aws-sdk-bedrockagentcorecontrol 1.64.0 → 1.66.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: d4d66c60f29171cfd96af4bee2121f2d65eb0ec92fdf4b6b5c809903a1b3e4ec
-  data.tar.gz: f6f73da5571a62e21b63164b955bc50e14a425c412832a3926cceb4e8667faf7
+  metadata.gz: 20114035ceba98dc7d6444c3633a65f57102f11f47ef11c640883edea5b7f208
+  data.tar.gz: 5861f438390825479ce682a74b3a01209319779f7d7147019490a4f759d1df68
 SHA512:
-  metadata.gz: dc0c72180032b750944533c21b11e96a106de3e121b2da90848d9724377af2449eca2260560e9c76fb0a985a332bd2c384d9cca51ca833f459c0fbaf1523ad0c
-  data.tar.gz: c83935235c25b5a7aad6117c93f8b16189e1cbc1deee472ac6e14569617e8a416e9f9cf9893d9aa56b7afe82e0899529ed7d8621ef6629f23415b145c54b669b
+  metadata.gz: 28faffe37c6b55de97746c231c9308e5a94c38e569965826783addcb95b6c8d704ce774755346a93b6b1fea8763a7c6444d7288c046b7a7b171d5f318661e138
+  data.tar.gz: '06872cfa1ad832d3de119022478cba97f984ca07dc514168f735ff87383912eddce4849b0b20328b4764b000d5d43bd4f975109d03a16308febd2aed3c343e5a'

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.66.0 (2026-08-19)
+------------------
+
+* Feature - AgentCore Memory now supports Flexible Namespaces
+
+1.65.0 (2026-08-17)
+------------------
+
+* Feature - Adds implementations of third-party evaluators, both managed-as-a-service and as templates within custom evaluators.
+
 1.64.0 (2026-08-14)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.64.0
+1.66.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -569,8 +569,9 @@ module Aws::BedrockAgentCoreControl
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
     #
     # @option params [required, Array<Types::BatchPutLimitEntry>] :rate_limits
-    #   Complete set of rate limits for this gateway. Replaces all existing
-    #   limits atomically.
+    #   The complete set of rate limits for this gateway. This operation
+    #   replaces all existing rate limits in a single request. If the
+    #   operation fails, no rate limits are changed.
     #
     # @return [Types::BatchPutGatewayRateLimitsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1637,7 +1638,7 @@ module Aws::BedrockAgentCoreControl
     #         s3_uri: "S3Uri", # required
     #       },
     #     },
-    #     schema_type: "AGENTCORE_EVALUATION_PREDEFINED_V1", # required, accepts AGENTCORE_EVALUATION_PREDEFINED_V1, AGENTCORE_EVALUATION_SIMULATED_V1
+    #     schema_type: "AGENTCORE_EVALUATION_PREDEFINED_V1", # required, accepts AGENTCORE_EVALUATION_PREDEFINED_V1, AGENTCORE_EVALUATION_SIMULATED_V1, GENERIC_EVALUATION_PREDEFINED_V1
     #     kms_key_arn: "KmsKeyArn",
     #     tags: {
     #       "TagKey" => "TagValue",
@@ -1829,6 +1830,31 @@ module Aws::BedrockAgentCoreControl
     #           lambda_timeout_in_seconds: 1,
     #         },
     #       },
+    #       derived: {
+    #         base_evaluator_id: "EvaluatorId", # required
+    #         model_config: { # required
+    #           bedrock_evaluator_model_config: {
+    #             model_id: "ModelId", # required
+    #             inference_config: {
+    #               max_tokens: 1,
+    #               temperature: 1.0,
+    #               top_p: 1.0,
+    #               stop_sequences: ["NonEmptyString"],
+    #             },
+    #             additional_model_request_fields: {
+    #             },
+    #           },
+    #           responses_evaluator_model_config: {
+    #             model_id: "ModelId", # required
+    #             max_output_tokens: 1,
+    #             temperature: 1.0,
+    #             top_p: 1.0,
+    #             reasoning: {
+    #               effort: "ReasoningConfigurationEffortString",
+    #             },
+    #           },
+    #         },
+    #       },
     #     },
     #     level: "TOOL_CALL", # required, accepts TOOL_CALL, TRACE, SESSION
     #     kms_key_arn: "KmsKeyArn",
@@ -2188,18 +2214,20 @@ module Aws::BedrockAgentCoreControl
     #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
     #
     # @option params [String] :rate_limit_id
-    #   Optional customer-defined limit ID. If not provided, system generates
-    #   one.
+    #   An optional customer-defined identifier for the rate limit. If not
+    #   provided, the system generates one.
     #
     # @option params [String] :description
-    #   Optional human-readable description for this limit.
+    #   An optional human-readable description for this rate limit. If not
+    #   provided, the rate limit is created without a description.
     #
     # @option params [required, Array<String>] :dimension_keys
-    #   Ordered list of dimension names defining the scope of this limit.
-    #   Unique per gateway — no two limits can share the same dimensionKeys.
+    #   The ordered list of dimension key names that define the scope of this
+    #   rate limit. Must be unique per gateway—no two rate limits can share
+    #   the same dimension keys.
     #
     # @option params [required, Array<Types::LimitEntry>] :entries
-    #   Rule entries mapping dimension values to rate configurations.
+    #   The rule entries that map dimension values to rate configurations.
     #
     # @return [Types::CreateGatewayRateLimitResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -3487,6 +3515,11 @@ module Aws::BedrockAgentCoreControl
     #   Metadata keys to index for filtering. Once declared, indexed keys
     #   cannot be removed.
     #
+    # @option params [Array<Types::NamespaceKeyEntry>] :namespace_keys
+    #   The namespace variable key definitions with optional validation rules.
+    #   Use these `namespaceKeys` in `namespaceTemplates` to control namespace
+    #   hierarchy.
+    #
     # @option params [Types::StreamDeliveryResources] :stream_delivery_resources
     #   Configuration for streaming memory record data to external resources.
     #
@@ -3812,6 +3845,15 @@ module Aws::BedrockAgentCoreControl
     #         type: "STRING", # required, accepts STRING, STRINGLIST, NUMBER
     #       },
     #     ],
+    #     namespace_keys: [
+    #       {
+    #         key: "NamespaceVariableKey", # required
+    #         validation: {
+    #           allowed_values: ["NamespaceAllowedValue"],
+    #           regex_pattern: "NamespaceRegexPattern",
+    #         },
+    #       },
+    #     ],
     #     stream_delivery_resources: {
     #       resources: [ # required
     #         {
@@ -3931,6 +3973,11 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.indexed_keys #=> Array
     #   resp.memory.indexed_keys[0].key #=> String
     #   resp.memory.indexed_keys[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.namespace_keys #=> Array
+    #   resp.memory.namespace_keys[0].key #=> String
+    #   resp.memory.namespace_keys[0].validation.allowed_values #=> Array
+    #   resp.memory.namespace_keys[0].validation.allowed_values[0] #=> String
+    #   resp.memory.namespace_keys[0].validation.regex_pattern #=> String
     #   resp.memory.stream_delivery_resources.resources #=> Array
     #   resp.memory.stream_delivery_resources.resources[0].kinesis.data_stream_arn #=> String
     #   resp.memory.stream_delivery_resources.resources[0].kinesis.content_configurations #=> Array
@@ -4844,9 +4891,17 @@ module Aws::BedrockAgentCoreControl
     # asynchronous operation. Use the [GetPolicy][1] operation to poll the
     # `status` field to track completion.
     #
+    # If the new policy is a temporal policy, creating it invalidates the
+    # policy engine's active temporal sessions. For more information about
+    # temporal policy sessions, see [session-based temporal policies][2].
+    # The policy engine returns an HTTP 409 `ConflictException` to in-flight
+    # sessions. To resume, you must start a new session with a new session
+    # ID.
+    #
     #
     #
     # [1]: https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html
+    # [2]: https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy-session-based-temporal.html
     #
     # @option params [required, String] :name
     #   The customer-assigned immutable name for the policy. Must be unique
@@ -7336,7 +7391,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.status #=> String, one of "CREATING", "UPDATING", "DELETING", "ACTIVE", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED"
     #   resp.draft_status #=> String, one of "MODIFIED", "UNMODIFIED"
     #   resp.failure_reason #=> String
-    #   resp.schema_type #=> String, one of "AGENTCORE_EVALUATION_PREDEFINED_V1", "AGENTCORE_EVALUATION_SIMULATED_V1"
+    #   resp.schema_type #=> String, one of "AGENTCORE_EVALUATION_PREDEFINED_V1", "AGENTCORE_EVALUATION_SIMULATED_V1", "GENERIC_EVALUATION_PREDEFINED_V1"
     #   resp.kms_key_arn #=> String
     #   resp.example_count #=> Integer
     #   resp.download_url #=> String
@@ -7378,6 +7433,8 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetEvaluatorResponse#evaluator_name #evaluator_name} => String
     #   * {Types::GetEvaluatorResponse#description #description} => String
     #   * {Types::GetEvaluatorResponse#evaluator_config #evaluator_config} => Types::EvaluatorConfig
+    #   * {Types::GetEvaluatorResponse#evaluator_type #evaluator_type} => String
+    #   * {Types::GetEvaluatorResponse#provider #provider} => String
     #   * {Types::GetEvaluatorResponse#level #level} => String
     #   * {Types::GetEvaluatorResponse#status #status} => String
     #   * {Types::GetEvaluatorResponse#created_at #created_at} => Time
@@ -7419,6 +7476,20 @@ module Aws::BedrockAgentCoreControl
     #   resp.evaluator_config.llm_as_a_judge.model_config.responses_evaluator_model_config.reasoning.effort #=> String
     #   resp.evaluator_config.code_based.lambda_config.lambda_arn #=> String
     #   resp.evaluator_config.code_based.lambda_config.lambda_timeout_in_seconds #=> Integer
+    #   resp.evaluator_config.derived.base_evaluator_id #=> String
+    #   resp.evaluator_config.derived.model_config.bedrock_evaluator_model_config.model_id #=> String
+    #   resp.evaluator_config.derived.model_config.bedrock_evaluator_model_config.inference_config.max_tokens #=> Integer
+    #   resp.evaluator_config.derived.model_config.bedrock_evaluator_model_config.inference_config.temperature #=> Float
+    #   resp.evaluator_config.derived.model_config.bedrock_evaluator_model_config.inference_config.top_p #=> Float
+    #   resp.evaluator_config.derived.model_config.bedrock_evaluator_model_config.inference_config.stop_sequences #=> Array
+    #   resp.evaluator_config.derived.model_config.bedrock_evaluator_model_config.inference_config.stop_sequences[0] #=> String
+    #   resp.evaluator_config.derived.model_config.responses_evaluator_model_config.model_id #=> String
+    #   resp.evaluator_config.derived.model_config.responses_evaluator_model_config.max_output_tokens #=> Integer
+    #   resp.evaluator_config.derived.model_config.responses_evaluator_model_config.temperature #=> Float
+    #   resp.evaluator_config.derived.model_config.responses_evaluator_model_config.top_p #=> Float
+    #   resp.evaluator_config.derived.model_config.responses_evaluator_model_config.reasoning.effort #=> String
+    #   resp.evaluator_type #=> String, one of "Builtin", "ThirdParty", "Custom", "CustomCode", "CustomDerived"
+    #   resp.provider #=> String, one of "AWS", "DeepEval", "AutoEval", "Custom"
     #   resp.level #=> String, one of "TOOL_CALL", "TRACE", "SESSION"
     #   resp.status #=> String, one of "ACTIVE", "CREATING", "CREATE_FAILED", "UPDATING", "UPDATE_FAILED", "DELETING"
     #   resp.created_at #=> Time
@@ -8200,6 +8271,11 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.indexed_keys #=> Array
     #   resp.memory.indexed_keys[0].key #=> String
     #   resp.memory.indexed_keys[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.namespace_keys #=> Array
+    #   resp.memory.namespace_keys[0].key #=> String
+    #   resp.memory.namespace_keys[0].validation.allowed_values #=> Array
+    #   resp.memory.namespace_keys[0].validation.allowed_values[0] #=> String
+    #   resp.memory.namespace_keys[0].validation.regex_pattern #=> String
     #   resp.memory.stream_delivery_resources.resources #=> Array
     #   resp.memory.stream_delivery_resources.resources[0].kinesis.data_stream_arn #=> String
     #   resp.memory.stream_delivery_resources.resources[0].kinesis.content_configurations #=> Array
@@ -9956,7 +10032,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.datasets[0].description #=> String
     #   resp.datasets[0].status #=> String, one of "CREATING", "UPDATING", "DELETING", "ACTIVE", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED"
     #   resp.datasets[0].draft_status #=> String, one of "MODIFIED", "UNMODIFIED"
-    #   resp.datasets[0].schema_type #=> String, one of "AGENTCORE_EVALUATION_PREDEFINED_V1", "AGENTCORE_EVALUATION_SIMULATED_V1"
+    #   resp.datasets[0].schema_type #=> String, one of "AGENTCORE_EVALUATION_PREDEFINED_V1", "AGENTCORE_EVALUATION_SIMULATED_V1", "GENERIC_EVALUATION_PREDEFINED_V1"
     #   resp.datasets[0].example_count #=> Integer
     #   resp.datasets[0].created_at #=> Time
     #   resp.datasets[0].updated_at #=> Time
@@ -10002,7 +10078,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.evaluators[0].evaluator_id #=> String
     #   resp.evaluators[0].evaluator_name #=> String
     #   resp.evaluators[0].description #=> String
-    #   resp.evaluators[0].evaluator_type #=> String, one of "Builtin", "Custom", "CustomCode"
+    #   resp.evaluators[0].evaluator_type #=> String, one of "Builtin", "ThirdParty", "Custom", "CustomCode", "CustomDerived"
+    #   resp.evaluators[0].provider #=> String, one of "AWS", "DeepEval", "AutoEval", "Custom"
     #   resp.evaluators[0].level #=> String, one of "TOOL_CALL", "TRACE", "SESSION"
     #   resp.evaluators[0].status #=> String, one of "ACTIVE", "CREATING", "CREATE_FAILED", "UPDATING", "UPDATE_FAILED", "DELETING"
     #   resp.evaluators[0].created_at #=> Time
@@ -12543,6 +12620,31 @@ module Aws::BedrockAgentCoreControl
     #           lambda_timeout_in_seconds: 1,
     #         },
     #       },
+    #       derived: {
+    #         base_evaluator_id: "EvaluatorId", # required
+    #         model_config: { # required
+    #           bedrock_evaluator_model_config: {
+    #             model_id: "ModelId", # required
+    #             inference_config: {
+    #               max_tokens: 1,
+    #               temperature: 1.0,
+    #               top_p: 1.0,
+    #               stop_sequences: ["NonEmptyString"],
+    #             },
+    #             additional_model_request_fields: {
+    #             },
+    #           },
+    #           responses_evaluator_model_config: {
+    #             model_id: "ModelId", # required
+    #             max_output_tokens: 1,
+    #             temperature: 1.0,
+    #             top_p: 1.0,
+    #             reasoning: {
+    #               effort: "ReasoningConfigurationEffortString",
+    #             },
+    #           },
+    #         },
+    #       },
     #     },
     #     level: "TOOL_CALL", # accepts TOOL_CALL, TRACE, SESSION
     #     kms_key_arn: "KmsKeyArn",
@@ -12871,11 +12973,11 @@ module Aws::BedrockAgentCoreControl
     #   The unique identifier of the rate limit to update.
     #
     # @option params [String] :description
-    #   Optional human-readable description for this limit.
+    #   The updated human-readable description for this rate limit.
     #
     # @option params [required, Array<Types::LimitEntry>] :entries
-    #   Updated rule entries. key and dimensionKeys are immutable and cannot
-    #   be changed.
+    #   The updated rule entries. The dimension keys are immutable after
+    #   creation and cannot be changed.
     #
     # @return [Types::UpdateGatewayRateLimitResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -14132,6 +14234,11 @@ module Aws::BedrockAgentCoreControl
     #   Additional metadata keys to index. Previously indexed keys cannot be
     #   removed.
     #
+    # @option params [Array<Types::NamespaceKeyEntry>] :namespace_keys
+    #   The namespace variable key definitions with validation rules for this
+    #   memory. Use this parameter to update existing `namespaceKey`
+    #   validation rules or add new keys when namespace templates change.
+    #
     # @option params [Types::StreamDeliveryResources] :stream_delivery_resources
     #   Configuration for streaming memory record data to external resources.
     #
@@ -14622,6 +14729,15 @@ module Aws::BedrockAgentCoreControl
     #         type: "STRING", # required, accepts STRING, STRINGLIST, NUMBER
     #       },
     #     ],
+    #     namespace_keys: [
+    #       {
+    #         key: "NamespaceVariableKey", # required
+    #         validation: {
+    #           allowed_values: ["NamespaceAllowedValue"],
+    #           regex_pattern: "NamespaceRegexPattern",
+    #         },
+    #       },
+    #     ],
     #     stream_delivery_resources: {
     #       resources: [ # required
     #         {
@@ -14738,6 +14854,11 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.indexed_keys #=> Array
     #   resp.memory.indexed_keys[0].key #=> String
     #   resp.memory.indexed_keys[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
+    #   resp.memory.namespace_keys #=> Array
+    #   resp.memory.namespace_keys[0].key #=> String
+    #   resp.memory.namespace_keys[0].validation.allowed_values #=> Array
+    #   resp.memory.namespace_keys[0].validation.allowed_values[0] #=> String
+    #   resp.memory.namespace_keys[0].validation.regex_pattern #=> String
     #   resp.memory.stream_delivery_resources.resources #=> Array
     #   resp.memory.stream_delivery_resources.resources[0].kinesis.data_stream_arn #=> String
     #   resp.memory.stream_delivery_resources.resources[0].kinesis.content_configurations #=> Array
@@ -15536,6 +15657,18 @@ module Aws::BedrockAgentCoreControl
     # asynchronous operation. Use the `GetPolicy` operation to poll the
     # `status` field to track completion.
     #
+    # If the updated policy is a temporal policy, the policy engine
+    # invalidates all active temporal sessions. If the update adds or
+    # removes temporal operators, the policy engine also invalidates active
+    # temporal sessions. For more information about temporal policy
+    # sessions, see [session-based temporal policies][1]. The policy engine
+    # returns an HTTP 409 `ConflictException` to in-flight sessions. To
+    # resume, you must start a new session with a new session ID.
+    #
+    #
+    #
+    # [1]: https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy-session-based-temporal.html
+    #
     # @option params [required, String] :policy_engine_id
     #   The identifier of the policy engine that manages the policy to be
     #   updated. This ensures the policy is updated within the correct policy
@@ -16196,7 +16329,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.64.0'
+      context[:gem_version] = '1.66.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb

@@ -373,6 +373,7 @@ module Aws::BedrockAgentCoreControl
     DeleteResourcePolicyResponse = Shapes::StructureShape.new(name: 'DeleteResourcePolicyResponse')
     DeleteWorkloadIdentityRequest = Shapes::StructureShape.new(name: 'DeleteWorkloadIdentityRequest')
     DeleteWorkloadIdentityResponse = Shapes::StructureShape.new(name: 'DeleteWorkloadIdentityResponse')
+    DerivedEvaluatorConfig = Shapes::StructureShape.new(name: 'DerivedEvaluatorConfig')
     Description = Shapes::StringShape.new(name: 'Description')
     DescriptorType = Shapes::StringShape.new(name: 'DescriptorType')
     Descriptors = Shapes::StructureShape.new(name: 'Descriptors')
@@ -897,6 +898,13 @@ module Aws::BedrockAgentCoreControl
     MountPath = Shapes::StringShape.new(name: 'MountPath')
     Name = Shapes::StringShape.new(name: 'Name')
     Namespace = Shapes::StringShape.new(name: 'Namespace')
+    NamespaceAllowedValue = Shapes::StringShape.new(name: 'NamespaceAllowedValue')
+    NamespaceAllowedValuesList = Shapes::ListShape.new(name: 'NamespaceAllowedValuesList')
+    NamespaceKeyEntry = Shapes::StructureShape.new(name: 'NamespaceKeyEntry')
+    NamespaceKeyValidation = Shapes::StructureShape.new(name: 'NamespaceKeyValidation')
+    NamespaceKeysList = Shapes::ListShape.new(name: 'NamespaceKeysList')
+    NamespaceRegexPattern = Shapes::StringShape.new(name: 'NamespaceRegexPattern')
+    NamespaceVariableKey = Shapes::StringShape.new(name: 'NamespaceVariableKey')
     NamespacesList = Shapes::ListShape.new(name: 'NamespacesList')
     NaturalLanguage = Shapes::StringShape.new(name: 'NaturalLanguage')
     NetworkConfiguration = Shapes::StructureShape.new(name: 'NetworkConfiguration')
@@ -1009,6 +1017,7 @@ module Aws::BedrockAgentCoreControl
     PrivateKeySource = Shapes::UnionShape.new(name: 'PrivateKeySource')
     Prompt = Shapes::StringShape.new(name: 'Prompt')
     ProtocolConfiguration = Shapes::StructureShape.new(name: 'ProtocolConfiguration')
+    Provider = Shapes::StringShape.new(name: 'Provider')
     ProviderPrefix = Shapes::StructureShape.new(name: 'ProviderPrefix')
     ProviderPrefixSeparatorString = Shapes::StringShape.new(name: 'ProviderPrefixSeparatorString')
     PutResourcePolicyRequest = Shapes::StructureShape.new(name: 'PutResourcePolicyRequest')
@@ -2148,6 +2157,7 @@ module Aws::BedrockAgentCoreControl
     CreateMemoryInput.add_member(:event_expiry_duration, Shapes::ShapeRef.new(shape: CreateMemoryInputEventExpiryDurationInteger, required: true, location_name: "eventExpiryDuration"))
     CreateMemoryInput.add_member(:memory_strategies, Shapes::ShapeRef.new(shape: MemoryStrategyInputList, location_name: "memoryStrategies"))
     CreateMemoryInput.add_member(:indexed_keys, Shapes::ShapeRef.new(shape: IndexedKeysList, location_name: "indexedKeys"))
+    CreateMemoryInput.add_member(:namespace_keys, Shapes::ShapeRef.new(shape: NamespaceKeysList, location_name: "namespaceKeys"))
     CreateMemoryInput.add_member(:stream_delivery_resources, Shapes::ShapeRef.new(shape: StreamDeliveryResources, location_name: "streamDeliveryResources"))
     CreateMemoryInput.add_member(:tags, Shapes::ShapeRef.new(shape: TagsMap, location_name: "tags"))
     CreateMemoryInput.struct_class = Types::CreateMemoryInput
@@ -2768,6 +2778,10 @@ module Aws::BedrockAgentCoreControl
 
     DeleteWorkloadIdentityResponse.struct_class = Types::DeleteWorkloadIdentityResponse
 
+    DerivedEvaluatorConfig.add_member(:base_evaluator_id, Shapes::ShapeRef.new(shape: EvaluatorId, required: true, location_name: "baseEvaluatorId"))
+    DerivedEvaluatorConfig.add_member(:model_config, Shapes::ShapeRef.new(shape: EvaluatorModelConfig, required: true, location_name: "modelConfig"))
+    DerivedEvaluatorConfig.struct_class = Types::DerivedEvaluatorConfig
+
     Descriptors.add_member(:mcp, Shapes::ShapeRef.new(shape: McpDescriptor, location_name: "mcp"))
     Descriptors.add_member(:a2a, Shapes::ShapeRef.new(shape: A2aDescriptor, location_name: "a2a"))
     Descriptors.add_member(:custom, Shapes::ShapeRef.new(shape: CustomDescriptor, location_name: "custom"))
@@ -2881,9 +2895,11 @@ module Aws::BedrockAgentCoreControl
 
     EvaluatorConfig.add_member(:llm_as_a_judge, Shapes::ShapeRef.new(shape: LlmAsAJudgeEvaluatorConfig, location_name: "llmAsAJudge"))
     EvaluatorConfig.add_member(:code_based, Shapes::ShapeRef.new(shape: CodeBasedEvaluatorConfig, location_name: "codeBased"))
+    EvaluatorConfig.add_member(:derived, Shapes::ShapeRef.new(shape: DerivedEvaluatorConfig, location_name: "derived"))
     EvaluatorConfig.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     EvaluatorConfig.add_member_subclass(:llm_as_a_judge, Types::EvaluatorConfig::LlmAsAJudge)
     EvaluatorConfig.add_member_subclass(:code_based, Types::EvaluatorConfig::CodeBased)
+    EvaluatorConfig.add_member_subclass(:derived, Types::EvaluatorConfig::Derived)
     EvaluatorConfig.add_member_subclass(:unknown, Types::EvaluatorConfig::Unknown)
     EvaluatorConfig.struct_class = Types::EvaluatorConfig
 
@@ -2908,6 +2924,7 @@ module Aws::BedrockAgentCoreControl
     EvaluatorSummary.add_member(:evaluator_name, Shapes::ShapeRef.new(shape: EvaluatorName, required: true, location_name: "evaluatorName"))
     EvaluatorSummary.add_member(:description, Shapes::ShapeRef.new(shape: EvaluatorDescription, location_name: "description"))
     EvaluatorSummary.add_member(:evaluator_type, Shapes::ShapeRef.new(shape: EvaluatorType, required: true, location_name: "evaluatorType"))
+    EvaluatorSummary.add_member(:provider, Shapes::ShapeRef.new(shape: Provider, location_name: "provider"))
     EvaluatorSummary.add_member(:level, Shapes::ShapeRef.new(shape: EvaluatorLevel, location_name: "level"))
     EvaluatorSummary.add_member(:status, Shapes::ShapeRef.new(shape: EvaluatorStatus, required: true, location_name: "status"))
     EvaluatorSummary.add_member(:created_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "createdAt"))
@@ -3237,6 +3254,8 @@ module Aws::BedrockAgentCoreControl
     GetEvaluatorResponse.add_member(:evaluator_name, Shapes::ShapeRef.new(shape: EvaluatorName, required: true, location_name: "evaluatorName"))
     GetEvaluatorResponse.add_member(:description, Shapes::ShapeRef.new(shape: EvaluatorDescription, location_name: "description"))
     GetEvaluatorResponse.add_member(:evaluator_config, Shapes::ShapeRef.new(shape: EvaluatorConfig, required: true, location_name: "evaluatorConfig"))
+    GetEvaluatorResponse.add_member(:evaluator_type, Shapes::ShapeRef.new(shape: EvaluatorType, location_name: "evaluatorType"))
+    GetEvaluatorResponse.add_member(:provider, Shapes::ShapeRef.new(shape: Provider, location_name: "provider"))
     GetEvaluatorResponse.add_member(:level, Shapes::ShapeRef.new(shape: EvaluatorLevel, required: true, location_name: "level"))
     GetEvaluatorResponse.add_member(:status, Shapes::ShapeRef.new(shape: EvaluatorStatus, required: true, location_name: "status"))
     GetEvaluatorResponse.add_member(:created_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "createdAt"))
@@ -4541,6 +4560,7 @@ module Aws::BedrockAgentCoreControl
     Memory.add_member(:updated_at, Shapes::ShapeRef.new(shape: Timestamp, required: true, location_name: "updatedAt"))
     Memory.add_member(:strategies, Shapes::ShapeRef.new(shape: MemoryStrategyList, location_name: "strategies"))
     Memory.add_member(:indexed_keys, Shapes::ShapeRef.new(shape: IndexedKeysList, location_name: "indexedKeys"))
+    Memory.add_member(:namespace_keys, Shapes::ShapeRef.new(shape: NamespaceKeysList, location_name: "namespaceKeys"))
     Memory.add_member(:stream_delivery_resources, Shapes::ShapeRef.new(shape: StreamDeliveryResources, location_name: "streamDeliveryResources"))
     Memory.add_member(:managed_by_resource_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "managedByResourceArn"))
     Memory.struct_class = Types::Memory
@@ -4677,6 +4697,18 @@ module Aws::BedrockAgentCoreControl
     ModifyStrategyConfiguration.add_member(:self_managed_configuration, Shapes::ShapeRef.new(shape: ModifySelfManagedConfiguration, location_name: "selfManagedConfiguration"))
     ModifyStrategyConfiguration.struct_class = Types::ModifyStrategyConfiguration
 
+    NamespaceAllowedValuesList.member = Shapes::ShapeRef.new(shape: NamespaceAllowedValue)
+
+    NamespaceKeyEntry.add_member(:key, Shapes::ShapeRef.new(shape: NamespaceVariableKey, required: true, location_name: "key"))
+    NamespaceKeyEntry.add_member(:validation, Shapes::ShapeRef.new(shape: NamespaceKeyValidation, location_name: "validation"))
+    NamespaceKeyEntry.struct_class = Types::NamespaceKeyEntry
+
+    NamespaceKeyValidation.add_member(:allowed_values, Shapes::ShapeRef.new(shape: NamespaceAllowedValuesList, location_name: "allowedValues"))
+    NamespaceKeyValidation.add_member(:regex_pattern, Shapes::ShapeRef.new(shape: NamespaceRegexPattern, location_name: "regexPattern"))
+    NamespaceKeyValidation.struct_class = Types::NamespaceKeyValidation
+
+    NamespaceKeysList.member = Shapes::ShapeRef.new(shape: NamespaceKeyEntry)
+
     NamespacesList.member = Shapes::ShapeRef.new(shape: Namespace)
 
     NetworkConfiguration.add_member(:network_mode, Shapes::ShapeRef.new(shape: NetworkMode, required: true, location_name: "networkMode"))
@@ -5858,6 +5890,7 @@ module Aws::BedrockAgentCoreControl
     UpdateMemoryInput.add_member(:memory_execution_role_arn, Shapes::ShapeRef.new(shape: Arn, location_name: "memoryExecutionRoleArn"))
     UpdateMemoryInput.add_member(:memory_strategies, Shapes::ShapeRef.new(shape: ModifyMemoryStrategies, location_name: "memoryStrategies"))
     UpdateMemoryInput.add_member(:add_indexed_keys, Shapes::ShapeRef.new(shape: IndexedKeysList, location_name: "addIndexedKeys"))
+    UpdateMemoryInput.add_member(:namespace_keys, Shapes::ShapeRef.new(shape: NamespaceKeysList, location_name: "namespaceKeys"))
     UpdateMemoryInput.add_member(:stream_delivery_resources, Shapes::ShapeRef.new(shape: StreamDeliveryResources, location_name: "streamDeliveryResources"))
     UpdateMemoryInput.struct_class = Types::UpdateMemoryInput
 

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -742,8 +742,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] rate_limits
-    #   Complete set of rate limits for this gateway. Replaces all existing
-    #   limits atomically.
+    #   The complete set of rate limits for this gateway. This operation
+    #   replaces all existing rate limits in a single request. If the
+    #   operation fails, no rate limits are changed.
     #   @return [Array<Types::BatchPutLimitEntry>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/BatchPutGatewayRateLimitsRequest AWS API Documentation
@@ -768,24 +769,28 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # A limit definition within a BatchPut request (rateLimitId used for
-    # upsert matching)
+    # A rate limit definition within a batch put request. If you provide a
+    # `rateLimitId`, the service uses it for upsert matching against
+    # existing rate limits.
     #
     # @!attribute [rw] rate_limit_id
-    #   Optional — if provided, used for upsert matching against existing
-    #   limits.
+    #   The unique identifier of the rate limit. If provided, the service
+    #   uses it for upsert matching against existing rate limits.
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   Optional human-readable description for this limit.
+    #   An optional human-readable description for this rate limit. If not
+    #   provided, the rate limit is created without a description.
     #   @return [String]
     #
     # @!attribute [rw] dimension_keys
-    #   Ordered list of dimension key names defining the scope of a limit
+    #   The ordered list of dimension key names that define the scope of
+    #   this rate limit.
     #   @return [Array<String>]
     #
     # @!attribute [rw] entries
-    #   List of rule entries within a limit
+    #   The list of rule entries that map dimension values to rate
+    #   configurations.
     #   @return [Array<Types::LimitEntry>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/BatchPutLimitEntry AWS API Documentation
@@ -2975,21 +2980,23 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] rate_limit_id
-    #   Optional customer-defined limit ID. If not provided, system
-    #   generates one.
+    #   An optional customer-defined identifier for the rate limit. If not
+    #   provided, the system generates one.
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   Optional human-readable description for this limit.
+    #   An optional human-readable description for this rate limit. If not
+    #   provided, the rate limit is created without a description.
     #   @return [String]
     #
     # @!attribute [rw] dimension_keys
-    #   Ordered list of dimension names defining the scope of this limit.
-    #   Unique per gateway — no two limits can share the same dimensionKeys.
+    #   The ordered list of dimension key names that define the scope of
+    #   this rate limit. Must be unique per gateway—no two rate limits can
+    #   share the same dimension keys.
     #   @return [Array<String>]
     #
     # @!attribute [rw] entries
-    #   Rule entries mapping dimension values to rate configurations.
+    #   The rule entries that map dimension values to rate configurations.
     #   @return [Array<Types::LimitEntry>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayRateLimitRequest AWS API Documentation
@@ -3005,11 +3012,10 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # Shared fields for GatewayRateLimit responses
+    # Shared fields for `GatewayRateLimit` responses.
     #
     # @!attribute [rw] rate_limit_id
-    #   Limit identifier. Optional on Create (system-generates if not
-    #   provided by customer). Always present in responses.
+    #   The unique identifier of the created rate limit.
     #   @return [String]
     #
     # @!attribute [rw] gateway_identifier
@@ -3017,19 +3023,21 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   Optional human-readable description for this limit.
+    #   The human-readable description of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] dimension_keys
-    #   Ordered list of dimension key names defining the scope of a limit
+    #   The ordered list of dimension key names that define the scope of
+    #   this rate limit.
     #   @return [Array<String>]
     #
     # @!attribute [rw] entries
-    #   List of rule entries within a limit
+    #   The list of rule entries that map dimension values to rate
+    #   configurations.
     #   @return [Array<Types::LimitEntry>]
     #
     # @!attribute [rw] status
-    #   Status of a gateway limit
+    #   The current status of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] created_at
@@ -3785,6 +3793,12 @@ module Aws::BedrockAgentCoreControl
     #   cannot be removed.
     #   @return [Array<Types::IndexedKey>]
     #
+    # @!attribute [rw] namespace_keys
+    #   The namespace variable key definitions with optional validation
+    #   rules. Use these `namespaceKeys` in `namespaceTemplates` to control
+    #   namespace hierarchy.
+    #   @return [Array<Types::NamespaceKeyEntry>]
+    #
     # @!attribute [rw] stream_delivery_resources
     #   Configuration for streaming memory record data to external
     #   resources.
@@ -3807,6 +3821,7 @@ module Aws::BedrockAgentCoreControl
       :event_expiry_duration,
       :memory_strategies,
       :indexed_keys,
+      :namespace_keys,
       :stream_delivery_resources,
       :tags)
       SENSITIVE = [:description]
@@ -5349,10 +5364,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] private_key_jwt_config
-    #   Configuration for private\_key\_jwt client authentication (RFC
-    #   7523). On Create: privateKeySource and signingAlgorithm are required
-    #   (enforced server-side). On Update: all fields are optional — only
-    #   provided fields are updated.
+    #   The private\_key\_jwt client authentication configuration for this
+    #   credential provider. When specified, the credential provider uses
+    #   JWT client assertions to authenticate with the token endpoint.
     #   @return [Types::PrivateKeyJwtConfig]
     #
     # @!attribute [rw] private_endpoint
@@ -5414,10 +5428,8 @@ module Aws::BedrockAgentCoreControl
     #   @return [Array<Types::PrivateEndpointOverride>]
     #
     # @!attribute [rw] private_key_jwt_config
-    #   Configuration for private\_key\_jwt client authentication (RFC
-    #   7523). On Create: privateKeySource and signingAlgorithm are required
-    #   (enforced server-side). On Update: all fields are optional — only
-    #   provided fields are updated.
+    #   The configuration for private\_key\_jwt client authentication used
+    #   by this OAuth2 credential provider.
     #   @return [Types::PrivateKeyJwtConfig]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CustomOauth2ProviderConfigOutput AWS API Documentation
@@ -6146,12 +6158,11 @@ module Aws::BedrockAgentCoreControl
     end
 
     # @!attribute [rw] rate_limit_id
-    #   Limit identifier. Optional on Create (system-generates if not
-    #   provided by customer). Always present in responses.
+    #   The unique identifier of the deleted rate limit.
     #   @return [String]
     #
     # @!attribute [rw] status
-    #   Status of a gateway limit
+    #   The current status of the rate limit deletion.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteGatewayRateLimitResponse AWS API Documentation
@@ -6835,6 +6846,27 @@ module Aws::BedrockAgentCoreControl
     #
     class DeleteWorkloadIdentityResponse < Aws::EmptyStructure; end
 
+    # The configuration for a derived evaluator. It reuses an existing
+    # evaluator's logic on your own model.
+    #
+    # @!attribute [rw] base_evaluator_id
+    #   The identifier of the base evaluator whose logic to run (a
+    #   `Builtin.*` or `ThirdParty.*` evaluator).
+    #   @return [String]
+    #
+    # @!attribute [rw] model_config
+    #   The configuration of the evaluator model that you supply.
+    #   @return [Types::EvaluatorModelConfig]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DerivedEvaluatorConfig AWS API Documentation
+    #
+    class DerivedEvaluatorConfig < Struct.new(
+      :base_evaluator_id,
+      :model_config)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains descriptor-type-specific configurations for a registry
     # record. Only the descriptor matching the record's `descriptorType`
     # should be populated.
@@ -7450,11 +7482,18 @@ module Aws::BedrockAgentCoreControl
     #   performance.
     #   @return [Types::CodeBasedEvaluatorConfig]
     #
+    # @!attribute [rw] derived
+    #   The configuration for an evaluator derived from an existing base
+    #   evaluator (a built-in or third-party evaluator), run on your own
+    #   model. The base evaluator supplies the prompt and scoring.
+    #   @return [Types::DerivedEvaluatorConfig]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/EvaluatorConfig AWS API Documentation
     #
     class EvaluatorConfig < Struct.new(
       :llm_as_a_judge,
       :code_based,
+      :derived,
       :unknown)
       SENSITIVE = []
       include Aws::Structure
@@ -7462,6 +7501,7 @@ module Aws::BedrockAgentCoreControl
 
       class LlmAsAJudge < EvaluatorConfig; end
       class CodeBased < EvaluatorConfig; end
+      class Derived < EvaluatorConfig; end
       class Unknown < EvaluatorConfig; end
     end
 
@@ -7544,6 +7584,11 @@ module Aws::BedrockAgentCoreControl
     #   provided by the service or a custom evaluator created by the user.
     #   @return [String]
     #
+    # @!attribute [rw] provider
+    #   The source of the evaluator's logic: Amazon Web Services, a
+    #   third-party library, or you.
+    #   @return [String]
+    #
     # @!attribute [rw] level
     #   The evaluation level (`TOOL_CALL`, `TRACE`, or `SESSION`) that
     #   determines the scope of evaluation.
@@ -7580,6 +7625,7 @@ module Aws::BedrockAgentCoreControl
       :evaluator_name,
       :description,
       :evaluator_type,
+      :provider,
       :level,
       :status,
       :created_at,
@@ -7890,11 +7936,11 @@ module Aws::BedrockAgentCoreControl
       class Unknown < GatewayProtocolConfiguration; end
     end
 
-    # Shared fields for GatewayRateLimit responses
+    # Contains detailed information about a gateway rate limit, including
+    # its configuration and current status.
     #
     # @!attribute [rw] rate_limit_id
-    #   Limit identifier. Optional on Create (system-generates if not
-    #   provided by customer). Always present in responses.
+    #   The unique identifier of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] gateway_identifier
@@ -7902,19 +7948,21 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   Optional human-readable description for this limit.
+    #   The human-readable description of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] dimension_keys
-    #   Ordered list of dimension key names defining the scope of a limit
+    #   The ordered list of dimension key names that define the scope of
+    #   this rate limit.
     #   @return [Array<String>]
     #
     # @!attribute [rw] entries
-    #   List of rule entries within a limit
+    #   The list of rule entries that map dimension values to rate
+    #   configurations.
     #   @return [Array<Types::LimitEntry>]
     #
     # @!attribute [rw] status
-    #   Status of a gateway limit
+    #   The current status of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] created_at
@@ -9063,6 +9111,27 @@ module Aws::BedrockAgentCoreControl
     #   code-based settings.
     #   @return [Types::EvaluatorConfig]
     #
+    # @!attribute [rw] evaluator_type
+    #   The kind of evaluator resource. Valid values:
+    #
+    #   * `Builtin` – An Amazon Web Services-managed global evaluator.
+    #
+    #   * `ThirdParty` – An Amazon Web Services-managed global evaluator
+    #     from a third-party provider.
+    #
+    #   * `Custom` – A customer-created evaluator.
+    #
+    #   * `CustomCode` – A customer-created code-based evaluator.
+    #
+    #   * `CustomDerived` – A customer-created evaluator derived from an
+    #     existing base evaluator.
+    #   @return [String]
+    #
+    # @!attribute [rw] provider
+    #   The source of the evaluator's logic: Amazon Web Services, a
+    #   third-party library, or you.
+    #   @return [String]
+    #
     # @!attribute [rw] level
     #   The evaluation level (`TOOL_CALL`, `TRACE`, or `SESSION`) that
     #   determines the scope of evaluation.
@@ -9099,6 +9168,8 @@ module Aws::BedrockAgentCoreControl
       :evaluator_name,
       :description,
       :evaluator_config,
+      :evaluator_type,
+      :provider,
       :level,
       :status,
       :created_at,
@@ -9126,11 +9197,10 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # Shared fields for GatewayRateLimit responses
+    # Shared fields for `GatewayRateLimit` responses.
     #
     # @!attribute [rw] rate_limit_id
-    #   Limit identifier. Optional on Create (system-generates if not
-    #   provided by customer). Always present in responses.
+    #   The unique identifier of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] gateway_identifier
@@ -9138,19 +9208,21 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   Optional human-readable description for this limit.
+    #   The human-readable description of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] dimension_keys
-    #   Ordered list of dimension key names defining the scope of a limit
+    #   The ordered list of dimension key names that define the scope of
+    #   this rate limit.
     #   @return [Array<String>]
     #
     # @!attribute [rw] entries
-    #   List of rule entries within a limit
+    #   The list of rule entries that map dimension values to rate
+    #   configurations.
     #   @return [Array<Types::LimitEntry>]
     #
     # @!attribute [rw] status
-    #   Status of a gateway limit
+    #   The current status of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] created_at
@@ -12944,27 +13016,30 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # A single rule entry within a limit, mapping dimension values to rate
-    # configurations
+    # A single rule entry within a rate limit that maps dimension values to
+    # rate configurations. Each entry defines the rate limits for a specific
+    # combination of dimension values.
     #
     # @!attribute [rw] dimensions
-    #   Map of dimension name to dimension value, matching the parent
-    #   limit's dimensionKeys. Keys must exactly match the dimensionKeys.
-    #   Values may be "*" as a wildcard. "*" may only appear at trailing
-    #   positions (based on dimensionKeys ordering).
+    #   A map of dimension names to dimension values for this rule entry.
+    #   Keys must match the parent rate limit's dimension keys. Values may
+    #   use `*` as a wildcard, but only in trailing positions based on the
+    #   dimension keys ordering.
     #   @return [Hash<String,String>]
     #
     # @!attribute [rw] requests
-    #   Request rate limits (RPS or RPM). Limited to 1 entry for now.
+    #   The request rate limit configuration. Specifies the maximum number
+    #   of requests allowed per time period.
     #   @return [Array<Types::RateConfig>]
     #
     # @!attribute [rw] tokens
-    #   Token rate limits (TPM). Limited to 1 entry for now. — P1
+    #   The token rate limit configuration. Specifies the maximum number of
+    #   tokens allowed per time period.
     #   @return [Array<Types::RateConfig>]
     #
     # @!attribute [rw] connections
-    #   Connection rate limits (per second only). Limited to 1 entry for
-    #   now. — P2
+    #   The connection rate limit configuration. Specifies the maximum
+    #   number of concurrent connections allowed.
     #   @return [Array<Types::RateConfig>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/LimitEntry AWS API Documentation
@@ -15235,6 +15310,12 @@ module Aws::BedrockAgentCoreControl
     #   used in metadata filters.
     #   @return [Array<Types::IndexedKey>]
     #
+    # @!attribute [rw] namespace_keys
+    #   The namespace variable key definitions for this memory. Namespace
+    #   keys define custom variables used in `namespaceTemplates` with
+    #   optional validation rules.
+    #   @return [Array<Types::NamespaceKeyEntry>]
+    #
     # @!attribute [rw] stream_delivery_resources
     #   Configuration for streaming memory record data to external
     #   resources.
@@ -15262,6 +15343,7 @@ module Aws::BedrockAgentCoreControl
       :updated_at,
       :strategies,
       :indexed_keys,
+      :namespace_keys,
       :stream_delivery_resources,
       :managed_by_resource_arn)
       SENSITIVE = [:description]
@@ -15818,6 +15900,48 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # A namespace variable key definition with optional
+    # `NamespaceKeyValidation` rules.
+    #
+    # @!attribute [rw] key
+    #   The namespace variable key name.
+    #   @return [String]
+    #
+    # @!attribute [rw] validation
+    #   The validation rules that constrain values for this namespace
+    #   variable at runtime (`CreateEvent` API).
+    #   @return [Types::NamespaceKeyValidation]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/NamespaceKeyEntry AWS API Documentation
+    #
+    class NamespaceKeyEntry < Struct.new(
+      :key,
+      :validation)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The validation rules for namespace variable values. When you specify
+    # multiple rules, the service enforces a logical `AND` across all
+    # provided key-value pairs.
+    #
+    # @!attribute [rw] allowed_values
+    #   The allowed values for this namespace variable key.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] regex_pattern
+    #   A regex pattern that the namespace variable key-value must match.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/NamespaceKeyValidation AWS API Documentation
+    #
+    class NamespaceKeyValidation < Struct.new(
+      :allowed_values,
+      :regex_pattern)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # SecurityConfig for the Agent.
     #
     # @!attribute [rw] network_mode
@@ -17221,10 +17345,8 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # Configuration for private\_key\_jwt client authentication (RFC 7523).
-    # On Create: privateKeySource and signingAlgorithm are required
-    # (enforced server-side). On Update: all fields are optional — only
-    # provided fields are updated.
+    # The private key configuration for private\_key\_jwt client
+    # authentication.
     #
     # @!attribute [rw] private_key_source
     #   The private key source for the JWT client assertion.
@@ -17352,7 +17474,8 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # Rate configuration for a metric (requests or tokens)
+    # Contains the rate configuration for a rate limit metric, specifying
+    # the allowed rate and time period.
     #
     # @!attribute [rw] rate
     #   The rate value for the limit. For request limits, this is the number
@@ -17362,7 +17485,11 @@ module Aws::BedrockAgentCoreControl
     #   @return [Float]
     #
     # @!attribute [rw] period
-    #   Time period for rate limiting
+    #   The time period for the rate limit. Valid values:
+    #
+    #   * `second`—Measures the rate limit over a one-second window.
+    #
+    #   * `minute`—Measures the rate limit over a one-minute window.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RateConfig AWS API Documentation
@@ -20565,12 +20692,12 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   Optional human-readable description for this limit.
+    #   The updated human-readable description for this rate limit.
     #   @return [String]
     #
     # @!attribute [rw] entries
-    #   Updated rule entries. key and dimensionKeys are immutable and cannot
-    #   be changed.
+    #   The updated rule entries. The dimension keys are immutable after
+    #   creation and cannot be changed.
     #   @return [Array<Types::LimitEntry>]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayRateLimitRequest AWS API Documentation
@@ -20584,11 +20711,10 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # Shared fields for GatewayRateLimit responses
+    # Shared fields for `GatewayRateLimit` responses.
     #
     # @!attribute [rw] rate_limit_id
-    #   Limit identifier. Optional on Create (system-generates if not
-    #   provided by customer). Always present in responses.
+    #   The unique identifier of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] gateway_identifier
@@ -20596,19 +20722,21 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] description
-    #   Optional human-readable description for this limit.
+    #   The human-readable description of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] dimension_keys
-    #   Ordered list of dimension key names defining the scope of a limit
+    #   The ordered list of dimension key names that define the scope of
+    #   this rate limit.
     #   @return [Array<String>]
     #
     # @!attribute [rw] entries
-    #   List of rule entries within a limit
+    #   The list of rule entries that map dimension values to rate
+    #   configurations.
     #   @return [Array<Types::LimitEntry>]
     #
     # @!attribute [rw] status
-    #   Status of a gateway limit
+    #   The current status of the rate limit.
     #   @return [String]
     #
     # @!attribute [rw] created_at
@@ -21313,6 +21441,12 @@ module Aws::BedrockAgentCoreControl
     #   removed.
     #   @return [Array<Types::IndexedKey>]
     #
+    # @!attribute [rw] namespace_keys
+    #   The namespace variable key definitions with validation rules for
+    #   this memory. Use this parameter to update existing `namespaceKey`
+    #   validation rules or add new keys when namespace templates change.
+    #   @return [Array<Types::NamespaceKeyEntry>]
+    #
     # @!attribute [rw] stream_delivery_resources
     #   Configuration for streaming memory record data to external
     #   resources.
@@ -21328,6 +21462,7 @@ module Aws::BedrockAgentCoreControl
       :memory_execution_role_arn,
       :memory_strategies,
       :add_indexed_keys,
+      :namespace_keys,
       :stream_delivery_resources)
       SENSITIVE = [:description]
       include Aws::Structure

data/lib/aws-sdk-bedrockagentcorecontrol.rb

@@ -55,7 +55,7 @@ module Aws::BedrockAgentCoreControl
   autoload :EndpointProvider, 'aws-sdk-bedrockagentcorecontrol/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-bedrockagentcorecontrol/endpoints'
 
-  GEM_VERSION = '1.64.0'
+  GEM_VERSION = '1.66.0'
 
 end
 

data/sig/client.rbs

@@ -444,7 +444,7 @@ module Aws
                             dataset_name: ::String,
                             ?description: ::String,
                             source: Params::data_source_type,
-                            schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1"),
+                            schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1" | "GENERIC_EVALUATION_PREDEFINED_V1"),
                             ?kms_key_arn: ::String,
                             ?tags: Hash[::String, ::String]
                           ) -> _CreateDatasetResponseSuccess
@@ -696,6 +696,15 @@ module Aws
                                type: ("STRING" | "STRINGLIST" | "NUMBER")
                              }
                            ],
+                           ?namespace_keys: Array[
+                             {
+                               key: ::String,
+                               validation: {
+                                 allowed_values: Array[::String]?,
+                                 regex_pattern: ::String?
+                               }?
+                             }
+                           ],
                            ?stream_delivery_resources: Params::stream_delivery_resources,
                            ?tags: Hash[::String, ::String]
                          ) -> _CreateMemoryResponseSuccess
@@ -1521,7 +1530,7 @@ module Aws
         def status: () -> ("CREATING" | "UPDATING" | "DELETING" | "ACTIVE" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
         def draft_status: () -> ("MODIFIED" | "UNMODIFIED")
         def failure_reason: () -> ::String
-        def schema_type: () -> ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1")
+        def schema_type: () -> ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1" | "GENERIC_EVALUATION_PREDEFINED_V1")
         def kms_key_arn: () -> ::String
         def example_count: () -> ::Integer
         def download_url: () -> ::String
@@ -1544,6 +1553,8 @@ module Aws
         def evaluator_name: () -> ::String
         def description: () -> ::String
         def evaluator_config: () -> Types::EvaluatorConfig
+        def evaluator_type: () -> ("Builtin" | "ThirdParty" | "Custom" | "CustomCode" | "CustomDerived")
+        def provider: () -> ("AWS" | "DeepEval" | "AutoEval" | "Custom")
         def level: () -> ("TOOL_CALL" | "TRACE" | "SESSION")
         def status: () -> ("ACTIVE" | "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "DELETING")
         def created_at: () -> ::Time
@@ -3056,6 +3067,15 @@ module Aws
                                type: ("STRING" | "STRINGLIST" | "NUMBER")
                              }
                            ],
+                           ?namespace_keys: Array[
+                             {
+                               key: ::String,
+                               validation: {
+                                 allowed_values: Array[::String]?,
+                                 regex_pattern: ::String?
+                               }?
+                             }
+                           ],
                            ?stream_delivery_resources: Params::stream_delivery_resources
                          ) -> _UpdateMemoryResponseSuccess
                        | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateMemoryResponseSuccess

data/sig/params.rbs

@@ -210,6 +210,11 @@ module Aws
       model_config: Params::evaluator_model_config
     }
 
+      type derived_evaluator_config = {
+      base_evaluator_id: ::String,
+      model_config: Params::evaluator_model_config
+    }
+
       type evaluator_config = {
       llm_as_a_judge: Params::llm_as_a_judge_evaluator_config?,
       code_based: {
@@ -217,7 +222,8 @@ module Aws
           lambda_arn: ::String,
           lambda_timeout_in_seconds: ::Integer?
         }?
-      }?
+      }?,
+      derived: Params::derived_evaluator_config?
     }
 
       type mcp_gateway_configuration = {

data/sig/types.rbs

@@ -757,7 +757,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor dataset_name: ::String
       attr_accessor description: ::String
       attr_accessor source: Types::DataSourceType
-      attr_accessor schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1")
+      attr_accessor schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1" | "GENERIC_EVALUATION_PREDEFINED_V1")
       attr_accessor kms_key_arn: ::String
       attr_accessor tags: ::Hash[::String, ::String]
       SENSITIVE: []
@@ -976,6 +976,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor event_expiry_duration: ::Integer
       attr_accessor memory_strategies: ::Array[Types::MemoryStrategyInput]
       attr_accessor indexed_keys: ::Array[Types::IndexedKey]
+      attr_accessor namespace_keys: ::Array[Types::NamespaceKeyEntry]
       attr_accessor stream_delivery_resources: Types::StreamDeliveryResources
       attr_accessor tags: ::Hash[::String, ::String]
       SENSITIVE: [:description]
@@ -1447,7 +1448,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor description: ::String
       attr_accessor status: ("CREATING" | "UPDATING" | "DELETING" | "ACTIVE" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
       attr_accessor draft_status: ("MODIFIED" | "UNMODIFIED")
-      attr_accessor schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1")
+      attr_accessor schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1" | "GENERIC_EVALUATION_PREDEFINED_V1")
       attr_accessor example_count: ::Integer
       attr_accessor created_at: ::Time
       attr_accessor updated_at: ::Time
@@ -1827,6 +1828,12 @@ module Aws::BedrockAgentCoreControl
     class DeleteWorkloadIdentityResponse < Aws::EmptyStructure
     end
 
+    class DerivedEvaluatorConfig
+      attr_accessor base_evaluator_id: ::String
+      attr_accessor model_config: Types::EvaluatorModelConfig
+      SENSITIVE: []
+    end
+
     class Descriptors
       attr_accessor mcp: Types::McpDescriptor
       attr_accessor a2a: Types::A2aDescriptor
@@ -1970,6 +1977,7 @@ module Aws::BedrockAgentCoreControl
     class EvaluatorConfig
       attr_accessor llm_as_a_judge: Types::LlmAsAJudgeEvaluatorConfig
       attr_accessor code_based: Types::CodeBasedEvaluatorConfig
+      attr_accessor derived: Types::DerivedEvaluatorConfig
       attr_accessor unknown: untyped
       SENSITIVE: []
 
@@ -1977,6 +1985,8 @@ module Aws::BedrockAgentCoreControl
       end
       class CodeBased < EvaluatorConfig
       end
+      class Derived < EvaluatorConfig
+      end
       class Unknown < EvaluatorConfig
       end
     end
@@ -2011,7 +2021,8 @@ module Aws::BedrockAgentCoreControl
       attr_accessor evaluator_id: ::String
       attr_accessor evaluator_name: ::String
       attr_accessor description: ::String
-      attr_accessor evaluator_type: ("Builtin" | "Custom" | "CustomCode")
+      attr_accessor evaluator_type: ("Builtin" | "ThirdParty" | "Custom" | "CustomCode" | "CustomDerived")
+      attr_accessor provider: ("AWS" | "DeepEval" | "AutoEval" | "Custom")
       attr_accessor level: ("TOOL_CALL" | "TRACE" | "SESSION")
       attr_accessor status: ("ACTIVE" | "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "DELETING")
       attr_accessor created_at: ::Time
@@ -2388,7 +2399,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor status: ("CREATING" | "UPDATING" | "DELETING" | "ACTIVE" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED")
       attr_accessor draft_status: ("MODIFIED" | "UNMODIFIED")
       attr_accessor failure_reason: ::String
-      attr_accessor schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1")
+      attr_accessor schema_type: ("AGENTCORE_EVALUATION_PREDEFINED_V1" | "AGENTCORE_EVALUATION_SIMULATED_V1" | "GENERIC_EVALUATION_PREDEFINED_V1")
       attr_accessor kms_key_arn: ::String
       attr_accessor example_count: ::Integer
       attr_accessor download_url: ::String
@@ -2411,6 +2422,8 @@ module Aws::BedrockAgentCoreControl
       attr_accessor evaluator_name: ::String
       attr_accessor description: ::String
       attr_accessor evaluator_config: Types::EvaluatorConfig
+      attr_accessor evaluator_type: ("Builtin" | "ThirdParty" | "Custom" | "CustomCode" | "CustomDerived")
+      attr_accessor provider: ("AWS" | "DeepEval" | "AutoEval" | "Custom")
       attr_accessor level: ("TOOL_CALL" | "TRACE" | "SESSION")
       attr_accessor status: ("ACTIVE" | "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "DELETING")
       attr_accessor created_at: ::Time
@@ -4168,6 +4181,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor updated_at: ::Time
       attr_accessor strategies: ::Array[Types::MemoryStrategy]
       attr_accessor indexed_keys: ::Array[Types::IndexedKey]
+      attr_accessor namespace_keys: ::Array[Types::NamespaceKeyEntry]
       attr_accessor stream_delivery_resources: Types::StreamDeliveryResources
       attr_accessor managed_by_resource_arn: ::String
       SENSITIVE: [:description]
@@ -4350,6 +4364,18 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class NamespaceKeyEntry
+      attr_accessor key: ::String
+      attr_accessor validation: Types::NamespaceKeyValidation
+      SENSITIVE: []
+    end
+
+    class NamespaceKeyValidation
+      attr_accessor allowed_values: ::Array[::String]
+      attr_accessor regex_pattern: ::String
+      SENSITIVE: []
+    end
+
     class NetworkConfiguration
       attr_accessor network_mode: ("PUBLIC" | "VPC")
       attr_accessor network_mode_config: Types::VpcConfig
@@ -5865,6 +5891,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor memory_execution_role_arn: ::String
       attr_accessor memory_strategies: Types::ModifyMemoryStrategies
       attr_accessor add_indexed_keys: ::Array[Types::IndexedKey]
+      attr_accessor namespace_keys: ::Array[Types::NamespaceKeyEntry]
       attr_accessor stream_delivery_resources: Types::StreamDeliveryResources
       SENSITIVE: [:description]
     end

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-bedrockagentcorecontrol
 version: !ruby/object:Gem::Version
-  version: 1.64.0
+  version: 1.66.0
 platform: ruby
 authors:
 - Amazon Web Services