2026/10/21 - AWS DevOps Agent Service - 6 updated api methods
Changes Adds support for Microsoft Teams as a notification service. Associations can now be created and updated with a Microsoft Teams team and channel configuration using the DevOps Agent API and SDKs.
{'configuration': {'msteams': {'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {'opsOncallTarget': {'channelId': 'string',
'channelName': 'string'},
'opsSRETarget': {'channelId': 'string',
'channelName': 'string'}}}}}
Response {'association': {'configuration': {'msteams': {'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {'opsOncallTarget': {'channelId': 'string',
'channelName': 'string'},
'opsSRETarget': {'channelId': 'string',
'channelName': 'string'}}}}}}
Adds a specific service association to an AgentSpace. It overwrites the existing association of the same service. Returns 201 Created on success.
See also: AWS API Documentation
Request Syntax
client.associate_service(
agentSpaceId='string',
serviceId='string',
configuration={
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
},
'bidirectional': {
'roleArn': 'string',
'enabled': True|False
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'mcpserver': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'mcpserversplunk': {}
,
'eventChannel': {}
,
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
],
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'remoteagent': {}
,
'remoteagentsigv4': {}
,
'msteams': {
'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'releaseManagement': {
'name': 'string',
'networkAccess': {
'privateAccess': {
'privateConnectionName': 'string',
'runtimeRoleArn': 'string'
}
}
}
},
capabilities={
'string': {
'enabled': True|False,
'triggerFilterGroups': [
{
'events': [
'PULL_REQUEST_READY_FOR_REVIEW'|'PULL_REQUEST_DRAFT',
],
'targetBranches': {
'patterns': [
'string',
]
}
},
]
}
}
)
string
[REQUIRED]
The unique identifier of the AgentSpace
string
[REQUIRED]
The unique identifier of the service.
dict
[REQUIRED]
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'monitor' for AIDevOps monitoring.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
github (dict) --
GitHub repository integration configuration.
repoName (string) -- [REQUIRED]
Associated Github repo name
repoId (string) -- [REQUIRED]
Associated Github repo ID
owner (string) -- [REQUIRED]
The GitHub repository owner name.
ownerType (string) -- [REQUIRED]
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this repository maps to for automatic verification testing.
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) -- [REQUIRED]
Associated Slack workspace ID
workspaceName (string) -- [REQUIRED]
Associated Slack workspace name
transmissionTarget (dict) -- [REQUIRED]
Transmission targets for agent notifications
opsOncallTarget (dict) -- [REQUIRED]
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
bidirectional (dict) --
Optional bidirectional communication configuration. Supply this configuration and set enabled to true so you can interact with the agent directly from Slack.
roleArn (string) -- [REQUIRED]
IAM role ARN that AWS DevOps Agent assumes to exchange messages with your Slack workspace on behalf of this association.
enabled (boolean) --
Whether bidirectional communication is enabled for this association. When you set this value to true, you can mention the agent in a configured Slack channel and it responds in that channel. When you omit this value or set it to false, the agent ignores mentions and only sends notifications.
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) -- [REQUIRED]
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) -- [REQUIRED]
New Relic Account ID
endpoint (string) -- [REQUIRED]
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools can be used with the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
gitlab (dict) --
GitLab project integration configuration.
projectId (string) -- [REQUIRED]
GitLab numeric project ID.
projectPath (string) -- [REQUIRED]
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this project maps to for automatic verification testing.
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) -- [REQUIRED]
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) -- [REQUIRED]
Azure DevOps organization name.
projectId (string) -- [REQUIRED]
Azure DevOps project ID.
projectName (string) -- [REQUIRED]
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) -- [REQUIRED]
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
pagerduty (dict) --
PagerDuty integration configuration
services (list) -- [REQUIRED]
List of Pagerduty service available for the association.
(string) --
customerEmail (string) -- [REQUIRED]
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools available for the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
remoteagent (dict) --
Remote A2A agent integration configuration (token-based auth).
remoteagentsigv4 (dict) --
Remote A2A agent integration configuration (SigV4 auth).
msteams (dict) --
The configuration for connecting a Microsoft Teams team to the DevOps Agent service.
teamId (string) -- [REQUIRED]
The identifier of the Microsoft Teams team to connect to the DevOps Agent service.
teamName (string) -- [REQUIRED]
The name of the Microsoft Teams team to connect to the DevOps Agent service.
transmissionTarget (dict) -- [REQUIRED]
The Microsoft Teams channels that receive agent notifications.
opsOncallTarget (dict) --
The Microsoft Teams channel that receives notifications from the On-call Agent.
channelName (string) -- [REQUIRED]
The name of the Microsoft Teams channel.
channelId (string) -- [REQUIRED]
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
opsSRETarget (dict) --
The Microsoft Teams channel that receives notifications from the SRE Agent.
channelName (string) -- [REQUIRED]
The name of the Microsoft Teams channel.
channelId (string) -- [REQUIRED]
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
releaseManagement (dict) --
Release management network environment configuration
name (string) -- [REQUIRED]
The name for this release management environment.
networkAccess (dict) -- [REQUIRED]
Specifies how AWS DevOps Agent reaches your application using a Release Management Environment
privateAccess (dict) --
Private network access to the resource inside a VPC, using a private connection.
privateConnectionName (string) -- [REQUIRED]
Name of the private connection that supplies the VPC configuration for this release management environment.
runtimeRoleArn (string) -- [REQUIRED]
Role ARN that AWS DevOps Agent assumes at runtime to connect to your VPC.
dict
Enabled capabilities for this association.
(string) --
AWS DevOps Agent capability types representing the set of automated capabilities that can be enabled per association.
(dict) --
Capability configuration for the AWS DevOps Agent.
enabled (boolean) --
Whether the capability is enabled.
triggerFilterGroups (list) --
Optional trigger filter groups. Evaluated only when enabled=true; retained while the capability is disabled, so re-enabling restores the prior trigger behavior.
(dict) --
A group of trigger conditions. The group matches when ALL present conditions pass. A group cannot be empty: at least one condition must be present.
events (list) --
Passes when the webhook event is one of the listed events.
(string) --
Webhook events that can auto-trigger a capability. PULL_REQUEST_* events apply to RELEASE_READINESS_REVIEW; WORKFLOW_* events apply to RELEASE_SHEPHERDING.
targetBranches (dict) --
Passes when the change request target branch matches. Applicable to RELEASE_READINESS_REVIEW only.
patterns (list) -- [REQUIRED]
Anchored full-match regex patterns. The condition passes when the value matches at least one pattern.
(string) --
A regex pattern matched against the entire value. Example: 'main' or 'release/.*'.
dict
Response Syntax
{
'association': {
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
},
'bidirectional': {
'roleArn': 'string',
'enabled': True|False
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'mcpserver': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
],
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'remoteagent': {},
'remoteagentsigv4': {},
'msteams': {
'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'releaseManagement': {
'name': 'string',
'networkAccess': {
'privateAccess': {
'privateConnectionName': 'string',
'runtimeRoleArn': 'string'
}
}
}
},
'capabilities': {
'string': {
'enabled': True|False,
'triggerFilterGroups': [
{
'events': [
'PULL_REQUEST_READY_FOR_REVIEW'|'PULL_REQUEST_DRAFT',
],
'targetBranches': {
'patterns': [
'string',
]
}
},
]
}
}
},
'webhook': {
'webhookUrl': 'string',
'webhookId': 'string',
'webhookType': 'hmac'|'apikey'|'gitlab'|'pagerduty',
'webhookSecret': 'string',
'apiKey': 'string'
}
}
Response Structure
(dict) --
Output containing the newly created association and optional webhook configuration.
association (dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this repository maps to for automatic verification testing.
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
bidirectional (dict) --
Optional bidirectional communication configuration. Supply this configuration and set enabled to true so you can interact with the agent directly from Slack.
roleArn (string) --
IAM role ARN that AWS DevOps Agent assumes to exchange messages with your Slack workspace on behalf of this association.
enabled (boolean) --
Whether bidirectional communication is enabled for this association. When you set this value to true, you can mention the agent in a configured Slack channel and it responds in that channel. When you omit this value or set it to false, the agent ignores mentions and only sends notifications.
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this project maps to for automatic verification testing.
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
remoteagent (dict) --
Remote A2A agent integration configuration (token-based auth).
remoteagentsigv4 (dict) --
Remote A2A agent integration configuration (SigV4 auth).
msteams (dict) --
The configuration for connecting a Microsoft Teams team to the DevOps Agent service.
teamId (string) --
The identifier of the Microsoft Teams team to connect to the DevOps Agent service.
teamName (string) --
The name of the Microsoft Teams team to connect to the DevOps Agent service.
transmissionTarget (dict) --
The Microsoft Teams channels that receive agent notifications.
opsOncallTarget (dict) --
The Microsoft Teams channel that receives notifications from the On-call Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
opsSRETarget (dict) --
The Microsoft Teams channel that receives notifications from the SRE Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
releaseManagement (dict) --
Release management network environment configuration
name (string) --
The name for this release management environment.
networkAccess (dict) --
Specifies how AWS DevOps Agent reaches your application using a Release Management Environment
privateAccess (dict) --
Private network access to the resource inside a VPC, using a private connection.
privateConnectionName (string) --
Name of the private connection that supplies the VPC configuration for this release management environment.
runtimeRoleArn (string) --
Role ARN that AWS DevOps Agent assumes at runtime to connect to your VPC.
capabilities (dict) --
Enabled capabilities for this association.
(string) --
AWS DevOps Agent capability types representing the set of automated capabilities that can be enabled per association.
(dict) --
Capability configuration for the AWS DevOps Agent.
enabled (boolean) --
Whether the capability is enabled.
triggerFilterGroups (list) --
Optional trigger filter groups. Evaluated only when enabled=true; retained while the capability is disabled, so re-enabling restores the prior trigger behavior.
(dict) --
A group of trigger conditions. The group matches when ALL present conditions pass. A group cannot be empty: at least one condition must be present.
events (list) --
Passes when the webhook event is one of the listed events.
(string) --
Webhook events that can auto-trigger a capability. PULL_REQUEST_* events apply to RELEASE_READINESS_REVIEW; WORKFLOW_* events apply to RELEASE_SHEPHERDING.
targetBranches (dict) --
Passes when the change request target branch matches. Applicable to RELEASE_READINESS_REVIEW only.
patterns (list) --
Anchored full-match regex patterns. The condition passes when the value matches at least one pattern.
(string) --
A regex pattern matched against the entire value. Example: 'main' or 'release/.*'.
webhook (dict) --
Generic webhook configuration
webhookUrl (string) --
The webhook URL endpoint
webhookId (string) --
The unique webhook identifier
webhookType (string) --
The webhook authentication type
webhookSecret (string) --
The webhook secret for authentication
apiKey (string) --
API Key for API Key webhook authentication
{'association': {'configuration': {'msteams': {'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {'opsOncallTarget': {'channelId': 'string',
'channelName': 'string'},
'opsSRETarget': {'channelId': 'string',
'channelName': 'string'}}}}}}
Retrieves given associations configured for a specific AgentSpace.
See also: AWS API Documentation
Request Syntax
client.get_association(
agentSpaceId='string',
associationId='string'
)
string
[REQUIRED]
The unique identifier of the AgentSpace
string
[REQUIRED]
The unique identifier of the given association.
dict
Response Syntax
{
'association': {
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
},
'bidirectional': {
'roleArn': 'string',
'enabled': True|False
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'mcpserver': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
],
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'remoteagent': {},
'remoteagentsigv4': {},
'msteams': {
'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'releaseManagement': {
'name': 'string',
'networkAccess': {
'privateAccess': {
'privateConnectionName': 'string',
'runtimeRoleArn': 'string'
}
}
}
},
'capabilities': {
'string': {
'enabled': True|False,
'triggerFilterGroups': [
{
'events': [
'PULL_REQUEST_READY_FOR_REVIEW'|'PULL_REQUEST_DRAFT',
],
'targetBranches': {
'patterns': [
'string',
]
}
},
]
}
}
}
}
Response Structure
(dict) --
Output containing the requested association details.
association (dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this repository maps to for automatic verification testing.
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
bidirectional (dict) --
Optional bidirectional communication configuration. Supply this configuration and set enabled to true so you can interact with the agent directly from Slack.
roleArn (string) --
IAM role ARN that AWS DevOps Agent assumes to exchange messages with your Slack workspace on behalf of this association.
enabled (boolean) --
Whether bidirectional communication is enabled for this association. When you set this value to true, you can mention the agent in a configured Slack channel and it responds in that channel. When you omit this value or set it to false, the agent ignores mentions and only sends notifications.
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this project maps to for automatic verification testing.
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
remoteagent (dict) --
Remote A2A agent integration configuration (token-based auth).
remoteagentsigv4 (dict) --
Remote A2A agent integration configuration (SigV4 auth).
msteams (dict) --
The configuration for connecting a Microsoft Teams team to the DevOps Agent service.
teamId (string) --
The identifier of the Microsoft Teams team to connect to the DevOps Agent service.
teamName (string) --
The name of the Microsoft Teams team to connect to the DevOps Agent service.
transmissionTarget (dict) --
The Microsoft Teams channels that receive agent notifications.
opsOncallTarget (dict) --
The Microsoft Teams channel that receives notifications from the On-call Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
opsSRETarget (dict) --
The Microsoft Teams channel that receives notifications from the SRE Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
releaseManagement (dict) --
Release management network environment configuration
name (string) --
The name for this release management environment.
networkAccess (dict) --
Specifies how AWS DevOps Agent reaches your application using a Release Management Environment
privateAccess (dict) --
Private network access to the resource inside a VPC, using a private connection.
privateConnectionName (string) --
Name of the private connection that supplies the VPC configuration for this release management environment.
runtimeRoleArn (string) --
Role ARN that AWS DevOps Agent assumes at runtime to connect to your VPC.
capabilities (dict) --
Enabled capabilities for this association.
(string) --
AWS DevOps Agent capability types representing the set of automated capabilities that can be enabled per association.
(dict) --
Capability configuration for the AWS DevOps Agent.
enabled (boolean) --
Whether the capability is enabled.
triggerFilterGroups (list) --
Optional trigger filter groups. Evaluated only when enabled=true; retained while the capability is disabled, so re-enabling restores the prior trigger behavior.
(dict) --
A group of trigger conditions. The group matches when ALL present conditions pass. A group cannot be empty: at least one condition must be present.
events (list) --
Passes when the webhook event is one of the listed events.
(string) --
Webhook events that can auto-trigger a capability. PULL_REQUEST_* events apply to RELEASE_READINESS_REVIEW; WORKFLOW_* events apply to RELEASE_SHEPHERDING.
targetBranches (dict) --
Passes when the change request target branch matches. Applicable to RELEASE_READINESS_REVIEW only.
patterns (list) --
Anchored full-match regex patterns. The condition passes when the value matches at least one pattern.
(string) --
A regex pattern matched against the entire value. Example: 'main' or 'release/.*'.
{'service': {'serviceType': {'msteams'}}}
Retrieves given service by it's unique identifier
See also: AWS API Documentation
Request Syntax
client.get_service(
serviceId='string'
)
string
[REQUIRED]
The unique identifier of the given service.
dict
Response Syntax
{
'service': {
'serviceId': 'string',
'serviceType': 'github'|'slack'|'azure'|'azuredevops'|'msteams'|'dynatrace'|'servicenow'|'pagerduty'|'gitlab'|'eventChannel'|'mcpservernewrelic'|'mcpservergrafana'|'mcpserverdatadog'|'mcpserver'|'mcpserversplunk'|'azureidentity'|'mcpserversigv4'|'remoteagent'|'remoteagentsigv4',
'name': 'string',
'accessibleResources': [
{...}|[...]|123|123.4|'string'|True|None,
],
'additionalServiceDetails': {
'github': {
'owner': 'string',
'ownerType': 'organization'|'user',
'targetUrl': 'string'
},
'slack': {
'teamId': 'string',
'teamName': 'string'
},
'mcpserverdatadog': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers',
'description': 'string',
'apiKeyHeader': 'string',
'customHeaderNames': [
'string',
]
},
'mcpserver': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers',
'description': 'string',
'apiKeyHeader': 'string',
'customHeaderNames': [
'string',
]
},
'servicenow': {
'instanceUrl': 'string'
},
'gitlab': {
'targetUrl': 'string',
'tokenType': 'personal'|'group',
'groupId': 'string'
},
'mcpserversplunk': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers',
'description': 'string',
'apiKeyHeader': 'string',
'customHeaderNames': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'region': 'US'|'EU'|'JP',
'description': 'string'
},
'azuredevops': {
'organizationName': 'string'
},
'azureidentity': {
'tenantId': 'string',
'clientId': 'string',
'webIdentityRoleArn': 'string',
'webIdentityTokenAudiences': [
'string',
]
},
'mcpservergrafana': {
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers'
},
'pagerduty': {
'scopes': [
'string',
]
},
'mcpserversigv4': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'region': 'string',
'service': 'string',
'roleArn': 'string',
'mcpRoleArn': 'string',
'customHeaders': {
'string': 'string'
}
},
'remoteagent': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'authorizationMethod': 'oauth-client-credentials'|'api-key'|'bearer-token',
'apiKeyHeader': 'string'
},
'remoteagentsigv4': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'region': 'string',
'service': 'string',
'roleArn': 'string'
}
},
'kmsKeyArn': 'string',
'privateConnectionName': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1)
},
'tags': {
'string': 'string'
}
}
Response Structure
(dict) --
Output containing the requested service details.
service (dict) --
Represents a registered service with its configuration and accessible resources.
serviceId (string) --
The unique identifier of a service.
serviceType (string) --
The service type e.g github or dynatrace
name (string) --
The display name of the registered service.
accessibleResources (list) --
List of accessible resources for this service.
(:ref:`document<document>`) --
additionalServiceDetails (dict) --
Additional details specific to the service type.
github (dict) --
GitHub-specific service details.
owner (string) --
The GitHub repository owner name.
ownerType (string) --
The GitHub repository owner type.
targetUrl (string) --
The GitHub Enterprise Server instance URL (absent for github.com).
slack (dict) --
Slack-specific service details.
teamId (string) --
The Slack team ID.
teamName (string) --
The Slack team name.
mcpserverdatadog (dict) --
Datadog MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
customHeaderNames (list) --
The configured custom authentication header names when the MCP server uses custom-header authentication. Secret values are not returned.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
mcpserver (dict) --
MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
customHeaderNames (list) --
The configured custom authentication header names when the MCP server uses custom-header authentication. Secret values are not returned.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
servicenow (dict) --
ServiceNow-specific service details.
instanceUrl (string) --
The ServiceNow instance url
gitlab (dict) --
GitLab-specific service details.
targetUrl (string) --
The GitLab instance URL.
tokenType (string) --
Type of GitLab access token
groupId (string) --
Optional GitLab group ID for group-level access tokens
mcpserversplunk (dict) --
Splunk MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
customHeaderNames (list) --
The configured custom authentication header names when the MCP server uses custom-header authentication. Secret values are not returned.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
mcpservernewrelic (dict) --
New Relic MCP server-specific service details.
accountId (string) --
The NewRelic account ID.
region (string) --
The NewRelic region (determines API endpoint).
description (string) --
Optional user description.
azuredevops (dict) --
Azure DevOps specific service details.
organizationName (string) --
The Azure DevOps Organization name associated with the service.
azureidentity (dict) --
Azure identity details for services using Azure authentication.
tenantId (string) --
The Azure Active Directory tenant ID for the identity.
clientId (string) --
The client ID of the service principal or managed identity used for authentication.
webIdentityRoleArn (string) --
The role ARN to be assumed by DevOps Agent for requesting Web Identity Token.
webIdentityTokenAudiences (list) --
The audiences for the Web Identity Token.
(string) --
mcpservergrafana (dict) --
Grafana MCP server-specific service details.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
authorizationMethod (string) --
The authz method used by the MCP server.
pagerduty (dict) --
Pagerduty service details.
scopes (list) --
The scopes that were assigned to the service
(string) --
mcpserversigv4 (dict) --
SigV4-authenticated MCP server-specific service details.
name (string) --
MCP server name.
endpoint (string) --
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
region (string) --
AWS region for SigV4 signing. Use '*' for SigV4a multi-region signing.
service (string) --
AWS service name for SigV4 signing.
roleArn (string) --
IAM role ARN to assume for SigV4 signing.
mcpRoleArn (string) --
AWS IAM role ARN.
customHeaders (dict) --
Custom headers for the SigV4 MCP server.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
(string) --
Value type for custom headers.
remoteagent (dict) --
Remote A2A agent-specific service details (token-based auth).
name (string) --
Name identifier for a remote A2A agent.
endpoint (string) --
HTTPS endpoint URL for a remote A2A agent.
description (string) --
Description field
authorizationMethod (string) --
The authorization method used by the remote agent.
apiKeyHeader (string) --
If the remote agent uses API key authentication, the header name.
remoteagentsigv4 (dict) --
Remote A2A agent-specific service details (SigV4 auth).
name (string) --
Name identifier for a remote A2A agent.
endpoint (string) --
HTTPS endpoint URL for a remote A2A agent.
description (string) --
Description field
region (string) --
AWS region identifier or wildcard (*) for SigV4a multi-region signing.
service (string) --
The AWS service name for SigV4 signing.
roleArn (string) --
AWS IAM role ARN.
kmsKeyArn (string) --
The ARN of the AWS Key Management Service (AWS KMS) customer managed key that's used to encrypt resources.
privateConnectionName (string) --
The name of the private connection used for VPC connectivity.
createdAt (datetime) --
The timestamp when the service was registered.
updatedAt (datetime) --
The timestamp when the service was last updated.
tags (dict) --
Tags associated with the Service.
(string) --
Tag key string.
(string) --
Tag value string.
{'associations': {'configuration': {'msteams': {'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {'opsOncallTarget': {'channelId': 'string',
'channelName': 'string'},
'opsSRETarget': {'channelId': 'string',
'channelName': 'string'}}}}}}
List all associations for given AgentSpace
See also: AWS API Documentation
Request Syntax
client.list_associations(
agentSpaceId='string',
maxResults=123,
nextToken='string',
filterServiceTypes='string'
)
string
[REQUIRED]
The unique identifier of the AgentSpace
integer
Maximum number of results to return in a single call.
string
Token for the next page of results.
string
A comma-separated list of service types to filter list associations output
dict
Response Syntax
{
'nextToken': 'string',
'associations': [
{
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
},
'bidirectional': {
'roleArn': 'string',
'enabled': True|False
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'mcpserver': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
],
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'remoteagent': {},
'remoteagentsigv4': {},
'msteams': {
'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'releaseManagement': {
'name': 'string',
'networkAccess': {
'privateAccess': {
'privateConnectionName': 'string',
'runtimeRoleArn': 'string'
}
}
}
},
'capabilities': {
'string': {
'enabled': True|False,
'triggerFilterGroups': [
{
'events': [
'PULL_REQUEST_READY_FOR_REVIEW'|'PULL_REQUEST_DRAFT',
],
'targetBranches': {
'patterns': [
'string',
]
}
},
]
}
}
},
]
}
Response Structure
(dict) --
Output containing a list of service associations and pagination token.
nextToken (string) --
Token to retrieve the next page of results, if there are more results.
associations (list) --
The list of associations.
(dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this repository maps to for automatic verification testing.
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
bidirectional (dict) --
Optional bidirectional communication configuration. Supply this configuration and set enabled to true so you can interact with the agent directly from Slack.
roleArn (string) --
IAM role ARN that AWS DevOps Agent assumes to exchange messages with your Slack workspace on behalf of this association.
enabled (boolean) --
Whether bidirectional communication is enabled for this association. When you set this value to true, you can mention the agent in a configured Slack channel and it responds in that channel. When you omit this value or set it to false, the agent ignores mentions and only sends notifications.
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this project maps to for automatic verification testing.
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
remoteagent (dict) --
Remote A2A agent integration configuration (token-based auth).
remoteagentsigv4 (dict) --
Remote A2A agent integration configuration (SigV4 auth).
msteams (dict) --
The configuration for connecting a Microsoft Teams team to the DevOps Agent service.
teamId (string) --
The identifier of the Microsoft Teams team to connect to the DevOps Agent service.
teamName (string) --
The name of the Microsoft Teams team to connect to the DevOps Agent service.
transmissionTarget (dict) --
The Microsoft Teams channels that receive agent notifications.
opsOncallTarget (dict) --
The Microsoft Teams channel that receives notifications from the On-call Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
opsSRETarget (dict) --
The Microsoft Teams channel that receives notifications from the SRE Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
releaseManagement (dict) --
Release management network environment configuration
name (string) --
The name for this release management environment.
networkAccess (dict) --
Specifies how AWS DevOps Agent reaches your application using a Release Management Environment
privateAccess (dict) --
Private network access to the resource inside a VPC, using a private connection.
privateConnectionName (string) --
Name of the private connection that supplies the VPC configuration for this release management environment.
runtimeRoleArn (string) --
Role ARN that AWS DevOps Agent assumes at runtime to connect to your VPC.
capabilities (dict) --
Enabled capabilities for this association.
(string) --
AWS DevOps Agent capability types representing the set of automated capabilities that can be enabled per association.
(dict) --
Capability configuration for the AWS DevOps Agent.
enabled (boolean) --
Whether the capability is enabled.
triggerFilterGroups (list) --
Optional trigger filter groups. Evaluated only when enabled=true; retained while the capability is disabled, so re-enabling restores the prior trigger behavior.
(dict) --
A group of trigger conditions. The group matches when ALL present conditions pass. A group cannot be empty: at least one condition must be present.
events (list) --
Passes when the webhook event is one of the listed events.
(string) --
Webhook events that can auto-trigger a capability. PULL_REQUEST_* events apply to RELEASE_READINESS_REVIEW; WORKFLOW_* events apply to RELEASE_SHEPHERDING.
targetBranches (dict) --
Passes when the change request target branch matches. Applicable to RELEASE_READINESS_REVIEW only.
patterns (list) --
Anchored full-match regex patterns. The condition passes when the value matches at least one pattern.
(string) --
A regex pattern matched against the entire value. Example: 'main' or 'release/.*'.
{'filterServiceType': {'msteams'}}
Response {'services': {'serviceType': {'msteams'}}}
List a list of registered service on the account level.
See also: AWS API Documentation
Request Syntax
client.list_services(
maxResults=123,
nextToken='string',
filterServiceType='github'|'slack'|'azure'|'azuredevops'|'msteams'|'dynatrace'|'servicenow'|'pagerduty'|'gitlab'|'eventChannel'|'mcpservernewrelic'|'mcpservergrafana'|'mcpserverdatadog'|'mcpserver'|'mcpserversplunk'|'azureidentity'|'mcpserversigv4'|'remoteagent'|'remoteagentsigv4'
)
integer
Maximum number of results to return in a single call.
string
Token for the next page of results.
string
Optional filter to list only services of a specific type.
dict
Response Syntax
{
'nextToken': 'string',
'services': [
{
'serviceId': 'string',
'serviceType': 'github'|'slack'|'azure'|'azuredevops'|'msteams'|'dynatrace'|'servicenow'|'pagerduty'|'gitlab'|'eventChannel'|'mcpservernewrelic'|'mcpservergrafana'|'mcpserverdatadog'|'mcpserver'|'mcpserversplunk'|'azureidentity'|'mcpserversigv4'|'remoteagent'|'remoteagentsigv4',
'name': 'string',
'accessibleResources': [
{...}|[...]|123|123.4|'string'|True|None,
],
'additionalServiceDetails': {
'github': {
'owner': 'string',
'ownerType': 'organization'|'user',
'targetUrl': 'string'
},
'slack': {
'teamId': 'string',
'teamName': 'string'
},
'mcpserverdatadog': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers',
'description': 'string',
'apiKeyHeader': 'string',
'customHeaderNames': [
'string',
]
},
'mcpserver': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers',
'description': 'string',
'apiKeyHeader': 'string',
'customHeaderNames': [
'string',
]
},
'servicenow': {
'instanceUrl': 'string'
},
'gitlab': {
'targetUrl': 'string',
'tokenType': 'personal'|'group',
'groupId': 'string'
},
'mcpserversplunk': {
'name': 'string',
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers',
'description': 'string',
'apiKeyHeader': 'string',
'customHeaderNames': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'region': 'US'|'EU'|'JP',
'description': 'string'
},
'azuredevops': {
'organizationName': 'string'
},
'azureidentity': {
'tenantId': 'string',
'clientId': 'string',
'webIdentityRoleArn': 'string',
'webIdentityTokenAudiences': [
'string',
]
},
'mcpservergrafana': {
'endpoint': 'string',
'authorizationMethod': 'oauth-client-credentials'|'oauth-3lo'|'api-key'|'bearer-token'|'custom-headers'
},
'pagerduty': {
'scopes': [
'string',
]
},
'mcpserversigv4': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'region': 'string',
'service': 'string',
'roleArn': 'string',
'mcpRoleArn': 'string',
'customHeaders': {
'string': 'string'
}
},
'remoteagent': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'authorizationMethod': 'oauth-client-credentials'|'api-key'|'bearer-token',
'apiKeyHeader': 'string'
},
'remoteagentsigv4': {
'name': 'string',
'endpoint': 'string',
'description': 'string',
'region': 'string',
'service': 'string',
'roleArn': 'string'
}
},
'kmsKeyArn': 'string',
'privateConnectionName': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1)
},
]
}
Response Structure
(dict) --
Output containing a list of registered services and pagination token.
nextToken (string) --
Token to retrieve the next page of results, if there are more results.
services (list) --
List of registered services.
(dict) --
Represents a registered service with its configuration and accessible resources.
serviceId (string) --
The unique identifier of a service.
serviceType (string) --
The service type e.g github or dynatrace
name (string) --
The display name of the registered service.
accessibleResources (list) --
List of accessible resources for this service.
(:ref:`document<document>`) --
additionalServiceDetails (dict) --
Additional details specific to the service type.
github (dict) --
GitHub-specific service details.
owner (string) --
The GitHub repository owner name.
ownerType (string) --
The GitHub repository owner type.
targetUrl (string) --
The GitHub Enterprise Server instance URL (absent for github.com).
slack (dict) --
Slack-specific service details.
teamId (string) --
The Slack team ID.
teamName (string) --
The Slack team name.
mcpserverdatadog (dict) --
Datadog MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
customHeaderNames (list) --
The configured custom authentication header names when the MCP server uses custom-header authentication. Secret values are not returned.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
mcpserver (dict) --
MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
customHeaderNames (list) --
The configured custom authentication header names when the MCP server uses custom-header authentication. Secret values are not returned.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
servicenow (dict) --
ServiceNow-specific service details.
instanceUrl (string) --
The ServiceNow instance url
gitlab (dict) --
GitLab-specific service details.
targetUrl (string) --
The GitLab instance URL.
tokenType (string) --
Type of GitLab access token
groupId (string) --
Optional GitLab group ID for group-level access tokens
mcpserversplunk (dict) --
Splunk MCP server-specific service details.
name (string) --
The MCP server name.
endpoint (string) --
The MCP server endpoint URL.
authorizationMethod (string) --
The MCP server uses this authorization method.
description (string) --
Optional description for the MCP server.
apiKeyHeader (string) --
If the MCP server uses API key authentication, these details are provided.
customHeaderNames (list) --
The configured custom authentication header names when the MCP server uses custom-header authentication. Secret values are not returned.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
mcpservernewrelic (dict) --
New Relic MCP server-specific service details.
accountId (string) --
The NewRelic account ID.
region (string) --
The NewRelic region (determines API endpoint).
description (string) --
Optional user description.
azuredevops (dict) --
Azure DevOps specific service details.
organizationName (string) --
The Azure DevOps Organization name associated with the service.
azureidentity (dict) --
Azure identity details for services using Azure authentication.
tenantId (string) --
The Azure Active Directory tenant ID for the identity.
clientId (string) --
The client ID of the service principal or managed identity used for authentication.
webIdentityRoleArn (string) --
The role ARN to be assumed by DevOps Agent for requesting Web Identity Token.
webIdentityTokenAudiences (list) --
The audiences for the Web Identity Token.
(string) --
mcpservergrafana (dict) --
Grafana MCP server-specific service details.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
authorizationMethod (string) --
The authz method used by the MCP server.
pagerduty (dict) --
Pagerduty service details.
scopes (list) --
The scopes that were assigned to the service
(string) --
mcpserversigv4 (dict) --
SigV4-authenticated MCP server-specific service details.
name (string) --
MCP server name.
endpoint (string) --
MCP server endpoint URL.
description (string) --
Optional description for the MCP server.
region (string) --
AWS region for SigV4 signing. Use '*' for SigV4a multi-region signing.
service (string) --
AWS service name for SigV4 signing.
roleArn (string) --
IAM role ARN to assume for SigV4 signing.
mcpRoleArn (string) --
AWS IAM role ARN.
customHeaders (dict) --
Custom headers for the SigV4 MCP server.
(string) --
HTTP header name. Allows alphanumeric characters, hyphens, and underscores.
(string) --
Value type for custom headers.
remoteagent (dict) --
Remote A2A agent-specific service details (token-based auth).
name (string) --
Name identifier for a remote A2A agent.
endpoint (string) --
HTTPS endpoint URL for a remote A2A agent.
description (string) --
Description field
authorizationMethod (string) --
The authorization method used by the remote agent.
apiKeyHeader (string) --
If the remote agent uses API key authentication, the header name.
remoteagentsigv4 (dict) --
Remote A2A agent-specific service details (SigV4 auth).
name (string) --
Name identifier for a remote A2A agent.
endpoint (string) --
HTTPS endpoint URL for a remote A2A agent.
description (string) --
Description field
region (string) --
AWS region identifier or wildcard (*) for SigV4a multi-region signing.
service (string) --
The AWS service name for SigV4 signing.
roleArn (string) --
AWS IAM role ARN.
kmsKeyArn (string) --
The ARN of the AWS Key Management Service (AWS KMS) customer managed key that's used to encrypt resources.
privateConnectionName (string) --
The name of the private connection used for VPC connectivity.
createdAt (datetime) --
The timestamp when the service was registered.
updatedAt (datetime) --
The timestamp when the service was last updated.
{'configuration': {'msteams': {'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {'opsOncallTarget': {'channelId': 'string',
'channelName': 'string'},
'opsSRETarget': {'channelId': 'string',
'channelName': 'string'}}}}}
Response {'association': {'configuration': {'msteams': {'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {'opsOncallTarget': {'channelId': 'string',
'channelName': 'string'},
'opsSRETarget': {'channelId': 'string',
'channelName': 'string'}}}}}}
Partially updates the configuration of an existing service association for an AgentSpace. Present fields are fully replaced; absent fields are left unchanged. Returns 200 OK on success.
See also: AWS API Documentation
Request Syntax
client.update_association(
agentSpaceId='string',
associationId='string',
configuration={
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
},
'bidirectional': {
'roleArn': 'string',
'enabled': True|False
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'mcpserver': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'mcpserversplunk': {}
,
'eventChannel': {}
,
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
],
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'remoteagent': {}
,
'remoteagentsigv4': {}
,
'msteams': {
'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'releaseManagement': {
'name': 'string',
'networkAccess': {
'privateAccess': {
'privateConnectionName': 'string',
'runtimeRoleArn': 'string'
}
}
}
},
capabilities={
'string': {
'enabled': True|False,
'triggerFilterGroups': [
{
'events': [
'PULL_REQUEST_READY_FOR_REVIEW'|'PULL_REQUEST_DRAFT',
],
'targetBranches': {
'patterns': [
'string',
]
}
},
]
}
}
)
string
[REQUIRED]
The unique identifier of the AgentSpace
string
[REQUIRED]
The unique identifier of the given association.
dict
[REQUIRED]
The configuration that directs how AgentSpace interacts with the given service. The entire configuration is replaced on update.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) -- [REQUIRED]
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) -- [REQUIRED]
AWS Account Id corresponding to provided resources.
accountType (string) -- [REQUIRED]
Account Type 'monitor' for AIDevOps monitoring.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
github (dict) --
GitHub repository integration configuration.
repoName (string) -- [REQUIRED]
Associated Github repo name
repoId (string) -- [REQUIRED]
Associated Github repo ID
owner (string) -- [REQUIRED]
The GitHub repository owner name.
ownerType (string) -- [REQUIRED]
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this repository maps to for automatic verification testing.
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) -- [REQUIRED]
Associated Slack workspace ID
workspaceName (string) -- [REQUIRED]
Associated Slack workspace name
transmissionTarget (dict) -- [REQUIRED]
Transmission targets for agent notifications
opsOncallTarget (dict) -- [REQUIRED]
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) -- [REQUIRED]
Slack channel ID
bidirectional (dict) --
Optional bidirectional communication configuration. Supply this configuration and set enabled to true so you can interact with the agent directly from Slack.
roleArn (string) -- [REQUIRED]
IAM role ARN that AWS DevOps Agent assumes to exchange messages with your Slack workspace on behalf of this association.
enabled (boolean) --
Whether bidirectional communication is enabled for this association. When you set this value to true, you can mention the agent in a configured Slack channel and it responds in that channel. When you omit this value or set it to false, the agent ignores mentions and only sends notifications.
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) -- [REQUIRED]
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) -- [REQUIRED]
New Relic Account ID
endpoint (string) -- [REQUIRED]
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools can be used with the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
gitlab (dict) --
GitLab project integration configuration.
projectId (string) -- [REQUIRED]
GitLab numeric project ID.
projectPath (string) -- [REQUIRED]
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this project maps to for automatic verification testing.
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) -- [REQUIRED]
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) -- [REQUIRED]
Azure DevOps organization name.
projectId (string) -- [REQUIRED]
Azure DevOps project ID.
projectName (string) -- [REQUIRED]
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) -- [REQUIRED]
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
pagerduty (dict) --
PagerDuty integration configuration
services (list) -- [REQUIRED]
List of Pagerduty service available for the association.
(string) --
customerEmail (string) -- [REQUIRED]
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) -- [REQUIRED]
List of MCP tools available for the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) -- [REQUIRED]
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
remoteagent (dict) --
Remote A2A agent integration configuration (token-based auth).
remoteagentsigv4 (dict) --
Remote A2A agent integration configuration (SigV4 auth).
msteams (dict) --
The configuration for connecting a Microsoft Teams team to the DevOps Agent service.
teamId (string) -- [REQUIRED]
The identifier of the Microsoft Teams team to connect to the DevOps Agent service.
teamName (string) -- [REQUIRED]
The name of the Microsoft Teams team to connect to the DevOps Agent service.
transmissionTarget (dict) -- [REQUIRED]
The Microsoft Teams channels that receive agent notifications.
opsOncallTarget (dict) --
The Microsoft Teams channel that receives notifications from the On-call Agent.
channelName (string) -- [REQUIRED]
The name of the Microsoft Teams channel.
channelId (string) -- [REQUIRED]
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
opsSRETarget (dict) --
The Microsoft Teams channel that receives notifications from the SRE Agent.
channelName (string) -- [REQUIRED]
The name of the Microsoft Teams channel.
channelId (string) -- [REQUIRED]
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
releaseManagement (dict) --
Release management network environment configuration
name (string) -- [REQUIRED]
The name for this release management environment.
networkAccess (dict) -- [REQUIRED]
Specifies how AWS DevOps Agent reaches your application using a Release Management Environment
privateAccess (dict) --
Private network access to the resource inside a VPC, using a private connection.
privateConnectionName (string) -- [REQUIRED]
Name of the private connection that supplies the VPC configuration for this release management environment.
runtimeRoleArn (string) -- [REQUIRED]
Role ARN that AWS DevOps Agent assumes at runtime to connect to your VPC.
dict
Enabled capabilities for this association.
(string) --
AWS DevOps Agent capability types representing the set of automated capabilities that can be enabled per association.
(dict) --
Capability configuration for the AWS DevOps Agent.
enabled (boolean) --
Whether the capability is enabled.
triggerFilterGroups (list) --
Optional trigger filter groups. Evaluated only when enabled=true; retained while the capability is disabled, so re-enabling restores the prior trigger behavior.
(dict) --
A group of trigger conditions. The group matches when ALL present conditions pass. A group cannot be empty: at least one condition must be present.
events (list) --
Passes when the webhook event is one of the listed events.
(string) --
Webhook events that can auto-trigger a capability. PULL_REQUEST_* events apply to RELEASE_READINESS_REVIEW; WORKFLOW_* events apply to RELEASE_SHEPHERDING.
targetBranches (dict) --
Passes when the change request target branch matches. Applicable to RELEASE_READINESS_REVIEW only.
patterns (list) -- [REQUIRED]
Anchored full-match regex patterns. The condition passes when the value matches at least one pattern.
(string) --
A regex pattern matched against the entire value. Example: 'main' or 'release/.*'.
dict
Response Syntax
{
'association': {
'agentSpaceId': 'string',
'createdAt': datetime(2015, 1, 1),
'updatedAt': datetime(2015, 1, 1),
'status': 'valid'|'invalid'|'pending-confirmation',
'associationId': 'string',
'serviceId': 'string',
'configuration': {
'sourceAws': {
'accountId': 'string',
'accountType': 'source',
'assumableRoleArn': 'string',
'externalId': 'string',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'aws': {
'assumableRoleArn': 'string',
'accountId': 'string',
'accountType': 'monitor',
'agentElevatedRoleArn': 'string',
'agentElevatedRoleArnStatus': 'valid'|'invalid'|'pending-confirmation'
},
'github': {
'repoName': 'string',
'repoId': 'string',
'owner': 'string',
'ownerType': 'organization'|'user',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'slack': {
'workspaceId': 'string',
'workspaceName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
},
'bidirectional': {
'roleArn': 'string',
'enabled': True|False
}
},
'dynatrace': {
'envId': 'string',
'resources': [
'string',
]
},
'servicenow': {
'instanceId': 'string',
'authScopes': [
'string',
]
},
'mcpservernewrelic': {
'accountId': 'string',
'endpoint': 'string'
},
'mcpserverdatadog': {
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'mcpserver': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'gitlab': {
'projectId': 'string',
'projectPath': 'string',
'instanceIdentifier': 'string',
'runtimeRoleArn': 'string',
'releaseManagementAssociationId': 'string'
},
'mcpserversplunk': {},
'eventChannel': {},
'azure': {
'subscriptionId': 'string'
},
'azuredevops': {
'organizationName': 'string',
'projectId': 'string',
'projectName': 'string'
},
'mcpservergrafana': {
'endpoint': 'string',
'organizationId': 'string',
'tools': [
'string',
],
'enabledElevatedTools': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'pagerduty': {
'services': [
'string',
],
'customerEmail': 'string'
},
'mcpserversigv4': {
'tools': [
'string',
],
'toolDetails': [
{
'name': 'string',
'toolClassification': 'READ_ONLY'|'MUTATIVE'|'DESTRUCTIVE'
},
]
},
'remoteagent': {},
'remoteagentsigv4': {},
'msteams': {
'teamId': 'string',
'teamName': 'string',
'transmissionTarget': {
'opsOncallTarget': {
'channelName': 'string',
'channelId': 'string'
},
'opsSRETarget': {
'channelName': 'string',
'channelId': 'string'
}
}
},
'releaseManagement': {
'name': 'string',
'networkAccess': {
'privateAccess': {
'privateConnectionName': 'string',
'runtimeRoleArn': 'string'
}
}
}
},
'capabilities': {
'string': {
'enabled': True|False,
'triggerFilterGroups': [
{
'events': [
'PULL_REQUEST_READY_FOR_REVIEW'|'PULL_REQUEST_DRAFT',
],
'targetBranches': {
'patterns': [
'string',
]
}
},
]
}
}
},
'webhook': {
'webhookUrl': 'string',
'webhookId': 'string',
'webhookType': 'hmac'|'apikey'|'gitlab'|'pagerduty',
'webhookSecret': 'string',
'apiKey': 'string'
}
}
Response Structure
(dict) --
Output containing the updated association and optional webhook configuration.
association (dict) --
Represents a service association within an AgentSpace, defining how the agent interacts with external services.
agentSpaceId (string) --
The unique identifier of the AgentSpace
createdAt (datetime) --
The timestamp when the resource was created.
updatedAt (datetime) --
The timestamp when the resource was last updated.
status (string) --
Validation status
associationId (string) --
The unique identifier of the given association.
serviceId (string) --
The identifier for associated service
configuration (dict) --
The configuration that directs how AgentSpace interacts with the given service.
sourceAws (dict) --
AWS source account configuration for monitoring resources.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'source' for AIDevOps monitoring.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer. To set this role ARN on AssociateService or UpdateAssociation, the caller must have at least the iam:PassRole permission on arn:aws:iam::<account-id>:role/* in the caller's own account, with the condition iam:PassedToService set to aidevops.amazonaws.com. A broader iam:PassRole grant also satisfies this requirement.
externalId (string) --
External ID for additional security when assuming the role. Used to prevent the confused deputy problem.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account. Setting this role is subject to the same minimum iam:PassRole requirement described on assumableRoleArn.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
aws (dict) --
AWS monitor account configuration.
assumableRoleArn (string) --
Role ARN to be assumed by AIDevOps to operate on behalf of customer.
accountId (string) --
AWS Account Id corresponding to provided resources.
accountType (string) --
Account Type 'monitor' for AIDevOps monitoring.
agentElevatedRoleArn (string) --
Optional IAM role ARN to be assumed by AIDevOps for elevated directed actions on behalf of the customer. Used for mutating operations gated by elevatedActionsEnabled on the AgentSpace. When not provided, only non-elevated directed actions are available for this AWS account.
agentElevatedRoleArnStatus (string) --
Validation status of the agentElevatedRoleArn. Updated asynchronously after the customer registers an elevated role. Possible values: PENDING_CONFIRMATION (validation in progress), VALID (role validated), INVALID (validation failed).
github (dict) --
GitHub repository integration configuration.
repoName (string) --
Associated Github repo name
repoId (string) --
Associated Github repo ID
owner (string) --
The GitHub repository owner name.
ownerType (string) --
Type of GitHub repository owner.
instanceIdentifier (string) --
GitHub instance identifier (e.g., github.com or github.enterprise.com)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this repository maps to for automatic verification testing.
slack (dict) --
Slack workspace integration configuration.
workspaceId (string) --
Associated Slack workspace ID
workspaceName (string) --
Associated Slack workspace name
transmissionTarget (dict) --
Transmission targets for agent notifications
opsOncallTarget (dict) --
Destination for On-call Agent (Ops1)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
opsSRETarget (dict) --
Destination for SRE Agent (Ops1.5)
channelName (string) --
Slack channel name
channelId (string) --
Slack channel ID
bidirectional (dict) --
Optional bidirectional communication configuration. Supply this configuration and set enabled to true so you can interact with the agent directly from Slack.
roleArn (string) --
IAM role ARN that AWS DevOps Agent assumes to exchange messages with your Slack workspace on behalf of this association.
enabled (boolean) --
Whether bidirectional communication is enabled for this association. When you set this value to true, you can mention the agent in a configured Slack channel and it responds in that channel. When you omit this value or set it to false, the agent ignores mentions and only sends notifications.
dynatrace (dict) --
Dynatrace monitoring integration configuration.
envId (string) --
Dynatrace environment id
resources (list) --
List of Dynatrace resources to monitor
(string) --
servicenow (dict) --
ServiceNow instance integration configuration.
instanceId (string) --
ServiceNow instance ID
authScopes (list) --
Scoped down authentication scopes for fine grained control
(string) --
mcpservernewrelic (dict) --
NewRelic instance integration configuration.
accountId (string) --
New Relic Account ID
endpoint (string) --
MCP server endpoint URL (e.g., https://mcp.newrelic.com/mcp/)
mcpserverdatadog (dict) --
Datadog MCP server integration configuration.
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
mcpserver (dict) --
MCP (Model Context Protocol) server integration configuration.
tools (list) --
List of MCP tools can be used with the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
gitlab (dict) --
GitLab project integration configuration.
projectId (string) --
GitLab numeric project ID.
projectPath (string) --
Full GitLab project path (e.g., namespace/project-name).
instanceIdentifier (string) --
GitLab instance identifier (e.g., gitlab.com or e2e.gamma.dev.us-east-1.gitlab.falco.ai.aws.dev)
runtimeRoleArn (string) --
Optional role ARN that AIDevOps assumes at runtime for automatic verification testing and VPC connectivity on this association.
releaseManagementAssociationId (string) --
The identifier of the release management association that this project maps to for automatic verification testing.
mcpserversplunk (dict) --
Splunk MCP server integration configuration.
eventChannel (dict) --
Event Channel instance integration configuration.
azure (dict) --
Azure subscription integration configuration.
subscriptionId (string) --
Azure subscription ID corresponding to provided resources.
azuredevops (dict) --
Azure DevOps project integration configuration.
organizationName (string) --
Azure DevOps organization name.
projectId (string) --
Azure DevOps project ID.
projectName (string) --
Azure DevOps project name.
mcpservergrafana (dict) --
Grafana MCP server integration configuration.
endpoint (string) --
Grafana instance URL (e.g., https://your-instance.grafana.net)
organizationId (string) --
The Grafana organization ID that can be used.
tools (list) --
List of MCP tools that can be used.
(string) --
enabledElevatedTools (list) --
The subset of elevated-access tools enabled for this integration.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
pagerduty (dict) --
PagerDuty integration configuration
services (list) --
List of Pagerduty service available for the association.
(string) --
customerEmail (string) --
Email to be used in Pagerduty API header
mcpserversigv4 (dict) --
SigV4-authenticated MCP server integration configuration.
tools (list) --
List of MCP tools available for the association.
(string) --
toolDetails (list) --
List of MCP tools with their access categorization. When provided, the tool names must match those in the tools member.
(dict) --
An MCP tool together with its access categorization.
name (string) --
The name of the MCP tool.
toolClassification (string) --
The access categorization of the MCP tool.
remoteagent (dict) --
Remote A2A agent integration configuration (token-based auth).
remoteagentsigv4 (dict) --
Remote A2A agent integration configuration (SigV4 auth).
msteams (dict) --
The configuration for connecting a Microsoft Teams team to the DevOps Agent service.
teamId (string) --
The identifier of the Microsoft Teams team to connect to the DevOps Agent service.
teamName (string) --
The name of the Microsoft Teams team to connect to the DevOps Agent service.
transmissionTarget (dict) --
The Microsoft Teams channels that receive agent notifications.
opsOncallTarget (dict) --
The Microsoft Teams channel that receives notifications from the On-call Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
opsSRETarget (dict) --
The Microsoft Teams channel that receives notifications from the SRE Agent.
channelName (string) --
The name of the Microsoft Teams channel.
channelId (string) --
The unique identifier of the Microsoft Teams channel, for example 19:abc123def456@thread.tacv2.
releaseManagement (dict) --
Release management network environment configuration
name (string) --
The name for this release management environment.
networkAccess (dict) --
Specifies how AWS DevOps Agent reaches your application using a Release Management Environment
privateAccess (dict) --
Private network access to the resource inside a VPC, using a private connection.
privateConnectionName (string) --
Name of the private connection that supplies the VPC configuration for this release management environment.
runtimeRoleArn (string) --
Role ARN that AWS DevOps Agent assumes at runtime to connect to your VPC.
capabilities (dict) --
Enabled capabilities for this association.
(string) --
AWS DevOps Agent capability types representing the set of automated capabilities that can be enabled per association.
(dict) --
Capability configuration for the AWS DevOps Agent.
enabled (boolean) --
Whether the capability is enabled.
triggerFilterGroups (list) --
Optional trigger filter groups. Evaluated only when enabled=true; retained while the capability is disabled, so re-enabling restores the prior trigger behavior.
(dict) --
A group of trigger conditions. The group matches when ALL present conditions pass. A group cannot be empty: at least one condition must be present.
events (list) --
Passes when the webhook event is one of the listed events.
(string) --
Webhook events that can auto-trigger a capability. PULL_REQUEST_* events apply to RELEASE_READINESS_REVIEW; WORKFLOW_* events apply to RELEASE_SHEPHERDING.
targetBranches (dict) --
Passes when the change request target branch matches. Applicable to RELEASE_READINESS_REVIEW only.
patterns (list) --
Anchored full-match regex patterns. The condition passes when the value matches at least one pattern.
(string) --
A regex pattern matched against the entire value. Example: 'main' or 'release/.*'.
webhook (dict) --
Generic webhook configuration
webhookUrl (string) --
The webhook URL endpoint
webhookId (string) --
The unique webhook identifier
webhookType (string) --
The webhook authentication type
webhookSecret (string) --
The webhook secret for authentication
apiKey (string) --
API Key for API Key webhook authentication