist (list) --

A list of HTTP request headers that are allowed to be passed through to the runtime.
- (string) --

type protocolConfiguration:

dict

param protocolConfiguration:

The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.

serverProtocol (string) -- [REQUIRED]

The server protocol for the agent runtime. This field specifies which protocol the agent runtime uses to communicate with clients.

type lifecycleConfiguration:

dict

param lifecycleConfiguration:

The updated life cycle configuration for the AgentCore Runtime.

idleRuntimeSessionTimeout (integer) --

Timeout in seconds for idle runtime sessions. When a session remains idle for this duration, it will be automatically terminated. Default: 900 seconds (15 minutes).
maxLifetime (integer) --

Maximum lifetime for the instance in seconds. Once reached, instances will be automatically terminated and replaced. Default: 28800 seconds (8 hours).

type metadataConfiguration:

dict

param metadataConfiguration:

The updated configuration for microVM Metadata Service (MMDS) settings for the AgentCore Runtime.

requireMMDSV2 (boolean) -- [REQUIRED]

Enables MMDSv2 (microVM Metadata Service Version 2) requirement for the agent runtime. When set to true, the runtime microVM will only accept MMDSv2 requests.

type environmentVariables:

dict

param environmentVariables:

Updated environment variables to set in the AgentCore Runtime environment.

(string) --
- (string) --

type filesystemConfigurations:

list

param filesystemConfigurations:

The updated filesystem configurations to mount into the AgentCore Runtime.

(dict) --

Configuration for a filesystem that can be mounted into the AgentCore Runtime.

Note

This is a Tagged Union structure. Only one of the following top level keys can be set: sessionStorage.
- sessionStorage (dict) --
  
  Configuration for session storage. Session storage provides persistent storage that is preserved across AgentCore Runtime session invocations.
  - mountPath (string) -- [REQUIRED]
    
    The mount path for the session storage filesystem inside the AgentCore Runtime. The path must be under /mnt with exactly one subdirectory level (for example, /mnt/data).

type clientToken:

string

param clientToken:

A unique, case-sensitive identifier to ensure idempotency of the request.

This field is autopopulated if not provided.

rtype:

dict

returns:

Response Syntax

{
    'agentRuntimeArn': 'string',
    'agentRuntimeId': 'string',
    'workloadIdentityDetails': {
        'workloadIdentityArn': 'string'
    },
    'agentRuntimeVersion': 'string',
    'createdAt': datetime(2015, 1, 1),
    'lastUpdatedAt': datetime(2015, 1, 1),
    'status': 'CREATING'|'CREATE_FAILED'|'UPDATING'|'UPDATE_FAILED'|'READY'|'DELETING'
}

Response Structure

(dict) --
- agentRuntimeArn (string) --
  
  The Amazon Resource Name (ARN) of the updated AgentCore Runtime.
- agentRuntimeId (string) --
  
  The unique identifier of the updated AgentCore Runtime.
- workloadIdentityDetails (dict) --
  
  The workload identity details for the updated AgentCore Runtime.
  - workloadIdentityArn (string) --
    
    The ARN associated with the workload identity.
- agentRuntimeVersion (string) --
  
  The version of the updated AgentCore Runtime.
- createdAt (datetime) --
  
  The timestamp when the AgentCore Runtime was created.
- lastUpdatedAt (datetime) --
  
  The timestamp when the AgentCore Runtime was last updated.
- status (string) --
  
  The current status of the updated AgentCore Runtime.