aws-sdk-bedrockagentcorecontrol 1.33.0 → 1.34.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 82f7d491e35d370c3eeca48d86acbfdbc91988a4d7aa0dcf6a117263da51b6af
-  data.tar.gz: cbe676ee248afa551fcf6b94687da1443f1e61e0f5ffca1ed5ad585b79668d35
+  metadata.gz: d34c4c12ae2be24e2d8fa68db89e2b61817bcbc8ad20332af60ce71607cceefb
+  data.tar.gz: f506602fbd879c30b347df296a91552c1ba29b68eaff5cf7aa5ab7a376efb43c
 SHA512:
-  metadata.gz: 4f273b08dc90f164a50d82a8c3511fea86e7bfd4b53a3c5ddd6dfdad1a37c1816a73f3c3786f687914d4fb530cc3d51cde1daa5c415e71f3c8ac3a5505b4c4a9
-  data.tar.gz: 48e6faf99739236b9d4bb788eba0e6ea0eb2f8322ec50dba76d877d6f397dd00b07e74f352ec6e47a5d9feab62d8833e324da13140efe354f2cdc521bb74f310
+  metadata.gz: d30576b8ff7e2c80afb2e670a31a8ebeb96eaa5e7c835b709b0f98a1eaba0b473edb0e9dacfa1c9cd8eb63c77cb9e9a7337d180ea1776a92c8136bd7dd281196
+  data.tar.gz: 0d038a4f9a720b6f3e6d39b16d8438713e69703326532373fe51860b1bd0974cbf71c4985040c3286fc922be5c4dee68d7ec634f20d3ca4d27a9411fc495a9c0

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.34.0 (2026-04-01)
+------------------
+
+* Feature - Adds support for VPC egress private endpoints for Amazon Bedrock AgentCore gateway targets, enabling private connectivity through managed VPC Lattice resources. Also adds IAM credential provider for gateway targets, enabling IAM-based authentication to target endpoints
+
 1.33.0 (2026-03-27)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.33.0
+1.34.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -1384,6 +1384,10 @@ module Aws::BedrockAgentCoreControl
     #   Optional configuration for HTTP header and query parameter propagation
     #   to and from the gateway target.
     #
+    # @option params [Types::PrivateEndpoint] :private_endpoint
+    #   The private endpoint configuration for the gateway target. Use this to
+    #   connect the gateway to private resources in your VPC.
+    #
     # @return [Types::CreateGatewayTargetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateGatewayTargetResponse#gateway_arn #gateway_arn} => String
@@ -1398,6 +1402,8 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::CreateGatewayTargetResponse#credential_provider_configurations #credential_provider_configurations} => Array<Types::CredentialProviderConfiguration>
     #   * {Types::CreateGatewayTargetResponse#last_synchronized_at #last_synchronized_at} => Time
     #   * {Types::CreateGatewayTargetResponse#metadata_configuration #metadata_configuration} => Types::MetadataConfiguration
+    #   * {Types::CreateGatewayTargetResponse#private_endpoint #private_endpoint} => Types::PrivateEndpoint
+    #   * {Types::CreateGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array<Types::ManagedResourceDetails>
     #
     # @example Request syntax with placeholder values
     #
@@ -1507,6 +1513,10 @@ module Aws::BedrockAgentCoreControl
     #             credential_prefix: "ApiKeyCredentialPrefix",
     #             credential_location: "HEADER", # accepts HEADER, QUERY_PARAMETER
     #           },
+    #           iam_credential_provider: {
+    #             service: "IamCredentialProviderServiceString", # required
+    #             region: "IamCredentialProviderRegionString",
+    #           },
     #         },
     #       },
     #     ],
@@ -1515,6 +1525,21 @@ module Aws::BedrockAgentCoreControl
     #       allowed_query_parameters: ["HttpQueryParameterName"],
     #       allowed_response_headers: ["HttpHeaderName"],
     #     },
+    #     private_endpoint: {
+    #       self_managed_lattice_resource: {
+    #         resource_configuration_identifier: "ResourceConfigurationIdentifier",
+    #       },
+    #       managed_lattice_resource: {
+    #         vpc_identifier: "VpcIdentifier", # required
+    #         subnet_ids: ["SubnetId"], # required
+    #         endpoint_ip_address_type: "IPV4", # required, accepts IPV4, IPV6
+    #         security_group_ids: ["SecurityGroupIdentifier"],
+    #         tags: {
+    #           "TagKey" => "TagValue",
+    #         },
+    #         routing_domain: "RoutingDomain",
+    #       },
+    #     },
     #   })
     #
     # @example Response structure
@@ -1579,6 +1604,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_parameter_name #=> String
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_prefix #=> String
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_location #=> String, one of "HEADER", "QUERY_PARAMETER"
+    #   resp.credential_provider_configurations[0].credential_provider.iam_credential_provider.service #=> String
+    #   resp.credential_provider_configurations[0].credential_provider.iam_credential_provider.region #=> String
     #   resp.last_synchronized_at #=> Time
     #   resp.metadata_configuration.allowed_request_headers #=> Array
     #   resp.metadata_configuration.allowed_request_headers[0] #=> String
@@ -1586,6 +1613,20 @@ module Aws::BedrockAgentCoreControl
     #   resp.metadata_configuration.allowed_query_parameters[0] #=> String
     #   resp.metadata_configuration.allowed_response_headers #=> Array
     #   resp.metadata_configuration.allowed_response_headers[0] #=> String
+    #   resp.private_endpoint.self_managed_lattice_resource.resource_configuration_identifier #=> String
+    #   resp.private_endpoint.managed_lattice_resource.vpc_identifier #=> String
+    #   resp.private_endpoint.managed_lattice_resource.subnet_ids #=> Array
+    #   resp.private_endpoint.managed_lattice_resource.subnet_ids[0] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.endpoint_ip_address_type #=> String, one of "IPV4", "IPV6"
+    #   resp.private_endpoint.managed_lattice_resource.security_group_ids #=> Array
+    #   resp.private_endpoint.managed_lattice_resource.security_group_ids[0] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.tags #=> Hash
+    #   resp.private_endpoint.managed_lattice_resource.tags["TagKey"] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.routing_domain #=> String
+    #   resp.private_endpoint_managed_resources #=> Array
+    #   resp.private_endpoint_managed_resources[0].domain #=> String
+    #   resp.private_endpoint_managed_resources[0].resource_gateway_arn #=> String
+    #   resp.private_endpoint_managed_resources[0].resource_association_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayTarget AWS API Documentation
     #
@@ -3530,6 +3571,8 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetGatewayTargetResponse#credential_provider_configurations #credential_provider_configurations} => Array<Types::CredentialProviderConfiguration>
     #   * {Types::GetGatewayTargetResponse#last_synchronized_at #last_synchronized_at} => Time
     #   * {Types::GetGatewayTargetResponse#metadata_configuration #metadata_configuration} => Types::MetadataConfiguration
+    #   * {Types::GetGatewayTargetResponse#private_endpoint #private_endpoint} => Types::PrivateEndpoint
+    #   * {Types::GetGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array<Types::ManagedResourceDetails>
     #
     # @example Request syntax with placeholder values
     #
@@ -3600,6 +3643,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_parameter_name #=> String
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_prefix #=> String
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_location #=> String, one of "HEADER", "QUERY_PARAMETER"
+    #   resp.credential_provider_configurations[0].credential_provider.iam_credential_provider.service #=> String
+    #   resp.credential_provider_configurations[0].credential_provider.iam_credential_provider.region #=> String
     #   resp.last_synchronized_at #=> Time
     #   resp.metadata_configuration.allowed_request_headers #=> Array
     #   resp.metadata_configuration.allowed_request_headers[0] #=> String
@@ -3607,6 +3652,20 @@ module Aws::BedrockAgentCoreControl
     #   resp.metadata_configuration.allowed_query_parameters[0] #=> String
     #   resp.metadata_configuration.allowed_response_headers #=> Array
     #   resp.metadata_configuration.allowed_response_headers[0] #=> String
+    #   resp.private_endpoint.self_managed_lattice_resource.resource_configuration_identifier #=> String
+    #   resp.private_endpoint.managed_lattice_resource.vpc_identifier #=> String
+    #   resp.private_endpoint.managed_lattice_resource.subnet_ids #=> Array
+    #   resp.private_endpoint.managed_lattice_resource.subnet_ids[0] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.endpoint_ip_address_type #=> String, one of "IPV4", "IPV6"
+    #   resp.private_endpoint.managed_lattice_resource.security_group_ids #=> Array
+    #   resp.private_endpoint.managed_lattice_resource.security_group_ids[0] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.tags #=> Hash
+    #   resp.private_endpoint.managed_lattice_resource.tags["TagKey"] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.routing_domain #=> String
+    #   resp.private_endpoint_managed_resources #=> Array
+    #   resp.private_endpoint_managed_resources[0].domain #=> String
+    #   resp.private_endpoint_managed_resources[0].resource_gateway_arn #=> String
+    #   resp.private_endpoint_managed_resources[0].resource_association_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetGatewayTarget AWS API Documentation
     #
@@ -5396,6 +5455,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.targets[0].credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_parameter_name #=> String
     #   resp.targets[0].credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_prefix #=> String
     #   resp.targets[0].credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_location #=> String, one of "HEADER", "QUERY_PARAMETER"
+    #   resp.targets[0].credential_provider_configurations[0].credential_provider.iam_credential_provider.service #=> String
+    #   resp.targets[0].credential_provider_configurations[0].credential_provider.iam_credential_provider.region #=> String
     #   resp.targets[0].last_synchronized_at #=> Time
     #   resp.targets[0].metadata_configuration.allowed_request_headers #=> Array
     #   resp.targets[0].metadata_configuration.allowed_request_headers[0] #=> String
@@ -5403,6 +5464,20 @@ module Aws::BedrockAgentCoreControl
     #   resp.targets[0].metadata_configuration.allowed_query_parameters[0] #=> String
     #   resp.targets[0].metadata_configuration.allowed_response_headers #=> Array
     #   resp.targets[0].metadata_configuration.allowed_response_headers[0] #=> String
+    #   resp.targets[0].private_endpoint.self_managed_lattice_resource.resource_configuration_identifier #=> String
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.vpc_identifier #=> String
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.subnet_ids #=> Array
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.subnet_ids[0] #=> String
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.endpoint_ip_address_type #=> String, one of "IPV4", "IPV6"
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.security_group_ids #=> Array
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.security_group_ids[0] #=> String
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.tags #=> Hash
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.tags["TagKey"] #=> String
+    #   resp.targets[0].private_endpoint.managed_lattice_resource.routing_domain #=> String
+    #   resp.targets[0].private_endpoint_managed_resources #=> Array
+    #   resp.targets[0].private_endpoint_managed_resources[0].domain #=> String
+    #   resp.targets[0].private_endpoint_managed_resources[0].resource_gateway_arn #=> String
+    #   resp.targets[0].private_endpoint_managed_resources[0].resource_association_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/SynchronizeGatewayTargets AWS API Documentation
     #
@@ -6052,6 +6127,10 @@ module Aws::BedrockAgentCoreControl
     #   Configuration for HTTP header and query parameter propagation to the
     #   gateway target.
     #
+    # @option params [Types::PrivateEndpoint] :private_endpoint
+    #   The private endpoint configuration for the gateway target. Use this to
+    #   connect the gateway to private resources in your VPC.
+    #
     # @return [Types::UpdateGatewayTargetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateGatewayTargetResponse#gateway_arn #gateway_arn} => String
@@ -6066,6 +6145,8 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::UpdateGatewayTargetResponse#credential_provider_configurations #credential_provider_configurations} => Array<Types::CredentialProviderConfiguration>
     #   * {Types::UpdateGatewayTargetResponse#last_synchronized_at #last_synchronized_at} => Time
     #   * {Types::UpdateGatewayTargetResponse#metadata_configuration #metadata_configuration} => Types::MetadataConfiguration
+    #   * {Types::UpdateGatewayTargetResponse#private_endpoint #private_endpoint} => Types::PrivateEndpoint
+    #   * {Types::UpdateGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array<Types::ManagedResourceDetails>
     #
     # @example Request syntax with placeholder values
     #
@@ -6175,6 +6256,10 @@ module Aws::BedrockAgentCoreControl
     #             credential_prefix: "ApiKeyCredentialPrefix",
     #             credential_location: "HEADER", # accepts HEADER, QUERY_PARAMETER
     #           },
+    #           iam_credential_provider: {
+    #             service: "IamCredentialProviderServiceString", # required
+    #             region: "IamCredentialProviderRegionString",
+    #           },
     #         },
     #       },
     #     ],
@@ -6183,6 +6268,21 @@ module Aws::BedrockAgentCoreControl
     #       allowed_query_parameters: ["HttpQueryParameterName"],
     #       allowed_response_headers: ["HttpHeaderName"],
     #     },
+    #     private_endpoint: {
+    #       self_managed_lattice_resource: {
+    #         resource_configuration_identifier: "ResourceConfigurationIdentifier",
+    #       },
+    #       managed_lattice_resource: {
+    #         vpc_identifier: "VpcIdentifier", # required
+    #         subnet_ids: ["SubnetId"], # required
+    #         endpoint_ip_address_type: "IPV4", # required, accepts IPV4, IPV6
+    #         security_group_ids: ["SecurityGroupIdentifier"],
+    #         tags: {
+    #           "TagKey" => "TagValue",
+    #         },
+    #         routing_domain: "RoutingDomain",
+    #       },
+    #     },
     #   })
     #
     # @example Response structure
@@ -6247,6 +6347,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_parameter_name #=> String
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_prefix #=> String
     #   resp.credential_provider_configurations[0].credential_provider.api_key_credential_provider.credential_location #=> String, one of "HEADER", "QUERY_PARAMETER"
+    #   resp.credential_provider_configurations[0].credential_provider.iam_credential_provider.service #=> String
+    #   resp.credential_provider_configurations[0].credential_provider.iam_credential_provider.region #=> String
     #   resp.last_synchronized_at #=> Time
     #   resp.metadata_configuration.allowed_request_headers #=> Array
     #   resp.metadata_configuration.allowed_request_headers[0] #=> String
@@ -6254,6 +6356,20 @@ module Aws::BedrockAgentCoreControl
     #   resp.metadata_configuration.allowed_query_parameters[0] #=> String
     #   resp.metadata_configuration.allowed_response_headers #=> Array
     #   resp.metadata_configuration.allowed_response_headers[0] #=> String
+    #   resp.private_endpoint.self_managed_lattice_resource.resource_configuration_identifier #=> String
+    #   resp.private_endpoint.managed_lattice_resource.vpc_identifier #=> String
+    #   resp.private_endpoint.managed_lattice_resource.subnet_ids #=> Array
+    #   resp.private_endpoint.managed_lattice_resource.subnet_ids[0] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.endpoint_ip_address_type #=> String, one of "IPV4", "IPV6"
+    #   resp.private_endpoint.managed_lattice_resource.security_group_ids #=> Array
+    #   resp.private_endpoint.managed_lattice_resource.security_group_ids[0] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.tags #=> Hash
+    #   resp.private_endpoint.managed_lattice_resource.tags["TagKey"] #=> String
+    #   resp.private_endpoint.managed_lattice_resource.routing_domain #=> String
+    #   resp.private_endpoint_managed_resources #=> Array
+    #   resp.private_endpoint_managed_resources[0].domain #=> String
+    #   resp.private_endpoint_managed_resources[0].resource_gateway_arn #=> String
+    #   resp.private_endpoint_managed_resources[0].resource_association_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayTarget AWS API Documentation
     #
@@ -7085,7 +7201,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.33.0'
+      context[:gem_version] = '1.34.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb

@@ -216,8 +216,10 @@ module Aws::BedrockAgentCoreControl
     Description = Shapes::StringShape.new(name: 'Description')
     DiscoveryUrl = Shapes::StringShape.new(name: 'DiscoveryUrl')
     DiscoveryUrlType = Shapes::StringShape.new(name: 'DiscoveryUrlType')
+    DomainName = Shapes::StringShape.new(name: 'DomainName')
     Double = Shapes::FloatShape.new(name: 'Double')
     EncryptionFailure = Shapes::StructureShape.new(name: 'EncryptionFailure')
+    EndpointIpAddressType = Shapes::StringShape.new(name: 'EndpointIpAddressType')
     EndpointName = Shapes::StringShape.new(name: 'EndpointName')
     EnvironmentVariableKey = Shapes::StringShape.new(name: 'EnvironmentVariableKey')
     EnvironmentVariableValue = Shapes::StringShape.new(name: 'EnvironmentVariableValue')
@@ -326,6 +328,9 @@ module Aws::BedrockAgentCoreControl
     HeaderName = Shapes::StringShape.new(name: 'HeaderName')
     HttpHeaderName = Shapes::StringShape.new(name: 'HttpHeaderName')
     HttpQueryParameterName = Shapes::StringShape.new(name: 'HttpQueryParameterName')
+    IamCredentialProvider = Shapes::StructureShape.new(name: 'IamCredentialProvider')
+    IamCredentialProviderRegionString = Shapes::StringShape.new(name: 'IamCredentialProviderRegionString')
+    IamCredentialProviderServiceString = Shapes::StringShape.new(name: 'IamCredentialProviderServiceString')
     InboundTokenClaimNameType = Shapes::StringShape.new(name: 'InboundTokenClaimNameType')
     InboundTokenClaimValueType = Shapes::StringShape.new(name: 'InboundTokenClaimValueType')
     IncludedOauth2ProviderConfigInput = Shapes::StructureShape.new(name: 'IncludedOauth2ProviderConfigInput')
@@ -405,6 +410,8 @@ module Aws::BedrockAgentCoreControl
     LlmAsAJudgeEvaluatorConfig = Shapes::StructureShape.new(name: 'LlmAsAJudgeEvaluatorConfig')
     LogGroupName = Shapes::StringShape.new(name: 'LogGroupName')
     MCPGatewayConfiguration = Shapes::StructureShape.new(name: 'MCPGatewayConfiguration')
+    ManagedLatticeResource = Shapes::StructureShape.new(name: 'ManagedLatticeResource')
+    ManagedResourceDetails = Shapes::StructureShape.new(name: 'ManagedResourceDetails')
     MatchValueString = Shapes::StringShape.new(name: 'MatchValueString')
     MatchValueStringList = Shapes::ListShape.new(name: 'MatchValueStringList')
     MaxResults = Shapes::IntegerShape.new(name: 'MaxResults')
@@ -506,6 +513,8 @@ module Aws::BedrockAgentCoreControl
     PolicyStatus = Shapes::StringShape.new(name: 'PolicyStatus')
     PolicyStatusReasons = Shapes::ListShape.new(name: 'PolicyStatusReasons')
     PolicyValidationMode = Shapes::StringShape.new(name: 'PolicyValidationMode')
+    PrivateEndpoint = Shapes::UnionShape.new(name: 'PrivateEndpoint')
+    PrivateEndpointManagedResources = Shapes::ListShape.new(name: 'PrivateEndpointManagedResources')
     Prompt = Shapes::StringShape.new(name: 'Prompt')
     ProtocolConfiguration = Shapes::StructureShape.new(name: 'ProtocolConfiguration')
     PutResourcePolicyRequest = Shapes::StructureShape.new(name: 'PutResourcePolicyRequest')
@@ -517,6 +526,9 @@ module Aws::BedrockAgentCoreControl
     RequestHeaderConfiguration = Shapes::UnionShape.new(name: 'RequestHeaderConfiguration')
     RequiredProperties = Shapes::ListShape.new(name: 'RequiredProperties')
     Resource = Shapes::UnionShape.new(name: 'Resource')
+    ResourceAssociationArn = Shapes::StringShape.new(name: 'ResourceAssociationArn')
+    ResourceConfigurationIdentifier = Shapes::StringShape.new(name: 'ResourceConfigurationIdentifier')
+    ResourceGatewayArn = Shapes::StringShape.new(name: 'ResourceGatewayArn')
     ResourceId = Shapes::StringShape.new(name: 'ResourceId')
     ResourceLimitExceededException = Shapes::StructureShape.new(name: 'ResourceLimitExceededException')
     ResourceLocation = Shapes::UnionShape.new(name: 'ResourceLocation')
@@ -530,6 +542,7 @@ module Aws::BedrockAgentCoreControl
     RestApiMethod = Shapes::StringShape.new(name: 'RestApiMethod')
     RestApiMethods = Shapes::ListShape.new(name: 'RestApiMethods')
     RoleArn = Shapes::StringShape.new(name: 'RoleArn')
+    RoutingDomain = Shapes::StringShape.new(name: 'RoutingDomain')
     Rule = Shapes::StructureShape.new(name: 'Rule')
     RuntimeContainerUri = Shapes::StringShape.new(name: 'RuntimeContainerUri')
     RuntimeMetadataConfiguration = Shapes::StructureShape.new(name: 'RuntimeMetadataConfiguration')
@@ -552,10 +565,13 @@ module Aws::BedrockAgentCoreControl
     SecretArn = Shapes::StringShape.new(name: 'SecretArn')
     SecretsManagerLocation = Shapes::StructureShape.new(name: 'SecretsManagerLocation')
     SecurityGroupId = Shapes::StringShape.new(name: 'SecurityGroupId')
+    SecurityGroupIdentifier = Shapes::StringShape.new(name: 'SecurityGroupIdentifier')
+    SecurityGroupIds = Shapes::ListShape.new(name: 'SecurityGroupIds')
     SecurityGroups = Shapes::ListShape.new(name: 'SecurityGroups')
     SelfManagedConfiguration = Shapes::StructureShape.new(name: 'SelfManagedConfiguration')
     SelfManagedConfigurationInput = Shapes::StructureShape.new(name: 'SelfManagedConfigurationInput')
     SelfManagedConfigurationInputHistoricalContextWindowSizeInteger = Shapes::IntegerShape.new(name: 'SelfManagedConfigurationInputHistoricalContextWindowSizeInteger')
+    SelfManagedLatticeResource = Shapes::UnionShape.new(name: 'SelfManagedLatticeResource')
     SemanticConsolidationOverride = Shapes::StructureShape.new(name: 'SemanticConsolidationOverride')
     SemanticExtractionOverride = Shapes::StructureShape.new(name: 'SemanticExtractionOverride')
     SemanticMemoryStrategyInput = Shapes::StructureShape.new(name: 'SemanticMemoryStrategyInput')
@@ -584,6 +600,7 @@ module Aws::BedrockAgentCoreControl
     StreamDeliveryResourcesList = Shapes::ListShape.new(name: 'StreamDeliveryResourcesList')
     String = Shapes::StringShape.new(name: 'String')
     SubnetId = Shapes::StringShape.new(name: 'SubnetId')
+    SubnetIds = Shapes::ListShape.new(name: 'SubnetIds')
     Subnets = Shapes::ListShape.new(name: 'Subnets')
     SummaryConsolidationOverride = Shapes::StructureShape.new(name: 'SummaryConsolidationOverride')
     SummaryMemoryStrategyInput = Shapes::StructureShape.new(name: 'SummaryMemoryStrategyInput')
@@ -671,6 +688,7 @@ module Aws::BedrockAgentCoreControl
     ValidationExceptionFieldList = Shapes::ListShape.new(name: 'ValidationExceptionFieldList')
     ValidationExceptionReason = Shapes::StringShape.new(name: 'ValidationExceptionReason')
     VpcConfig = Shapes::StructureShape.new(name: 'VpcConfig')
+    VpcIdentifier = Shapes::StringShape.new(name: 'VpcIdentifier')
     WorkloadIdentityArn = Shapes::StringShape.new(name: 'WorkloadIdentityArn')
     WorkloadIdentityArnType = Shapes::StringShape.new(name: 'WorkloadIdentityArnType')
     WorkloadIdentityDetails = Shapes::StructureShape.new(name: 'WorkloadIdentityDetails')
@@ -1086,6 +1104,7 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayTargetRequest.add_member(:target_configuration, Shapes::ShapeRef.new(shape: TargetConfiguration, required: true, location_name: "targetConfiguration"))
     CreateGatewayTargetRequest.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, location_name: "credentialProviderConfigurations"))
     CreateGatewayTargetRequest.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
+    CreateGatewayTargetRequest.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
     CreateGatewayTargetRequest.struct_class = Types::CreateGatewayTargetRequest
 
     CreateGatewayTargetResponse.add_member(:gateway_arn, Shapes::ShapeRef.new(shape: GatewayArn, required: true, location_name: "gatewayArn"))
@@ -1100,6 +1119,8 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayTargetResponse.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, required: true, location_name: "credentialProviderConfigurations"))
     CreateGatewayTargetResponse.add_member(:last_synchronized_at, Shapes::ShapeRef.new(shape: DateTimestamp, location_name: "lastSynchronizedAt"))
     CreateGatewayTargetResponse.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
+    CreateGatewayTargetResponse.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    CreateGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     CreateGatewayTargetResponse.struct_class = Types::CreateGatewayTargetResponse
 
     CreateMemoryInput.add_member(:client_token, Shapes::ShapeRef.new(shape: CreateMemoryInputClientTokenString, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
@@ -1199,9 +1220,11 @@ module Aws::BedrockAgentCoreControl
 
     CredentialProvider.add_member(:oauth_credential_provider, Shapes::ShapeRef.new(shape: OAuthCredentialProvider, location_name: "oauthCredentialProvider"))
     CredentialProvider.add_member(:api_key_credential_provider, Shapes::ShapeRef.new(shape: ApiKeyCredentialProvider, location_name: "apiKeyCredentialProvider"))
+    CredentialProvider.add_member(:iam_credential_provider, Shapes::ShapeRef.new(shape: IamCredentialProvider, location_name: "iamCredentialProvider"))
     CredentialProvider.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     CredentialProvider.add_member_subclass(:oauth_credential_provider, Types::CredentialProvider::OauthCredentialProvider)
     CredentialProvider.add_member_subclass(:api_key_credential_provider, Types::CredentialProvider::ApiKeyCredentialProvider)
+    CredentialProvider.add_member_subclass(:iam_credential_provider, Types::CredentialProvider::IamCredentialProvider)
     CredentialProvider.add_member_subclass(:unknown, Types::CredentialProvider::Unknown)
     CredentialProvider.struct_class = Types::CredentialProvider
 
@@ -1634,6 +1657,8 @@ module Aws::BedrockAgentCoreControl
     GatewayTarget.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, required: true, location_name: "credentialProviderConfigurations"))
     GatewayTarget.add_member(:last_synchronized_at, Shapes::ShapeRef.new(shape: DateTimestamp, location_name: "lastSynchronizedAt"))
     GatewayTarget.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
+    GatewayTarget.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    GatewayTarget.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     GatewayTarget.struct_class = Types::GatewayTarget
 
     GatewayTargetList.member = Shapes::ShapeRef.new(shape: GatewayTarget)
@@ -1796,6 +1821,8 @@ module Aws::BedrockAgentCoreControl
     GetGatewayTargetResponse.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, required: true, location_name: "credentialProviderConfigurations"))
     GetGatewayTargetResponse.add_member(:last_synchronized_at, Shapes::ShapeRef.new(shape: DateTimestamp, location_name: "lastSynchronizedAt"))
     GetGatewayTargetResponse.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
+    GetGatewayTargetResponse.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    GetGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     GetGatewayTargetResponse.struct_class = Types::GetGatewayTargetResponse
 
     GetMemoryInput.add_member(:memory_id, Shapes::ShapeRef.new(shape: MemoryId, required: true, location: "uri", location_name: "memoryId"))
@@ -1923,6 +1950,10 @@ module Aws::BedrockAgentCoreControl
     GoogleOauth2ProviderConfigOutput.add_member(:client_id, Shapes::ShapeRef.new(shape: ClientIdType, location_name: "clientId"))
     GoogleOauth2ProviderConfigOutput.struct_class = Types::GoogleOauth2ProviderConfigOutput
 
+    IamCredentialProvider.add_member(:service, Shapes::ShapeRef.new(shape: IamCredentialProviderServiceString, required: true, location_name: "service"))
+    IamCredentialProvider.add_member(:region, Shapes::ShapeRef.new(shape: IamCredentialProviderRegionString, location_name: "region"))
+    IamCredentialProvider.struct_class = Types::IamCredentialProvider
+
     IncludedOauth2ProviderConfigInput.add_member(:client_id, Shapes::ShapeRef.new(shape: ClientIdType, required: true, location_name: "clientId"))
     IncludedOauth2ProviderConfigInput.add_member(:client_secret, Shapes::ShapeRef.new(shape: ClientSecretType, required: true, location_name: "clientSecret"))
     IncludedOauth2ProviderConfigInput.add_member(:issuer, Shapes::ShapeRef.new(shape: IssuerUrlType, location_name: "issuer"))
@@ -2162,6 +2193,19 @@ module Aws::BedrockAgentCoreControl
     MCPGatewayConfiguration.add_member(:search_type, Shapes::ShapeRef.new(shape: SearchType, location_name: "searchType"))
     MCPGatewayConfiguration.struct_class = Types::MCPGatewayConfiguration
 
+    ManagedLatticeResource.add_member(:vpc_identifier, Shapes::ShapeRef.new(shape: VpcIdentifier, required: true, location_name: "vpcIdentifier"))
+    ManagedLatticeResource.add_member(:subnet_ids, Shapes::ShapeRef.new(shape: SubnetIds, required: true, location_name: "subnetIds"))
+    ManagedLatticeResource.add_member(:endpoint_ip_address_type, Shapes::ShapeRef.new(shape: EndpointIpAddressType, required: true, location_name: "endpointIpAddressType"))
+    ManagedLatticeResource.add_member(:security_group_ids, Shapes::ShapeRef.new(shape: SecurityGroupIds, location_name: "securityGroupIds"))
+    ManagedLatticeResource.add_member(:tags, Shapes::ShapeRef.new(shape: TagsMap, location_name: "tags"))
+    ManagedLatticeResource.add_member(:routing_domain, Shapes::ShapeRef.new(shape: RoutingDomain, location_name: "routingDomain"))
+    ManagedLatticeResource.struct_class = Types::ManagedLatticeResource
+
+    ManagedResourceDetails.add_member(:domain, Shapes::ShapeRef.new(shape: DomainName, location_name: "domain"))
+    ManagedResourceDetails.add_member(:resource_gateway_arn, Shapes::ShapeRef.new(shape: ResourceGatewayArn, location_name: "resourceGatewayArn"))
+    ManagedResourceDetails.add_member(:resource_association_arn, Shapes::ShapeRef.new(shape: ResourceAssociationArn, location_name: "resourceAssociationArn"))
+    ManagedResourceDetails.struct_class = Types::ManagedResourceDetails
+
     MatchValueStringList.member = Shapes::ShapeRef.new(shape: MatchValueString)
 
     McpLambdaTargetConfiguration.add_member(:lambda_arn, Shapes::ShapeRef.new(shape: LambdaFunctionArn, required: true, location_name: "lambdaArn"))
@@ -2482,6 +2526,16 @@ module Aws::BedrockAgentCoreControl
 
     PolicyStatusReasons.member = Shapes::ShapeRef.new(shape: String)
 
+    PrivateEndpoint.add_member(:self_managed_lattice_resource, Shapes::ShapeRef.new(shape: SelfManagedLatticeResource, location_name: "selfManagedLatticeResource"))
+    PrivateEndpoint.add_member(:managed_lattice_resource, Shapes::ShapeRef.new(shape: ManagedLatticeResource, location_name: "managedLatticeResource"))
+    PrivateEndpoint.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    PrivateEndpoint.add_member_subclass(:self_managed_lattice_resource, Types::PrivateEndpoint::SelfManagedLatticeResource)
+    PrivateEndpoint.add_member_subclass(:managed_lattice_resource, Types::PrivateEndpoint::ManagedLatticeResource)
+    PrivateEndpoint.add_member_subclass(:unknown, Types::PrivateEndpoint::Unknown)
+    PrivateEndpoint.struct_class = Types::PrivateEndpoint
+
+    PrivateEndpointManagedResources.member = Shapes::ShapeRef.new(shape: ManagedResourceDetails)
+
     ProtocolConfiguration.add_member(:server_protocol, Shapes::ShapeRef.new(shape: ServerProtocol, required: true, location_name: "serverProtocol"))
     ProtocolConfiguration.struct_class = Types::ProtocolConfiguration
 
@@ -2590,6 +2644,8 @@ module Aws::BedrockAgentCoreControl
     SecretsManagerLocation.add_member(:secret_arn, Shapes::ShapeRef.new(shape: ToolSecretArn, required: true, location_name: "secretArn"))
     SecretsManagerLocation.struct_class = Types::SecretsManagerLocation
 
+    SecurityGroupIds.member = Shapes::ShapeRef.new(shape: SecurityGroupIdentifier)
+
     SecurityGroups.member = Shapes::ShapeRef.new(shape: SecurityGroupId)
 
     SelfManagedConfiguration.add_member(:trigger_conditions, Shapes::ShapeRef.new(shape: TriggerConditionsList, required: true, location_name: "triggerConditions"))
@@ -2602,6 +2658,12 @@ module Aws::BedrockAgentCoreControl
     SelfManagedConfigurationInput.add_member(:historical_context_window_size, Shapes::ShapeRef.new(shape: SelfManagedConfigurationInputHistoricalContextWindowSizeInteger, location_name: "historicalContextWindowSize"))
     SelfManagedConfigurationInput.struct_class = Types::SelfManagedConfigurationInput
 
+    SelfManagedLatticeResource.add_member(:resource_configuration_identifier, Shapes::ShapeRef.new(shape: ResourceConfigurationIdentifier, location_name: "resourceConfigurationIdentifier"))
+    SelfManagedLatticeResource.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    SelfManagedLatticeResource.add_member_subclass(:resource_configuration_identifier, Types::SelfManagedLatticeResource::ResourceConfigurationIdentifier)
+    SelfManagedLatticeResource.add_member_subclass(:unknown, Types::SelfManagedLatticeResource::Unknown)
+    SelfManagedLatticeResource.struct_class = Types::SelfManagedLatticeResource
+
     SemanticConsolidationOverride.add_member(:append_to_prompt, Shapes::ShapeRef.new(shape: Prompt, required: true, location_name: "appendToPrompt"))
     SemanticConsolidationOverride.add_member(:model_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "modelId"))
     SemanticConsolidationOverride.struct_class = Types::SemanticConsolidationOverride
@@ -2696,6 +2758,8 @@ module Aws::BedrockAgentCoreControl
 
     StreamDeliveryResourcesList.member = Shapes::ShapeRef.new(shape: StreamDeliveryResource)
 
+    SubnetIds.member = Shapes::ShapeRef.new(shape: SubnetId)
+
     Subnets.member = Shapes::ShapeRef.new(shape: SubnetId)
 
     SummaryConsolidationOverride.add_member(:append_to_prompt, Shapes::ShapeRef.new(shape: Prompt, required: true, location_name: "appendToPrompt"))
@@ -2926,6 +2990,7 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayTargetRequest.add_member(:target_configuration, Shapes::ShapeRef.new(shape: TargetConfiguration, required: true, location_name: "targetConfiguration"))
     UpdateGatewayTargetRequest.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, location_name: "credentialProviderConfigurations"))
     UpdateGatewayTargetRequest.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
+    UpdateGatewayTargetRequest.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
     UpdateGatewayTargetRequest.struct_class = Types::UpdateGatewayTargetRequest
 
     UpdateGatewayTargetResponse.add_member(:gateway_arn, Shapes::ShapeRef.new(shape: GatewayArn, required: true, location_name: "gatewayArn"))
@@ -2940,6 +3005,8 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayTargetResponse.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, required: true, location_name: "credentialProviderConfigurations"))
     UpdateGatewayTargetResponse.add_member(:last_synchronized_at, Shapes::ShapeRef.new(shape: DateTimestamp, location_name: "lastSynchronizedAt"))
     UpdateGatewayTargetResponse.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
+    UpdateGatewayTargetResponse.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    UpdateGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     UpdateGatewayTargetResponse.struct_class = Types::UpdateGatewayTargetResponse
 
     UpdateMemoryInput.add_member(:client_token, Shapes::ShapeRef.new(shape: UpdateMemoryInputClientTokenString, location_name: "clientToken", metadata: {"idempotencyToken" => true}))

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -1921,6 +1921,11 @@ module Aws::BedrockAgentCoreControl
     #   propagation to and from the gateway target.
     #   @return [Types::MetadataConfiguration]
     #
+    # @!attribute [rw] private_endpoint
+    #   The private endpoint configuration for the gateway target. Use this
+    #   to connect the gateway to private resources in your VPC.
+    #   @return [Types::PrivateEndpoint]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayTargetRequest AWS API Documentation
     #
     class CreateGatewayTargetRequest < Struct.new(
@@ -1930,7 +1935,8 @@ module Aws::BedrockAgentCoreControl
       :client_token,
       :target_configuration,
       :credential_provider_configurations,
-      :metadata_configuration)
+      :metadata_configuration,
+      :private_endpoint)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -1984,6 +1990,15 @@ module Aws::BedrockAgentCoreControl
     #   target.
     #   @return [Types::MetadataConfiguration]
     #
+    # @!attribute [rw] private_endpoint
+    #   The private endpoint configuration for the gateway target.
+    #   @return [Types::PrivateEndpoint]
+    #
+    # @!attribute [rw] private_endpoint_managed_resources
+    #   The managed resources created by the gateway for private endpoint
+    #   connectivity.
+    #   @return [Array<Types::ManagedResourceDetails>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayTargetResponse AWS API Documentation
     #
     class CreateGatewayTargetResponse < Struct.new(
@@ -1998,7 +2013,9 @@ module Aws::BedrockAgentCoreControl
       :target_configuration,
       :credential_provider_configurations,
       :last_synchronized_at,
-      :metadata_configuration)
+      :metadata_configuration,
+      :private_endpoint,
+      :private_endpoint_managed_resources)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -2594,11 +2611,17 @@ module Aws::BedrockAgentCoreControl
     #   authenticate with the target endpoint.
     #   @return [Types::ApiKeyCredentialProvider]
     #
+    # @!attribute [rw] iam_credential_provider
+    #   The IAM credential provider. This provider uses IAM authentication
+    #   with SigV4 signing to access the target endpoint.
+    #   @return [Types::IamCredentialProvider]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CredentialProvider AWS API Documentation
     #
     class CredentialProvider < Struct.new(
       :oauth_credential_provider,
       :api_key_credential_provider,
+      :iam_credential_provider,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -2606,6 +2629,7 @@ module Aws::BedrockAgentCoreControl
 
       class OauthCredentialProvider < CredentialProvider; end
       class ApiKeyCredentialProvider < CredentialProvider; end
+      class IamCredentialProvider < CredentialProvider; end
       class Unknown < CredentialProvider; end
     end
 
@@ -4474,6 +4498,17 @@ module Aws::BedrockAgentCoreControl
     #   propagation to and from this gateway target.
     #   @return [Types::MetadataConfiguration]
     #
+    # @!attribute [rw] private_endpoint
+    #   The private endpoint configuration for a gateway target. Defines how
+    #   the gateway connects to private resources in your VPC.
+    #   @return [Types::PrivateEndpoint]
+    #
+    # @!attribute [rw] private_endpoint_managed_resources
+    #   A list of managed resources created by the gateway for private
+    #   endpoint connectivity. These resources are created in your account
+    #   when you use a managed VPC Lattice resource configuration.
+    #   @return [Array<Types::ManagedResourceDetails>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GatewayTarget AWS API Documentation
     #
     class GatewayTarget < Struct.new(
@@ -4488,7 +4523,9 @@ module Aws::BedrockAgentCoreControl
       :target_configuration,
       :credential_provider_configurations,
       :last_synchronized_at,
-      :metadata_configuration)
+      :metadata_configuration,
+      :private_endpoint,
+      :private_endpoint_managed_resources)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -5252,6 +5289,15 @@ module Aws::BedrockAgentCoreControl
     #   propagation for the retrieved gateway target.
     #   @return [Types::MetadataConfiguration]
     #
+    # @!attribute [rw] private_endpoint
+    #   The private endpoint configuration for the gateway target.
+    #   @return [Types::PrivateEndpoint]
+    #
+    # @!attribute [rw] private_endpoint_managed_resources
+    #   The managed resources created by the gateway for private endpoint
+    #   connectivity.
+    #   @return [Array<Types::ManagedResourceDetails>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetGatewayTargetResponse AWS API Documentation
     #
     class GetGatewayTargetResponse < Struct.new(
@@ -5266,7 +5312,9 @@ module Aws::BedrockAgentCoreControl
       :target_configuration,
       :credential_provider_configurations,
       :last_synchronized_at,
-      :metadata_configuration)
+      :metadata_configuration,
+      :private_endpoint,
+      :private_endpoint_managed_resources)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -5907,6 +5955,30 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # An IAM credential provider for gateway authentication. This structure
+    # contains the configuration for authenticating with the target endpoint
+    # using IAM credentials and SigV4 signing.
+    #
+    # @!attribute [rw] service
+    #   The target Amazon Web Services service name used for SigV4 signing.
+    #   This value identifies the service that the gateway authenticates
+    #   with when making requests to the target endpoint.
+    #   @return [String]
+    #
+    # @!attribute [rw] region
+    #   The Amazon Web Services Region used for SigV4 signing. If not
+    #   specified, defaults to the gateway's Region.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/IamCredentialProvider AWS API Documentation
+    #
+    class IamCredentialProvider < Struct.new(
+      :service,
+      :region)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Configuration settings for connecting to a supported OAuth2 provider.
     # This includes client credentials and OAuth2 discovery information for
     # providers that have built-in support.
@@ -7092,6 +7164,77 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Configuration for a managed VPC Lattice resource. The gateway creates
+    # and manages the VPC Lattice resource gateway and resource
+    # configuration on your behalf using a service-linked role.
+    #
+    # @!attribute [rw] vpc_identifier
+    #   The ID of the VPC that contains your private resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] subnet_ids
+    #   The subnet IDs within the VPC where the VPC Lattice resource gateway
+    #   is placed.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] endpoint_ip_address_type
+    #   The IP address type for the resource configuration endpoint.
+    #   @return [String]
+    #
+    # @!attribute [rw] security_group_ids
+    #   The security group IDs to associate with the VPC Lattice resource
+    #   gateway. If not specified, the default security group for the VPC is
+    #   used.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] tags
+    #   Tags to apply to the managed VPC Lattice resource gateway.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] routing_domain
+    #   An intermediate publicly resolvable domain used as the VPC Lattice
+    #   resource configuration endpoint. Required when your private endpoint
+    #   uses a domain that is not publicly resolvable.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ManagedLatticeResource AWS API Documentation
+    #
+    class ManagedLatticeResource < Struct.new(
+      :vpc_identifier,
+      :subnet_ids,
+      :endpoint_ip_address_type,
+      :security_group_ids,
+      :tags,
+      :routing_domain)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Details of a resource created and managed by the gateway for private
+    # endpoint connectivity.
+    #
+    # @!attribute [rw] domain
+    #   The domain associated with this managed resource.
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_gateway_arn
+    #   The ARN of the VPC Lattice resource gateway created in your account.
+    #   @return [String]
+    #
+    # @!attribute [rw] resource_association_arn
+    #   The ARN of the service network resource association.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ManagedResourceDetails AWS API Documentation
+    #
+    class ManagedResourceDetails < Struct.new(
+      :domain,
+      :resource_gateway_arn,
+      :resource_association_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Lambda configuration for a Model Context Protocol target. This
     # structure defines how the gateway uses a Lambda function to
     # communicate with the target.
@@ -8469,6 +8612,39 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The private endpoint configuration for a gateway target. Defines how
+    # the gateway connects to private resources in your VPC.
+    #
+    # @note PrivateEndpoint is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note PrivateEndpoint is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of PrivateEndpoint corresponding to the set member.
+    #
+    # @!attribute [rw] self_managed_lattice_resource
+    #   Configuration for connecting to a private resource using a
+    #   self-managed VPC Lattice resource configuration.
+    #   @return [Types::SelfManagedLatticeResource]
+    #
+    # @!attribute [rw] managed_lattice_resource
+    #   Configuration for connecting to a private resource using a managed
+    #   VPC Lattice resource. The gateway creates and manages the VPC
+    #   Lattice resources on your behalf.
+    #   @return [Types::ManagedLatticeResource]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/PrivateEndpoint AWS API Documentation
+    #
+    class PrivateEndpoint < Struct.new(
+      :self_managed_lattice_resource,
+      :managed_lattice_resource,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class SelfManagedLatticeResource < PrivateEndpoint; end
+      class ManagedLatticeResource < PrivateEndpoint; end
+      class Unknown < PrivateEndpoint; end
+    end
+
     # The protocol configuration for an agent runtime. This structure
     # defines how the agent runtime communicates with clients.
     #
@@ -8965,6 +9141,31 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Configuration for a self-managed VPC Lattice resource. You create and
+    # manage the VPC Lattice resource gateway and resource configuration,
+    # then provide the resource configuration identifier.
+    #
+    # @note SelfManagedLatticeResource is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note SelfManagedLatticeResource is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of SelfManagedLatticeResource corresponding to the set member.
+    #
+    # @!attribute [rw] resource_configuration_identifier
+    #   The ARN or ID of the VPC Lattice resource configuration.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/SelfManagedLatticeResource AWS API Documentation
+    #
+    class SelfManagedLatticeResource < Struct.new(
+      :resource_configuration_identifier,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class ResourceConfigurationIdentifier < SelfManagedLatticeResource; end
+      class Unknown < SelfManagedLatticeResource; end
+    end
+
     # Contains semantic consolidation override configuration.
     #
     # @!attribute [rw] append_to_prompt
@@ -10407,6 +10608,11 @@ module Aws::BedrockAgentCoreControl
     #   gateway target.
     #   @return [Types::MetadataConfiguration]
     #
+    # @!attribute [rw] private_endpoint
+    #   The private endpoint configuration for the gateway target. Use this
+    #   to connect the gateway to private resources in your VPC.
+    #   @return [Types::PrivateEndpoint]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayTargetRequest AWS API Documentation
     #
     class UpdateGatewayTargetRequest < Struct.new(
@@ -10416,7 +10622,8 @@ module Aws::BedrockAgentCoreControl
       :description,
       :target_configuration,
       :credential_provider_configurations,
-      :metadata_configuration)
+      :metadata_configuration,
+      :private_endpoint)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -10471,6 +10678,15 @@ module Aws::BedrockAgentCoreControl
     #   The metadata configuration that was applied to the gateway target.
     #   @return [Types::MetadataConfiguration]
     #
+    # @!attribute [rw] private_endpoint
+    #   The private endpoint configuration for the gateway target.
+    #   @return [Types::PrivateEndpoint]
+    #
+    # @!attribute [rw] private_endpoint_managed_resources
+    #   The managed resources created by the gateway for private endpoint
+    #   connectivity.
+    #   @return [Array<Types::ManagedResourceDetails>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayTargetResponse AWS API Documentation
     #
     class UpdateGatewayTargetResponse < Struct.new(
@@ -10485,7 +10701,9 @@ module Aws::BedrockAgentCoreControl
       :target_configuration,
       :credential_provider_configurations,
       :last_synchronized_at,
-      :metadata_configuration)
+      :metadata_configuration,
+      :private_endpoint,
+      :private_endpoint_managed_resources)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end

data/lib/aws-sdk-bedrockagentcorecontrol.rb

@@ -55,7 +55,7 @@ module Aws::BedrockAgentCoreControl
   autoload :EndpointProvider, 'aws-sdk-bedrockagentcorecontrol/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-bedrockagentcorecontrol/endpoints'
 
-  GEM_VERSION = '1.33.0'
+  GEM_VERSION = '1.34.0'
 
 end
 

data/sig/client.rbs

@@ -450,6 +450,8 @@ module Aws
         def credential_provider_configurations: () -> ::Array[Types::CredentialProviderConfiguration]
         def last_synchronized_at: () -> ::Time
         def metadata_configuration: () -> Types::MetadataConfiguration
+        def private_endpoint: () -> Types::PrivateEndpoint
+        def private_endpoint_managed_resources: () -> ::Array[Types::ManagedResourceDetails]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#create_gateway_target-instance_method
       def create_gateway_target: (
@@ -543,6 +545,10 @@ module Aws
                                            credential_parameter_name: ::String?,
                                            credential_prefix: ::String?,
                                            credential_location: ("HEADER" | "QUERY_PARAMETER")?
+                                         }?,
+                                         iam_credential_provider: {
+                                           service: ::String,
+                                           region: ::String?
                                          }?
                                        }?
                                      },
@@ -551,6 +557,19 @@ module Aws
                                      allowed_request_headers: Array[::String]?,
                                      allowed_query_parameters: Array[::String]?,
                                      allowed_response_headers: Array[::String]?
+                                   },
+                                   ?private_endpoint: {
+                                     self_managed_lattice_resource: {
+                                       resource_configuration_identifier: ::String?
+                                     }?,
+                                     managed_lattice_resource: {
+                                       vpc_identifier: ::String,
+                                       subnet_ids: Array[::String],
+                                       endpoint_ip_address_type: ("IPV4" | "IPV6"),
+                                       security_group_ids: Array[::String]?,
+                                       tags: Hash[::String, ::String]?,
+                                       routing_domain: ::String?
+                                     }?
                                    }
                                  ) -> _CreateGatewayTargetResponseSuccess
                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateGatewayTargetResponseSuccess
@@ -1266,6 +1285,8 @@ module Aws
         def credential_provider_configurations: () -> ::Array[Types::CredentialProviderConfiguration]
         def last_synchronized_at: () -> ::Time
         def metadata_configuration: () -> Types::MetadataConfiguration
+        def private_endpoint: () -> Types::PrivateEndpoint
+        def private_endpoint_managed_resources: () -> ::Array[Types::ManagedResourceDetails]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#get_gateway_target-instance_method
       def get_gateway_target: (
@@ -2009,6 +2030,8 @@ module Aws
         def credential_provider_configurations: () -> ::Array[Types::CredentialProviderConfiguration]
         def last_synchronized_at: () -> ::Time
         def metadata_configuration: () -> Types::MetadataConfiguration
+        def private_endpoint: () -> Types::PrivateEndpoint
+        def private_endpoint_managed_resources: () -> ::Array[Types::ManagedResourceDetails]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#update_gateway_target-instance_method
       def update_gateway_target: (
@@ -2102,6 +2125,10 @@ module Aws
                                            credential_parameter_name: ::String?,
                                            credential_prefix: ::String?,
                                            credential_location: ("HEADER" | "QUERY_PARAMETER")?
+                                         }?,
+                                         iam_credential_provider: {
+                                           service: ::String,
+                                           region: ::String?
                                          }?
                                        }?
                                      },
@@ -2110,6 +2137,19 @@ module Aws
                                      allowed_request_headers: Array[::String]?,
                                      allowed_query_parameters: Array[::String]?,
                                      allowed_response_headers: Array[::String]?
+                                   },
+                                   ?private_endpoint: {
+                                     self_managed_lattice_resource: {
+                                       resource_configuration_identifier: ::String?
+                                     }?,
+                                     managed_lattice_resource: {
+                                       vpc_identifier: ::String,
+                                       subnet_ids: Array[::String],
+                                       endpoint_ip_address_type: ("IPV4" | "IPV6"),
+                                       security_group_ids: Array[::String]?,
+                                       tags: Hash[::String, ::String]?,
+                                       routing_domain: ::String?
+                                     }?
                                    }
                                  ) -> _UpdateGatewayTargetResponseSuccess
                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateGatewayTargetResponseSuccess

data/sig/types.rbs

@@ -518,6 +518,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor target_configuration: Types::TargetConfiguration
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor metadata_configuration: Types::MetadataConfiguration
+      attr_accessor private_endpoint: Types::PrivateEndpoint
       SENSITIVE: [:name, :description]
     end
 
@@ -534,6 +535,8 @@ module Aws::BedrockAgentCoreControl
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor last_synchronized_at: ::Time
       attr_accessor metadata_configuration: Types::MetadataConfiguration
+      attr_accessor private_endpoint: Types::PrivateEndpoint
+      attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       SENSITIVE: [:name, :description]
     end
 
@@ -659,6 +662,7 @@ module Aws::BedrockAgentCoreControl
     class CredentialProvider
       attr_accessor oauth_credential_provider: Types::OAuthCredentialProvider
       attr_accessor api_key_credential_provider: Types::ApiKeyCredentialProvider
+      attr_accessor iam_credential_provider: Types::IamCredentialProvider
       attr_accessor unknown: untyped
       SENSITIVE: []
 
@@ -666,6 +670,8 @@ module Aws::BedrockAgentCoreControl
       end
       class ApiKeyCredentialProvider < CredentialProvider
       end
+      class IamCredentialProvider < CredentialProvider
+      end
       class Unknown < CredentialProvider
       end
     end
@@ -1277,6 +1283,8 @@ module Aws::BedrockAgentCoreControl
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor last_synchronized_at: ::Time
       attr_accessor metadata_configuration: Types::MetadataConfiguration
+      attr_accessor private_endpoint: Types::PrivateEndpoint
+      attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       SENSITIVE: [:name, :description]
     end
 
@@ -1473,6 +1481,8 @@ module Aws::BedrockAgentCoreControl
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor last_synchronized_at: ::Time
       attr_accessor metadata_configuration: Types::MetadataConfiguration
+      attr_accessor private_endpoint: Types::PrivateEndpoint
+      attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       SENSITIVE: [:name, :description]
     end
 
@@ -1645,6 +1655,12 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class IamCredentialProvider
+      attr_accessor service: ::String
+      attr_accessor region: ::String
+      SENSITIVE: []
+    end
+
     class IncludedOauth2ProviderConfigInput
       attr_accessor client_id: ::String
       attr_accessor client_secret: ::String
@@ -1993,6 +2009,23 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class ManagedLatticeResource
+      attr_accessor vpc_identifier: ::String
+      attr_accessor subnet_ids: ::Array[::String]
+      attr_accessor endpoint_ip_address_type: ("IPV4" | "IPV6")
+      attr_accessor security_group_ids: ::Array[::String]
+      attr_accessor tags: ::Hash[::String, ::String]
+      attr_accessor routing_domain: ::String
+      SENSITIVE: []
+    end
+
+    class ManagedResourceDetails
+      attr_accessor domain: ::String
+      attr_accessor resource_gateway_arn: ::String
+      attr_accessor resource_association_arn: ::String
+      SENSITIVE: []
+    end
+
     class McpLambdaTargetConfiguration
       attr_accessor lambda_arn: ::String
       attr_accessor tool_schema: Types::ToolSchema
@@ -2404,6 +2437,20 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class PrivateEndpoint
+      attr_accessor self_managed_lattice_resource: Types::SelfManagedLatticeResource
+      attr_accessor managed_lattice_resource: Types::ManagedLatticeResource
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class SelfManagedLatticeResource < PrivateEndpoint
+      end
+      class ManagedLatticeResource < PrivateEndpoint
+      end
+      class Unknown < PrivateEndpoint
+      end
+    end
+
     class ProtocolConfiguration
       attr_accessor server_protocol: ("MCP" | "HTTP" | "A2A" | "AGUI")
       SENSITIVE: []
@@ -2572,6 +2619,17 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class SelfManagedLatticeResource
+      attr_accessor resource_configuration_identifier: ::String
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class ResourceConfigurationIdentifier < SelfManagedLatticeResource
+      end
+      class Unknown < SelfManagedLatticeResource
+      end
+    end
+
     class SemanticConsolidationOverride
       attr_accessor append_to_prompt: ::String
       attr_accessor model_id: ::String
@@ -2996,6 +3054,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor target_configuration: Types::TargetConfiguration
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor metadata_configuration: Types::MetadataConfiguration
+      attr_accessor private_endpoint: Types::PrivateEndpoint
       SENSITIVE: [:name, :description]
     end
 
@@ -3012,6 +3071,8 @@ module Aws::BedrockAgentCoreControl
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor last_synchronized_at: ::Time
       attr_accessor metadata_configuration: Types::MetadataConfiguration
+      attr_accessor private_endpoint: Types::PrivateEndpoint
+      attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       SENSITIVE: [:name, :description]
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-bedrockagentcorecontrol
 version: !ruby/object:Gem::Version
-  version: 1.33.0
+  version: 1.34.0
 platform: ruby
 authors:
 - Amazon Web Services