aws-sdk-bedrockagentcorecontrol 1.58.0 → 1.60.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: ca34ece586181095742d188c0704ddb3d31fdf96b3cbe0a9e7277d0f40a38fff
-  data.tar.gz: f13064146028b92537e311e95bb7c660662538e923d433b1aa07c7360443297d
+  metadata.gz: 76c93b241282c73f955a3dd25c91269ebe615f0b96313d74cf53e4e271c4723b
+  data.tar.gz: 61c04223d203169715e243bdf91391220ef4f03f7eefbcf8d93364f7853b90ac
 SHA512:
-  metadata.gz: 15989fe784ee131e3d8a2b7b194b8a0341eef5f9caa36015a3dc67b7f488428341fcef35914744e27254d61506907f2ab9f6e889ddaf095667109f6d04a1b400
-  data.tar.gz: dd4f365318a363d4185f81e0bf8ba4c4fa383a9bd697263ecea9850cab75011b9658200dee9c7da756b9359470284c199dbac71dd337c5303e1cc6f9d52dc035
+  metadata.gz: 7e7f7a28f6ad18d1cf94dfd5611b918b6948ff35edb40b295040ede79aa8580947ce207b8312eb6005065de21d3677c31010c63b5931a3990162db60d8659aa2
+  data.tar.gz: 1d1a61a1a422ebae870d9b9f062a1f6a954250fbc55ad79ab1a844b0579aeefd8f179170b2763bf781c846ac7fcc293b44af7330b7f995912fab075dd667135d

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.60.0 (2026-07-28)
+------------------
+
+* Feature - AgentCore Identity now supports Private Key JWT client authentication for OAuth 2.0 credential providers. Agents can authenticate to identity provider token endpoints with a JWT client assertion signed by a customer-managed AWS KMS asymmetric key, eliminating the need for client secrets.
+
+1.59.0 (2026-07-23)
+------------------
+
+* Feature - Adds support for the Bring Your Own Storage(BYOS) feature in AgentCore Browser and Code Interpreter. Enables mounting S3Files and EFS File Systems via Access points.
+
 1.58.0 (2026-07-20)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.58.0
+1.60.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -921,6 +921,13 @@ module Aws::BedrockAgentCoreControl
     # @option params [Array<Types::Certificate>] :certificates
     #   A list of certificates to install in the browser.
     #
+    # @option params [Array<Types::ToolsFileSystemConfiguration>] :filesystem_configurations
+    #   The file system configurations to mount into the browser. Use these
+    #   configurations to mount your own Amazon Simple Storage Service (Amazon
+    #   S3) Files or Amazon Elastic File System (Amazon EFS) access points.
+    #   Your sessions can then access your data. If you don't specify this
+    #   field, no file systems are mounted.
+    #
     # @option params [String] :client_token
     #   A unique, case-sensitive identifier to ensure that the operation
     #   completes no more than one time. If this token matches a previous
@@ -988,6 +995,20 @@ module Aws::BedrockAgentCoreControl
     #         },
     #       },
     #     ],
+    #     filesystem_configurations: [
+    #       {
+    #         s3_files_configuration: {
+    #           access_point_arn: "S3FilesAccessPointArn", # required
+    #           mount_path: "MountPath", # required
+    #           file_system_arn: "S3FilesFileSystemArn", # required
+    #         },
+    #         efs_configuration: {
+    #           access_point_arn: "EfsAccessPointArn", # required
+    #           mount_path: "MountPath", # required
+    #           file_system_arn: "EfsFileSystemArn", # required
+    #         },
+    #       },
+    #     ],
     #     client_token: "ClientToken",
     #     tags: {
     #       "TagKey" => "TagValue",
@@ -1092,6 +1113,13 @@ module Aws::BedrockAgentCoreControl
     # @option params [Array<Types::Certificate>] :certificates
     #   A list of certificates to install in the code interpreter.
     #
+    # @option params [Array<Types::ToolsFileSystemConfiguration>] :filesystem_configurations
+    #   The file system configurations to mount into the code interpreter. Use
+    #   these configurations to mount your own Amazon Simple Storage Service
+    #   (Amazon S3) Files or Amazon Elastic File System (Amazon EFS) access
+    #   points. Your sessions can then access your data. If you don't specify
+    #   this field, no file systems are mounted.
+    #
     # @option params [String] :client_token
     #   A unique, case-sensitive identifier to ensure that the operation
     #   completes no more than one time. If this token matches a previous
@@ -1136,6 +1164,20 @@ module Aws::BedrockAgentCoreControl
     #         },
     #       },
     #     ],
+    #     filesystem_configurations: [
+    #       {
+    #         s3_files_configuration: {
+    #           access_point_arn: "S3FilesAccessPointArn", # required
+    #           mount_path: "MountPath", # required
+    #           file_system_arn: "S3FilesFileSystemArn", # required
+    #         },
+    #         efs_configuration: {
+    #           access_point_arn: "EfsAccessPointArn", # required
+    #           mount_path: "MountPath", # required
+    #           file_system_arn: "EfsFileSystemArn", # required
+    #         },
+    #       },
+    #     ],
     #     client_token: "ClientToken",
     #     tags: {
     #       "TagKey" => "TagValue",
@@ -3550,7 +3592,21 @@ module Aws::BedrockAgentCoreControl
     #             actor_token_scopes: ["ScopeType"],
     #           },
     #         },
-    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT
+    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT, PRIVATE_KEY_JWT
+    #         private_key_jwt_config: {
+    #           private_key_source: {
+    #             kms_key_source: {
+    #               kms_key_arn: "KmsKeyArn", # required
+    #             },
+    #           },
+    #           signing_algorithm: "RS256", # accepts RS256, PS256, ES256
+    #           additional_header_claims: {
+    #             "AdditionalClaimName" => "AdditionalClaimValue",
+    #           },
+    #           additional_payload_claims: {
+    #             "AdditionalClaimName" => "AdditionalClaimValue",
+    #           },
+    #         },
     #         private_endpoint: {
     #           self_managed_lattice_resource: {
     #             resource_configuration_identifier: "ResourceConfigurationIdentifier",
@@ -3686,6 +3742,11 @@ module Aws::BedrockAgentCoreControl
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.token_endpoint_auth_methods #=> Array
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.token_endpoint_auth_methods[0] #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_id #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.grant_type #=> String, one of "TOKEN_EXCHANGE", "JWT_AUTHORIZATION_GRANT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_content #=> String, one of "NONE", "M2M", "AWS_IAM_ID_TOKEN_JWT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes #=> Array
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes[0] #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_authentication_method #=> String, one of "CLIENT_SECRET_BASIC", "CLIENT_SECRET_POST", "AWS_IAM_ID_TOKEN_JWT", "PRIVATE_KEY_JWT"
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.self_managed_lattice_resource.resource_configuration_identifier #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.managed_vpc_resource.vpc_identifier #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.managed_vpc_resource.subnet_ids #=> Array
@@ -3708,11 +3769,12 @@ module Aws::BedrockAgentCoreControl
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.tags #=> Hash
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.tags["TagKey"] #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.routing_domain #=> String
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.grant_type #=> String, one of "TOKEN_EXCHANGE", "JWT_AUTHORIZATION_GRANT"
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_content #=> String, one of "NONE", "M2M", "AWS_IAM_ID_TOKEN_JWT"
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes #=> Array
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes[0] #=> String
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_authentication_method #=> String, one of "CLIENT_SECRET_BASIC", "CLIENT_SECRET_POST", "AWS_IAM_ID_TOKEN_JWT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.private_key_source.kms_key_source.kms_key_arn #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.signing_algorithm #=> String, one of "RS256", "PS256", "ES256"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_header_claims #=> Hash
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_header_claims["AdditionalClaimName"] #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_payload_claims #=> Hash
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_payload_claims["AdditionalClaimName"] #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.discovery_url #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.issuer #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.authorization_endpoint #=> String
@@ -6317,6 +6379,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetBrowserResponse#browser_signing #browser_signing} => Types::BrowserSigningConfigOutput
     #   * {Types::GetBrowserResponse#enterprise_policies #enterprise_policies} => Array&lt;Types::BrowserEnterprisePolicy&gt;
     #   * {Types::GetBrowserResponse#certificates #certificates} => Array&lt;Types::Certificate&gt;
+    #   * {Types::GetBrowserResponse#filesystem_configurations #filesystem_configurations} => Array&lt;Types::ToolsFileSystemConfiguration&gt;
     #   * {Types::GetBrowserResponse#status #status} => String
     #   * {Types::GetBrowserResponse#failure_reason #failure_reason} => String
     #   * {Types::GetBrowserResponse#created_at #created_at} => Time
@@ -6353,6 +6416,13 @@ module Aws::BedrockAgentCoreControl
     #   resp.enterprise_policies[0].type #=> String, one of "MANAGED", "RECOMMENDED"
     #   resp.certificates #=> Array
     #   resp.certificates[0].location.secrets_manager.secret_arn #=> String
+    #   resp.filesystem_configurations #=> Array
+    #   resp.filesystem_configurations[0].s3_files_configuration.access_point_arn #=> String
+    #   resp.filesystem_configurations[0].s3_files_configuration.mount_path #=> String
+    #   resp.filesystem_configurations[0].s3_files_configuration.file_system_arn #=> String
+    #   resp.filesystem_configurations[0].efs_configuration.access_point_arn #=> String
+    #   resp.filesystem_configurations[0].efs_configuration.mount_path #=> String
+    #   resp.filesystem_configurations[0].efs_configuration.file_system_arn #=> String
     #   resp.status #=> String, one of "CREATING", "CREATE_FAILED", "READY", "DELETING", "DELETE_FAILED", "DELETED"
     #   resp.failure_reason #=> String
     #   resp.created_at #=> Time
@@ -6428,6 +6498,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetCodeInterpreterResponse#network_configuration #network_configuration} => Types::CodeInterpreterNetworkConfiguration
     #   * {Types::GetCodeInterpreterResponse#status #status} => String
     #   * {Types::GetCodeInterpreterResponse#certificates #certificates} => Array&lt;Types::Certificate&gt;
+    #   * {Types::GetCodeInterpreterResponse#filesystem_configurations #filesystem_configurations} => Array&lt;Types::ToolsFileSystemConfiguration&gt;
     #   * {Types::GetCodeInterpreterResponse#failure_reason #failure_reason} => String
     #   * {Types::GetCodeInterpreterResponse#created_at #created_at} => Time
     #   * {Types::GetCodeInterpreterResponse#last_updated_at #last_updated_at} => Time
@@ -6454,6 +6525,13 @@ module Aws::BedrockAgentCoreControl
     #   resp.status #=> String, one of "CREATING", "CREATE_FAILED", "READY", "DELETING", "DELETE_FAILED", "DELETED"
     #   resp.certificates #=> Array
     #   resp.certificates[0].location.secrets_manager.secret_arn #=> String
+    #   resp.filesystem_configurations #=> Array
+    #   resp.filesystem_configurations[0].s3_files_configuration.access_point_arn #=> String
+    #   resp.filesystem_configurations[0].s3_files_configuration.mount_path #=> String
+    #   resp.filesystem_configurations[0].s3_files_configuration.file_system_arn #=> String
+    #   resp.filesystem_configurations[0].efs_configuration.access_point_arn #=> String
+    #   resp.filesystem_configurations[0].efs_configuration.mount_path #=> String
+    #   resp.filesystem_configurations[0].efs_configuration.file_system_arn #=> String
     #   resp.failure_reason #=> String
     #   resp.created_at #=> Time
     #   resp.last_updated_at #=> Time
@@ -7491,6 +7569,11 @@ module Aws::BedrockAgentCoreControl
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.token_endpoint_auth_methods #=> Array
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.token_endpoint_auth_methods[0] #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_id #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.grant_type #=> String, one of "TOKEN_EXCHANGE", "JWT_AUTHORIZATION_GRANT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_content #=> String, one of "NONE", "M2M", "AWS_IAM_ID_TOKEN_JWT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes #=> Array
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes[0] #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_authentication_method #=> String, one of "CLIENT_SECRET_BASIC", "CLIENT_SECRET_POST", "AWS_IAM_ID_TOKEN_JWT", "PRIVATE_KEY_JWT"
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.self_managed_lattice_resource.resource_configuration_identifier #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.managed_vpc_resource.vpc_identifier #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.managed_vpc_resource.subnet_ids #=> Array
@@ -7513,11 +7596,12 @@ module Aws::BedrockAgentCoreControl
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.tags #=> Hash
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.tags["TagKey"] #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.routing_domain #=> String
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.grant_type #=> String, one of "TOKEN_EXCHANGE", "JWT_AUTHORIZATION_GRANT"
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_content #=> String, one of "NONE", "M2M", "AWS_IAM_ID_TOKEN_JWT"
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes #=> Array
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes[0] #=> String
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_authentication_method #=> String, one of "CLIENT_SECRET_BASIC", "CLIENT_SECRET_POST", "AWS_IAM_ID_TOKEN_JWT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.private_key_source.kms_key_source.kms_key_arn #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.signing_algorithm #=> String, one of "RS256", "PS256", "ES256"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_header_claims #=> Hash
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_header_claims["AdditionalClaimName"] #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_payload_claims #=> Hash
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_payload_claims["AdditionalClaimName"] #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.discovery_url #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.issuer #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.authorization_endpoint #=> String
@@ -13664,7 +13748,21 @@ module Aws::BedrockAgentCoreControl
     #             actor_token_scopes: ["ScopeType"],
     #           },
     #         },
-    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT
+    #         client_authentication_method: "CLIENT_SECRET_BASIC", # accepts CLIENT_SECRET_BASIC, CLIENT_SECRET_POST, AWS_IAM_ID_TOKEN_JWT, PRIVATE_KEY_JWT
+    #         private_key_jwt_config: {
+    #           private_key_source: {
+    #             kms_key_source: {
+    #               kms_key_arn: "KmsKeyArn", # required
+    #             },
+    #           },
+    #           signing_algorithm: "RS256", # accepts RS256, PS256, ES256
+    #           additional_header_claims: {
+    #             "AdditionalClaimName" => "AdditionalClaimValue",
+    #           },
+    #           additional_payload_claims: {
+    #             "AdditionalClaimName" => "AdditionalClaimValue",
+    #           },
+    #         },
     #         private_endpoint: {
     #           self_managed_lattice_resource: {
     #             resource_configuration_identifier: "ResourceConfigurationIdentifier",
@@ -13798,6 +13896,11 @@ module Aws::BedrockAgentCoreControl
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.token_endpoint_auth_methods #=> Array
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.token_endpoint_auth_methods[0] #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_id #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.grant_type #=> String, one of "TOKEN_EXCHANGE", "JWT_AUTHORIZATION_GRANT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_content #=> String, one of "NONE", "M2M", "AWS_IAM_ID_TOKEN_JWT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes #=> Array
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes[0] #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_authentication_method #=> String, one of "CLIENT_SECRET_BASIC", "CLIENT_SECRET_POST", "AWS_IAM_ID_TOKEN_JWT", "PRIVATE_KEY_JWT"
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.self_managed_lattice_resource.resource_configuration_identifier #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.managed_vpc_resource.vpc_identifier #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint.managed_vpc_resource.subnet_ids #=> Array
@@ -13820,11 +13923,12 @@ module Aws::BedrockAgentCoreControl
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.tags #=> Hash
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.tags["TagKey"] #=> String
     #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_endpoint_overrides[0].private_endpoint.managed_vpc_resource.routing_domain #=> String
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.grant_type #=> String, one of "TOKEN_EXCHANGE", "JWT_AUTHORIZATION_GRANT"
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_content #=> String, one of "NONE", "M2M", "AWS_IAM_ID_TOKEN_JWT"
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes #=> Array
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.on_behalf_of_token_exchange_config.token_exchange_grant_type_config.actor_token_scopes[0] #=> String
-    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.client_authentication_method #=> String, one of "CLIENT_SECRET_BASIC", "CLIENT_SECRET_POST", "AWS_IAM_ID_TOKEN_JWT"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.private_key_source.kms_key_source.kms_key_arn #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.signing_algorithm #=> String, one of "RS256", "PS256", "ES256"
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_header_claims #=> Hash
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_header_claims["AdditionalClaimName"] #=> String
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_payload_claims #=> Hash
+    #   resp.oauth2_provider_config_output.custom_oauth_2_provider_config.private_key_jwt_config.additional_payload_claims["AdditionalClaimName"] #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.discovery_url #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.issuer #=> String
     #   resp.oauth2_provider_config_output.google_oauth_2_provider_config.oauth_discovery.authorization_server_metadata.authorization_endpoint #=> String
@@ -15021,7 +15125,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.58.0'
+      context[:gem_version] = '1.60.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb

@@ -21,6 +21,9 @@ module Aws::BedrockAgentCoreControl
     ActorTokenContentType = Shapes::StringShape.new(name: 'ActorTokenContentType')
     AddDatasetExamplesRequest = Shapes::StructureShape.new(name: 'AddDatasetExamplesRequest')
     AddDatasetExamplesResponse = Shapes::StructureShape.new(name: 'AddDatasetExamplesResponse')
+    AdditionalClaimName = Shapes::StringShape.new(name: 'AdditionalClaimName')
+    AdditionalClaimValue = Shapes::StringShape.new(name: 'AdditionalClaimValue')
+    AdditionalClaims = Shapes::MapShape.new(name: 'AdditionalClaims')
     AdditionalModelRequestFields = Shapes::DocumentShape.new(name: 'AdditionalModelRequestFields', document: true)
     AdvertisedScopeMappingType = Shapes::MapShape.new(name: 'AdvertisedScopeMappingType')
     AgentCardDefinition = Shapes::StructureShape.new(name: 'AgentCardDefinition')
@@ -350,6 +353,8 @@ module Aws::BedrockAgentCoreControl
     DraftStatus = Shapes::StringShape.new(name: 'DraftStatus')
     EfsAccessPointArn = Shapes::StringShape.new(name: 'EfsAccessPointArn')
     EfsAccessPointConfiguration = Shapes::StructureShape.new(name: 'EfsAccessPointConfiguration')
+    EfsConfiguration = Shapes::StructureShape.new(name: 'EfsConfiguration')
+    EfsFileSystemArn = Shapes::StringShape.new(name: 'EfsFileSystemArn')
     EnabledConnectors = Shapes::ListShape.new(name: 'EnabledConnectors')
     EncryptionFailure = Shapes::StructureShape.new(name: 'EncryptionFailure')
     EndpointIpAddressType = Shapes::StringShape.new(name: 'EndpointIpAddressType')
@@ -637,6 +642,7 @@ module Aws::BedrockAgentCoreControl
     KinesisResourceContentConfigurationsList = Shapes::ListShape.new(name: 'KinesisResourceContentConfigurationsList')
     KmsConfiguration = Shapes::StructureShape.new(name: 'KmsConfiguration')
     KmsKeyArn = Shapes::StringShape.new(name: 'KmsKeyArn')
+    KmsKeySourceType = Shapes::StructureShape.new(name: 'KmsKeySourceType')
     LambdaArn = Shapes::StringShape.new(name: 'LambdaArn')
     LambdaEvaluatorConfig = Shapes::StructureShape.new(name: 'LambdaEvaluatorConfig')
     LambdaEvaluatorConfigLambdaTimeoutInSecondsInteger = Shapes::IntegerShape.new(name: 'LambdaEvaluatorConfigLambdaTimeoutInSecondsInteger')
@@ -906,6 +912,8 @@ module Aws::BedrockAgentCoreControl
     PrivateEndpointOverride = Shapes::StructureShape.new(name: 'PrivateEndpointOverride')
     PrivateEndpointOverrideDomain = Shapes::StringShape.new(name: 'PrivateEndpointOverrideDomain')
     PrivateEndpointOverrides = Shapes::ListShape.new(name: 'PrivateEndpointOverrides')
+    PrivateKeyJwtConfig = Shapes::StructureShape.new(name: 'PrivateKeyJwtConfig')
+    PrivateKeySource = Shapes::UnionShape.new(name: 'PrivateKeySource')
     Prompt = Shapes::StringShape.new(name: 'Prompt')
     ProtocolConfiguration = Shapes::StructureShape.new(name: 'ProtocolConfiguration')
     ProviderPrefix = Shapes::StructureShape.new(name: 'ProviderPrefix')
@@ -970,6 +978,8 @@ module Aws::BedrockAgentCoreControl
     S3Configuration = Shapes::StructureShape.new(name: 'S3Configuration')
     S3FilesAccessPointArn = Shapes::StringShape.new(name: 'S3FilesAccessPointArn')
     S3FilesAccessPointConfiguration = Shapes::StructureShape.new(name: 'S3FilesAccessPointConfiguration')
+    S3FilesConfiguration = Shapes::StructureShape.new(name: 'S3FilesConfiguration')
+    S3FilesFileSystemArn = Shapes::StringShape.new(name: 'S3FilesFileSystemArn')
     S3Location = Shapes::StructureShape.new(name: 'S3Location')
     S3LocationBucketString = Shapes::StringShape.new(name: 'S3LocationBucketString')
     S3LocationPrefixString = Shapes::StringShape.new(name: 'S3LocationPrefixString')
@@ -1024,6 +1034,7 @@ module Aws::BedrockAgentCoreControl
     SessionStorageConfiguration = Shapes::StructureShape.new(name: 'SessionStorageConfiguration')
     SetTokenVaultCMKRequest = Shapes::StructureShape.new(name: 'SetTokenVaultCMKRequest')
     SetTokenVaultCMKResponse = Shapes::StructureShape.new(name: 'SetTokenVaultCMKResponse')
+    SigningAlgorithm = Shapes::StringShape.new(name: 'SigningAlgorithm')
     SkillDefinition = Shapes::StructureShape.new(name: 'SkillDefinition')
     SkillMdDefinition = Shapes::StructureShape.new(name: 'SkillMdDefinition')
     SlackOauth2ProviderConfigInput = Shapes::StructureShape.new(name: 'SlackOauth2ProviderConfigInput')
@@ -1113,6 +1124,8 @@ module Aws::BedrockAgentCoreControl
     ToolSchema = Shapes::UnionShape.new(name: 'ToolSchema')
     ToolSecretArn = Shapes::StringShape.new(name: 'ToolSecretArn')
     ToolsDefinition = Shapes::StructureShape.new(name: 'ToolsDefinition')
+    ToolsFileSystemConfiguration = Shapes::UnionShape.new(name: 'ToolsFileSystemConfiguration')
+    ToolsFileSystemConfigurations = Shapes::ListShape.new(name: 'ToolsFileSystemConfigurations')
     TopK = Shapes::IntegerShape.new(name: 'TopK')
     TopP = Shapes::FloatShape.new(name: 'TopP')
     TrafficSplitEntries = Shapes::ListShape.new(name: 'TrafficSplitEntries')
@@ -1264,6 +1277,9 @@ module Aws::BedrockAgentCoreControl
     AddDatasetExamplesResponse.add_member(:example_ids, Shapes::ShapeRef.new(shape: ExampleIdList, required: true, location_name: "exampleIds"))
     AddDatasetExamplesResponse.struct_class = Types::AddDatasetExamplesResponse
 
+    AdditionalClaims.key = Shapes::ShapeRef.new(shape: AdditionalClaimName)
+    AdditionalClaims.value = Shapes::ShapeRef.new(shape: AdditionalClaimValue)
+
     AdvertisedScopeMappingType.key = Shapes::ShapeRef.new(shape: AllowedScopeType)
     AdvertisedScopeMappingType.value = Shapes::ShapeRef.new(shape: AllowedScopeType)
 
@@ -1715,6 +1731,7 @@ module Aws::BedrockAgentCoreControl
     CreateBrowserRequest.add_member(:browser_signing, Shapes::ShapeRef.new(shape: BrowserSigningConfigInput, location_name: "browserSigning"))
     CreateBrowserRequest.add_member(:enterprise_policies, Shapes::ShapeRef.new(shape: BrowserEnterprisePolicies, location_name: "enterprisePolicies"))
     CreateBrowserRequest.add_member(:certificates, Shapes::ShapeRef.new(shape: Certificates, location_name: "certificates"))
+    CreateBrowserRequest.add_member(:filesystem_configurations, Shapes::ShapeRef.new(shape: ToolsFileSystemConfigurations, location_name: "filesystemConfigurations"))
     CreateBrowserRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateBrowserRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagsMap, location_name: "tags"))
     CreateBrowserRequest.struct_class = Types::CreateBrowserRequest
@@ -1730,6 +1747,7 @@ module Aws::BedrockAgentCoreControl
     CreateCodeInterpreterRequest.add_member(:execution_role_arn, Shapes::ShapeRef.new(shape: RoleArn, location_name: "executionRoleArn"))
     CreateCodeInterpreterRequest.add_member(:network_configuration, Shapes::ShapeRef.new(shape: CodeInterpreterNetworkConfiguration, required: true, location_name: "networkConfiguration"))
     CreateCodeInterpreterRequest.add_member(:certificates, Shapes::ShapeRef.new(shape: Certificates, location_name: "certificates"))
+    CreateCodeInterpreterRequest.add_member(:filesystem_configurations, Shapes::ShapeRef.new(shape: ToolsFileSystemConfigurations, location_name: "filesystemConfigurations"))
     CreateCodeInterpreterRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
     CreateCodeInterpreterRequest.add_member(:tags, Shapes::ShapeRef.new(shape: TagsMap, location_name: "tags"))
     CreateCodeInterpreterRequest.struct_class = Types::CreateCodeInterpreterRequest
@@ -2217,16 +2235,18 @@ module Aws::BedrockAgentCoreControl
     CustomOauth2ProviderConfigInput.add_member(:client_secret_source, Shapes::ShapeRef.new(shape: SecretSourceType, location_name: "clientSecretSource"))
     CustomOauth2ProviderConfigInput.add_member(:on_behalf_of_token_exchange_config, Shapes::ShapeRef.new(shape: OnBehalfOfTokenExchangeConfigType, location_name: "onBehalfOfTokenExchangeConfig"))
     CustomOauth2ProviderConfigInput.add_member(:client_authentication_method, Shapes::ShapeRef.new(shape: ClientAuthenticationMethodType, location_name: "clientAuthenticationMethod"))
+    CustomOauth2ProviderConfigInput.add_member(:private_key_jwt_config, Shapes::ShapeRef.new(shape: PrivateKeyJwtConfig, location_name: "privateKeyJwtConfig"))
     CustomOauth2ProviderConfigInput.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
     CustomOauth2ProviderConfigInput.add_member(:private_endpoint_overrides, Shapes::ShapeRef.new(shape: PrivateEndpointOverrides, location_name: "privateEndpointOverrides"))
     CustomOauth2ProviderConfigInput.struct_class = Types::CustomOauth2ProviderConfigInput
 
     CustomOauth2ProviderConfigOutput.add_member(:oauth_discovery, Shapes::ShapeRef.new(shape: Oauth2Discovery, required: true, location_name: "oauthDiscovery"))
     CustomOauth2ProviderConfigOutput.add_member(:client_id, Shapes::ShapeRef.new(shape: ClientIdType, location_name: "clientId"))
-    CustomOauth2ProviderConfigOutput.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
-    CustomOauth2ProviderConfigOutput.add_member(:private_endpoint_overrides, Shapes::ShapeRef.new(shape: PrivateEndpointOverrides, location_name: "privateEndpointOverrides"))
     CustomOauth2ProviderConfigOutput.add_member(:on_behalf_of_token_exchange_config, Shapes::ShapeRef.new(shape: OnBehalfOfTokenExchangeConfigType, location_name: "onBehalfOfTokenExchangeConfig"))
     CustomOauth2ProviderConfigOutput.add_member(:client_authentication_method, Shapes::ShapeRef.new(shape: ClientAuthenticationMethodType, location_name: "clientAuthenticationMethod"))
+    CustomOauth2ProviderConfigOutput.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    CustomOauth2ProviderConfigOutput.add_member(:private_endpoint_overrides, Shapes::ShapeRef.new(shape: PrivateEndpointOverrides, location_name: "privateEndpointOverrides"))
+    CustomOauth2ProviderConfigOutput.add_member(:private_key_jwt_config, Shapes::ShapeRef.new(shape: PrivateKeyJwtConfig, location_name: "privateKeyJwtConfig"))
     CustomOauth2ProviderConfigOutput.struct_class = Types::CustomOauth2ProviderConfigOutput
 
     CustomParameterMap.key = Shapes::ShapeRef.new(shape: String)
@@ -2532,6 +2552,11 @@ module Aws::BedrockAgentCoreControl
     EfsAccessPointConfiguration.add_member(:mount_path, Shapes::ShapeRef.new(shape: MountPath, required: true, location_name: "mountPath"))
     EfsAccessPointConfiguration.struct_class = Types::EfsAccessPointConfiguration
 
+    EfsConfiguration.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: EfsAccessPointArn, required: true, location_name: "accessPointArn"))
+    EfsConfiguration.add_member(:mount_path, Shapes::ShapeRef.new(shape: MountPath, required: true, location_name: "mountPath"))
+    EfsConfiguration.add_member(:file_system_arn, Shapes::ShapeRef.new(shape: EfsFileSystemArn, required: true, location_name: "fileSystemArn"))
+    EfsConfiguration.struct_class = Types::EfsConfiguration
+
     EnabledConnectors.member = Shapes::ShapeRef.new(shape: String)
 
     EncryptionFailure.add_member(:message, Shapes::ShapeRef.new(shape: String, required: true, location_name: "message"))
@@ -2831,6 +2856,7 @@ module Aws::BedrockAgentCoreControl
     GetBrowserResponse.add_member(:browser_signing, Shapes::ShapeRef.new(shape: BrowserSigningConfigOutput, location_name: "browserSigning"))
     GetBrowserResponse.add_member(:enterprise_policies, Shapes::ShapeRef.new(shape: BrowserEnterprisePolicies, location_name: "enterprisePolicies"))
     GetBrowserResponse.add_member(:certificates, Shapes::ShapeRef.new(shape: Certificates, location_name: "certificates"))
+    GetBrowserResponse.add_member(:filesystem_configurations, Shapes::ShapeRef.new(shape: ToolsFileSystemConfigurations, location_name: "filesystemConfigurations"))
     GetBrowserResponse.add_member(:status, Shapes::ShapeRef.new(shape: BrowserStatus, required: true, location_name: "status"))
     GetBrowserResponse.add_member(:failure_reason, Shapes::ShapeRef.new(shape: String, location_name: "failureReason"))
     GetBrowserResponse.add_member(:created_at, Shapes::ShapeRef.new(shape: DateTimestamp, required: true, location_name: "createdAt"))
@@ -2848,6 +2874,7 @@ module Aws::BedrockAgentCoreControl
     GetCodeInterpreterResponse.add_member(:network_configuration, Shapes::ShapeRef.new(shape: CodeInterpreterNetworkConfiguration, required: true, location_name: "networkConfiguration"))
     GetCodeInterpreterResponse.add_member(:status, Shapes::ShapeRef.new(shape: CodeInterpreterStatus, required: true, location_name: "status"))
     GetCodeInterpreterResponse.add_member(:certificates, Shapes::ShapeRef.new(shape: Certificates, location_name: "certificates"))
+    GetCodeInterpreterResponse.add_member(:filesystem_configurations, Shapes::ShapeRef.new(shape: ToolsFileSystemConfigurations, location_name: "filesystemConfigurations"))
     GetCodeInterpreterResponse.add_member(:failure_reason, Shapes::ShapeRef.new(shape: String, location_name: "failureReason"))
     GetCodeInterpreterResponse.add_member(:created_at, Shapes::ShapeRef.new(shape: DateTimestamp, required: true, location_name: "createdAt"))
     GetCodeInterpreterResponse.add_member(:last_updated_at, Shapes::ShapeRef.new(shape: DateTimestamp, required: true, location_name: "lastUpdatedAt"))
@@ -3676,6 +3703,9 @@ module Aws::BedrockAgentCoreControl
     KmsConfiguration.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
     KmsConfiguration.struct_class = Types::KmsConfiguration
 
+    KmsKeySourceType.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, required: true, location_name: "kmsKeyArn"))
+    KmsKeySourceType.struct_class = Types::KmsKeySourceType
+
     LambdaEvaluatorConfig.add_member(:lambda_arn, Shapes::ShapeRef.new(shape: LambdaArn, required: true, location_name: "lambdaArn"))
     LambdaEvaluatorConfig.add_member(:lambda_timeout_in_seconds, Shapes::ShapeRef.new(shape: LambdaEvaluatorConfigLambdaTimeoutInSecondsInteger, location_name: "lambdaTimeoutInSeconds"))
     LambdaEvaluatorConfig.struct_class = Types::LambdaEvaluatorConfig
@@ -4555,6 +4585,18 @@ module Aws::BedrockAgentCoreControl
 
     PrivateEndpointOverrides.member = Shapes::ShapeRef.new(shape: PrivateEndpointOverride)
 
+    PrivateKeyJwtConfig.add_member(:private_key_source, Shapes::ShapeRef.new(shape: PrivateKeySource, location_name: "privateKeySource"))
+    PrivateKeyJwtConfig.add_member(:signing_algorithm, Shapes::ShapeRef.new(shape: SigningAlgorithm, location_name: "signingAlgorithm"))
+    PrivateKeyJwtConfig.add_member(:additional_header_claims, Shapes::ShapeRef.new(shape: AdditionalClaims, location_name: "additionalHeaderClaims"))
+    PrivateKeyJwtConfig.add_member(:additional_payload_claims, Shapes::ShapeRef.new(shape: AdditionalClaims, location_name: "additionalPayloadClaims"))
+    PrivateKeyJwtConfig.struct_class = Types::PrivateKeyJwtConfig
+
+    PrivateKeySource.add_member(:kms_key_source, Shapes::ShapeRef.new(shape: KmsKeySourceType, location_name: "kmsKeySource"))
+    PrivateKeySource.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    PrivateKeySource.add_member_subclass(:kms_key_source, Types::PrivateKeySource::KmsKeySource)
+    PrivateKeySource.add_member_subclass(:unknown, Types::PrivateKeySource::Unknown)
+    PrivateKeySource.struct_class = Types::PrivateKeySource
+
     ProtocolConfiguration.add_member(:server_protocol, Shapes::ShapeRef.new(shape: ServerProtocol, required: true, location_name: "serverProtocol"))
     ProtocolConfiguration.struct_class = Types::ProtocolConfiguration
 
@@ -4704,6 +4746,11 @@ module Aws::BedrockAgentCoreControl
     S3FilesAccessPointConfiguration.add_member(:mount_path, Shapes::ShapeRef.new(shape: MountPath, required: true, location_name: "mountPath"))
     S3FilesAccessPointConfiguration.struct_class = Types::S3FilesAccessPointConfiguration
 
+    S3FilesConfiguration.add_member(:access_point_arn, Shapes::ShapeRef.new(shape: S3FilesAccessPointArn, required: true, location_name: "accessPointArn"))
+    S3FilesConfiguration.add_member(:mount_path, Shapes::ShapeRef.new(shape: MountPath, required: true, location_name: "mountPath"))
+    S3FilesConfiguration.add_member(:file_system_arn, Shapes::ShapeRef.new(shape: S3FilesFileSystemArn, required: true, location_name: "fileSystemArn"))
+    S3FilesConfiguration.struct_class = Types::S3FilesConfiguration
+
     S3Location.add_member(:bucket, Shapes::ShapeRef.new(shape: S3LocationBucketString, required: true, location_name: "bucket"))
     S3Location.add_member(:prefix, Shapes::ShapeRef.new(shape: S3LocationPrefixString, required: true, location_name: "prefix"))
     S3Location.add_member(:version_id, Shapes::ShapeRef.new(shape: S3LocationVersionIdString, location_name: "versionId"))
@@ -5058,6 +5105,16 @@ module Aws::BedrockAgentCoreControl
     ToolsDefinition.add_member(:inline_content, Shapes::ShapeRef.new(shape: InlineContent, location_name: "inlineContent"))
     ToolsDefinition.struct_class = Types::ToolsDefinition
 
+    ToolsFileSystemConfiguration.add_member(:s3_files_configuration, Shapes::ShapeRef.new(shape: S3FilesConfiguration, location_name: "s3FilesConfiguration"))
+    ToolsFileSystemConfiguration.add_member(:efs_configuration, Shapes::ShapeRef.new(shape: EfsConfiguration, location_name: "efsConfiguration"))
+    ToolsFileSystemConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    ToolsFileSystemConfiguration.add_member_subclass(:s3_files_configuration, Types::ToolsFileSystemConfiguration::S3FilesConfiguration)
+    ToolsFileSystemConfiguration.add_member_subclass(:efs_configuration, Types::ToolsFileSystemConfiguration::EfsConfiguration)
+    ToolsFileSystemConfiguration.add_member_subclass(:unknown, Types::ToolsFileSystemConfiguration::Unknown)
+    ToolsFileSystemConfiguration.struct_class = Types::ToolsFileSystemConfiguration
+
+    ToolsFileSystemConfigurations.member = Shapes::ShapeRef.new(shape: ToolsFileSystemConfiguration)
+
     TrafficSplitEntries.member = Shapes::ShapeRef.new(shape: TrafficSplitEntry)
 
     TrafficSplitEntry.add_member(:name, Shapes::ShapeRef.new(shape: TrafficSplitEntryNameString, required: true, location_name: "name"))

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -2106,6 +2106,14 @@ module Aws::BedrockAgentCoreControl
     #   A list of certificates to install in the browser.
     #   @return [Array<Types::Certificate>]
     #
+    # @!attribute [rw] filesystem_configurations
+    #   The file system configurations to mount into the browser. Use these
+    #   configurations to mount your own Amazon Simple Storage Service
+    #   (Amazon S3) Files or Amazon Elastic File System (Amazon EFS) access
+    #   points. Your sessions can then access your data. If you don't
+    #   specify this field, no file systems are mounted.
+    #   @return [Array<Types::ToolsFileSystemConfiguration>]
+    #
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier to ensure that the operation
     #   completes no more than one time. If this token matches a previous
@@ -2133,6 +2141,7 @@ module Aws::BedrockAgentCoreControl
       :browser_signing,
       :enterprise_policies,
       :certificates,
+      :filesystem_configurations,
       :client_token,
       :tags)
       SENSITIVE = [:description]
@@ -2190,6 +2199,14 @@ module Aws::BedrockAgentCoreControl
     #   A list of certificates to install in the code interpreter.
     #   @return [Array<Types::Certificate>]
     #
+    # @!attribute [rw] filesystem_configurations
+    #   The file system configurations to mount into the code interpreter.
+    #   Use these configurations to mount your own Amazon Simple Storage
+    #   Service (Amazon S3) Files or Amazon Elastic File System (Amazon EFS)
+    #   access points. Your sessions can then access your data. If you
+    #   don't specify this field, no file systems are mounted.
+    #   @return [Array<Types::ToolsFileSystemConfiguration>]
+    #
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier to ensure that the operation
     #   completes no more than one time. If this token matches a previous
@@ -2214,6 +2231,7 @@ module Aws::BedrockAgentCoreControl
       :execution_role_arn,
       :network_configuration,
       :certificates,
+      :filesystem_configurations,
       :client_token,
       :tags)
       SENSITIVE = [:description]
@@ -4851,6 +4869,13 @@ module Aws::BedrockAgentCoreControl
     #   token endpoint.
     #   @return [String]
     #
+    # @!attribute [rw] private_key_jwt_config
+    #   Configuration for private\_key\_jwt client authentication (RFC
+    #   7523). On Create: privateKeySource and signingAlgorithm are required
+    #   (enforced server-side). On Update: all fields are optional — only
+    #   provided fields are updated.
+    #   @return [Types::PrivateKeyJwtConfig]
+    #
     # @!attribute [rw] private_endpoint
     #   The default private endpoint for the custom OAuth2 provider,
     #   enabling secure connectivity through a VPC Lattice resource
@@ -4872,6 +4897,7 @@ module Aws::BedrockAgentCoreControl
       :client_secret_source,
       :on_behalf_of_token_exchange_config,
       :client_authentication_method,
+      :private_key_jwt_config,
       :private_endpoint,
       :private_endpoint_overrides)
       SENSITIVE = [:client_secret]
@@ -4888,6 +4914,15 @@ module Aws::BedrockAgentCoreControl
     #   The client ID for the custom OAuth2 provider.
     #   @return [String]
     #
+    # @!attribute [rw] on_behalf_of_token_exchange_config
+    #   The configuration for on-behalf-of token exchange.
+    #   @return [Types::OnBehalfOfTokenExchangeConfigType]
+    #
+    # @!attribute [rw] client_authentication_method
+    #   The client authentication method used when authenticating with the
+    #   token endpoint.
+    #   @return [String]
+    #
     # @!attribute [rw] private_endpoint
     #   The default private endpoint for the custom OAuth2 provider,
     #   enabling secure connectivity through a VPC Lattice resource
@@ -4899,24 +4934,23 @@ module Aws::BedrockAgentCoreControl
     #   configuration.
     #   @return [Array<Types::PrivateEndpointOverride>]
     #
-    # @!attribute [rw] on_behalf_of_token_exchange_config
-    #   The configuration for on-behalf-of token exchange.
-    #   @return [Types::OnBehalfOfTokenExchangeConfigType]
-    #
-    # @!attribute [rw] client_authentication_method
-    #   The client authentication method used when authenticating with the
-    #   token endpoint.
-    #   @return [String]
+    # @!attribute [rw] private_key_jwt_config
+    #   Configuration for private\_key\_jwt client authentication (RFC
+    #   7523). On Create: privateKeySource and signingAlgorithm are required
+    #   (enforced server-side). On Update: all fields are optional — only
+    #   provided fields are updated.
+    #   @return [Types::PrivateKeyJwtConfig]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CustomOauth2ProviderConfigOutput AWS API Documentation
     #
     class CustomOauth2ProviderConfigOutput < Struct.new(
       :oauth_discovery,
       :client_id,
+      :on_behalf_of_token_exchange_config,
+      :client_authentication_method,
       :private_endpoint,
       :private_endpoint_overrides,
-      :on_behalf_of_token_exchange_config,
-      :client_authentication_method)
+      :private_key_jwt_config)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -6285,6 +6319,35 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The configuration for mounting an Amazon Elastic File System (Amazon
+    # EFS) access point that you own into a session.
+    #
+    # @!attribute [rw] access_point_arn
+    #   The Amazon Resource Name (ARN) of the Amazon Elastic File System
+    #   (Amazon EFS) access point to mount.
+    #   @return [String]
+    #
+    # @!attribute [rw] mount_path
+    #   The absolute path within the session at which the access point is
+    #   mounted, for example `/mnt/efs`. Each mount path must be unique
+    #   across all file system configurations in the session.
+    #   @return [String]
+    #
+    # @!attribute [rw] file_system_arn
+    #   The Amazon Resource Name (ARN) of the Amazon Elastic File System
+    #   (Amazon EFS) file system that owns the access point.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/EfsConfiguration AWS API Documentation
+    #
+    class EfsConfiguration < Struct.new(
+      :access_point_arn,
+      :mount_path,
+      :file_system_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Exception thrown when encryption of a secret fails.
     #
     # @!attribute [rw] message
@@ -7637,6 +7700,11 @@ module Aws::BedrockAgentCoreControl
     #   The list of certificates configured for the browser.
     #   @return [Array<Types::Certificate>]
     #
+    # @!attribute [rw] filesystem_configurations
+    #   The file system configurations mounted into the browser. Each entry
+    #   describes an access point and its mount path.
+    #   @return [Array<Types::ToolsFileSystemConfiguration>]
+    #
     # @!attribute [rw] status
     #   The current status of the browser.
     #   @return [String]
@@ -7666,6 +7734,7 @@ module Aws::BedrockAgentCoreControl
       :browser_signing,
       :enterprise_policies,
       :certificates,
+      :filesystem_configurations,
       :status,
       :failure_reason,
       :created_at,
@@ -7719,6 +7788,11 @@ module Aws::BedrockAgentCoreControl
     #   The list of certificates configured for the code interpreter.
     #   @return [Array<Types::Certificate>]
     #
+    # @!attribute [rw] filesystem_configurations
+    #   The file system configurations mounted into the code interpreter.
+    #   Each entry describes an access point and its mount path.
+    #   @return [Array<Types::ToolsFileSystemConfiguration>]
+    #
     # @!attribute [rw] failure_reason
     #   The reason for failure if the code interpreter is in a failed state.
     #   @return [String]
@@ -7742,6 +7816,7 @@ module Aws::BedrockAgentCoreControl
       :network_configuration,
       :status,
       :certificates,
+      :filesystem_configurations,
       :failure_reason,
       :created_at,
       :last_updated_at)
@@ -11582,6 +11657,23 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Contains the KMS key configuration for a JWT client assertion.
+    #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the KMS key used to sign the JWT
+    #   client assertion. The key must be an asymmetric key with key usage
+    #   SIGN\_VERIFY and a key spec compatible with the configured signing
+    #   algorithm.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/KmsKeySourceType AWS API Documentation
+    #
+    class KmsKeySourceType < Struct.new(
+      :kms_key_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Configuration for a Lambda function used as a code-based evaluator.
     #
     # @!attribute [rw] lambda_arn
@@ -15701,6 +15793,67 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Configuration for private\_key\_jwt client authentication (RFC 7523).
+    # On Create: privateKeySource and signingAlgorithm are required
+    # (enforced server-side). On Update: all fields are optional — only
+    # provided fields are updated.
+    #
+    # @!attribute [rw] private_key_source
+    #   The private key source for the JWT client assertion.
+    #   @return [Types::PrivateKeySource]
+    #
+    # @!attribute [rw] signing_algorithm
+    #   The algorithm used to sign the JWT client assertion. Valid values
+    #   are `RS256`, `PS256`, and `ES256`.
+    #   @return [String]
+    #
+    # @!attribute [rw] additional_header_claims
+    #   A map of additional claims to include in the JWT client assertion
+    #   header. Standard header claims such as `alg` and `typ` cannot be
+    #   added.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] additional_payload_claims
+    #   A map of additional claims to include in the JWT client assertion
+    #   payload. Payload claims generated by the service, such as `iss`,
+    #   `sub`, `jti`, and `exp`, cannot be added.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/PrivateKeyJwtConfig AWS API Documentation
+    #
+    class PrivateKeyJwtConfig < Struct.new(
+      :private_key_source,
+      :signing_algorithm,
+      :additional_header_claims,
+      :additional_payload_claims)
+      SENSITIVE = [:additional_header_claims, :additional_payload_claims]
+      include Aws::Structure
+    end
+
+    # Contains the private key source configuration for a JWT client
+    # assertion.
+    #
+    # @note PrivateKeySource is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note PrivateKeySource is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of PrivateKeySource corresponding to the set member.
+    #
+    # @!attribute [rw] kms_key_source
+    #   The KMS key source for the JWT client assertion.
+    #   @return [Types::KmsKeySourceType]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/PrivateKeySource AWS API Documentation
+    #
+    class PrivateKeySource < Struct.new(
+      :kms_key_source,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class KmsKeySource < PrivateKeySource; end
+      class Unknown < PrivateKeySource; end
+    end
+
     # The protocol configuration for an agent runtime. This structure
     # defines how the agent runtime communicates with clients.
     #
@@ -16349,6 +16502,35 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The configuration for mounting an Amazon Simple Storage Service
+    # (Amazon S3) Files access point that you own into a session.
+    #
+    # @!attribute [rw] access_point_arn
+    #   The Amazon Resource Name (ARN) of the Amazon Simple Storage Service
+    #   (Amazon S3) Files access point to mount.
+    #   @return [String]
+    #
+    # @!attribute [rw] mount_path
+    #   The absolute path within the session at which the access point is
+    #   mounted, for example `/mnt/s3data`. Each mount path must be unique
+    #   across all file system configurations in the session.
+    #   @return [String]
+    #
+    # @!attribute [rw] file_system_arn
+    #   The Amazon Resource Name (ARN) of the Amazon Simple Storage Service
+    #   (Amazon S3) Files file system that owns the access point.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/S3FilesConfiguration AWS API Documentation
+    #
+    class S3FilesConfiguration < Struct.new(
+      :access_point_arn,
+      :mount_path,
+      :file_system_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon S3 location for storing data. This structure defines where
     # in Amazon S3 data is stored.
     #
@@ -17950,6 +18132,44 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Specifies a file system to mount into the session by providing exactly
+    # one of the following:
+    #
+    # * `s3FilesConfiguration` - Mounts an Amazon Simple Storage Service
+    #   (Amazon S3) Files access point.
+    #
+    # * `efsConfiguration` - Mounts an Amazon Elastic File System (Amazon
+    #   EFS) access point.
+    #
+    # @note ToolsFileSystemConfiguration is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note ToolsFileSystemConfiguration is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of ToolsFileSystemConfiguration corresponding to the set member.
+    #
+    # @!attribute [rw] s3_files_configuration
+    #   The configuration for mounting your own Amazon Simple Storage
+    #   Service (Amazon S3) Files access point into the session.
+    #   @return [Types::S3FilesConfiguration]
+    #
+    # @!attribute [rw] efs_configuration
+    #   The configuration for mounting your own Amazon Elastic File System
+    #   (Amazon EFS) access point into the session.
+    #   @return [Types::EfsConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ToolsFileSystemConfiguration AWS API Documentation
+    #
+    class ToolsFileSystemConfiguration < Struct.new(
+      :s3_files_configuration,
+      :efs_configuration,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class S3FilesConfiguration < ToolsFileSystemConfiguration; end
+      class EfsConfiguration < ToolsFileSystemConfiguration; end
+      class Unknown < ToolsFileSystemConfiguration; end
+    end
+
     # An entry in a traffic split configuration, defining a named variant
     # with a weight and configuration bundle reference.
     #

data/lib/aws-sdk-bedrockagentcorecontrol.rb

@@ -55,7 +55,7 @@ module Aws::BedrockAgentCoreControl
   autoload :EndpointProvider, 'aws-sdk-bedrockagentcorecontrol/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-bedrockagentcorecontrol/endpoints'
 
-  GEM_VERSION = '1.58.0'
+  GEM_VERSION = '1.60.0'
 
 end
 

data/sig/client.rbs

@@ -225,6 +225,9 @@ module Aws
                                 }
                               }
                             ],
+                            ?filesystem_configurations: Array[
+                              Params::tools_file_system_configuration
+                            ],
                             ?client_token: ::String,
                             ?tags: Hash[::String, ::String]
                           ) -> _CreateBrowserResponseSuccess
@@ -275,6 +278,9 @@ module Aws
                                          }
                                        }
                                      ],
+                                     ?filesystem_configurations: Array[
+                                       Params::tools_file_system_configuration
+                                     ],
                                      ?client_token: ::String,
                                      ?tags: Hash[::String, ::String]
                                    ) -> _CreateCodeInterpreterResponseSuccess
@@ -1220,6 +1226,7 @@ module Aws
         def browser_signing: () -> Types::BrowserSigningConfigOutput
         def enterprise_policies: () -> ::Array[Types::BrowserEnterprisePolicy]
         def certificates: () -> ::Array[Types::Certificate]
+        def filesystem_configurations: () -> ::Array[Types::ToolsFileSystemConfiguration]
         def status: () -> ("CREATING" | "CREATE_FAILED" | "READY" | "DELETING" | "DELETE_FAILED" | "DELETED")
         def failure_reason: () -> ::String
         def created_at: () -> ::Time
@@ -1260,6 +1267,7 @@ module Aws
         def network_configuration: () -> Types::CodeInterpreterNetworkConfiguration
         def status: () -> ("CREATING" | "CREATE_FAILED" | "READY" | "DELETING" | "DELETE_FAILED" | "DELETED")
         def certificates: () -> ::Array[Types::Certificate]
+        def filesystem_configurations: () -> ::Array[Types::ToolsFileSystemConfiguration]
         def failure_reason: () -> ::String
         def created_at: () -> ::Time
         def last_updated_at: () -> ::Time

data/sig/params.rbs

@@ -122,6 +122,19 @@ module Aws
       }?
     }
 
+      type tools_file_system_configuration = {
+      s3_files_configuration: {
+        access_point_arn: ::String,
+        mount_path: ::String,
+        file_system_arn: ::String
+      }?,
+      efs_configuration: {
+        access_point_arn: ::String,
+        mount_path: ::String,
+        file_system_arn: ::String
+      }?
+    }
+
       type rating_scale = {
       numerical: Array[
         {
@@ -858,6 +871,17 @@ module Aws
       }?
     }
 
+      type private_key_jwt_config = {
+      private_key_source: {
+        kms_key_source: {
+          kms_key_arn: ::String
+        }?
+      }?,
+      signing_algorithm: ("RS256" | "PS256" | "ES256")?,
+      additional_header_claims: Hash[::String, ::String]?,
+      additional_payload_claims: Hash[::String, ::String]?
+    }
+
       type custom_oauth_2_provider_config_input = {
       oauth_discovery: Params::oauth_2_discovery,
       client_id: ::String?,
@@ -874,7 +898,8 @@ module Aws
           actor_token_scopes: Array[::String]?
         }?
       }?,
-      client_authentication_method: ("CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT")?,
+      client_authentication_method: ("CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT" | "PRIVATE_KEY_JWT")?,
+      private_key_jwt_config: Params::private_key_jwt_config?,
       private_endpoint: Params::private_endpoint?,
       private_endpoint_overrides: Array[
         Params::private_endpoint_override

data/sig/types.rbs

@@ -608,6 +608,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor browser_signing: Types::BrowserSigningConfigInput
       attr_accessor enterprise_policies: ::Array[Types::BrowserEnterprisePolicy]
       attr_accessor certificates: ::Array[Types::Certificate]
+      attr_accessor filesystem_configurations: ::Array[Types::ToolsFileSystemConfiguration]
       attr_accessor client_token: ::String
       attr_accessor tags: ::Hash[::String, ::String]
       SENSITIVE: [:description]
@@ -627,6 +628,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor execution_role_arn: ::String
       attr_accessor network_configuration: Types::CodeInterpreterNetworkConfiguration
       attr_accessor certificates: ::Array[Types::Certificate]
+      attr_accessor filesystem_configurations: ::Array[Types::ToolsFileSystemConfiguration]
       attr_accessor client_token: ::String
       attr_accessor tags: ::Hash[::String, ::String]
       SENSITIVE: [:description]
@@ -1253,7 +1255,8 @@ module Aws::BedrockAgentCoreControl
       attr_accessor client_secret_config: Types::SecretReference
       attr_accessor client_secret_source: ("MANAGED" | "EXTERNAL")
       attr_accessor on_behalf_of_token_exchange_config: Types::OnBehalfOfTokenExchangeConfigType
-      attr_accessor client_authentication_method: ("CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT")
+      attr_accessor client_authentication_method: ("CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT" | "PRIVATE_KEY_JWT")
+      attr_accessor private_key_jwt_config: Types::PrivateKeyJwtConfig
       attr_accessor private_endpoint: Types::PrivateEndpoint
       attr_accessor private_endpoint_overrides: ::Array[Types::PrivateEndpointOverride]
       SENSITIVE: [:client_secret]
@@ -1262,10 +1265,11 @@ module Aws::BedrockAgentCoreControl
     class CustomOauth2ProviderConfigOutput
       attr_accessor oauth_discovery: Types::Oauth2Discovery
       attr_accessor client_id: ::String
+      attr_accessor on_behalf_of_token_exchange_config: Types::OnBehalfOfTokenExchangeConfigType
+      attr_accessor client_authentication_method: ("CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT" | "PRIVATE_KEY_JWT")
       attr_accessor private_endpoint: Types::PrivateEndpoint
       attr_accessor private_endpoint_overrides: ::Array[Types::PrivateEndpointOverride]
-      attr_accessor on_behalf_of_token_exchange_config: Types::OnBehalfOfTokenExchangeConfigType
-      attr_accessor client_authentication_method: ("CLIENT_SECRET_BASIC" | "CLIENT_SECRET_POST" | "AWS_IAM_ID_TOKEN_JWT")
+      attr_accessor private_key_jwt_config: Types::PrivateKeyJwtConfig
       SENSITIVE: []
     end
 
@@ -1696,6 +1700,13 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class EfsConfiguration
+      attr_accessor access_point_arn: ::String
+      attr_accessor mount_path: ::String
+      attr_accessor file_system_arn: ::String
+      SENSITIVE: []
+    end
+
     class EncryptionFailure
       attr_accessor message: ::String
       SENSITIVE: []
@@ -2072,6 +2083,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor browser_signing: Types::BrowserSigningConfigOutput
       attr_accessor enterprise_policies: ::Array[Types::BrowserEnterprisePolicy]
       attr_accessor certificates: ::Array[Types::Certificate]
+      attr_accessor filesystem_configurations: ::Array[Types::ToolsFileSystemConfiguration]
       attr_accessor status: ("CREATING" | "CREATE_FAILED" | "READY" | "DELETING" | "DELETE_FAILED" | "DELETED")
       attr_accessor failure_reason: ::String
       attr_accessor created_at: ::Time
@@ -2093,6 +2105,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor network_configuration: Types::CodeInterpreterNetworkConfiguration
       attr_accessor status: ("CREATING" | "CREATE_FAILED" | "READY" | "DELETING" | "DELETE_FAILED" | "DELETED")
       attr_accessor certificates: ::Array[Types::Certificate]
+      attr_accessor filesystem_configurations: ::Array[Types::ToolsFileSystemConfiguration]
       attr_accessor failure_reason: ::String
       attr_accessor created_at: ::Time
       attr_accessor last_updated_at: ::Time
@@ -3176,6 +3189,11 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class KmsKeySourceType
+      attr_accessor kms_key_arn: ::String
+      SENSITIVE: []
+    end
+
     class LambdaEvaluatorConfig
       attr_accessor lambda_arn: ::String
       attr_accessor lambda_timeout_in_seconds: ::Integer
@@ -4359,6 +4377,25 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class PrivateKeyJwtConfig
+      attr_accessor private_key_source: Types::PrivateKeySource
+      attr_accessor signing_algorithm: ("RS256" | "PS256" | "ES256")
+      attr_accessor additional_header_claims: ::Hash[::String, ::String]
+      attr_accessor additional_payload_claims: ::Hash[::String, ::String]
+      SENSITIVE: []
+    end
+
+    class PrivateKeySource
+      attr_accessor kms_key_source: Types::KmsKeySourceType
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class KmsKeySource < PrivateKeySource
+      end
+      class Unknown < PrivateKeySource
+      end
+    end
+
     class ProtocolConfiguration
       attr_accessor server_protocol: ("MCP" | "HTTP" | "A2A" | "AGUI")
       SENSITIVE: []
@@ -4565,6 +4602,13 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class S3FilesConfiguration
+      attr_accessor access_point_arn: ::String
+      attr_accessor mount_path: ::String
+      attr_accessor file_system_arn: ::String
+      SENSITIVE: []
+    end
+
     class S3Location
       attr_accessor bucket: ::String
       attr_accessor prefix: ::String
@@ -5035,6 +5079,20 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class ToolsFileSystemConfiguration
+      attr_accessor s3_files_configuration: Types::S3FilesConfiguration
+      attr_accessor efs_configuration: Types::EfsConfiguration
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class S3FilesConfiguration < ToolsFileSystemConfiguration
+      end
+      class EfsConfiguration < ToolsFileSystemConfiguration
+      end
+      class Unknown < ToolsFileSystemConfiguration
+      end
+    end
+
     class TrafficSplitEntry
       attr_accessor name: ::String
       attr_accessor weight: ::Integer

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-bedrockagentcorecontrol
 version: !ruby/object:Gem::Version
-  version: 1.58.0
+  version: 1.60.0
 platform: ruby
 authors:
 - Amazon Web Services