aws-sdk-bedrockagentcorecontrol 1.62.0 → 1.64.0

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -303,6 +303,32 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Summary information about an agent runtime version associated with a
+    # capacity provider. This is returned by
+    # `ListAgentRuntimeVersionsByCapacityProvider`.
+    #
+    # @!attribute [rw] agent_runtime_arn
+    #   The Amazon Resource Name (ARN) of the agent runtime.
+    #   @return [String]
+    #
+    # @!attribute [rw] agent_runtime_version
+    #   The version of the agent runtime.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the agent runtime version.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/AgentRuntimeVersionSummary AWS API Documentation
+    #
+    class AgentRuntimeVersionSummary < Struct.new(
+      :agent_runtime_arn,
+      :agent_runtime_version,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The agent skills descriptor for a registry record. Contains an
     # optional skill markdown definition in human-readable format and an
     # optional structured skill definition.
@@ -695,6 +721,84 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a
+    #   previous request, the service ignores the request, but doesn't
+    #   return an error. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @!attribute [rw] rate_limits
+    #   Complete set of rate limits for this gateway. Replaces all existing
+    #   limits atomically.
+    #   @return [Array<Types::BatchPutLimitEntry>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/BatchPutGatewayRateLimitsRequest AWS API Documentation
+    #
+    class BatchPutGatewayRateLimitsRequest < Struct.new(
+      :gateway_identifier,
+      :client_token,
+      :rate_limits)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] rate_limits
+    #   The resulting set of rate limits after the batch operation.
+    #   @return [Array<Types::GatewayRateLimitDetail>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/BatchPutGatewayRateLimitsResponse AWS API Documentation
+    #
+    class BatchPutGatewayRateLimitsResponse < Struct.new(
+      :rate_limits)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A limit definition within a BatchPut request (rateLimitId used for
+    # upsert matching)
+    #
+    # @!attribute [rw] rate_limit_id
+    #   Optional — if provided, used for upsert matching against existing
+    #   limits.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Optional human-readable description for this limit.
+    #   @return [String]
+    #
+    # @!attribute [rw] dimension_keys
+    #   Ordered list of dimension key names defining the scope of a limit
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] entries
+    #   List of rule entries within a limit
+    #   @return [Array<Types::LimitEntry>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/BatchPutLimitEntry AWS API Documentation
+    #
+    class BatchPutLimitEntry < Struct.new(
+      :rate_limit_id,
+      :description,
+      :dimension_keys,
+      :entries)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The configuration for using Amazon Bedrock models in evaluator
     # assessments, including model selection and inference parameters.
     #
@@ -911,6 +1015,128 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Configuration for customer-managed compute capacity for the AgentCore
+    # Runtime. A capacity provider runs the AgentCore Runtime on the
+    # Instances compute type, using Amazon Web Services managed compute in
+    # your account.
+    #
+    # @!attribute [rw] capacity_provider_arn
+    #   The Amazon Resource Name (ARN) of the capacity provider to use for
+    #   the AgentCore Runtime.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CapacityProviderConfiguration AWS API Documentation
+    #
+    class CapacityProviderConfiguration < Struct.new(
+      :capacity_provider_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A summary of a capacity provider, as returned by
+    # `ListCapacityProviders`. Each summary includes the capacity provider
+    # identifier, Amazon Resource Name (ARN), name, status, and last-updated
+    # timestamp.
+    #
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] capacity_provider_arn
+    #   The Amazon Resource Name (ARN) of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the capacity provider. For possible values,
+    #   see `CapacityProviderStatus`.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The timestamp when the capacity provider was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CapacityProviderSummary AWS API Documentation
+    #
+    class CapacityProviderSummary < Struct.new(
+      :capacity_provider_id,
+      :capacity_provider_arn,
+      :name,
+      :status,
+      :last_updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Configuration for a capacity provider volume mounted into the
+    # AgentCore Runtime. This references a persistent volume by its logical
+    # name, as defined in the capacity provider's list of volumes.
+    #
+    # @!attribute [rw] volume_name
+    #   The logical name of the capacity provider volume to mount. This name
+    #   must match a volume that is defined in the capacity provider's list
+    #   of volumes.
+    #   @return [String]
+    #
+    # @!attribute [rw] mount_path
+    #   The mount path for the capacity provider volume inside the AgentCore
+    #   Runtime. The path must be under `/mnt` with exactly one subdirectory
+    #   level (for example, `/mnt/data`).
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CapacityProviderVolumeConfiguration AWS API Documentation
+    #
+    class CapacityProviderVolumeConfiguration < Struct.new(
+      :volume_name,
+      :mount_path)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The Capacity Reservation targeting option for the instances.
+    #
+    # @!attribute [rw] capacity_reservation_preference
+    #   The Capacity Reservation preference for the instances.
+    #   @return [String]
+    #
+    # @!attribute [rw] capacity_reservation_target
+    #   The target Capacity Reservation or Capacity Reservation group for
+    #   the instances.
+    #   @return [Types::CapacityReservationTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CapacityReservationSpecification AWS API Documentation
+    #
+    class CapacityReservationSpecification < Struct.new(
+      :capacity_reservation_preference,
+      :capacity_reservation_target)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Information about the target Capacity Reservation or Capacity
+    # Reservation group for the instances.
+    #
+    # @!attribute [rw] capacity_reservation_id
+    #   The ID of the Capacity Reservation in which to run the instances.
+    #   @return [String]
+    #
+    # @!attribute [rw] capacity_reservation_resource_group_arn
+    #   The Amazon Resource Name (ARN) of the Capacity Reservation resource
+    #   group in which to run the instances.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CapacityReservationTarget AWS API Documentation
+    #
+    class CapacityReservationTarget < Struct.new(
+      :capacity_reservation_id,
+      :capacity_reservation_resource_group_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The definition of a categorical rating scale option that provides a
     # named category with its description for evaluation scoring.
     #
@@ -1352,6 +1578,31 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The compute configuration for a capacity provider. This structure
+    # defines the type and settings of the compute resources used to launch
+    # instances.
+    #
+    # @note ComputeConfiguration is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note ComputeConfiguration is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of ComputeConfiguration corresponding to the set member.
+    #
+    # @!attribute [rw] ec2_configuration
+    #   The Amazon EC2 compute configuration for the capacity provider.
+    #   @return [Types::Ec2Configuration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ComputeConfiguration AWS API Documentation
+    #
+    class ComputeConfiguration < Struct.new(
+      :ec2_configuration,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class Ec2Configuration < ComputeConfiguration; end
+      class Unknown < ComputeConfiguration; end
+    end
+
     # Exception thrown when a resource is modified concurrently by multiple
     # requests.
     #
@@ -1863,6 +2114,13 @@ module Aws::BedrockAgentCoreControl
     #   AgentCore Runtime sessions.
     #   @return [Array<Types::FilesystemConfiguration>]
     #
+    # @!attribute [rw] capacity_provider_configuration
+    #   The capacity provider configuration for the AgentCore Runtime. Use a
+    #   capacity provider to run the AgentCore Runtime on the Instances
+    #   compute type, which provisions Amazon Web Services managed compute
+    #   in your account.
+    #   @return [Types::CapacityProviderConfiguration]
+    #
     # @!attribute [rw] tags
     #   A map of tag keys and values to assign to the agent runtime. Tags
     #   enable you to categorize your resources in different ways, for
@@ -1884,6 +2142,7 @@ module Aws::BedrockAgentCoreControl
       :lifecycle_configuration,
       :environment_variables,
       :filesystem_configurations,
+      :capacity_provider_configuration,
       :tags)
       SENSITIVE = [:description, :environment_variables]
       include Aws::Structure
@@ -2175,6 +2434,92 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] name
+    #   The name of the capacity provider. The name must be unique within
+    #   your account.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   An optional description of the capacity provider. If you don't
+    #   specify a description, the service creates the capacity provider
+    #   without one.
+    #   @return [String]
+    #
+    # @!attribute [rw] permissions_configuration
+    #   The permissions configuration for the capacity provider. This
+    #   specifies the IAM role that AgentCore uses to manage the Amazon EC2
+    #   instances on your behalf.
+    #   @return [Types::PermissionsConfiguration]
+    #
+    # @!attribute [rw] client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a
+    #   previous request, the service ignores the request, but doesn't
+    #   return an error. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @!attribute [rw] tags
+    #   A map of tag keys and values to associate with the capacity
+    #   provider. If you don't specify tags, the capacity provider is
+    #   created with no tags.
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] compute_configuration
+    #   The compute configuration for the capacity provider. This defines
+    #   the Amazon EC2 compute resources used to launch instances: the
+    #   operating system, allowed instance types, networking, and storage.
+    #   @return [Types::ComputeConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateCapacityProviderInput AWS API Documentation
+    #
+    class CreateCapacityProviderInput < Struct.new(
+      :name,
+      :description,
+      :permissions_configuration,
+      :client_token,
+      :tags,
+      :compute_configuration)
+      SENSITIVE = [:description]
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the created capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] capacity_provider_arn
+    #   The Amazon Resource Name (ARN) of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the capacity provider. For possible values,
+    #   see `CapacityProviderStatus`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateCapacityProviderOutput AWS API Documentation
+    #
+    class CreateCapacityProviderOutput < Struct.new(
+      :capacity_provider_id,
+      :capacity_provider_arn,
+      :name,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   The name of the code interpreter. The name must be unique within
     #   your account.
@@ -2609,6 +2954,107 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway to create the rate limit for.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a
+    #   previous request, the service ignores the request, but doesn't
+    #   return an error. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @!attribute [rw] rate_limit_id
+    #   Optional customer-defined limit ID. If not provided, system
+    #   generates one.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Optional human-readable description for this limit.
+    #   @return [String]
+    #
+    # @!attribute [rw] dimension_keys
+    #   Ordered list of dimension names defining the scope of this limit.
+    #   Unique per gateway — no two limits can share the same dimensionKeys.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] entries
+    #   Rule entries mapping dimension values to rate configurations.
+    #   @return [Array<Types::LimitEntry>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayRateLimitRequest AWS API Documentation
+    #
+    class CreateGatewayRateLimitRequest < Struct.new(
+      :gateway_identifier,
+      :client_token,
+      :rate_limit_id,
+      :description,
+      :dimension_keys,
+      :entries)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Shared fields for GatewayRateLimit responses
+    #
+    # @!attribute [rw] rate_limit_id
+    #   Limit identifier. Optional on Create (system-generates if not
+    #   provided by customer). Always present in responses.
+    #   @return [String]
+    #
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Optional human-readable description for this limit.
+    #   @return [String]
+    #
+    # @!attribute [rw] dimension_keys
+    #   Ordered list of dimension key names defining the scope of a limit
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] entries
+    #   List of rule entries within a limit
+    #   @return [Array<Types::LimitEntry>]
+    #
+    # @!attribute [rw] status
+    #   Status of a gateway limit
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp when the rate limit was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp when the rate limit was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayRateLimitResponse AWS API Documentation
+    #
+    class CreateGatewayRateLimitResponse < Struct.new(
+      :rate_limit_id,
+      :gateway_identifier,
+      :description,
+      :dimension_keys,
+      :entries,
+      :status,
+      :created_at,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] name
     #   The name of the gateway. The name must be unique within your
     #   account.
@@ -3631,6 +4077,17 @@ module Aws::BedrockAgentCoreControl
     #   the payment provider.
     #   @return [Array<Types::CredentialsProviderConfiguration>]
     #
+    # @!attribute [rw] provision_mode
+    #   The provision mode for creating the payment connector. If you don't
+    #   specify a value, the default is `MANUAL`.
+    #
+    #   * `MANUAL` - You provide the credential provider configurations
+    #     directly.
+    #
+    #   * `QUICK_CREATE` - The service orchestrates OAuth consent and
+    #     provisions the credential provider for you.
+    #   @return [String]
+    #
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier to ensure that the API request
     #   completes no more than one time. If you don't specify this field, a
@@ -3655,6 +4112,7 @@ module Aws::BedrockAgentCoreControl
       :description,
       :type,
       :credential_provider_configurations,
+      :provision_mode,
       :client_token)
       SENSITIVE = []
       include Aws::Structure
@@ -3691,6 +4149,12 @@ module Aws::BedrockAgentCoreControl
     #   `UPDATE_FAILED`, and `DELETE_FAILED`.
     #   @return [String]
     #
+    # @!attribute [rw] authorization_url
+    #   The URL that the user must open to complete OAuth consent. This
+    #   field is only present when the payment connector status is
+    #   `PENDING_AUTHENTICATION`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreatePaymentConnectorResponse AWS API Documentation
     #
     class CreatePaymentConnectorResponse < Struct.new(
@@ -3700,7 +4164,8 @@ module Aws::BedrockAgentCoreControl
       :type,
       :credential_provider_configurations,
       :created_at,
-      :status)
+      :status,
+      :authorization_url)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3808,6 +4273,13 @@ module Aws::BedrockAgentCoreControl
     #   A map of tag keys and values to assign to the payment manager.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the customer managed KMS key to
+    #   use for encrypting sensitive payment manager data at rest. If you
+    #   don't specify a key, the data is encrypted with an Amazon Web
+    #   Services owned key.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreatePaymentManagerRequest AWS API Documentation
     #
     class CreatePaymentManagerRequest < Struct.new(
@@ -3817,7 +4289,8 @@ module Aws::BedrockAgentCoreControl
       :authorizer_configuration,
       :role_arn,
       :client_token,
-      :tags)
+      :tags,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -3866,6 +4339,11 @@ module Aws::BedrockAgentCoreControl
     #   The tags associated with the created payment manager.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the KMS key used to encrypt
+    #   sensitive payment manager data at rest, if configured.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreatePaymentManagerResponse AWS API Documentation
     #
     class CreatePaymentManagerResponse < Struct.new(
@@ -3878,7 +4356,8 @@ module Aws::BedrockAgentCoreControl
       :workload_identity_details,
       :created_at,
       :status,
-      :tags)
+      :tags,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5218,6 +5697,12 @@ module Aws::BedrockAgentCoreControl
     #   The unique identifier of the AgentCore Runtime to delete.
     #   @return [String]
     #
+    # @!attribute [rw] agent_runtime_version
+    #   The version of the AgentCore Runtime to delete. When you provide
+    #   this value, only that version is deleted. When you omit it, the
+    #   entire AgentCore Runtime and all of its versions are deleted.
+    #   @return [String]
+    #
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier to ensure that the operation
     #   completes no more than one time. If this token matches a previous
@@ -5232,6 +5717,7 @@ module Aws::BedrockAgentCoreControl
     #
     class DeleteAgentRuntimeRequest < Struct.new(
       :agent_runtime_id,
+      :agent_runtime_version,
       :client_token)
       SENSITIVE = []
       include Aws::Structure
@@ -5245,11 +5731,17 @@ module Aws::BedrockAgentCoreControl
     #   The unique identifier of the AgentCore Runtime.
     #   @return [String]
     #
+    # @!attribute [rw] agent_runtime_version
+    #   The version of the AgentCore Runtime that was deleted. This value is
+    #   present only when you delete a single version.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteAgentRuntimeResponse AWS API Documentation
     #
     class DeleteAgentRuntimeResponse < Struct.new(
       :status,
-      :agent_runtime_id)
+      :agent_runtime_id,
+      :agent_runtime_version)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -5367,6 +5859,53 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the capacity provider to delete.
+    #   @return [String]
+    #
+    # @!attribute [rw] client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a
+    #   previous request, the service ignores the request, but doesn't
+    #   return an error. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteCapacityProviderInput AWS API Documentation
+    #
+    class DeleteCapacityProviderInput < Struct.new(
+      :capacity_provider_id,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the deleted capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the capacity provider. For possible values,
+    #   see `CapacityProviderStatus`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteCapacityProviderOutput AWS API Documentation
+    #
+    class DeleteCapacityProviderOutput < Struct.new(
+      :capacity_provider_id,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] code_interpreter_id
     #   The unique identifier of the code interpreter to delete.
     #   @return [String]
@@ -5589,6 +6128,41 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] rate_limit_id
+    #   The unique identifier of the rate limit to delete.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteGatewayRateLimitRequest AWS API Documentation
+    #
+    class DeleteGatewayRateLimitRequest < Struct.new(
+      :gateway_identifier,
+      :rate_limit_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] rate_limit_id
+    #   Limit identifier. Optional on Create (system-generates if not
+    #   provided by customer). Always present in responses.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   Status of a gateway limit
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteGatewayRateLimitResponse AWS API Documentation
+    #
+    class DeleteGatewayRateLimitResponse < Struct.new(
+      :rate_limit_id,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] gateway_identifier
     #   The identifier of the gateway to delete.
     #   @return [String]
@@ -6296,6 +6870,109 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The configuration for an Amazon EBS-backed persistent volume. The
+    # service creates persistent volumes when a session first launches, and
+    # the volumes survive instance termination. The volumes persist until
+    # you delete the session.
+    #
+    # @!attribute [rw] name
+    #   The logical name of the volume. Use this name to reference the
+    #   volume when you mount it into an agent runtime.
+    #   @return [String]
+    #
+    # @!attribute [rw] size_gi_b
+    #   The size of the volume, in GiB.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] volume_type
+    #   The Amazon EBS volume type. If you do not specify a type, the
+    #   default is `gp3`.
+    #   @return [String]
+    #
+    # @!attribute [rw] iops
+    #   The number of IOPS to provision. Valid only for `gp3`, `io1`, and
+    #   `io2` volumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] throughput
+    #   The throughput, in MiB/s. Valid only for `gp3` volumes.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] encrypted
+    #   Specifies whether to encrypt the volume. If `true`, the service
+    #   encrypts the volume with the KMS key that you specify in `kmsKeyId`,
+    #   or the default KMS key for Amazon EBS if you do not specify one. The
+    #   default is `true`.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] kms_key_id
+    #   The identifier of the KMS key to use for encryption.
+    #   @return [String]
+    #
+    # @!attribute [rw] snapshot_id
+    #   An optional Amazon EBS snapshot ID. If provided, the volume is
+    #   initialized from this snapshot the first time it is created. On
+    #   subsequent restarts, the existing volume is used and the snapshot is
+    #   ignored.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/EbsVolumeConfiguration AWS API Documentation
+    #
+    class EbsVolumeConfiguration < Struct.new(
+      :name,
+      :size_gi_b,
+      :volume_type,
+      :iops,
+      :throughput,
+      :encrypted,
+      :kms_key_id,
+      :snapshot_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for Amazon EC2-based compute, including the launch
+    # template source, networking, storage volumes, and instance lifecycle
+    # settings.
+    #
+    # @!attribute [rw] launch_template_source
+    #   The source of the launch template configuration that defines how
+    #   instances are launched.
+    #   @return [Types::LaunchTemplateSource]
+    #
+    # @!attribute [rw] vpc_configuration
+    #   The VPC configuration for launching instances, including subnets and
+    #   security groups.
+    #   @return [Types::VpcConfiguration]
+    #
+    # @!attribute [rw] volumes
+    #   The named persistent Amazon EBS volumes for the capacity provider. A
+    #   capacity provider can define up to five volumes.
+    #   @return [Array<Types::VolumeConfiguration>]
+    #
+    # @!attribute [rw] lifecycle_configuration
+    #   The lifecycle configuration for instances in the capacity provider.
+    #   @return [Types::InstanceLifecycleConfiguration]
+    #
+    # @!attribute [rw] root_volume
+    #   The configuration for the instance root volume. Specify the amount
+    #   of free space to guarantee and, optionally, the Amazon EBS
+    #   performance and encryption settings. The device name and
+    #   delete-on-termination behavior are not configurable.
+    #   @return [Types::RootVolumeConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/Ec2Configuration AWS API Documentation
+    #
+    class Ec2Configuration < Struct.new(
+      :launch_template_source,
+      :vpc_configuration,
+      :volumes,
+      :lifecycle_configuration,
+      :root_volume)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Configuration for an Amazon EFS access point filesystem mounted into
     # the AgentCore Runtime. EFS access points provide shared file storage
     # accessible from your AgentCore Runtime sessions.
@@ -6361,6 +7038,107 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # A block device mapping for an instance store (ephemeral) volume.
+    #
+    # @!attribute [rw] device_name
+    #   The device name, for example `/dev/sdh` or `xvdh`.
+    #   @return [String]
+    #
+    # @!attribute [rw] virtual_name
+    #   The virtual device name (`ephemeralN`). Instance store volumes are
+    #   numbered starting from 0. The number of available instance store
+    #   volumes depends on the instance type. After you connect to the
+    #   instance, you must mount the volume.
+    #   @return [String]
+    #
+    # @!attribute [rw] ebs
+    #   The shared Amazon EBS performance and encryption properties for a
+    #   volume. These properties are common across the different volume
+    #   configurations for a capacity provider.
+    #   @return [Types::EphemeralEBSVolumeConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/EphemeralBlockDeviceMapping AWS API Documentation
+    #
+    class EphemeralBlockDeviceMapping < Struct.new(
+      :device_name,
+      :virtual_name,
+      :ebs)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The shared Amazon EBS performance and encryption properties for a
+    # volume. These properties are common across the different volume
+    # configurations for a capacity provider.
+    #
+    # @!attribute [rw] volume_type
+    #   The Amazon EBS volume type. If you do not specify a type, the
+    #   default is `gp3`.
+    #   @return [String]
+    #
+    # @!attribute [rw] iops
+    #   The number of IOPS to provision. For `gp3`, `io1`, and `io2`
+    #   volumes, this is the number of IOPS provisioned for the volume. For
+    #   `gp2` volumes, this sets the baseline IOPS performance. It also
+    #   controls the rate at which the volume accumulates I/O credits for
+    #   bursting. Supported values: `gp3`, 3,000–80,000; `io1`, 100–64,000;
+    #   `io2`, 100–256,000.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] throughput
+    #   The throughput to provision, in MiB/s. Valid only for `gp3` volumes.
+    #   Valid range: 125–2,000 MiB/s.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] encrypted
+    #   Specifies whether to encrypt the volume. Encrypted volumes can be
+    #   attached only to instances that support Amazon EBS encryption. If
+    #   you create a volume from a snapshot, you cannot specify an
+    #   encryption value.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] kms_key_id
+    #   The identifier (key ID, key alias, key ARN, or alias ARN) of the
+    #   customer managed KMS key to use for Amazon EBS encryption.
+    #   @return [String]
+    #
+    # @!attribute [rw] snapshot_id
+    #   The ID of the snapshot.
+    #   @return [String]
+    #
+    # @!attribute [rw] volume_size
+    #   The size of the volume, in GiB. You must specify either a snapshot
+    #   ID or a volume size. Supported sizes: `gp2`, 1–16,384; `gp3`,
+    #   1–65,536; `io1`, 4–16,384; `io2`, 4–65,536.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] volume_initialization_rate
+    #   The rate at which the volume is initialized after creation, in
+    #   MiB/s. Supported only for volumes created from snapshots. Valid
+    #   range: 100–300 MiB/s.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] ebs_card_index
+    #   The index of the Amazon EBS card. Applies to instances with multiple
+    #   Amazon EBS cards.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/EphemeralEBSVolumeConfiguration AWS API Documentation
+    #
+    class EphemeralEBSVolumeConfiguration < Struct.new(
+      :volume_type,
+      :iops,
+      :throughput,
+      :encrypted,
+      :kms_key_id,
+      :snapshot_id,
+      :volume_size,
+      :volume_initialization_rate,
+      :ebs_card_index)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains configurations to override the default consolidation step for
     # the episodic memory strategy.
     #
@@ -6879,12 +7657,19 @@ module Aws::BedrockAgentCoreControl
     #   AgentCore Runtime.
     #   @return [Types::EfsAccessPointConfiguration]
     #
+    # @!attribute [rw] capacity_provider_volume
+    #   Configuration for a capacity provider volume to mount into the
+    #   AgentCore Runtime. This mounts a persistent volume that is defined
+    #   on the capacity provider, referenced by its logical name.
+    #   @return [Types::CapacityProviderVolumeConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/FilesystemConfiguration AWS API Documentation
     #
     class FilesystemConfiguration < Struct.new(
       :session_storage,
       :s3_files_access_point,
       :efs_access_point,
+      :capacity_provider_volume,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -6893,6 +7678,7 @@ module Aws::BedrockAgentCoreControl
       class SessionStorage < FilesystemConfiguration; end
       class S3FilesAccessPoint < FilesystemConfiguration; end
       class EfsAccessPoint < FilesystemConfiguration; end
+      class CapacityProviderVolume < FilesystemConfiguration; end
       class Unknown < FilesystemConfiguration; end
     end
 
@@ -7098,10 +7884,60 @@ module Aws::BedrockAgentCoreControl
       :unknown)
       SENSITIVE = []
       include Aws::Structure
-      include Aws::Structure::Union
-
-      class Mcp < GatewayProtocolConfiguration; end
-      class Unknown < GatewayProtocolConfiguration; end
+      include Aws::Structure::Union
+
+      class Mcp < GatewayProtocolConfiguration; end
+      class Unknown < GatewayProtocolConfiguration; end
+    end
+
+    # Shared fields for GatewayRateLimit responses
+    #
+    # @!attribute [rw] rate_limit_id
+    #   Limit identifier. Optional on Create (system-generates if not
+    #   provided by customer). Always present in responses.
+    #   @return [String]
+    #
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Optional human-readable description for this limit.
+    #   @return [String]
+    #
+    # @!attribute [rw] dimension_keys
+    #   Ordered list of dimension key names defining the scope of a limit
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] entries
+    #   List of rule entries within a limit
+    #   @return [Array<Types::LimitEntry>]
+    #
+    # @!attribute [rw] status
+    #   Status of a gateway limit
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp when the rate limit was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp when the rate limit was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GatewayRateLimitDetail AWS API Documentation
+    #
+    class GatewayRateLimitDetail < Struct.new(
+      :rate_limit_id,
+      :gateway_identifier,
+      :description,
+      :dimension_keys,
+      :entries,
+      :status,
+      :created_at,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
     end
 
     # Detailed information about a gateway rule.
@@ -7494,6 +8330,10 @@ module Aws::BedrockAgentCoreControl
     #   The filesystem configurations mounted into the AgentCore Runtime.
     #   @return [Array<Types::FilesystemConfiguration>]
     #
+    # @!attribute [rw] capacity_provider_configuration
+    #   The capacity provider configuration for the AgentCore Runtime.
+    #   @return [Types::CapacityProviderConfiguration]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetAgentRuntimeResponse AWS API Documentation
     #
     class GetAgentRuntimeResponse < Struct.new(
@@ -7516,7 +8356,8 @@ module Aws::BedrockAgentCoreControl
       :authorizer_configuration,
       :request_header_configuration,
       :metadata_configuration,
-      :filesystem_configurations)
+      :filesystem_configurations,
+      :capacity_provider_configuration)
       SENSITIVE = [:description, :environment_variables]
       include Aws::Structure
     end
@@ -7749,6 +8590,84 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the capacity provider.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetCapacityProviderInput AWS API Documentation
+    #
+    class GetCapacityProviderInput < Struct.new(
+      :capacity_provider_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] capacity_provider_arn
+    #   The Amazon Resource Name (ARN) of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the capacity provider. For possible values,
+    #   see `CapacityProviderStatus`.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   The description of the capacity provider, if one was provided.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_code
+    #   A reason code for a capacity provider that is not in the `READY`
+    #   state. Use this code for programmatic error handling.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_reason
+    #   A human-readable message that describes why the capacity provider is
+    #   not in the `READY` state. Because these messages can change, use
+    #   `statusCode` for programmatic error handling.
+    #   @return [String]
+    #
+    # @!attribute [rw] permissions_configuration
+    #   The permissions configuration for the capacity provider.
+    #   @return [Types::PermissionsConfiguration]
+    #
+    # @!attribute [rw] compute_configuration
+    #   The compute configuration for the capacity provider.
+    #   @return [Types::ComputeConfiguration]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp when the capacity provider was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The timestamp when the capacity provider was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetCapacityProviderOutput AWS API Documentation
+    #
+    class GetCapacityProviderOutput < Struct.new(
+      :capacity_provider_id,
+      :capacity_provider_arn,
+      :name,
+      :status,
+      :description,
+      :status_code,
+      :status_reason,
+      :permissions_configuration,
+      :compute_configuration,
+      :created_at,
+      :last_updated_at)
+      SENSITIVE = [:description]
+      include Aws::Structure
+    end
+
     # @!attribute [rw] code_interpreter_id
     #   The unique identifier of the code interpreter to retrieve.
     #   @return [String]
@@ -8190,6 +9109,73 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] rate_limit_id
+    #   The unique identifier of the rate limit to retrieve.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetGatewayRateLimitRequest AWS API Documentation
+    #
+    class GetGatewayRateLimitRequest < Struct.new(
+      :gateway_identifier,
+      :rate_limit_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Shared fields for GatewayRateLimit responses
+    #
+    # @!attribute [rw] rate_limit_id
+    #   Limit identifier. Optional on Create (system-generates if not
+    #   provided by customer). Always present in responses.
+    #   @return [String]
+    #
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Optional human-readable description for this limit.
+    #   @return [String]
+    #
+    # @!attribute [rw] dimension_keys
+    #   Ordered list of dimension key names defining the scope of a limit
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] entries
+    #   List of rule entries within a limit
+    #   @return [Array<Types::LimitEntry>]
+    #
+    # @!attribute [rw] status
+    #   Status of a gateway limit
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp when the rate limit was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp when the rate limit was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetGatewayRateLimitResponse AWS API Documentation
+    #
+    class GetGatewayRateLimitResponse < Struct.new(
+      :rate_limit_id,
+      :gateway_identifier,
+      :description,
+      :dimension_keys,
+      :entries,
+      :status,
+      :created_at,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] gateway_identifier
     #   The identifier of the gateway to retrieve.
     #   @return [String]
@@ -8853,6 +9839,12 @@ module Aws::BedrockAgentCoreControl
     #   `UPDATE_FAILED`, and `DELETE_FAILED`.
     #   @return [String]
     #
+    # @!attribute [rw] authorization_url
+    #   The URL that the user must open to complete OAuth consent. This
+    #   field is only present when the payment connector status is
+    #   `PENDING_AUTHENTICATION`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetPaymentConnectorResponse AWS API Documentation
     #
     class GetPaymentConnectorResponse < Struct.new(
@@ -8863,7 +9855,8 @@ module Aws::BedrockAgentCoreControl
       :credential_provider_configurations,
       :created_at,
       :last_updated_at,
-      :status)
+      :status,
+      :authorization_url)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -8992,6 +9985,11 @@ module Aws::BedrockAgentCoreControl
     #   The tags associated with the payment manager.
     #   @return [Hash<String,String>]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the KMS key used to encrypt
+    #   sensitive payment manager data at rest, if configured.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetPaymentManagerResponse AWS API Documentation
     #
     class GetPaymentManagerResponse < Struct.new(
@@ -9006,7 +10004,8 @@ module Aws::BedrockAgentCoreControl
       :created_at,
       :last_updated_at,
       :status,
-      :tags)
+      :tags,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -11531,6 +12530,46 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The configuration that manages the lifecycle of instances in a
+    # capacity provider, including idle timeout and maximum lifetime.
+    #
+    # @!attribute [rw] idle_instance_timeout
+    #   The number of seconds an instance can remain idle before it is
+    #   stopped. An instance is considered idle when all of its agents are
+    #   idle. The default is 900 seconds (15 minutes).
+    #   @return [Integer]
+    #
+    # @!attribute [rw] max_lifetime
+    #   The maximum lifetime of an instance, in seconds. When an instance
+    #   reaches this limit, the service terminates it regardless of
+    #   activity. The default is 28800 seconds (8 hours). The maximum is
+    #   1209600 seconds (14 days).
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/InstanceLifecycleConfiguration AWS API Documentation
+    #
+    class InstanceLifecycleConfiguration < Struct.new(
+      :idle_instance_timeout,
+      :max_lifetime)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The requirements for Amazon EC2 instance types in a capacity provider.
+    #
+    # @!attribute [rw] allowed_instance_types
+    #   The list of allowed instance types. You can specify up to 30
+    #   instance types.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/InstanceRequirements AWS API Documentation
+    #
+    class InstanceRequirements < Struct.new(
+      :allowed_instance_types)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The interceptor configuration.
     #
     # @note InterceptorConfiguration is a union - when making an API calls you must set exactly one of the members.
@@ -11776,6 +12815,108 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The parameters for launching Amazon EC2 instances in a capacity
+    # provider.
+    #
+    # @!attribute [rw] operating_system
+    #   The operating system and CPU architecture for the instances.
+    #   @return [String]
+    #
+    # @!attribute [rw] instance_requirements
+    #   The requirements that determine which instance types can be
+    #   launched.
+    #   @return [Types::InstanceRequirements]
+    #
+    # @!attribute [rw] ephemeral_volumes
+    #   The block device mappings for instance store (ephemeral) volumes.
+    #   You can specify up to five mappings.
+    #   @return [Array<Types::EphemeralBlockDeviceMapping>]
+    #
+    # @!attribute [rw] monitoring
+    #   The monitoring level for the instances.
+    #   @return [String]
+    #
+    # @!attribute [rw] license_specifications
+    #   The license configurations to associate with the instances. You can
+    #   specify up to five configurations.
+    #   @return [Array<Types::LicenseSpecification>]
+    #
+    # @!attribute [rw] capacity_reservation_specification
+    #   The Capacity Reservation targeting option for the instances.
+    #   @return [Types::CapacityReservationSpecification]
+    #
+    # @!attribute [rw] ssh_key_name
+    #   The name of the SSH key pair to configure on the instances for SSH
+    #   connectivity.
+    #   @return [String]
+    #
+    # @!attribute [rw] instance_profile_arn
+    #   The Amazon Resource Name (ARN) of the IAM instance profile to
+    #   associate with launched instances. If provided, this overrides the
+    #   default instance profile.
+    #   @return [String]
+    #
+    # @!attribute [rw] propagated_tags
+    #   The tags to propagate to all Amazon EC2 resources (instances,
+    #   volumes, and network interfaces) that the capacity provider creates.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/LaunchParameters AWS API Documentation
+    #
+    class LaunchParameters < Struct.new(
+      :operating_system,
+      :instance_requirements,
+      :ephemeral_volumes,
+      :monitoring,
+      :license_specifications,
+      :capacity_reservation_specification,
+      :ssh_key_name,
+      :instance_profile_arn,
+      :propagated_tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The source of the launch template configuration for a capacity
+    # provider. The `launchParameters` member specifies the operating
+    # system, instance requirements, and other settings used to launch
+    # instances.
+    #
+    # @note LaunchTemplateSource is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note LaunchTemplateSource is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of LaunchTemplateSource corresponding to the set member.
+    #
+    # @!attribute [rw] launch_parameters
+    #   The parameters that AgentCore uses to create the launch template.
+    #   @return [Types::LaunchParameters]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/LaunchTemplateSource AWS API Documentation
+    #
+    class LaunchTemplateSource < Struct.new(
+      :launch_parameters,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class LaunchParameters < LaunchTemplateSource; end
+      class Unknown < LaunchTemplateSource; end
+    end
+
+    # A license configuration to associate with the instances.
+    #
+    # @!attribute [rw] license_configuration_arn
+    #   The Amazon Resource Name (ARN) of the license configuration.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/LicenseSpecification AWS API Documentation
+    #
+    class LicenseSpecification < Struct.new(
+      :license_configuration_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # LifecycleConfiguration lets you manage the lifecycle of runtime
     # sessions and resources in AgentCore Runtime. This configuration helps
     # optimize resource utilization by automatically cleaning up idle
@@ -11803,6 +12944,40 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # A single rule entry within a limit, mapping dimension values to rate
+    # configurations
+    #
+    # @!attribute [rw] dimensions
+    #   Map of dimension name to dimension value, matching the parent
+    #   limit's dimensionKeys. Keys must exactly match the dimensionKeys.
+    #   Values may be "*" as a wildcard. "*" may only appear at trailing
+    #   positions (based on dimensionKeys ordering).
+    #   @return [Hash<String,String>]
+    #
+    # @!attribute [rw] requests
+    #   Request rate limits (RPS or RPM). Limited to 1 entry for now.
+    #   @return [Array<Types::RateConfig>]
+    #
+    # @!attribute [rw] tokens
+    #   Token rate limits (TPM). Limited to 1 entry for now. — P1
+    #   @return [Array<Types::RateConfig>]
+    #
+    # @!attribute [rw] connections
+    #   Connection rate limits (per second only). Limited to 1 entry for
+    #   now. — P2
+    #   @return [Array<Types::RateConfig>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/LimitEntry AWS API Documentation
+    #
+    class LimitEntry < Struct.new(
+      :dimensions,
+      :requests,
+      :tokens,
+      :connections)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Configuration settings for connecting to LinkedIn services using
     # OAuth2 authentication. This includes the client credentials required
     # to authenticate with LinkedIn's OAuth2 authorization server.
@@ -11902,6 +13077,55 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return in the response. If the
+    #   total number of results is greater than this value, use the token
+    #   returned in the response in the `nextToken` field when making
+    #   another request to return the next batch of results.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   If the total number of results is greater than the `maxResults`
+    #   value provided in the request, enter the token returned in the
+    #   `nextToken` field in the response in this field to return the next
+    #   batch of results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListAgentRuntimeVersionsByCapacityProviderInput AWS API Documentation
+    #
+    class ListAgentRuntimeVersionsByCapacityProviderInput < Struct.new(
+      :capacity_provider_id,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] agent_runtimes
+    #   The list of agent runtime versions that are associated with the
+    #   capacity provider.
+    #   @return [Array<Types::AgentRuntimeVersionSummary>]
+    #
+    # @!attribute [rw] next_token
+    #   If the total number of results is greater than the `maxResults`
+    #   value provided in the request, use this token when making another
+    #   request in the `nextToken` field to return the next batch of
+    #   results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListAgentRuntimeVersionsByCapacityProviderOutput AWS API Documentation
+    #
+    class ListAgentRuntimeVersionsByCapacityProviderOutput < Struct.new(
+      :agent_runtimes,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] agent_runtime_id
     #   The unique identifier of the AgentCore Runtime to list versions for.
     #   @return [String]
@@ -12074,18 +13298,61 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # @!attribute [rw] browser_summaries
-    #   The list of browser summaries.
-    #   @return [Array<Types::BrowserSummary>]
+    # @!attribute [rw] browser_summaries
+    #   The list of browser summaries.
+    #   @return [Array<Types::BrowserSummary>]
+    #
+    # @!attribute [rw] next_token
+    #   A token to retrieve the next page of results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListBrowsersResponse AWS API Documentation
+    #
+    class ListBrowsersResponse < Struct.new(
+      :browser_summaries,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return in the response. If the
+    #   total number of results is greater than this value, use the token
+    #   returned in the response in the `nextToken` field when making
+    #   another request to return the next batch of results.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   If the total number of results is greater than the `maxResults`
+    #   value provided in the request, enter the token returned in the
+    #   `nextToken` field in the response in this field to return the next
+    #   batch of results.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListCapacityProvidersInput AWS API Documentation
+    #
+    class ListCapacityProvidersInput < Struct.new(
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] capacity_providers
+    #   The list of capacity provider summaries.
+    #   @return [Array<Types::CapacityProviderSummary>]
     #
     # @!attribute [rw] next_token
-    #   A token to retrieve the next page of results.
+    #   If the total number of results is greater than the `maxResults`
+    #   value provided in the request, use this token when making another
+    #   request in the `nextToken` field to return the next batch of
+    #   results.
     #   @return [String]
     #
-    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListBrowsersResponse AWS API Documentation
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListCapacityProvidersOutput AWS API Documentation
     #
-    class ListBrowsersResponse < Struct.new(
-      :browser_summaries,
+    class ListCapacityProvidersOutput < Struct.new(
+      :capacity_providers,
       :next_token)
       SENSITIVE = []
       include Aws::Structure
@@ -12405,6 +13672,50 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] max_results
+    #   The maximum number of results to return in the response. If the
+    #   total number of results is greater than this value, use the token
+    #   returned in the response in the `nextToken` field when making
+    #   another request to return the next batch of results.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use to retrieve the next page of results. Use the value
+    #   returned in a previous `ListGatewayRateLimits` response.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListGatewayRateLimitsRequest AWS API Documentation
+    #
+    class ListGatewayRateLimitsRequest < Struct.new(
+      :gateway_identifier,
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] rate_limits
+    #   The list of rate limits for the gateway.
+    #   @return [Array<Types::GatewayRateLimitDetail>]
+    #
+    # @!attribute [rw] next_token
+    #   The token for the next page of results. If this value is absent,
+    #   there are no more results to retrieve.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListGatewayRateLimitsResponse AWS API Documentation
+    #
+    class ListGatewayRateLimitsResponse < Struct.new(
+      :rate_limits,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] gateway_identifier
     #   The identifier of the gateway to list rules for.
     #   @return [String]
@@ -15207,6 +16518,11 @@ module Aws::BedrockAgentCoreControl
     #   The timestamp when the payment manager was last updated.
     #   @return [Time]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the KMS key used to encrypt
+    #   sensitive payment manager data at rest, if configured.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/PaymentManagerSummary AWS API Documentation
     #
     class PaymentManagerSummary < Struct.new(
@@ -15218,7 +16534,8 @@ module Aws::BedrockAgentCoreControl
       :role_arn,
       :status,
       :created_at,
-      :last_updated_at)
+      :last_updated_at,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -15279,6 +16596,26 @@ module Aws::BedrockAgentCoreControl
       class Unknown < PaymentProviderConfigurationOutput; end
     end
 
+    # The permissions configuration for a capacity provider. This specifies
+    # the IAM role that AgentCore uses to manage the Amazon EC2 instances
+    # for the capacity provider on your behalf.
+    #
+    # @!attribute [rw] capacity_provider_operator_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that AgentCore
+    #   assumes to manage the capacity provider, including launching,
+    #   tagging, and terminating instances and their network interfaces. We
+    #   recommend scoping this role to the minimum permissions that your
+    #   workloads require.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/PermissionsConfiguration AWS API Documentation
+    #
+    class PermissionsConfiguration < Struct.new(
+      :capacity_provider_operator_role_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Represents a complete policy resource within the AgentCore Policy
     # system. Policies are ARN-able resources that contain Cedar policy
     # statements and associated metadata for controlling agent behavior and
@@ -16015,6 +17352,28 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Rate configuration for a metric (requests or tokens)
+    #
+    # @!attribute [rw] rate
+    #   The rate value for the limit. For request limits, this is the number
+    #   of requests allowed per period. For token limits, this is the number
+    #   of tokens allowed per period. For connection limits, this is the
+    #   number of concurrent connections allowed.
+    #   @return [Float]
+    #
+    # @!attribute [rw] period
+    #   Time period for rate limiting
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RateConfig AWS API Documentation
+    #
+    class RateConfig < Struct.new(
+      :rate,
+      :period)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The rating scale that defines how evaluators should score agent
     # performance, supporting both numerical and categorical scales.
     #
@@ -16462,6 +17821,75 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The operation failed because of a conflicting request. Retry the
+    # request.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RetryableConflictException AWS API Documentation
+    #
+    class RetryableConflictException < Struct.new(
+      :message)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for the root volume of a capacity provider instance.
+    # Specify the amount of free space to guarantee on the root volume. The
+    # device name and delete-on-termination settings are fixed and cannot be
+    # changed.
+    #
+    # @!attribute [rw] volume_type
+    #   The Amazon EBS volume type. If you do not specify a type, the
+    #   default is `gp3`.
+    #   @return [String]
+    #
+    # @!attribute [rw] iops
+    #   The number of IOPS to provision. For `gp3`, `io1`, and `io2`
+    #   volumes, this is the number of IOPS provisioned for the volume. For
+    #   `gp2` volumes, this sets the baseline IOPS performance. It also
+    #   controls the rate at which the volume accumulates I/O credits for
+    #   bursting. Supported values: `gp3`, 3,000–80,000; `io1`, 100–64,000;
+    #   `io2`, 100–256,000.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] throughput
+    #   The throughput to provision, in MiB/s. Valid only for `gp3` volumes.
+    #   Valid range: 125–2,000 MiB/s.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] encrypted
+    #   Specifies whether to encrypt the volume. Encrypted volumes can be
+    #   attached only to instances that support Amazon EBS encryption. If
+    #   you create a volume from a snapshot, you cannot specify an
+    #   encryption value.
+    #   @return [Boolean]
+    #
+    # @!attribute [rw] kms_key_id
+    #   The identifier (key ID, key alias, key ARN, or alias ARN) of the
+    #   customer managed KMS key to use for Amazon EBS encryption.
+    #   @return [String]
+    #
+    # @!attribute [rw] free_space_gi_b
+    #   The free space guaranteed on the root volume, in GiB. AgentCore adds
+    #   the operating system overhead on top of this value. The default is 8
+    #   GiB.
+    #   @return [Integer]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RootVolumeConfiguration AWS API Documentation
+    #
+    class RootVolumeConfiguration < Struct.new(
+      :volume_type,
+      :iops,
+      :throughput,
+      :encrypted,
+      :kms_key_id,
+      :free_space_gi_b)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An action that routes requests to a gateway target, either statically
     # or with weighted traffic splitting.
     #
@@ -17737,6 +19165,31 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The request failed because it requires an active Amazon Web Services
+    # Marketplace subscription that is not present. Subscribe to the
+    # required product in Amazon Web Services Marketplace and try again.
+    #
+    # @!attribute [rw] message
+    #   @return [String]
+    #
+    # @!attribute [rw] subscription_url
+    #   URL to the Marketplace listing for subscription
+    #   @return [String]
+    #
+    # @!attribute [rw] product_name
+    #   The product requiring subscription
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/SubscriptionRequiredException AWS API Documentation
+    #
+    class SubscriptionRequiredException < Struct.new(
+      :message,
+      :subscription_url,
+      :product_name)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains summary consolidation override configuration.
     #
     # @!attribute [rw] append_to_prompt
@@ -18556,6 +20009,11 @@ module Aws::BedrockAgentCoreControl
     #   Runtime.
     #   @return [Array<Types::FilesystemConfiguration>]
     #
+    # @!attribute [rw] capacity_provider_configuration
+    #   The updated capacity provider configuration for the AgentCore
+    #   Runtime.
+    #   @return [Types::CapacityProviderConfiguration]
+    #
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier to ensure idempotency of the
     #   request.
@@ -18579,6 +20037,7 @@ module Aws::BedrockAgentCoreControl
       :metadata_configuration,
       :environment_variables,
       :filesystem_configurations,
+      :capacity_provider_configuration,
       :client_token)
       SENSITIVE = [:description, :environment_variables]
       include Aws::Structure
@@ -18705,6 +20164,78 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the capacity provider to update.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   The updated description of the capacity provider.
+    #   @return [Types::UpdatedDescription]
+    #
+    # @!attribute [rw] client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a
+    #   previous request, the service ignores the request, but doesn't
+    #   return an error. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateCapacityProviderInput AWS API Documentation
+    #
+    class UpdateCapacityProviderInput < Struct.new(
+      :capacity_provider_id,
+      :description,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] capacity_provider_id
+    #   The unique identifier of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] capacity_provider_arn
+    #   The Amazon Resource Name (ARN) of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the capacity provider.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the capacity provider. For possible values,
+    #   see `CapacityProviderStatus`.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp when the capacity provider was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The timestamp when the capacity provider was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateCapacityProviderOutput AWS API Documentation
+    #
+    class UpdateCapacityProviderOutput < Struct.new(
+      :capacity_provider_id,
+      :capacity_provider_arn,
+      :name,
+      :status,
+      :created_at,
+      :last_updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier to ensure that the API request
     #   completes no more than one time. If you don't specify this field, a
@@ -19025,6 +20556,84 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] rate_limit_id
+    #   The unique identifier of the rate limit to update.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Optional human-readable description for this limit.
+    #   @return [String]
+    #
+    # @!attribute [rw] entries
+    #   Updated rule entries. key and dimensionKeys are immutable and cannot
+    #   be changed.
+    #   @return [Array<Types::LimitEntry>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayRateLimitRequest AWS API Documentation
+    #
+    class UpdateGatewayRateLimitRequest < Struct.new(
+      :gateway_identifier,
+      :rate_limit_id,
+      :description,
+      :entries)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Shared fields for GatewayRateLimit responses
+    #
+    # @!attribute [rw] rate_limit_id
+    #   Limit identifier. Optional on Create (system-generates if not
+    #   provided by customer). Always present in responses.
+    #   @return [String]
+    #
+    # @!attribute [rw] gateway_identifier
+    #   The unique identifier of the gateway.
+    #   @return [String]
+    #
+    # @!attribute [rw] description
+    #   Optional human-readable description for this limit.
+    #   @return [String]
+    #
+    # @!attribute [rw] dimension_keys
+    #   Ordered list of dimension key names defining the scope of a limit
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] entries
+    #   List of rule entries within a limit
+    #   @return [Array<Types::LimitEntry>]
+    #
+    # @!attribute [rw] status
+    #   Status of a gateway limit
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp when the rate limit was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp when the rate limit was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayRateLimitResponse AWS API Documentation
+    #
+    class UpdateGatewayRateLimitResponse < Struct.new(
+      :rate_limit_id,
+      :gateway_identifier,
+      :description,
+      :dimension_keys,
+      :entries,
+      :status,
+      :created_at,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] gateway_identifier
     #   The identifier of the gateway to update.
     #   @return [String]
@@ -20023,6 +21632,12 @@ module Aws::BedrockAgentCoreControl
     #   `CREATE_FAILED`, `UPDATE_FAILED`, and `DELETE_FAILED`.
     #   @return [String]
     #
+    # @!attribute [rw] authorization_url
+    #   The URL that the user must open to complete OAuth consent. This
+    #   field is only present when the payment connector status is
+    #   `PENDING_AUTHENTICATION`.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdatePaymentConnectorResponse AWS API Documentation
     #
     class UpdatePaymentConnectorResponse < Struct.new(
@@ -20032,7 +21647,8 @@ module Aws::BedrockAgentCoreControl
       :type,
       :credential_provider_configurations,
       :last_updated_at,
-      :status)
+      :status,
+      :authorization_url)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -20136,6 +21752,11 @@ module Aws::BedrockAgentCoreControl
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
     #   @return [String]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The updated Amazon Resource Name (ARN) of the customer managed KMS
+    #   key used to encrypt sensitive payment manager data at rest.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdatePaymentManagerRequest AWS API Documentation
     #
     class UpdatePaymentManagerRequest < Struct.new(
@@ -20144,7 +21765,8 @@ module Aws::BedrockAgentCoreControl
       :authorizer_type,
       :authorizer_configuration,
       :role_arn,
-      :client_token)
+      :client_token,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -20184,6 +21806,11 @@ module Aws::BedrockAgentCoreControl
     #   `CREATE_FAILED`, `UPDATE_FAILED`, and `DELETE_FAILED`.
     #   @return [String]
     #
+    # @!attribute [rw] kms_key_arn
+    #   The Amazon Resource Name (ARN) of the KMS key used to encrypt
+    #   sensitive payment manager data at rest, if configured.
+    #   @return [String]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdatePaymentManagerResponse AWS API Documentation
     #
     class UpdatePaymentManagerResponse < Struct.new(
@@ -20194,7 +21821,8 @@ module Aws::BedrockAgentCoreControl
       :role_arn,
       :workload_identity_details,
       :last_updated_at,
-      :status)
+      :status,
+      :kms_key_arn)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -21401,6 +23029,32 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The configuration for a persistent volume attached to a capacity
+    # provider. This structure defines the storage backing for the
+    # persistent volumes used by agents that run on capacity provider
+    # instances.
+    #
+    # @note VolumeConfiguration is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note VolumeConfiguration is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of VolumeConfiguration corresponding to the set member.
+    #
+    # @!attribute [rw] ebs_configuration
+    #   The configuration for an Amazon EBS-backed persistent volume.
+    #   @return [Types::EbsVolumeConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/VolumeConfiguration AWS API Documentation
+    #
+    class VolumeConfiguration < Struct.new(
+      :ebs_configuration,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class EbsConfiguration < VolumeConfiguration; end
+      class Unknown < VolumeConfiguration; end
+    end
+
     # VpcConfig for the Agent.
     #
     # @!attribute [rw] security_groups
@@ -21456,6 +23110,27 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The VPC configuration for launching Amazon EC2 instances.
+    #
+    # @!attribute [rw] subnets
+    #   The IDs of the subnets in which to launch instances. You must
+    #   specify at least one subnet.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] security_groups
+    #   The IDs of the security groups to associate with the instances. You
+    #   must specify at least one security group.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/VpcConfiguration AWS API Documentation
+    #
+    class VpcConfiguration < Struct.new(
+      :subnets,
+      :security_groups)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon Web Services WAF configuration for the gateway. This
     # configuration controls how the gateway behaves when the associated web
     # ACL cannot be evaluated.