aws-sdk-bedrockagentcorecontrol 1.67.0 → 1.69.0

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -1268,6 +1268,13 @@ module Aws::BedrockAgentCoreControl
     #   The list of CloudWatch log group names to monitor for agent traces.
     #   @return [Array<String>]
     #
+    # @!attribute [rw] log_group_name_prefixes
+    #   The list of CloudWatch log group name prefixes to monitor for agent
+    #   traces. Specify this instead of `logGroupNames` to match log groups
+    #   by prefix. Specify either `logGroupNames` or `logGroupNamePrefixes`,
+    #   not both. One of the two is required.
+    #   @return [Array<String>]
+    #
     # @!attribute [rw] service_names
     #   The list of service names to filter traces within the specified log
     #   groups. Used to identify relevant agent sessions.
@@ -1277,6 +1284,7 @@ module Aws::BedrockAgentCoreControl
     #
     class CloudWatchLogsInputConfig < Struct.new(
       :log_group_names,
+      :log_group_name_prefixes,
       :service_names)
       SENSITIVE = []
       include Aws::Structure
@@ -1287,13 +1295,39 @@ module Aws::BedrockAgentCoreControl
     #
     # @!attribute [rw] log_group_name
     #   The name of the CloudWatch log group where evaluation results will
-    #   be written. The log group will be created if it doesn't exist.
+    #   be written. An existing log group is used as-is; otherwise the
+    #   service creates it, which requires the evaluation execution role to
+    #   grant `logs:CreateLogGroup` on the log group. Don't specify this
+    #   value when `resultDestination` is `SOURCE_LOG_GROUP`. The name
+    #   can't be under the service-reserved
+    #   `/aws/bedrock-agentcore/evaluations/` namespace, apart from this
+    #   configuration's own service-managed default group.
+    #   @return [String]
+    #
+    # @!attribute [rw] metrics_namespace
+    #   The CloudWatch metrics namespace where evaluation result metrics are
+    #   published. If you omit this value, the service publishes metrics to
+    #   `Bedrock-AgentCore/Evaluations`. This value can't begin with
+    #   `AWS/`.
+    #   @return [String]
+    #
+    # @!attribute [rw] result_destination
+    #   The destination where evaluation results are written. Valid values:
+    #
+    #   * `DEDICATED_LOG_GROUP` (default) – Writes results to a dedicated
+    #     result log group.
+    #
+    #   * `SOURCE_LOG_GROUP` – Writes results back to the log group that the
+    #     agent traces were read from. If you use this value, don't specify
+    #     `logGroupName`.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CloudWatchOutputConfig AWS API Documentation
     #
     class CloudWatchOutputConfig < Struct.new(
-      :log_group_name)
+      :log_group_name,
+      :metrics_namespace,
+      :result_destination)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -1894,6 +1928,108 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The identity provider configuration used to authenticate end users to
+    # the consent portal.
+    #
+    # @!attribute [rw] credential_provider_arn
+    #   The Amazon Resource Name (ARN) of the OAuth2 credential provider
+    #   used to authenticate end users to the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] scopes
+    #   The OAuth2 scopes that the consent portal requests when
+    #   authenticating end users.
+    #   @return [Array<String>]
+    #
+    # @!attribute [rw] audience
+    #   The audience value that the consent portal includes when requesting
+    #   tokens from the identity provider.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ConsentPortalIdpConfig AWS API Documentation
+    #
+    class ConsentPortalIdpConfig < Struct.new(
+      :credential_provider_arn,
+      :scopes,
+      :audience)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # A resource served by the consent portal.
+    #
+    # @!attribute [rw] identifier
+    #   The identifier of the source resource. For an `agentcore-gateway`
+    #   source, this is the gateway ID or its Amazon Resource Name (ARN).
+    #   @return [String]
+    #
+    # @!attribute [rw] type
+    #   The type of the source resource.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ConsentPortalSource AWS API Documentation
+    #
+    class ConsentPortalSource < Struct.new(
+      :identifier,
+      :type)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # Summary information about a consent portal.
+    #
+    # @!attribute [rw] sources
+    #   The resources served by the consent portal.
+    #   @return [Array<Types::ConsentPortalSource>]
+    #
+    # @!attribute [rw] consent_portal_arn
+    #   The Amazon Resource Name (ARN) of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] consent_portal_id
+    #   The unique identifier of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp for when the consent portal was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] description
+    #   The description of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] name
+    #   The name of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] portal_url
+    #   The URL used to access the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp for when the consent portal was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ConsentPortalSummary AWS API Documentation
+    #
+    class ConsentPortalSummary < Struct.new(
+      :sources,
+      :consent_portal_arn,
+      :consent_portal_id,
+      :created_at,
+      :description,
+      :name,
+      :portal_url,
+      :status,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Contains consolidation configuration information for a memory
     # strategy.
     #
@@ -1940,7 +2076,7 @@ module Aws::BedrockAgentCoreControl
     # @!attribute [rw] raw_text
     #   The raw text content containing natural language descriptions of
     #   desired policy behavior. This text is processed by AI to generate
-    #   corresponding Cedar policy statements that match the described
+    #   corresponding Dogwood policy statements that match the described
     #   intent.
     #   @return [String]
     #
@@ -2713,6 +2849,119 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] execution_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that the consent
+    #   portal assumes to access the resources defined in its sources.
+    #   @return [String]
+    #
+    # @!attribute [rw] idp_config
+    #   The identity provider configuration that the consent portal uses to
+    #   authenticate end users.
+    #   @return [Types::ConsentPortalIdpConfig]
+    #
+    # @!attribute [rw] name
+    #   The name of the consent portal. The name must be unique within your
+    #   account.
+    #   @return [String]
+    #
+    # @!attribute [rw] sources
+    #   The resources served by the consent portal. Currently, we only
+    #   support type `agentcore-gateway`.
+    #   @return [Array<Types::ConsentPortalSource>]
+    #
+    # @!attribute [rw] description
+    #   The description of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] tags
+    #   A map of tag keys and values to assign to the consent portal. Tags
+    #   enable you to categorize your resources in different ways, for
+    #   example, by purpose, owner, or environment.
+    #   @return [Hash<String,String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateConsentPortalRequest AWS API Documentation
+    #
+    class CreateConsentPortalRequest < Struct.new(
+      :execution_role_arn,
+      :idp_config,
+      :name,
+      :sources,
+      :description,
+      :tags)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] sources
+    #   The resources served by the consent portal.
+    #   @return [Array<Types::ConsentPortalSource>]
+    #
+    # @!attribute [rw] consent_portal_arn
+    #   The Amazon Resource Name (ARN) of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] consent_portal_id
+    #   The unique identifier of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp for when the consent portal was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] description
+    #   The description of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] execution_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that the consent
+    #   portal assumes to access the resources defined in its sources.
+    #   @return [String]
+    #
+    # @!attribute [rw] idp_config
+    #   The identity provider configuration that the consent portal uses to
+    #   authenticate end users.
+    #   @return [Types::ConsentPortalIdpConfig]
+    #
+    # @!attribute [rw] name
+    #   The name of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] portal_url
+    #   The URL used to access the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_reason
+    #   A message that provides additional information about the current
+    #   status of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp for when the consent portal was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateConsentPortalResponse AWS API Documentation
+    #
+    class CreateConsentPortalResponse < Struct.new(
+      :sources,
+      :consent_portal_arn,
+      :consent_portal_id,
+      :created_at,
+      :description,
+      :execution_role_arn,
+      :idp_config,
+      :name,
+      :portal_url,
+      :status,
+      :status_reason,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] client_token
     #   A unique, case-sensitive identifier to ensure that the API request
     #   completes no more than one time. If you don't specify this field, a
@@ -3977,6 +4226,11 @@ module Aws::BedrockAgentCoreControl
     #   results.
     #   @return [Types::ClusteringConfig]
     #
+    # @!attribute [rw] output_config
+    #   The configuration that specifies where evaluation results should be
+    #   written for monitoring and analysis.
+    #   @return [Types::OutputConfig]
+    #
     # @!attribute [rw] evaluation_execution_role_arn
     #   The Amazon Resource Name (ARN) of the IAM role that grants
     #   permissions to read from CloudWatch logs, write evaluation results,
@@ -4014,6 +4268,7 @@ module Aws::BedrockAgentCoreControl
       :evaluators,
       :insights,
       :clustering_config,
+      :output_config,
       :evaluation_execution_role_arn,
       :enable_on_create,
       :tags)
@@ -4499,10 +4754,10 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] definition
-    #   The Cedar policy statement that defines the access control rules.
-    #   This contains the actual policy logic written in Cedar policy
-    #   language, specifying effect (permit or forbid), principals, actions,
-    #   resources, and conditions for agent behavior control.
+    #   The Cedar or Dogwood policy statement that defines the access
+    #   control rules. This contains the actual policy logic written in
+    #   Cedar or Dogwood, specifying effect (permit or forbid), principals,
+    #   actions, resources, and conditions for agent behavior control.
     #   @return [Types::PolicyDefinition]
     #
     # @!attribute [rw] description
@@ -4612,9 +4867,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] definition
-    #   The Cedar policy statement that was created. This is the validated
-    #   policy definition that will be used for agent behavior control and
-    #   access decisions.
+    #   The Cedar or Dogwood policy statement that was created. This is the
+    #   validated policy definition that will be used for agent behavior
+    #   control and access decisions.
     #   @return [Types::PolicyDefinition]
     #
     # @!attribute [rw] description
@@ -5990,6 +6245,23 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] consent_portal_identifier
+    #   The identifier of the consent portal. You can specify either the
+    #   consent portal ID or its Amazon Resource Name (ARN).
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteConsentPortalRequest AWS API Documentation
+    #
+    class DeleteConsentPortalRequest < Struct.new(
+      :consent_portal_identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteConsentPortalResponse AWS API Documentation
+    #
+    class DeleteConsentPortalResponse < Aws::EmptyStructure; end
+
     # @!attribute [rw] dataset_id
     #   The unique identifier of the dataset.
     #   @return [String]
@@ -7880,10 +8152,10 @@ module Aws::BedrockAgentCoreControl
     # allow or deny each action based on the defined policies.
     #
     # @!attribute [rw] arn
-    #   The ARN of the policy engine. The policy engine contains Cedar
-    #   policies that define fine-grained authorization rules specifying who
-    #   can perform what actions on which resources as agents interact
-    #   through the gateway.
+    #   The ARN of the policy engine. The policy engine contains Cedar or
+    #   Dogwood policies that define fine-grained authorization rules
+    #   specifying who can perform what actions on which resources as agents
+    #   interact through the gateway.
     #   @return [String]
     #
     # @!attribute [rw] mode
@@ -8953,6 +9225,89 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] consent_portal_identifier
+    #   The identifier of the consent portal. You can specify either the
+    #   consent portal ID or its Amazon Resource Name (ARN).
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetConsentPortalRequest AWS API Documentation
+    #
+    class GetConsentPortalRequest < Struct.new(
+      :consent_portal_identifier)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] sources
+    #   The resources served by the consent portal.
+    #   @return [Array<Types::ConsentPortalSource>]
+    #
+    # @!attribute [rw] consent_portal_arn
+    #   The Amazon Resource Name (ARN) of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] consent_portal_id
+    #   The unique identifier of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp for when the consent portal was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] description
+    #   The description of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] execution_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that the consent
+    #   portal assumes to access the resources defined in its sources.
+    #   @return [String]
+    #
+    # @!attribute [rw] idp_config
+    #   The identity provider configuration that the consent portal uses to
+    #   authenticate end users.
+    #   @return [Types::ConsentPortalIdpConfig]
+    #
+    # @!attribute [rw] name
+    #   The name of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] portal_url
+    #   The URL used to access the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_reason
+    #   A message that provides additional information about the current
+    #   status of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp for when the consent portal was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetConsentPortalResponse AWS API Documentation
+    #
+    class GetConsentPortalResponse < Struct.new(
+      :sources,
+      :consent_portal_arn,
+      :consent_portal_id,
+      :created_at,
+      :description,
+      :execution_role_arn,
+      :idp_config,
+      :name,
+      :portal_url,
+      :status,
+      :status_reason,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] dataset_id
     #   The unique identifier of the dataset to retrieve.
     #   @return [String]
@@ -10449,9 +10804,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] definition
-    #   The Cedar policy statement that defines the access control rules.
-    #   This contains the actual policy logic used for agent behavior
-    #   control and access decisions.
+    #   The Cedar or Dogwood policy statement that defines the access
+    #   control rules. This contains the actual policy logic used for agent
+    #   behavior control and access decisions.
     #   @return [Types::PolicyDefinition]
     #
     # @!attribute [rw] description
@@ -13571,6 +13926,43 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] max_results
+    #   The maximum number of consent portals to return in a single call.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] next_token
+    #   A token to retrieve the next page of results. Use the value returned
+    #   in a previous response to request the next page.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListConsentPortalsRequest AWS API Documentation
+    #
+    class ListConsentPortalsRequest < Struct.new(
+      :max_results,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] consent_portals
+    #   The list of consent portals.
+    #   @return [Array<Types::ConsentPortalSummary>]
+    #
+    # @!attribute [rw] next_token
+    #   The token to use in a subsequent request to retrieve the next page
+    #   of results. This value is null when there are no more results to
+    #   return.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListConsentPortalsResponse AWS API Documentation
+    #
+    class ListConsentPortalsResponse < Struct.new(
+      :consent_portals,
+      :next_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] dataset_id
     #   The unique identifier of the dataset.
     #   @return [String]
@@ -14480,7 +14872,7 @@ module Aws::BedrockAgentCoreControl
     end
 
     # @!attribute [rw] policy_generation_assets
-    #   An array of generated policy assets including Cedar policies and
+    #   An array of generated policy assets including Dogwood policies and
     #   related artifacts from the AI-powered policy generation process.
     #   Each asset represents a different policy option or variation
     #   generated from the original natural language input.
@@ -16762,17 +17154,17 @@ module Aws::BedrockAgentCoreControl
     end
 
     # Represents a complete policy resource within the AgentCore Policy
-    # system. Policies are ARN-able resources that contain Cedar policy
-    # statements and associated metadata for controlling agent behavior and
-    # access decisions. Each policy belongs to a policy engine and defines
-    # fine-grained authorization rules that are evaluated in real-time as
-    # agents interact with tools through Gateway. Policies use the Cedar
-    # policy language to specify who (principals based on OAuth claims like
+    # system. Policies are ARN-able resources that contain Cedar or Dogwood
+    # policy statements and associated metadata for controlling agent
+    # behavior and access decisions. Each policy belongs to a policy engine
+    # and defines fine-grained authorization rules that are evaluated in
+    # real-time as agents interact with tools through Gateway. Policies use
+    # Cedar or Dogwood to specify who (principals based on OAuth claims like
     # username, role, or scope) can perform what actions (tool calls) on
     # which resources (Gateways), with optional conditions for
     # attribute-based access control. Multiple policies can apply to a
-    # single request, with Cedar's forbid-wins semantics ensuring that
-    # security restrictions are never accidentally overridden.
+    # single request, with forbid-wins semantics ensuring that security
+    # restrictions are never accidentally overridden.
     #
     # @!attribute [rw] policy_id
     #   The unique identifier for the policy. This system-generated
@@ -16818,9 +17210,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] definition
-    #   The Cedar policy statement that defines the access control rules.
-    #   This contains the actual policy logic used for agent behavior
-    #   control and access decisions.
+    #   The Cedar or Dogwood policy statement that defines the access
+    #   control rules. This contains the actual policy logic used for agent
+    #   behavior control and access decisions.
     #   @return [Types::PolicyDefinition]
     #
     # @!attribute [rw] description
@@ -16879,15 +17271,16 @@ module Aws::BedrockAgentCoreControl
     #   The generated policy asset information within the policy definition
     #   structure. This contains information identifying a generated policy
     #   asset from the AI-powered policy generation process within the
-    #   AgentCore Policy system. Each asset contains a Cedar policy
+    #   AgentCore Policy system. Each asset contains a Dogwood policy
     #   statement generated from natural language input, along with
     #   associated metadata and analysis findings to help users evaluate and
     #   select the most appropriate policy option.
     #   @return [Types::PolicyGenerationDetails]
     #
     # @!attribute [rw] policy
-    #   An AgentCore policy statement that defines the access control rules.
-    #   The statement can be a Cedar policy or a guardrails definition.
+    #   The Dogwood policy statement that defines the access control rules.
+    #   This policy definition can include Dogwood policies and supports
+    #   temporal conditions and information providers such as guardrails.
     #   @return [Types::PolicyStatement]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/PolicyDefinition AWS API Documentation
@@ -17040,7 +17433,7 @@ module Aws::BedrockAgentCoreControl
 
     # Represents a policy generation request within the AgentCore Policy
     # system. Tracks the AI-powered conversion of natural language
-    # descriptions into Cedar policy statements, enabling users to author
+    # descriptions into Dogwood policy statements, enabling users to author
     # policies by describing authorization requirements in plain English.
     # The generation process analyzes the natural language input along with
     # the Gateway's tool context and Cedar schema to produce one or more
@@ -17111,7 +17504,7 @@ module Aws::BedrockAgentCoreControl
 
     # Represents a generated policy asset from the AI-powered policy
     # generation process within the AgentCore Policy system. Each asset
-    # contains a Cedar policy statement generated from natural language
+    # contains a Dogwood policy statement generated from natural language
     # input, along with associated metadata and analysis findings to help
     # users evaluate and select the most appropriate policy option.
     #
@@ -17133,13 +17526,13 @@ module Aws::BedrockAgentCoreControl
     #   The portion of the original natural language input that this
     #   generated policy asset addresses. This helps users understand which
     #   part of their policy description was translated into this specific
-    #   Cedar policy statement, enabling better policy selection and
+    #   Dogwood policy statement, enabling better policy selection and
     #   refinement. When a single natural language input describes multiple
     #   authorization requirements, the generation process creates separate
     #   policy assets for each requirement, with each asset's
     #   rawTextFragment showing which requirement it addresses. Use this
     #   mapping to verify that all parts of your natural language input were
-    #   correctly translated into Cedar policies.
+    #   correctly translated into Dogwood policies.
     #   @return [String]
     #
     # @!attribute [rw] findings
@@ -17162,7 +17555,7 @@ module Aws::BedrockAgentCoreControl
 
     # Represents the information identifying a generated policy asset from
     # the AI-powered policy generation process within the AgentCore Policy
-    # system. Each asset contains a Cedar policy statement generated from
+    # system. Each asset contains a Dogwood policy statement generated from
     # natural language input, along with associated metadata and analysis
     # findings to help users evaluate and select the most appropriate policy
     # option.
@@ -17244,12 +17637,13 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
-    # An AgentCore policy statement, which supports plain Cedar policies as
-    # well as guardrails definitions.
+    # An AgentCore Cedar or Dogwood policy statement, which supports plain
+    # Cedar policies, temporal policies, and guardrails definitions.
     #
     # @!attribute [rw] statement
-    #   The body of the AgentCore policy statement. Contains the policy
-    #   logic, which can be a Cedar policy or a guardrails definition.
+    #   The body of the AgentCore Cedar or Dogwood policy statement.
+    #   Contains the policy logic, which can be a Cedar policy, a temporal
+    #   policy, or a guardrails definition.
     #   @return [String]
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/PolicyStatement AWS API Documentation
@@ -18870,7 +19264,7 @@ module Aws::BedrockAgentCoreControl
     #
     # @!attribute [rw] content
     #   The natural language description of the desired policy behavior.
-    #   This content is processed by AI to generate corresponding Cedar
+    #   This content is processed by AI to generate corresponding Dogwood
     #   policy statements that match the described intent.
     #   @return [Types::Content]
     #
@@ -20496,6 +20890,106 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] consent_portal_identifier
+    #   The identifier of the consent portal. You can specify either the
+    #   consent portal ID or its Amazon Resource Name (ARN).
+    #   @return [String]
+    #
+    # @!attribute [rw] execution_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that the consent
+    #   portal assumes to access the resources defined in its sources.
+    #   @return [String]
+    #
+    # @!attribute [rw] idp_config
+    #   The identity provider configuration that the consent portal uses to
+    #   authenticate end users.
+    #   @return [Types::ConsentPortalIdpConfig]
+    #
+    # @!attribute [rw] description
+    #   The description of the consent portal.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateConsentPortalRequest AWS API Documentation
+    #
+    class UpdateConsentPortalRequest < Struct.new(
+      :consent_portal_identifier,
+      :execution_role_arn,
+      :idp_config,
+      :description)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] sources
+    #   The resources served by the consent portal.
+    #   @return [Array<Types::ConsentPortalSource>]
+    #
+    # @!attribute [rw] consent_portal_arn
+    #   The Amazon Resource Name (ARN) of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] consent_portal_id
+    #   The unique identifier of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] created_at
+    #   The timestamp for when the consent portal was created.
+    #   @return [Time]
+    #
+    # @!attribute [rw] description
+    #   The description of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] execution_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that the consent
+    #   portal assumes to access the resources defined in its sources.
+    #   @return [String]
+    #
+    # @!attribute [rw] idp_config
+    #   The identity provider configuration that the consent portal uses to
+    #   authenticate end users.
+    #   @return [Types::ConsentPortalIdpConfig]
+    #
+    # @!attribute [rw] name
+    #   The name of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] portal_url
+    #   The URL used to access the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] status
+    #   The current status of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] status_reason
+    #   A message that provides additional information about the current
+    #   status of the consent portal.
+    #   @return [String]
+    #
+    # @!attribute [rw] updated_at
+    #   The timestamp for when the consent portal was last updated.
+    #   @return [Time]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateConsentPortalResponse AWS API Documentation
+    #
+    class UpdateConsentPortalResponse < Struct.new(
+      :sources,
+      :consent_portal_arn,
+      :consent_portal_id,
+      :created_at,
+      :description,
+      :execution_role_arn,
+      :idp_config,
+      :name,
+      :portal_url,
+      :status,
+      :status_reason,
+      :updated_at)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # @!attribute [rw] dataset_id
     #   The unique identifier of the dataset.
     #   @return [String]
@@ -21646,6 +22140,11 @@ module Aws::BedrockAgentCoreControl
     #   The updated clustering configuration for periodic batch evaluation.
     #   @return [Types::ClusteringConfig]
     #
+    # @!attribute [rw] output_config
+    #   The configuration that specifies where evaluation results should be
+    #   written for monitoring and analysis.
+    #   @return [Types::OutputConfig]
+    #
     # @!attribute [rw] evaluation_execution_role_arn
     #   The updated Amazon Resource Name (ARN) of the IAM role used for
     #   evaluation execution.
@@ -21667,6 +22166,7 @@ module Aws::BedrockAgentCoreControl
       :evaluators,
       :insights,
       :clustering_config,
+      :output_config,
       :evaluation_execution_role_arn,
       :execution_status)
       SENSITIVE = [:description]
@@ -22079,9 +22579,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [Types::UpdatedDescription]
     #
     # @!attribute [rw] definition
-    #   The new Cedar policy statement that defines the access control
-    #   rules. This replaces the existing policy definition with new logic
-    #   while maintaining the policy's identity.
+    #   The new Cedar or Dogwood policy statement that defines the access
+    #   control rules. This replaces the existing policy definition with new
+    #   logic while maintaining the policy's identity.
     #   @return [Types::PolicyDefinition]
     #
     # @!attribute [rw] validation_mode
@@ -22149,7 +22649,7 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] definition
-    #   The updated Cedar policy statement.
+    #   The updated Cedar or Dogwood policy statement.
     #   @return [Types::PolicyDefinition]
     #
     # @!attribute [rw] description