Specifies which operations from an API Gateway REST API are exposed as tools. Tool names and descriptions are derived from the operationId and description fields in the API's exported OpenAPI specification.

ApiGatewayToolOverride

class ApiGatewayToolOverride

Settings to override configurations for a tool.

ApiKeyCredentialLocation

sealed class ApiKeyCredentialLocation

ApiKeyCredentialProviderItem

class ApiKeyCredentialProviderItem

Contains information about an API key credential provider.

ApiSchemaConfiguration

sealed class ApiSchemaConfiguration

Configuration for API schema.

AtlassianOauth2ProviderConfigInput

class AtlassianOauth2ProviderConfigInput

Configuration settings for connecting to Atlassian services using OAuth2 authentication. This includes the client credentials required to authenticate with Atlassian's OAuth2 authorization server.

AtlassianOauth2ProviderConfigOutput

class AtlassianOauth2ProviderConfigOutput

The configuration details returned for an Atlassian OAuth2 provider, including the client ID and OAuth2 discovery information.

AuthorizerConfiguration

sealed class AuthorizerConfiguration

Represents inbound authorization configuration options used to authenticate incoming requests.

AuthorizerType

sealed class AuthorizerType

AuthorizingClaimMatchValueType

class AuthorizingClaimMatchValueType

Defines the value or values to match for and the relationship of the match.

BedrockAgentCoreControlException

open class BedrockAgentCoreControlException : AwsServiceException

Base class for all service related exceptions thrown by the BedrockAgentCoreControl client

BedrockEvaluatorModelConfig

class BedrockEvaluatorModelConfig

The configuration for using Amazon Bedrock models in evaluator assessments, including model selection and inference parameters.

BrowserNetworkConfiguration

class BrowserNetworkConfiguration

The network configuration for a browser. This structure defines how the browser connects to the network.

BrowserNetworkMode

sealed class BrowserNetworkMode

BrowserSigningConfigInput

class BrowserSigningConfigInput

Configuration for enabling browser signing capabilities that allow agents to cryptographically identify themselves to websites using HTTP message signatures.

BrowserSigningConfigOutput

class BrowserSigningConfigOutput

The current browser signing configuration that shows whether cryptographic agent identification is enabled for web bot authentication.

BrowserStatus

sealed class BrowserStatus

BrowserSummary

class BrowserSummary

Contains summary information about a browser. A browser enables Amazon Bedrock Agent to interact with web content.

CategoricalScaleDefinition

class CategoricalScaleDefinition

The definition of a categorical rating scale option that provides a named category with its description for evaluation scoring.

CedarPolicy

class CedarPolicy

Represents a Cedar policy statement within the AgentCore Policy system. Cedar is a policy language designed for authorization that provides human-readable, analyzable, and high-performance policy evaluation for controlling agent behavior and access decisions.

ClaimMatchOperatorType

sealed class ClaimMatchOperatorType

ClaimMatchValueType

sealed class ClaimMatchValueType

The value or values to match for.

CloudWatchLogsInputConfig

class CloudWatchLogsInputConfig

The configuration for reading agent traces from CloudWatch logs as input for online evaluation.

CloudWatchOutputConfig

class CloudWatchOutputConfig

The configuration for writing evaluation results to CloudWatch logs with embedded metric format (EMF) for monitoring.

Code

sealed class Code

The source code configuration that specifies the location and details of the code to be executed.

CodeConfiguration

class CodeConfiguration

The configuration for the source code that defines how the agent runtime code should be executed, including the code location, runtime environment, and entry point.

CodeInterpreterNetworkConfiguration

class CodeInterpreterNetworkConfiguration

The network configuration for a code interpreter. This structure defines how the code interpreter connects to the network.

CodeInterpreterNetworkMode

sealed class CodeInterpreterNetworkMode

CodeInterpreterStatus

sealed class CodeInterpreterStatus

CodeInterpreterSummary

class CodeInterpreterSummary

Contains summary information about a code interpreter. A code interpreter enables Amazon Bedrock Agent to execute code.

ConcurrentModificationException

class ConcurrentModificationException : BedrockAgentCoreControlException

Exception thrown when a resource is modified concurrently by multiple requests.

ConflictException

class ConflictException : BedrockAgentCoreControlException

This exception is thrown when there is a conflict performing an operation

ConsolidationConfiguration

sealed class ConsolidationConfiguration

Contains consolidation configuration information for a memory strategy.

ContainerConfiguration

class ContainerConfiguration

Representation of a container configuration.

Content

sealed class Content

Represents content input for policy generation operations. This structure encapsulates the natural language descriptions or other content formats that are used as input for AI-powered policy generation.

CreateAgentRuntimeEndpointRequest

class CreateAgentRuntimeEndpointRequest

CreateAgentRuntimeEndpointResponse

class CreateAgentRuntimeEndpointResponse

CreateAgentRuntimeRequest

class CreateAgentRuntimeRequest

CreateAgentRuntimeResponse

class CreateAgentRuntimeResponse

CreateApiKeyCredentialProviderRequest

class CreateApiKeyCredentialProviderRequest

CreateApiKeyCredentialProviderResponse

class CreateApiKeyCredentialProviderResponse

CreateBrowserRequest

class CreateBrowserRequest

CreateBrowserResponse

class CreateBrowserResponse

CreateCodeInterpreterRequest

class CreateCodeInterpreterRequest

CreateCodeInterpreterResponse

class CreateCodeInterpreterResponse

CreateEvaluatorRequest

class CreateEvaluatorRequest

CreateEvaluatorResponse

class CreateEvaluatorResponse

CreateGatewayRequest

class CreateGatewayRequest

CreateGatewayResponse

class CreateGatewayResponse

CreateGatewayTargetRequest

class CreateGatewayTargetRequest

CreateGatewayTargetResponse

class CreateGatewayTargetResponse

CreateMemoryRequest

class CreateMemoryRequest

CreateMemoryResponse

class CreateMemoryResponse

CreateOauth2CredentialProviderRequest

class CreateOauth2CredentialProviderRequest

CreateOauth2CredentialProviderResponse

class CreateOauth2CredentialProviderResponse

CreateOnlineEvaluationConfigRequest

class CreateOnlineEvaluationConfigRequest

CreateOnlineEvaluationConfigResponse

class CreateOnlineEvaluationConfigResponse

CreatePolicyEngineRequest

class CreatePolicyEngineRequest

CreatePolicyEngineResponse

class CreatePolicyEngineResponse

CreatePolicyRequest

class CreatePolicyRequest

CreatePolicyResponse

class CreatePolicyResponse

CreateWorkloadIdentityRequest

class CreateWorkloadIdentityRequest

CreateWorkloadIdentityResponse

class CreateWorkloadIdentityResponse

CredentialProvider

sealed class CredentialProvider

A credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint.

CredentialProviderConfiguration

class CredentialProviderConfiguration

The configuration for a credential provider. This structure defines how the gateway authenticates with the target endpoint.

CredentialProviderType

sealed class CredentialProviderType

CredentialProviderVendorType

sealed class CredentialProviderVendorType

CustomClaimValidationType

class CustomClaimValidationType

Defines the name of a custom claim field and rules for finding matches to authenticate its value.

CustomConfigurationInput

sealed class CustomConfigurationInput

Input for custom configuration of a memory strategy.

CustomConsolidationConfiguration

sealed class CustomConsolidationConfiguration

Contains custom consolidation configuration information.

CustomConsolidationConfigurationInput

sealed class CustomConsolidationConfigurationInput

Input for a custom consolidation configuration.

CustomExtractionConfiguration

sealed class CustomExtractionConfiguration

Contains custom extraction configuration information.

CustomExtractionConfigurationInput

sealed class CustomExtractionConfigurationInput

Input for a custom extraction configuration.

CustomJwtAuthorizerConfiguration

class CustomJwtAuthorizerConfiguration

Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated.

CustomMemoryStrategyInput

class CustomMemoryStrategyInput

Input for creating a custom memory strategy.

CustomOauth2ProviderConfigInput

class CustomOauth2ProviderConfigInput

Input configuration for a custom OAuth2 provider.

CustomOauth2ProviderConfigOutput

class CustomOauth2ProviderConfigOutput

Output configuration for a custom OAuth2 provider.

CustomReflectionConfiguration

sealed class CustomReflectionConfiguration

Contains configurations for a custom reflection strategy.

CustomReflectionConfigurationInput

sealed class CustomReflectionConfigurationInput

Input for a custom reflection configuration.

DataSourceConfig

sealed class DataSourceConfig

The configuration that specifies where to read agent traces for online evaluation.

DecryptionFailure

class DecryptionFailure : BedrockAgentCoreControlException

Exception thrown when decryption of a secret fails.

DeleteAgentRuntimeEndpointRequest

class DeleteAgentRuntimeEndpointRequest

DeleteAgentRuntimeEndpointResponse

class DeleteAgentRuntimeEndpointResponse

DeleteAgentRuntimeRequest

class DeleteAgentRuntimeRequest

DeleteAgentRuntimeResponse

class DeleteAgentRuntimeResponse

DeleteApiKeyCredentialProviderRequest

class DeleteApiKeyCredentialProviderRequest

DeleteApiKeyCredentialProviderResponse

class DeleteApiKeyCredentialProviderResponse

DeleteBrowserRequest

class DeleteBrowserRequest

DeleteBrowserResponse

class DeleteBrowserResponse

DeleteCodeInterpreterRequest

class DeleteCodeInterpreterRequest

DeleteCodeInterpreterResponse

class DeleteCodeInterpreterResponse

DeleteEvaluatorRequest

class DeleteEvaluatorRequest

DeleteEvaluatorResponse

class DeleteEvaluatorResponse

DeleteGatewayRequest

class DeleteGatewayRequest

DeleteGatewayResponse

class DeleteGatewayResponse

DeleteGatewayTargetRequest

class DeleteGatewayTargetRequest

DeleteGatewayTargetResponse

class DeleteGatewayTargetResponse

DeleteMemoryRequest

class DeleteMemoryRequest

DeleteMemoryResponse

class DeleteMemoryResponse

DeleteMemoryStrategyInput

class DeleteMemoryStrategyInput

Input for deleting a memory strategy.

DeleteOauth2CredentialProviderRequest

class DeleteOauth2CredentialProviderRequest

DeleteOauth2CredentialProviderResponse

class DeleteOauth2CredentialProviderResponse

DeleteOnlineEvaluationConfigRequest

class DeleteOnlineEvaluationConfigRequest

DeleteOnlineEvaluationConfigResponse

class DeleteOnlineEvaluationConfigResponse

DeletePolicyEngineRequest

class DeletePolicyEngineRequest

DeletePolicyEngineResponse

class DeletePolicyEngineResponse

DeletePolicyRequest

class DeletePolicyRequest

DeletePolicyResponse

class DeletePolicyResponse

DeleteResourcePolicyRequest

class DeleteResourcePolicyRequest

DeleteResourcePolicyResponse

class DeleteResourcePolicyResponse

DeleteWorkloadIdentityRequest

class DeleteWorkloadIdentityRequest

DeleteWorkloadIdentityResponse

class DeleteWorkloadIdentityResponse

EncryptionFailure

class EncryptionFailure : BedrockAgentCoreControlException

Exception thrown when encryption of a secret fails.

EpisodicConsolidationOverride

class EpisodicConsolidationOverride

Contains configurations to override the default consolidation step for the episodic memory strategy.

EpisodicExtractionOverride

class EpisodicExtractionOverride

Contains configurations to override the default extraction step for the episodic memory strategy.

EpisodicMemoryStrategyInput

class EpisodicMemoryStrategyInput

Input for creating an episodic memory strategy.

EpisodicOverrideConfigurationInput

class EpisodicOverrideConfigurationInput

Input for the configuration to override the episodic memory strategy.

EpisodicOverrideConsolidationConfigurationInput

class EpisodicOverrideConsolidationConfigurationInput

Configurations for overriding the consolidation step of the episodic memory strategy.

EpisodicOverrideExtractionConfigurationInput

class EpisodicOverrideExtractionConfigurationInput

Configurations for overriding the extraction step of the episodic memory strategy.

EpisodicOverrideReflectionConfigurationInput

class EpisodicOverrideReflectionConfigurationInput

Configurations for overriding the reflection step of the episodic memory strategy.

EpisodicReflectionConfiguration

class EpisodicReflectionConfiguration

The configuration for the reflections created with the episodic memory strategy.

EpisodicReflectionConfigurationInput

class EpisodicReflectionConfigurationInput

An episodic reflection configuration input.

EpisodicReflectionOverride

class EpisodicReflectionOverride

Contains configurations to override the default reflection step for the episodic memory strategy.

EvaluatorConfig

sealed class EvaluatorConfig

The configuration that defines how an evaluator assesses agent performance, including the evaluation method and parameters.

EvaluatorLevel

sealed class EvaluatorLevel

EvaluatorModelConfig

sealed class EvaluatorModelConfig

The model configuration that specifies which foundation model to use for evaluation and how to configure it.

EvaluatorReference

sealed class EvaluatorReference

The reference to an evaluator used in online evaluation configurations, containing the evaluator identifier.

EvaluatorStatus

sealed class EvaluatorStatus

EvaluatorSummary

class EvaluatorSummary

The summary information about an evaluator, including basic metadata and status information.

EvaluatorType

sealed class EvaluatorType

ExceptionLevel

sealed class ExceptionLevel

ExtractionConfiguration

sealed class ExtractionConfiguration

Contains extraction configuration information for a memory strategy.

Filter

class Filter

The filter that applies conditions to agent traces during online evaluation to determine which traces should be evaluated.

FilterOperator

sealed class FilterOperator

FilterValue

sealed class FilterValue

The value used in filter comparisons, supporting different data types for flexible filtering criteria.

Finding

class Finding

Represents a finding or issue discovered during policy generation or validation. Findings provide insights about potential problems, recommendations, or validation results from policy analysis operations. Finding types include: VALID (policy is ready to use), INVALID (policy has validation errors that must be fixed), NOT_TRANSLATABLE (input couldn't be converted to policy), ALLOW_ALL (policy would allow all actions, potential security risk), ALLOW_NONE (policy would allow no actions, unusable), DENY_ALL (policy would deny all actions, may be too restrictive), and DENY_NONE (policy would deny no actions, ineffective). Review all findings before creating policies from generated assets to ensure they match your security requirements.

FindingType

sealed class FindingType

GatewayApiKeyCredentialProvider

class GatewayApiKeyCredentialProvider

An API key credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using an API key.

GatewayInterceptionPoint

sealed class GatewayInterceptionPoint

GatewayInterceptorConfiguration

class GatewayInterceptorConfiguration

The configuration for an interceptor on a gateway. This structure defines settings for an interceptor that will be invoked during the invocation of the gateway.

GatewayPolicyEngineConfiguration

class GatewayPolicyEngineConfiguration

The configuration for a policy engine associated with a gateway. A policy engine is a collection of policies that evaluates and authorizes agent tool calls. When associated with a gateway, the policy engine intercepts all agent requests and determines whether to allow or deny each action based on the defined policies.

GatewayPolicyEngineMode

sealed class GatewayPolicyEngineMode

GatewayProtocolConfiguration

sealed class GatewayProtocolConfiguration

The configuration for a gateway protocol. This structure defines how the gateway communicates with external services.

GatewayProtocolType

sealed class GatewayProtocolType

GatewayStatus

sealed class GatewayStatus

GatewaySummary

class GatewaySummary

Contains summary information about a gateway.

GatewayTarget

class GatewayTarget

The gateway target.

GetAgentRuntimeEndpointRequest

class GetAgentRuntimeEndpointRequest

GetAgentRuntimeEndpointResponse

class GetAgentRuntimeEndpointResponse

GetAgentRuntimeRequest

class GetAgentRuntimeRequest

GetAgentRuntimeResponse

class GetAgentRuntimeResponse

GetApiKeyCredentialProviderRequest

class GetApiKeyCredentialProviderRequest

GetApiKeyCredentialProviderResponse

class GetApiKeyCredentialProviderResponse

GetBrowserRequest

class GetBrowserRequest

GetBrowserResponse

class GetBrowserResponse

GetCodeInterpreterRequest

class GetCodeInterpreterRequest

GetCodeInterpreterResponse

class GetCodeInterpreterResponse

GetEvaluatorRequest

class GetEvaluatorRequest

GetEvaluatorResponse

class GetEvaluatorResponse

GetGatewayRequest

class GetGatewayRequest

GetGatewayResponse

class GetGatewayResponse

GetGatewayTargetRequest

class GetGatewayTargetRequest

GetGatewayTargetResponse

class GetGatewayTargetResponse

GetMemoryRequest

class GetMemoryRequest

GetMemoryResponse

class GetMemoryResponse

GetOauth2CredentialProviderRequest

class GetOauth2CredentialProviderRequest

GetOauth2CredentialProviderResponse

class GetOauth2CredentialProviderResponse

GetOnlineEvaluationConfigRequest

class GetOnlineEvaluationConfigRequest

GetOnlineEvaluationConfigResponse

class GetOnlineEvaluationConfigResponse

GetPolicyEngineRequest

class GetPolicyEngineRequest

GetPolicyEngineResponse

class GetPolicyEngineResponse

GetPolicyGenerationRequest

class GetPolicyGenerationRequest

GetPolicyGenerationResponse

class GetPolicyGenerationResponse

GetPolicyRequest

class GetPolicyRequest

GetPolicyResponse

class GetPolicyResponse

GetResourcePolicyRequest

class GetResourcePolicyRequest

GetResourcePolicyResponse

class GetResourcePolicyResponse

GetTokenVaultRequest

class GetTokenVaultRequest

GetTokenVaultResponse

class GetTokenVaultResponse

GetWorkloadIdentityRequest

class GetWorkloadIdentityRequest

GetWorkloadIdentityResponse

class GetWorkloadIdentityResponse

GithubOauth2ProviderConfigInput

class GithubOauth2ProviderConfigInput

Input configuration for a GitHub OAuth2 provider.

GithubOauth2ProviderConfigOutput

class GithubOauth2ProviderConfigOutput

Output configuration for a GitHub OAuth2 provider.

GoogleOauth2ProviderConfigInput

class GoogleOauth2ProviderConfigInput

Input configuration for a Google OAuth2 provider.

GoogleOauth2ProviderConfigOutput

class GoogleOauth2ProviderConfigOutput

Output configuration for a Google OAuth2 provider.

InboundTokenClaimValueType

sealed class InboundTokenClaimValueType

IncludedOauth2ProviderConfigInput

class IncludedOauth2ProviderConfigInput

Configuration settings for connecting to a supported OAuth2 provider. This includes client credentials and OAuth2 discovery information for providers that have built-in support.

IncludedOauth2ProviderConfigOutput

class IncludedOauth2ProviderConfigOutput

The configuration details returned for a supported OAuth2 provider, including client credentials and OAuth2 discovery information.

InferenceConfiguration

class InferenceConfiguration

The configuration parameters that control how the foundation model behaves during evaluation, including response generation settings.

InterceptorConfiguration

sealed class InterceptorConfiguration

The interceptor configuration.

InterceptorInputConfiguration

class InterceptorInputConfiguration

The input configuration of the interceptor.

InternalServerException

class InternalServerException : BedrockAgentCoreControlException

This exception is thrown if there was an unexpected error during processing of request

InvocationConfiguration

class InvocationConfiguration

The configuration to invoke a self-managed memory processing pipeline with.

InvocationConfigurationInput

class InvocationConfigurationInput

The configuration to invoke a self-managed memory processing pipeline with.

KeyType

sealed class KeyType

KmsConfiguration

class KmsConfiguration

Contains the KMS configuration for a resource.

LambdaInterceptorConfiguration

class LambdaInterceptorConfiguration

The lambda configuration for the interceptor

LifecycleConfiguration

class LifecycleConfiguration

LifecycleConfiguration lets you manage the lifecycle of runtime sessions and resources in AgentCore Runtime. This configuration helps optimize resource utilization by automatically cleaning up idle sessions and preventing long-running instances from consuming resources indefinitely.

LinkedinOauth2ProviderConfigInput

class LinkedinOauth2ProviderConfigInput

Configuration settings for connecting to LinkedIn services using OAuth2 authentication. This includes the client credentials required to authenticate with LinkedIn's OAuth2 authorization server.

LinkedinOauth2ProviderConfigOutput

class LinkedinOauth2ProviderConfigOutput

The configuration details returned for a LinkedIn OAuth2 provider, including the client ID and OAuth2 discovery information.

ListAgentRuntimeEndpointsRequest

class ListAgentRuntimeEndpointsRequest

ListAgentRuntimeEndpointsResponse

class ListAgentRuntimeEndpointsResponse

ListAgentRuntimesRequest

class ListAgentRuntimesRequest

ListAgentRuntimesResponse

class ListAgentRuntimesResponse

ListAgentRuntimeVersionsRequest

class ListAgentRuntimeVersionsRequest

ListAgentRuntimeVersionsResponse

class ListAgentRuntimeVersionsResponse

ListApiKeyCredentialProvidersRequest

class ListApiKeyCredentialProvidersRequest

ListApiKeyCredentialProvidersResponse

class ListApiKeyCredentialProvidersResponse

ListBrowsersRequest

class ListBrowsersRequest

ListBrowsersResponse

class ListBrowsersResponse

ListCodeInterpretersRequest

class ListCodeInterpretersRequest

ListCodeInterpretersResponse

class ListCodeInterpretersResponse

ListEvaluatorsRequest

class ListEvaluatorsRequest

ListEvaluatorsResponse

class ListEvaluatorsResponse

ListGatewaysRequest

class ListGatewaysRequest

ListGatewaysResponse

class ListGatewaysResponse

ListGatewayTargetsRequest

class ListGatewayTargetsRequest

ListGatewayTargetsResponse

class ListGatewayTargetsResponse

ListMemoriesRequest

class ListMemoriesRequest

ListMemoriesResponse

class ListMemoriesResponse

ListOauth2CredentialProvidersRequest

class ListOauth2CredentialProvidersRequest

ListOauth2CredentialProvidersResponse

class ListOauth2CredentialProvidersResponse

ListOnlineEvaluationConfigsRequest

class ListOnlineEvaluationConfigsRequest

ListOnlineEvaluationConfigsResponse

class ListOnlineEvaluationConfigsResponse

ListPoliciesRequest

class ListPoliciesRequest

ListPoliciesResponse

class ListPoliciesResponse

ListPolicyEnginesRequest

class ListPolicyEnginesRequest

ListPolicyEnginesResponse

class ListPolicyEnginesResponse

ListPolicyGenerationAssetsRequest

class ListPolicyGenerationAssetsRequest

ListPolicyGenerationAssetsResponse

class ListPolicyGenerationAssetsResponse

ListPolicyGenerationsRequest

class ListPolicyGenerationsRequest

ListPolicyGenerationsResponse

class ListPolicyGenerationsResponse

ListTagsForResourceRequest

class ListTagsForResourceRequest

ListTagsForResourceResponse

class ListTagsForResourceResponse

ListWorkloadIdentitiesRequest

class ListWorkloadIdentitiesRequest

ListWorkloadIdentitiesResponse

class ListWorkloadIdentitiesResponse

LlmAsAJudgeEvaluatorConfig

class LlmAsAJudgeEvaluatorConfig

The configuration for LLM-as-a-Judge evaluation that uses a language model to assess agent performance based on custom instructions and rating scales.

McpGatewayConfiguration

class McpGatewayConfiguration

The configuration for a Model Context Protocol (MCP) gateway. This structure defines how the gateway implements the MCP protocol.

McpLambdaTargetConfiguration

class McpLambdaTargetConfiguration

The Lambda configuration for a Model Context Protocol target. This structure defines how the gateway uses a Lambda function to communicate with the target.

McpServerTargetConfiguration

class McpServerTargetConfiguration

The target configuration for the MCP server.

McpTargetConfiguration

sealed class McpTargetConfiguration

The Model Context Protocol (MCP) configuration for a target. This structure defines how the gateway uses MCP to communicate with the target.

Memory

class Memory

Contains information about a memory resource.

MemoryStatus

sealed class MemoryStatus

MemoryStrategy

class MemoryStrategy

Contains information about a memory strategy.

MemoryStrategyInput

sealed class MemoryStrategyInput

Contains input information for creating a memory strategy.

MemoryStrategyStatus

sealed class MemoryStrategyStatus

MemoryStrategyType

sealed class MemoryStrategyType

MemorySummary

class MemorySummary

Contains summary information about a memory resource.

MessageBasedTrigger

class MessageBasedTrigger

The trigger configuration based on a message.

MessageBasedTriggerInput

class MessageBasedTriggerInput

The trigger configuration based on a message.

MicrosoftOauth2ProviderConfigInput

class MicrosoftOauth2ProviderConfigInput

Input configuration for a Microsoft OAuth2 provider.

MicrosoftOauth2ProviderConfigOutput

class MicrosoftOauth2ProviderConfigOutput

Output configuration for a Microsoft OAuth2 provider.

ModifyConsolidationConfiguration

sealed class ModifyConsolidationConfiguration

Contains information for modifying a consolidation configuration.

ModifyExtractionConfiguration

sealed class ModifyExtractionConfiguration

Contains information for modifying an extraction configuration.

ModifyInvocationConfigurationInput

class ModifyInvocationConfigurationInput

The configuration for updating invocation settings.

ModifyMemoryStrategies

class ModifyMemoryStrategies

Contains information for modifying memory strategies.

ModifyMemoryStrategyInput

class ModifyMemoryStrategyInput

Input for modifying a memory strategy.

ModifyReflectionConfiguration

sealed class ModifyReflectionConfiguration

Contains information for modifying a reflection configuration.

ModifySelfManagedConfiguration

class ModifySelfManagedConfiguration

The configuration for updating the self-managed memory strategy.

ModifyStrategyConfiguration

class ModifyStrategyConfiguration

Contains information for modifying a strategy configuration.

NetworkConfiguration

class NetworkConfiguration

SecurityConfig for the Agent.

NetworkMode

sealed class NetworkMode

NumericalScaleDefinition

class NumericalScaleDefinition

The definition of a numerical rating scale option that provides a numeric value with its description for evaluation scoring.

Oauth2AuthorizationServerMetadata

class Oauth2AuthorizationServerMetadata

Contains the authorization server metadata for an OAuth2 provider.

Oauth2CredentialProviderItem

class Oauth2CredentialProviderItem

Contains information about an OAuth2 credential provider.

Oauth2Discovery

sealed class Oauth2Discovery

Contains the discovery information for an OAuth2 provider.

Oauth2ProviderConfigInput

sealed class Oauth2ProviderConfigInput

Contains the input configuration for an OAuth2 provider.

Oauth2ProviderConfigOutput

sealed class Oauth2ProviderConfigOutput

Contains the output configuration for an OAuth2 provider.

OAuthCredentialProvider

class OAuthCredentialProvider

An OAuth credential provider for gateway authentication. This structure contains the configuration for authenticating with the target endpoint using OAuth.

OAuthGrantType

sealed class OAuthGrantType

OnlineEvaluationConfigStatus

sealed class OnlineEvaluationConfigStatus

OnlineEvaluationConfigSummary

class OnlineEvaluationConfigSummary

The summary information about an online evaluation configuration, including basic metadata and execution status.

OnlineEvaluationExecutionStatus

sealed class OnlineEvaluationExecutionStatus

OutputConfig

class OutputConfig

The configuration that specifies where evaluation results should be written for monitoring and analysis.

OverrideType

sealed class OverrideType

Policy

class Policy

Represents a complete policy resource within the AgentCore Policy system. Policies are ARN-able resources that contain Cedar policy statements and associated metadata for controlling agent behavior and access decisions. Each policy belongs to a policy engine and defines fine-grained authorization rules that are evaluated in real-time as agents interact with tools through Gateway. Policies use the Cedar policy language to specify who (principals based on OAuth claims like username, role, or scope) can perform what actions (tool calls) on which resources (Gateways), with optional conditions for attribute-based access control. Multiple policies can apply to a single request, with Cedar's forbid-wins semantics ensuring that security restrictions are never accidentally overridden.

PolicyDefinition

sealed class PolicyDefinition

Represents the definition structure for policies within the AgentCore Policy system. This structure encapsulates different policy formats and languages that can be used to define access control rules.

PolicyEngine

class PolicyEngine

Represents a policy engine resource within the AgentCore Policy system. Policy engines serve as containers for grouping related policies and provide the execution context for policy evaluation and management. Each policy engine can be associated with one Gateway (one engine per Gateway), where it intercepts all agent tool calls and evaluates them against the contained policies before allowing tools to execute. The policy engine maintains the Cedar schema generated from the Gateway's tool manifest, ensuring that policies are validated against the actual tools and parameters available. Policy engines support two enforcement modes that can be configured when associating with a Gateway: log-only mode for testing (evaluates decisions without blocking) and enforce mode for production (actively allows or denies based on policy evaluation).

PolicyEngineStatus

sealed class PolicyEngineStatus

PolicyGeneration

class PolicyGeneration

Represents a policy generation request within the AgentCore Policy system. Tracks the AI-powered conversion of natural language descriptions into Cedar policy statements, enabling users to author policies by describing authorization requirements in plain English. The generation process analyzes the natural language input along with the Gateway's tool context and Cedar schema to produce one or more validated policy options. Each generation request tracks the status of the conversion process and maintains findings about the generated policies, including validation results and potential issues. Generated policy assets remain available for one week after successful generation, allowing time to review and create policies from the generated options.

PolicyGenerationAsset

class PolicyGenerationAsset

Represents a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Cedar policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.

PolicyGenerationStatus

sealed class PolicyGenerationStatus

PolicyStatus

sealed class PolicyStatus

PolicyValidationMode

sealed class PolicyValidationMode

ProtocolConfiguration

class ProtocolConfiguration

The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients.

PutResourcePolicyRequest

class PutResourcePolicyRequest

PutResourcePolicyResponse

class PutResourcePolicyResponse

RatingScale

sealed class RatingScale

The rating scale that defines how evaluators should score agent performance, supporting both numerical and categorical scales.

RecordingConfig

class RecordingConfig

The recording configuration for a browser. This structure defines how browser sessions are recorded.

ReflectionConfiguration

sealed class ReflectionConfiguration

Contains reflection configuration information for a memory strategy.

RequestHeaderConfiguration

sealed class RequestHeaderConfiguration

Configuration for HTTP request headers that will be passed through to the runtime.

Resource

sealed class Resource

Represents a resource within the AgentCore Policy system. Resources are the targets of policy evaluation. Currently, only AgentCore Gateways are supported as resources for policy enforcement.

ResourceLimitExceededException

class ResourceLimitExceededException : BedrockAgentCoreControlException

Exception thrown when a resource limit is exceeded.

ResourceNotFoundException

class ResourceNotFoundException : BedrockAgentCoreControlException

This exception is thrown when a resource referenced by the operation does not exist

ResourceType

sealed class ResourceType

RestApiMethod

sealed class RestApiMethod

Rule

class Rule

The evaluation rule that defines sampling configuration, filtering criteria, and session detection settings for online evaluation.

S3Configuration

class S3Configuration

The Amazon S3 configuration for a gateway. This structure defines how the gateway accesses files in Amazon S3.

S3Location

class S3Location

The Amazon S3 location for storing data. This structure defines where in Amazon S3 data is stored.

SalesforceOauth2ProviderConfigInput

class SalesforceOauth2ProviderConfigInput

Input configuration for a Salesforce OAuth2 provider.

SalesforceOauth2ProviderConfigOutput

class SalesforceOauth2ProviderConfigOutput

Output configuration for a Salesforce OAuth2 provider.

SamplingConfig

class SamplingConfig

The configuration that controls what percentage of agent traces are sampled for evaluation to manage evaluation volume and costs.

SchemaDefinition

class SchemaDefinition

A schema definition for a gateway target. This structure defines the structure of the API that the target exposes.

SchemaType

sealed class SchemaType

SearchType

sealed class SearchType

Secret

class Secret

Contains information about a secret in AWS Secrets Manager.

SelfManagedConfiguration

class SelfManagedConfiguration

A configuration for a self-managed memory strategy.

SelfManagedConfigurationInput

class SelfManagedConfigurationInput

Input configuration for a self-managed memory strategy.

SemanticConsolidationOverride

class SemanticConsolidationOverride

Contains semantic consolidation override configuration.

SemanticExtractionOverride

class SemanticExtractionOverride

Contains semantic extraction override configuration.

SemanticMemoryStrategyInput

class SemanticMemoryStrategyInput

Input for creating a semantic memory strategy.

SemanticOverrideConfigurationInput

class SemanticOverrideConfigurationInput

Input for semantic override configuration in a memory strategy.

SemanticOverrideConsolidationConfigurationInput

class SemanticOverrideConsolidationConfigurationInput

Input for semantic override consolidation configuration in a memory strategy.

SemanticOverrideExtractionConfigurationInput

class SemanticOverrideExtractionConfigurationInput

Input for semantic override extraction configuration in a memory strategy.

ServerProtocol

sealed class ServerProtocol

ServiceException

class ServiceException : BedrockAgentCoreControlException

An internal error occurred.

ServiceQuotaExceededException

class ServiceQuotaExceededException : BedrockAgentCoreControlException

This exception is thrown when a request is made beyond the service quota

SessionConfig

class SessionConfig

The configuration that defines how agent sessions are detected and when they are considered complete for evaluation.

SetTokenVaultCmkRequest

class SetTokenVaultCmkRequest

SetTokenVaultCmkResponse

class SetTokenVaultCmkResponse

SlackOauth2ProviderConfigInput

class SlackOauth2ProviderConfigInput

Input configuration for a Slack OAuth2 provider.

SlackOauth2ProviderConfigOutput

class SlackOauth2ProviderConfigOutput

Output configuration for a Slack OAuth2 provider.

StartPolicyGenerationRequest

class StartPolicyGenerationRequest

StartPolicyGenerationResponse

class StartPolicyGenerationResponse

StrategyConfiguration

class StrategyConfiguration

Contains configuration information for a memory strategy.

SummaryConsolidationOverride

class SummaryConsolidationOverride

Contains summary consolidation override configuration.

SummaryMemoryStrategyInput

class SummaryMemoryStrategyInput

Input for creating a summary memory strategy.

SummaryOverrideConfigurationInput

class SummaryOverrideConfigurationInput

Input for summary override configuration in a memory strategy.

SummaryOverrideConsolidationConfigurationInput

class SummaryOverrideConsolidationConfigurationInput

Input for summary override consolidation configuration in a memory strategy.

SynchronizeGatewayTargetsRequest

class SynchronizeGatewayTargetsRequest

SynchronizeGatewayTargetsResponse

class SynchronizeGatewayTargetsResponse

TagResourceRequest

class TagResourceRequest

TagResourceResponse

class TagResourceResponse

TargetConfiguration

sealed class TargetConfiguration

The configuration for a gateway target. This structure defines how the gateway connects to and interacts with the target endpoint.

TargetStatus

sealed class TargetStatus

TargetSummary

class TargetSummary

Contains summary information about a gateway target. A target represents an endpoint that the gateway can connect to.

ThrottledException

class ThrottledException : BedrockAgentCoreControlException

API rate limit has been exceeded.

ThrottlingException

class ThrottlingException : BedrockAgentCoreControlException

This exception is thrown when the number of requests exceeds the limit

TimeBasedTrigger

class TimeBasedTrigger

Trigger configuration based on time.

TimeBasedTriggerInput

class TimeBasedTriggerInput

Trigger configuration based on time.

TokenBasedTrigger

class TokenBasedTrigger

Trigger configuration based on tokens.

TokenBasedTriggerInput

class TokenBasedTriggerInput

Trigger configuration based on tokens.

ToolDefinition

class ToolDefinition

A tool definition for a gateway target. This structure defines a tool that the target exposes through the Model Context Protocol.

ToolSchema

sealed class ToolSchema

A tool schema for a gateway target. This structure defines the schema for a tool that the target exposes through the Model Context Protocol.

TriggerCondition

sealed class TriggerCondition

Condition that triggers memory processing.

TriggerConditionInput

sealed class TriggerConditionInput

Condition that triggers memory processing.

UnauthorizedException

class UnauthorizedException : BedrockAgentCoreControlException

This exception is thrown when the JWT bearer token is invalid or not found for OAuth bearer token based access

UntagResourceRequest

class UntagResourceRequest

UntagResourceResponse

class UntagResourceResponse

UpdateAgentRuntimeEndpointRequest

class UpdateAgentRuntimeEndpointRequest

UpdateAgentRuntimeEndpointResponse

class UpdateAgentRuntimeEndpointResponse

UpdateAgentRuntimeRequest

class UpdateAgentRuntimeRequest

UpdateAgentRuntimeResponse

class UpdateAgentRuntimeResponse

UpdateApiKeyCredentialProviderRequest

class UpdateApiKeyCredentialProviderRequest

UpdateApiKeyCredentialProviderResponse

class UpdateApiKeyCredentialProviderResponse

UpdateEvaluatorRequest

class UpdateEvaluatorRequest

UpdateEvaluatorResponse

class UpdateEvaluatorResponse

UpdateGatewayRequest

class UpdateGatewayRequest

UpdateGatewayResponse

class UpdateGatewayResponse

UpdateGatewayTargetRequest

class UpdateGatewayTargetRequest

UpdateGatewayTargetResponse

class UpdateGatewayTargetResponse

UpdateMemoryRequest

class UpdateMemoryRequest

UpdateMemoryResponse

class UpdateMemoryResponse

UpdateOauth2CredentialProviderRequest

class UpdateOauth2CredentialProviderRequest

UpdateOauth2CredentialProviderResponse

class UpdateOauth2CredentialProviderResponse

UpdateOnlineEvaluationConfigRequest

class UpdateOnlineEvaluationConfigRequest

UpdateOnlineEvaluationConfigResponse

class UpdateOnlineEvaluationConfigResponse

UpdatePolicyEngineRequest

class UpdatePolicyEngineRequest

UpdatePolicyEngineResponse

class UpdatePolicyEngineResponse

UpdatePolicyRequest

class UpdatePolicyRequest

UpdatePolicyResponse

class UpdatePolicyResponse

UpdateWorkloadIdentityRequest

class UpdateWorkloadIdentityRequest

UpdateWorkloadIdentityResponse

class UpdateWorkloadIdentityResponse

UserPreferenceConsolidationOverride

class UserPreferenceConsolidationOverride

Contains user preference consolidation override configuration.

UserPreferenceExtractionOverride

class UserPreferenceExtractionOverride

Contains user preference extraction override configuration.

UserPreferenceMemoryStrategyInput

class UserPreferenceMemoryStrategyInput

Input for creating a user preference memory strategy.

UserPreferenceOverrideConfigurationInput

class UserPreferenceOverrideConfigurationInput

Input for user preference override configuration in a memory strategy.

UserPreferenceOverrideConsolidationConfigurationInput

class UserPreferenceOverrideConsolidationConfigurationInput

Input for user preference override consolidation configuration in a memory strategy.

UserPreferenceOverrideExtractionConfigurationInput

class UserPreferenceOverrideExtractionConfigurationInput

Input for user preference override extraction configuration in a memory strategy.

ValidationException

class ValidationException : BedrockAgentCoreControlException

The input fails to satisfy the constraints specified by the service.

ValidationExceptionField

class ValidationExceptionField

Stores information about a field passed inside a request that resulted in an exception.

ValidationExceptionReason

sealed class ValidationExceptionReason

VpcConfig

class VpcConfig

VpcConfig for the Agent.

WorkloadIdentityDetails

class WorkloadIdentityDetails

The information about the workload identity.

WorkloadIdentityType

class WorkloadIdentityType

Contains information about a workload identity.