RubyGems - aws-sdk-bedrockagentcorecontrol - Versions diffs - 1.50.0 → 1.52.0 - Mend

aws-sdk-bedrockagentcorecontrol 1.50.0 → 1.52.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (11) hide show

checksums.yaml +4 -4
data/CHANGELOG.md +10 -0
data/VERSION +1 -1
data/lib/aws-sdk-bedrockagentcorecontrol/client.rb +341 -212
data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb +81 -22
data/lib/aws-sdk-bedrockagentcorecontrol/types.rb +452 -86
data/lib/aws-sdk-bedrockagentcorecontrol.rb +1 -1
data/sig/client.rbs +25 -3
data/sig/params.rbs +138 -52
data/sig/types.rbs +62 -5
metadata +1 -1

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb CHANGED Viewed

@@ -474,21 +474,10 @@ module Aws::BedrockAgentCoreControl
     # @!group API Operations
-    # Adds examples to the dataset's DRAFT.
-    #
-    # **Validation:** All examples are validated against the dataset's
-    # schemaType before any writes occur. If any example fails validation,
-    # the entire batch is rejected with ValidationException — no examples
-    # are written (all-or-nothing semantics).
-    #
-    # **Asynchronous:** Operates in-place on DRAFT. No version bump occurs.
-    # Use CreateDatasetVersion to publish DRAFT as a new numbered version.
-    #
-    # **State guard:** Returns ConflictException (DATASET\_NOT\_READY) if
-    # the dataset status is not in \{DRAFT, ACTIVE}.
-    #
-    # **Request size limit:** Max 5 MB total request body. Max 1000 examples
-    # per call.
+    # Adds examples to the dataset's DRAFT. All examples are validated
+    # against the dataset's schema type before any writes occur. If any
+    # example fails validation, the entire batch is rejected (all-or-nothing
+    # semantics).
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset to add examples to.
@@ -830,10 +819,21 @@ module Aws::BedrockAgentCoreControl
     #   The name of the API key credential provider. The name must be unique
     #   within your account.
     #
-    # @option params [required, String] :api_key
+    # @option params [String] :api_key
     #   The API key to use for authentication. This value is encrypted and
     #   stored securely.
     #
+    # @option params [Types::SecretReference] :api_key_secret_config
+    #   A reference to the AWS Secrets Manager secret that stores the API key.
+    #   This includes the secret ID and the JSON key used to extract the API
+    #   key value from the secret. Required when `apiKeySecretSource` is set
+    #   to `EXTERNAL`.
+    #
+    # @option params [String] :api_key_secret_source
+    #   The source type of the API key secret. Use `MANAGED` if the secret is
+    #   managed by the service, or `EXTERNAL` if you manage the secret
+    #   yourself in AWS Secrets Manager.
+    #
     # @option params [Hash<String,String>] :tags
     #   A map of tag keys and values to assign to the API key credential
     #   provider. Tags enable you to categorize your resources in different
@@ -842,6 +842,8 @@ module Aws::BedrockAgentCoreControl
     # @return [Types::CreateApiKeyCredentialProviderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateApiKeyCredentialProviderResponse#api_key_secret_arn #api_key_secret_arn} => Types::Secret
+    #   * {Types::CreateApiKeyCredentialProviderResponse#api_key_secret_json_key #api_key_secret_json_key} => String
+    #   * {Types::CreateApiKeyCredentialProviderResponse#api_key_secret_source #api_key_secret_source} => String
     #   * {Types::CreateApiKeyCredentialProviderResponse#name #name} => String
     #   * {Types::CreateApiKeyCredentialProviderResponse#credential_provider_arn #credential_provider_arn} => String
     #
@@ -849,7 +851,12 @@ module Aws::BedrockAgentCoreControl
     #
     #   resp = client.create_api_key_credential_provider({
     #     name: "CredentialProviderName", # required
-    #     api_key: "ApiKeyType", # required
+    #     api_key: "DefaultApiKeyType",
+    #     api_key_secret_config: {
+    #       secret_id: "SecretIdType", # required
+    #       json_key: "SecretJsonKeyType", # required
+    #     },
+    #     api_key_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #     tags: {
     #       "TagKey" => "TagValue",
     #     },
@@ -858,6 +865,8 @@ module Aws::BedrockAgentCoreControl
     # @example Response structure
     #
     #   resp.api_key_secret_arn.secret_arn #=> String
+    #   resp.api_key_secret_json_key #=> String
+    #   resp.api_key_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.name #=> String
     #   resp.credential_provider_arn #=> String
     #
@@ -1230,20 +1239,27 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Creates a new Dataset resource asynchronously.
-    #
-    # Returns immediately with status CREATING. Poll GetDataset until status
-    # transitions to ACTIVE or CREATE\_FAILED (with failureReason).
+    # Creates a new dataset resource asynchronously. Returns immediately
+    # with status CREATING. Poll `GetDataset` until status transitions to
+    # ACTIVE or CREATE\_FAILED.
     #
     # @option params [String] :client_token
-    #   Optional idempotency token.
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a previous
+    #   request, the service ignores the request, but doesn't return an
+    #   error. For more information, see [Ensuring idempotency][1].
     #
     #   **A suitable default value is auto-generated.** You should normally
     #   not need to pass this option.**
     #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #
     # @option params [required, String] :dataset_name
-    #   Human-readable name for the dataset. Unique within the account
-    #   (case-insensitive). Immutable after creation.
+    #   Human-readable name for the dataset. Must be unique within the
+    #   account. Immutable after creation.
     #
     # @option params [String] :description
     #   A description of the dataset.
@@ -1257,7 +1273,8 @@ module Aws::BedrockAgentCoreControl
     #   after creation.
     #
     # @option params [String] :kms_key_arn
-    #   Optional AWS KMS key ARN for SSE-KMS on service S3 writes.
+    #   Optional KMS key ARN for server-side encryption on service Amazon S3
+    #   writes.
     #
     # @option params [Hash<String,String>] :tags
     #   A map of tag keys and values to assign to the dataset.
@@ -1309,20 +1326,10 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Publishes the current DRAFT as a new numbered version.
-    #
-    # Snapshots the DRAFT examples as the next version (1, 2, 3, ...). The
-    # DRAFT is preserved and remains editable after publishing. Returns
-    # immediately with status UPDATING. Poll GetDataset until status
-    # transitions to ACTIVE (draftStatus=UNMODIFIED) or UPDATE\_FAILED.
-    #
-    # **State guard:** Returns ConflictException (DATASET\_NOT\_READY) if
-    # status is in \{CREATING, UPDATING, DELETING}, or
-    # DATASET\_IN\_FAILED\_STATE if status is in \{CREATE\_FAILED,
-    # DELETE\_FAILED}.
-    #
-    # **Quota:** MAX\_VERSIONS\_PER\_DATASET applies to published versions
-    # only (not DRAFT).
+    # Publishes the current DRAFT as a new numbered version. The DRAFT is
+    # preserved and remains editable after publishing. Returns immediately
+    # with status UPDATING. Poll `GetDataset` until status transitions to
+    # ACTIVE or UPDATE\_FAILED.
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset to publish a version for.
@@ -2799,6 +2806,7 @@ module Aws::BedrockAgentCoreControl
     #               {
     #                 key: "MetadataKey", # required
     #                 type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                 extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                 extraction_config: {
     #                   llm_extraction_config: {
     #                     llm_extraction_instruction: "LlmExtractionInstruction",
@@ -2832,6 +2840,7 @@ module Aws::BedrockAgentCoreControl
     #               {
     #                 key: "MetadataKey", # required
     #                 type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                 extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                 extraction_config: {
     #                   llm_extraction_config: {
     #                     llm_extraction_instruction: "LlmExtractionInstruction",
@@ -2865,6 +2874,7 @@ module Aws::BedrockAgentCoreControl
     #               {
     #                 key: "MetadataKey", # required
     #                 type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                 extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                 extraction_config: {
     #                   llm_extraction_config: {
     #                     llm_extraction_instruction: "LlmExtractionInstruction",
@@ -2939,6 +2949,7 @@ module Aws::BedrockAgentCoreControl
     #                     {
     #                       key: "MetadataKey", # required
     #                       type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                       extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                       extraction_config: {
     #                         llm_extraction_config: {
     #                           llm_extraction_instruction: "LlmExtractionInstruction",
@@ -2989,6 +3000,7 @@ module Aws::BedrockAgentCoreControl
     #               {
     #                 key: "MetadataKey", # required
     #                 type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                 extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                 extraction_config: {
     #                   llm_extraction_config: {
     #                     llm_extraction_instruction: "LlmExtractionInstruction",
@@ -3025,6 +3037,7 @@ module Aws::BedrockAgentCoreControl
     #                 {
     #                   key: "MetadataKey", # required
     #                   type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                   extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                   extraction_config: {
     #                     llm_extraction_config: {
     #                       llm_extraction_instruction: "LlmExtractionInstruction",
@@ -3053,6 +3066,7 @@ module Aws::BedrockAgentCoreControl
     #               {
     #                 key: "MetadataKey", # required
     #                 type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                 extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                 extraction_config: {
     #                   llm_extraction_config: {
     #                     llm_extraction_instruction: "LlmExtractionInstruction",
@@ -3113,7 +3127,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.encryption_key_arn #=> String
     #   resp.memory.memory_execution_role_arn #=> String
     #   resp.memory.event_expiry_duration #=> Integer
-    #   resp.memory.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING"
+    #   resp.memory.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING", "UPDATING"
     #   resp.memory.failure_reason #=> String
     #   resp.memory.created_at #=> Time
     #   resp.memory.updated_at #=> Time
@@ -3145,6 +3159,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -3161,6 +3176,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -3188,6 +3204,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -3237,6 +3254,8 @@ module Aws::BedrockAgentCoreControl
     # @return [Types::CreateOauth2CredentialProviderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateOauth2CredentialProviderResponse#client_secret_arn #client_secret_arn} => Types::Secret
+    #   * {Types::CreateOauth2CredentialProviderResponse#client_secret_json_key #client_secret_json_key} => String
+    #   * {Types::CreateOauth2CredentialProviderResponse#client_secret_source #client_secret_source} => String
     #   * {Types::CreateOauth2CredentialProviderResponse#name #name} => String
     #   * {Types::CreateOauth2CredentialProviderResponse#credential_provider_arn #credential_provider_arn} => String
     #   * {Types::CreateOauth2CredentialProviderResponse#callback_url #callback_url} => String
@@ -3262,6 +3281,19 @@ module Aws::BedrockAgentCoreControl
     #         },
     #         client_id: "DefaultClientIdType",
     #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         on_behalf_of_token_exchange_config: {
+    #           grant_type: "TOKEN_EXCHANGE", # required, accepts TOKEN_EXCHANGE, JWT_AUTHORIZATION_GRANT
+    #           token_exchange_grant_type_config: {
+    #             actor_token_content: "NONE", # required, accepts NONE, M2M, AWS_IAM_ID_TOKEN_JWT
+    #             actor_token_scopes: ["ScopeType"],
+    #           },
+    #         },
+    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT
     #         private_endpoint: {
     #           self_managed_lattice_resource: {
     #             resource_configuration_identifier: "ResourceConfigurationIdentifier",
@@ -3297,47 +3329,79 @@ module Aws::BedrockAgentCoreControl
     #             },
     #           },
     #         ],
-    #         on_behalf_of_token_exchange_config: {
-    #           grant_type: "TOKEN_EXCHANGE", # required, accepts TOKEN_EXCHANGE, JWT_AUTHORIZATION_GRANT
-    #           token_exchange_grant_type_config: {
-    #             actor_token_content: "NONE", # required, accepts NONE, M2M, AWS_IAM_ID_TOKEN_JWT
-    #             actor_token_scopes: ["ScopeType"],
-    #           },
-    #         },
-    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT
     #       },
     #       google_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       github_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       slack_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       salesforce_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       microsoft_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #         tenant_id: "TenantIdType",
     #       },
     #       atlassian_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       linkedin_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       included_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #         issuer: "IssuerUrlType",
     #         authorization_endpoint: "AuthorizationEndpointType",
     #         token_endpoint: "TokenEndpointType",
@@ -3351,6 +3415,8 @@ module Aws::BedrockAgentCoreControl
     # @example Response structure
     #
     #   resp.client_secret_arn.secret_arn #=> String
+    #   resp.client_secret_json_key #=> String
+    #   resp.client_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.name #=> String
     #   resp.credential_provider_arn #=> String
     #   resp.callback_url #=> String
@@ -3727,13 +3793,33 @@ module Aws::BedrockAgentCoreControl
     #     provider_configuration_input: { # required
     #       coinbase_cdp_configuration: {
     #         api_key_id: "CoinbaseCdpApiKeyIdType", # required
-    #         api_key_secret: "CoinbaseCdpApiKeySecretType", # required
-    #         wallet_secret: "CoinbaseCdpWalletSecretType", # required
+    #         api_key_secret: "DefaultCoinbaseCdpApiKeySecretType",
+    #         api_key_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         api_key_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         wallet_secret: "DefaultCoinbaseCdpWalletSecretType",
+    #         wallet_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         wallet_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
     #       },
     #       stripe_privy_configuration: {
     #         app_id: "StripePrivyAppIdType", # required
-    #         app_secret: "StripePrivyAppSecretType", # required
-    #         authorization_private_key: "StripePrivyAuthorizationPrivateKeyType", # required
+    #         app_secret: "DefaultStripePrivyAppSecretType",
+    #         app_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         app_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         authorization_private_key: "DefaultStripePrivyAuthorizationPrivateKeyType",
+    #         authorization_private_key_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         authorization_private_key_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
     #         authorization_id: "StripePrivyAuthorizationIdType", # required
     #       },
     #     },
@@ -3749,10 +3835,18 @@ module Aws::BedrockAgentCoreControl
     #   resp.credential_provider_arn #=> String
     #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_id #=> String
     #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_json_key #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_json_key #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.app_id #=> String
     #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_json_key #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_json_key #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.authorization_id #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreatePaymentCredentialProvider AWS API Documentation
@@ -4752,48 +4846,16 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Deletes a dataset version or an entire dataset (all versions + name
-    # claim). Asynchronous 202.
-    #
-    # **State transitions:**
-    #
-    # * If `datasetVersion` is absent (full delete): status transitions to
-    #   DELETING immediately.
-    # * If `datasetVersion` is provided (version-specific delete): status
-    #   transitions to UPDATING.
-    #
-    # **State guard (full delete):** Returns ConflictException
-    # (DATASET\_NOT\_READY) if the dataset status is in \{CREATING,
-    # UPDATING}. Deletion is allowed from ACTIVE, CREATE\_FAILED,
-    # UPDATE\_FAILED, and DELETE\_FAILED states.
-    #
-    # **State guard (version-specific delete):** Returns ConflictException
-    # (DATASET\_NOT\_READY) if the dataset status is not in \{ACTIVE,
-    # CREATE\_FAILED, UPDATE\_FAILED}.
-    #
-    # Fails with ConflictException (REFERENCED\_BY\_EVAL\_JOB) if referenced
-    # by an active evaluation job (full delete only).
-    #
-    # If the delete workflow fails after retries, status is set to
-    # DELETE\_FAILED (full delete) or UPDATE\_FAILED (version-specific
-    # delete). Calling DeleteDataset on a DELETE\_FAILED dataset re-triggers
-    # the delete workflow (idempotent retry path).
-    #
-    # **Version parameter:**
-    #
-    # * If `datasetVersion` is absent: deletes ALL versions and the Dataset
-    #   record itself.
-    # * If `datasetVersion` is provided: deletes only that specific
-    #   DatasetVersion. Returns ResourceNotFoundException if the specified
-    #   version does not exist.
+    # Deletes a dataset version or an entire dataset asynchronously. If
+    # `datasetVersion` is absent, deletes all versions and the dataset
+    # record itself. If provided, deletes only that specific version.
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset to delete.
     #
     # @option params [String] :dataset_version
-    #   Optional version to delete. Use "DRAFT" or omit to delete the draft.
-    #   Returns ResourceNotFoundException if the specified version does not
-    #   exist.
+    #   Optional version to delete. If absent, deletes the entire dataset. If
+    #   provided, deletes only that specific version.
     #
     # @return [Types::DeleteDatasetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -4827,18 +4889,9 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Deletes specific examples by ID from DRAFT.
-    #
-    # **Validation:** All example IDs are validated before any deletes
-    # occur. If any ID does not exist in DRAFT, the entire batch is rejected
-    # with ResourceNotFoundException — no examples are deleted
-    # (all-or-nothing semantics).
-    #
-    # **Asynchronous:** Operates in-place on DRAFT. No version bump occurs.
-    # Use CreateDatasetVersion to publish DRAFT as a new numbered version.
-    #
-    # **State guard:** Returns ConflictException (DATASET\_NOT\_READY) if
-    # the dataset status is not in \{DRAFT, ACTIVE}.
+    # Deletes specific examples by ID from DRAFT. All example IDs are
+    # validated before any deletes occur. If any ID does not exist in DRAFT,
+    # the entire batch is rejected (all-or-nothing semantics).
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset.
@@ -5231,7 +5284,7 @@ module Aws::BedrockAgentCoreControl
     # @example Response structure
     #
     #   resp.memory_id #=> String
-    #   resp.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING"
+    #   resp.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING", "UPDATING"
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteMemory AWS API Documentation
     #
@@ -5823,6 +5876,8 @@ module Aws::BedrockAgentCoreControl
     # @return [Types::GetApiKeyCredentialProviderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetApiKeyCredentialProviderResponse#api_key_secret_arn #api_key_secret_arn} => Types::Secret
+    #   * {Types::GetApiKeyCredentialProviderResponse#api_key_secret_json_key #api_key_secret_json_key} => String
+    #   * {Types::GetApiKeyCredentialProviderResponse#api_key_secret_source #api_key_secret_source} => String
     #   * {Types::GetApiKeyCredentialProviderResponse#name #name} => String
     #   * {Types::GetApiKeyCredentialProviderResponse#credential_provider_arn #credential_provider_arn} => String
     #   * {Types::GetApiKeyCredentialProviderResponse#created_time #created_time} => Time
@@ -5837,6 +5892,8 @@ module Aws::BedrockAgentCoreControl
     # @example Response structure
     #
     #   resp.api_key_secret_arn.secret_arn #=> String
+    #   resp.api_key_secret_json_key #=> String
+    #   resp.api_key_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.name #=> String
     #   resp.credential_provider_arn #=> String
     #   resp.created_time #=> Time
@@ -6130,36 +6187,16 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Retrieves dataset metadata only.
-    #
-    # Use `?datasetVersion=DRAFT` or `?datasetVersion=N` to retrieve a
-    # specific version's metadata. If absent, defaults to DRAFT (the
-    # mutable working copy). Returns ResourceNotFoundException if the
-    # specified version is not found.
-    #
-    # **Initial state after CreateDataset:** When CreateDataset completes
-    # successfully (status transitions to ACTIVE), only a DRAFT working copy
-    # exists. No published versions exist until CreateDatasetVersion is
-    # called. At this point draftStatus is MODIFIED because the DRAFT has
-    # content that has never been published.
-    #
-    # **Default version behavior:** When `datasetVersion` is omitted, the
-    # operation returns the DRAFT working copy. To retrieve a specific
-    # published version, pass the version number as a string (e.g.
-    # `?datasetVersion=1`).
-    #
-    # **State guard:** Allowed for all statuses including DELETING. Returns
-    # the dataset record with its current status so callers can observe the
-    # deletion in progress.
-    #
-    # For paginated example IDs use ListDatasetExamples.
+    # Retrieves dataset metadata. Use the `datasetVersion` query parameter
+    # to retrieve a specific version's metadata. If absent, defaults to
+    # DRAFT. For paginated example content, use `ListDatasetExamples`.
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset to retrieve.
     #
     # @option params [String] :dataset_version
-    #   Version to retrieve: "DRAFT" or a version number. Defaults to DRAFT if
-    #   absent.
+    #   Version to retrieve: "DRAFT" or a version number. Defaults to DRAFT
+    #   if absent.
     #
     # @return [Types::GetDatasetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -6798,7 +6835,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.encryption_key_arn #=> String
     #   resp.memory.memory_execution_role_arn #=> String
     #   resp.memory.event_expiry_duration #=> Integer
-    #   resp.memory.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING"
+    #   resp.memory.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING", "UPDATING"
     #   resp.memory.failure_reason #=> String
     #   resp.memory.created_at #=> Time
     #   resp.memory.updated_at #=> Time
@@ -6830,6 +6867,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -6846,6 +6884,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -6873,6 +6912,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -6913,6 +6953,8 @@ module Aws::BedrockAgentCoreControl
     # @return [Types::GetOauth2CredentialProviderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::GetOauth2CredentialProviderResponse#client_secret_arn #client_secret_arn} => Types::Secret
+    #   * {Types::GetOauth2CredentialProviderResponse#client_secret_json_key #client_secret_json_key} => String
+    #   * {Types::GetOauth2CredentialProviderResponse#client_secret_source #client_secret_source} => String
     #   * {Types::GetOauth2CredentialProviderResponse#name #name} => String
     #   * {Types::GetOauth2CredentialProviderResponse#credential_provider_arn #credential_provider_arn} => String
     #   * {Types::GetOauth2CredentialProviderResponse#credential_provider_vendor #credential_provider_vendor} => String
@@ -6932,6 +6974,8 @@ module Aws::BedrockAgentCoreControl
     # @example Response structure
     #
     #   resp.client_secret_arn.secret_arn #=> String
+    #   resp.client_secret_json_key #=> String
+    #   resp.client_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.name #=> String
     #   resp.credential_provider_arn #=> String
     #   resp.credential_provider_vendor #=> String, one of "GoogleOauth2", "GithubOauth2", "SlackOauth2", "SalesforceOauth2", "MicrosoftOauth2", "CustomOauth2", "AtlassianOauth2", "LinkedinOauth2", "XOauth2", "OktaOauth2", "OneLoginOauth2", "PingOneOauth2", "FacebookOauth2", "YandexOauth2", "RedditOauth2", "ZoomOauth2", "TwitchOauth2", "SpotifyOauth2", "DropboxOauth2", "NotionOauth2", "HubspotOauth2", "CyberArkOauth2", "FusionAuthOauth2", "Auth0Oauth2", "CognitoOauth2"
@@ -7202,10 +7246,18 @@ module Aws::BedrockAgentCoreControl
     #   resp.credential_provider_vendor #=> String, one of "CoinbaseCDP", "StripePrivy"
     #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_id #=> String
     #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_json_key #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_json_key #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.app_id #=> String
     #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_json_key #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_json_key #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.authorization_id #=> String
     #   resp.created_time #=> Time
     #   resp.last_updated_time #=> Time
@@ -8361,31 +8413,21 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Returns paginated examples from the dataset.
-    #
-    # **Version-pinned pagination:** The server embeds the resolved version
-    # in the `nextToken`. Once pagination begins, all subsequent pages are
-    # pinned to that version regardless of concurrent mutations or whether
-    # `datasetVersion` is passed on subsequent requests. The
-    # `datasetVersion` query parameter is only used for the first request
-    # (when `nextToken` is absent); if omitted, defaults to DRAFT.
-    #
-    # **State guard:** Allowed for all statuses including DELETING.
+    # Returns paginated examples from the dataset. The server embeds the
+    # resolved version in the pagination token. Once pagination begins, all
+    # subsequent pages are pinned to that version regardless of concurrent
+    # mutations.
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset.
     #
     # @option params [String] :dataset_version
-    #   Version to paginate: "DRAFT" or a version number. Defaults to DRAFT if
-    #   absent. Only used on the first request (when nextToken is absent). For
-    #   subsequent pages, the version is extracted from the nextToken and this
-    #   parameter is ignored.
+    #   Version to paginate: "DRAFT" or a version number. Defaults to DRAFT
+    #   if absent. Only used on the first request; for subsequent pages, the
+    #   version is extracted from the pagination token.
     #
     # @option params [Integer] :max_results
-    #   Maximum number of examples to return per page. Default: 1000. Min: 1,
-    #   max: 1000. Response size is validated against 5 MB limit after
-    #   reading. For bulk access to all examples, use the `downloadUrl` field
-    #   from GetDataset.
+    #   Maximum number of examples to return per page.
     #
     # @option params [String] :next_token
     #   The token for the next page of results.
@@ -8429,8 +8471,6 @@ module Aws::BedrockAgentCoreControl
     # Lists all published versions of a dataset, sorted by version number
     # descending (newest first). Does not include the DRAFT working copy.
     #
-    # **State guard:** Allowed for all statuses including DELETING.
-    #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset.
     #
@@ -8472,8 +8512,7 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Lists all datasets in the caller's account, paginated. No presigned
-    # URLs in list results.
+    # Lists all datasets in the caller's account, paginated.
     #
     # @option params [String] :next_token
     #   The token for the next page of results.
@@ -8820,7 +8859,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memories #=> Array
     #   resp.memories[0].arn #=> String
     #   resp.memories[0].id #=> String
-    #   resp.memories[0].status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING"
+    #   resp.memories[0].status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING", "UPDATING"
     #   resp.memories[0].created_at #=> Time
     #   resp.memories[0].updated_at #=> Time
     #   resp.next_token #=> String
@@ -10415,13 +10454,26 @@ module Aws::BedrockAgentCoreControl
     # @option params [required, String] :name
     #   The name of the API key credential provider to update.
     #
-    # @option params [required, String] :api_key
+    # @option params [String] :api_key
     #   The new API key to use for authentication. This value replaces the
     #   existing API key and is encrypted and stored securely.
     #
+    # @option params [Types::SecretReference] :api_key_secret_config
+    #   A reference to the AWS Secrets Manager secret that stores the API key.
+    #   This includes the secret ID and the JSON key used to extract the API
+    #   key value from the secret. Required when `apiKeySecretSource` is set
+    #   to `EXTERNAL`.
+    #
+    # @option params [String] :api_key_secret_source
+    #   The source type of the API key secret. Use `MANAGED` if the secret is
+    #   managed by the service, or `EXTERNAL` if you manage the secret
+    #   yourself in AWS Secrets Manager.
+    #
     # @return [Types::UpdateApiKeyCredentialProviderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateApiKeyCredentialProviderResponse#api_key_secret_arn #api_key_secret_arn} => Types::Secret
+    #   * {Types::UpdateApiKeyCredentialProviderResponse#api_key_secret_json_key #api_key_secret_json_key} => String
+    #   * {Types::UpdateApiKeyCredentialProviderResponse#api_key_secret_source #api_key_secret_source} => String
     #   * {Types::UpdateApiKeyCredentialProviderResponse#name #name} => String
     #   * {Types::UpdateApiKeyCredentialProviderResponse#credential_provider_arn #credential_provider_arn} => String
     #   * {Types::UpdateApiKeyCredentialProviderResponse#created_time #created_time} => Time
@@ -10431,12 +10483,19 @@ module Aws::BedrockAgentCoreControl
     #
     #   resp = client.update_api_key_credential_provider({
     #     name: "CredentialProviderName", # required
-    #     api_key: "ApiKeyType", # required
+    #     api_key: "DefaultApiKeyType",
+    #     api_key_secret_config: {
+    #       secret_id: "SecretIdType", # required
+    #       json_key: "SecretJsonKeyType", # required
+    #     },
+    #     api_key_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #   })
     #
     # @example Response structure
     #
     #   resp.api_key_secret_arn.secret_arn #=> String
+    #   resp.api_key_secret_json_key #=> String
+    #   resp.api_key_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.name #=> String
     #   resp.credential_provider_arn #=> String
     #   resp.created_time #=> Time
@@ -10546,12 +10605,9 @@ module Aws::BedrockAgentCoreControl
     end
     # Updates a dataset's metadata. Synchronous operation. Only provided
-    # fields are updated; omitted fields remain unchanged.
-    #
-    # To modify dataset content, use AddDatasetExamples,
-    # UpdateDatasetExamples, or DeleteDatasetExamples.
-    #
-    # Cannot update: name, schemaType, kmsKeyArn (immutable after creation).
+    # fields are updated; omitted fields remain unchanged. To modify dataset
+    # content, use `AddDatasetExamples`, `UpdateDatasetExamples`, or
+    # `DeleteDatasetExamples`.
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset to update.
@@ -10602,24 +10658,10 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
-    # Updates multiple existing examples in-place on DRAFT.
-    #
-    # **Validation:** All examples are validated against the dataset's
-    # schemaType before any writes occur. If any example fails validation,
-    # the entire batch is rejected with ValidationException — no examples
-    # are updated (all-or-nothing semantics).
-    #
-    # **Asynchronous:** Operates in-place on DRAFT. No version bump occurs.
-    # Use CreateDatasetVersion to publish DRAFT as a new numbered version.
-    #
-    # Fails with ResourceNotFoundException if any exampleId does not exist
-    # in DRAFT. To add new examples, use AddDatasetExamples instead.
-    #
-    # **State guard:** Returns ConflictException (DATASET\_NOT\_READY) if
-    # the dataset status is not in \{DRAFT, ACTIVE}.
-    #
-    # **Request size limit:** Max 5 MB total request body. Max 1000 examples
-    # per call.
+    # Updates multiple existing examples in-place on DRAFT. All examples are
+    # validated against the dataset's schema type before any writes occur.
+    # If any example fails validation, the entire batch is rejected
+    # (all-or-nothing semantics).
     #
     # @option params [required, String] :dataset_id
     #   The unique identifier of the dataset.
@@ -10640,11 +10682,8 @@ module Aws::BedrockAgentCoreControl
     #
     # @option params [required, Array<Hash,Array,String,Numeric,Boolean>] :examples
     #   Examples to update. Each element is a JSON object containing a
-    #   required `exampleId` string field identifying the existing example,
-    #   plus the replacement fields. The `exampleId` is extracted and removed
-    #   before persistence; the remaining document is validated against the
-    #   dataset's schemaType. Max 1000 examples per call. Total request body
-    #   must not exceed 5 MB.
+    #   required `exampleId` field identifying the existing example, plus the
+    #   replacement fields. Maximum 1000 examples per call.
     #
     # @return [Types::UpdateDatasetExamplesResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -12038,6 +12077,7 @@ module Aws::BedrockAgentCoreControl
     #                 {
     #                   key: "MetadataKey", # required
     #                   type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                   extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                   extraction_config: {
     #                     llm_extraction_config: {
     #                       llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12071,6 +12111,7 @@ module Aws::BedrockAgentCoreControl
     #                 {
     #                   key: "MetadataKey", # required
     #                   type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                   extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                   extraction_config: {
     #                     llm_extraction_config: {
     #                       llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12104,6 +12145,7 @@ module Aws::BedrockAgentCoreControl
     #                 {
     #                   key: "MetadataKey", # required
     #                   type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                   extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                   extraction_config: {
     #                     llm_extraction_config: {
     #                       llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12178,6 +12220,7 @@ module Aws::BedrockAgentCoreControl
     #                       {
     #                         key: "MetadataKey", # required
     #                         type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                         extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                         extraction_config: {
     #                           llm_extraction_config: {
     #                             llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12228,6 +12271,7 @@ module Aws::BedrockAgentCoreControl
     #                 {
     #                   key: "MetadataKey", # required
     #                   type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                   extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                   extraction_config: {
     #                     llm_extraction_config: {
     #                       llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12264,6 +12308,7 @@ module Aws::BedrockAgentCoreControl
     #                   {
     #                     key: "MetadataKey", # required
     #                     type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                     extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                     extraction_config: {
     #                       llm_extraction_config: {
     #                         llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12292,6 +12337,7 @@ module Aws::BedrockAgentCoreControl
     #                 {
     #                   key: "MetadataKey", # required
     #                   type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                   extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                   extraction_config: {
     #                     llm_extraction_config: {
     #                       llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12369,6 +12415,7 @@ module Aws::BedrockAgentCoreControl
     #                     {
     #                       key: "MetadataKey", # required
     #                       type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                       extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                       extraction_config: {
     #                         llm_extraction_config: {
     #                           llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12403,6 +12450,7 @@ module Aws::BedrockAgentCoreControl
     #                       {
     #                         key: "MetadataKey", # required
     #                         type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                         extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                         extraction_config: {
     #                           llm_extraction_config: {
     #                             llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12454,6 +12502,7 @@ module Aws::BedrockAgentCoreControl
     #               {
     #                 key: "MetadataKey", # required
     #                 type: "STRING", # accepts STRING, STRINGLIST, NUMBER
+    #                 extraction_type: "LLM_INFERRED", # accepts LLM_INFERRED, STRICTLY_CONSISTENT
     #                 extraction_config: {
     #                   llm_extraction_config: {
     #                     llm_extraction_instruction: "LlmExtractionInstruction",
@@ -12516,7 +12565,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.encryption_key_arn #=> String
     #   resp.memory.memory_execution_role_arn #=> String
     #   resp.memory.event_expiry_duration #=> Integer
-    #   resp.memory.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING"
+    #   resp.memory.status #=> String, one of "CREATING", "ACTIVE", "FAILED", "DELETING", "UPDATING"
     #   resp.memory.failure_reason #=> String
     #   resp.memory.created_at #=> Time
     #   resp.memory.updated_at #=> Time
@@ -12548,6 +12597,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].configuration.reflection.custom_reflection_configuration.episodic_reflection_override.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -12564,6 +12614,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].configuration.reflection.episodic_reflection_configuration.memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -12591,6 +12642,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema #=> Array
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].key #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_type #=> String, one of "LLM_INFERRED", "STRICTLY_CONSISTENT"
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.llm_extraction_instruction #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.definition #=> String
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_validation.allowed_values #=> Array
@@ -12632,6 +12684,8 @@ module Aws::BedrockAgentCoreControl
     # @return [Types::UpdateOauth2CredentialProviderResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateOauth2CredentialProviderResponse#client_secret_arn #client_secret_arn} => Types::Secret
+    #   * {Types::UpdateOauth2CredentialProviderResponse#client_secret_json_key #client_secret_json_key} => String
+    #   * {Types::UpdateOauth2CredentialProviderResponse#client_secret_source #client_secret_source} => String
     #   * {Types::UpdateOauth2CredentialProviderResponse#name #name} => String
     #   * {Types::UpdateOauth2CredentialProviderResponse#credential_provider_vendor #credential_provider_vendor} => String
     #   * {Types::UpdateOauth2CredentialProviderResponse#credential_provider_arn #credential_provider_arn} => String
@@ -12660,6 +12714,19 @@ module Aws::BedrockAgentCoreControl
     #         },
     #         client_id: "DefaultClientIdType",
     #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         on_behalf_of_token_exchange_config: {
+    #           grant_type: "TOKEN_EXCHANGE", # required, accepts TOKEN_EXCHANGE, JWT_AUTHORIZATION_GRANT
+    #           token_exchange_grant_type_config: {
+    #             actor_token_content: "NONE", # required, accepts NONE, M2M, AWS_IAM_ID_TOKEN_JWT
+    #             actor_token_scopes: ["ScopeType"],
+    #           },
+    #         },
+    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT
     #         private_endpoint: {
     #           self_managed_lattice_resource: {
     #             resource_configuration_identifier: "ResourceConfigurationIdentifier",
@@ -12695,47 +12762,79 @@ module Aws::BedrockAgentCoreControl
     #             },
     #           },
     #         ],
-    #         on_behalf_of_token_exchange_config: {
-    #           grant_type: "TOKEN_EXCHANGE", # required, accepts TOKEN_EXCHANGE, JWT_AUTHORIZATION_GRANT
-    #           token_exchange_grant_type_config: {
-    #             actor_token_content: "NONE", # required, accepts NONE, M2M, AWS_IAM_ID_TOKEN_JWT
-    #             actor_token_scopes: ["ScopeType"],
-    #           },
-    #         },
-    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT
     #       },
     #       google_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       github_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       slack_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       salesforce_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       microsoft_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #         tenant_id: "TenantIdType",
     #       },
     #       atlassian_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       linkedin_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #       },
     #       included_oauth_2_provider_config: {
     #         client_id: "ClientIdType", # required
-    #         client_secret: "ClientSecretType", # required
+    #         client_secret: "DefaultClientSecretType",
+    #         client_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         client_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
     #         issuer: "IssuerUrlType",
     #         authorization_endpoint: "AuthorizationEndpointType",
     #         token_endpoint: "TokenEndpointType",
@@ -12746,6 +12845,8 @@ module Aws::BedrockAgentCoreControl
     # @example Response structure
     #
     #   resp.client_secret_arn.secret_arn #=> String
+    #   resp.client_secret_json_key #=> String
+    #   resp.client_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.name #=> String
     #   resp.credential_provider_vendor #=> String, one of "GoogleOauth2", "GithubOauth2", "SlackOauth2", "SalesforceOauth2", "MicrosoftOauth2", "CustomOauth2", "AtlassianOauth2", "LinkedinOauth2", "XOauth2", "OktaOauth2", "OneLoginOauth2", "PingOneOauth2", "FacebookOauth2", "YandexOauth2", "RedditOauth2", "ZoomOauth2", "TwitchOauth2", "SpotifyOauth2", "DropboxOauth2", "NotionOauth2", "HubspotOauth2", "CyberArkOauth2", "FusionAuthOauth2", "Auth0Oauth2", "CognitoOauth2"
     #   resp.credential_provider_arn #=> String
@@ -13096,13 +13197,33 @@ module Aws::BedrockAgentCoreControl
     #     provider_configuration_input: { # required
     #       coinbase_cdp_configuration: {
     #         api_key_id: "CoinbaseCdpApiKeyIdType", # required
-    #         api_key_secret: "CoinbaseCdpApiKeySecretType", # required
-    #         wallet_secret: "CoinbaseCdpWalletSecretType", # required
+    #         api_key_secret: "DefaultCoinbaseCdpApiKeySecretType",
+    #         api_key_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         api_key_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         wallet_secret: "DefaultCoinbaseCdpWalletSecretType",
+    #         wallet_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         wallet_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
     #       },
     #       stripe_privy_configuration: {
     #         app_id: "StripePrivyAppIdType", # required
-    #         app_secret: "StripePrivyAppSecretType", # required
-    #         authorization_private_key: "StripePrivyAuthorizationPrivateKeyType", # required
+    #         app_secret: "DefaultStripePrivyAppSecretType",
+    #         app_secret_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         app_secret_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
+    #         authorization_private_key: "DefaultStripePrivyAuthorizationPrivateKeyType",
+    #         authorization_private_key_source: "MANAGED", # accepts MANAGED, EXTERNAL
+    #         authorization_private_key_config: {
+    #           secret_id: "SecretIdType", # required
+    #           json_key: "SecretJsonKeyType", # required
+    #         },
     #         authorization_id: "StripePrivyAuthorizationIdType", # required
     #       },
     #     },
@@ -13115,10 +13236,18 @@ module Aws::BedrockAgentCoreControl
     #   resp.credential_provider_arn #=> String
     #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_id #=> String
     #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_json_key #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.api_key_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_json_key #=> String
+    #   resp.provider_configuration_output.coinbase_cdp_configuration.wallet_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.app_id #=> String
     #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_json_key #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.app_secret_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_arn.secret_arn #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_json_key #=> String
+    #   resp.provider_configuration_output.stripe_privy_configuration.authorization_private_key_source #=> String, one of "MANAGED", "EXTERNAL"
     #   resp.provider_configuration_output.stripe_privy_configuration.authorization_id #=> String
     #   resp.created_time #=> Time
     #   resp.last_updated_time #=> Time
@@ -13898,7 +14027,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.50.0'
+      context[:gem_version] = '1.52.0'
       Seahorse::Client::Request.new(handlers, context)
     end