aws-sdk-bedrockagentcorecontrol 1.73.0 → 1.75.0

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -1602,6 +1602,30 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Specifies the service-managed Coinbase CDP secrets to rotate.
+    #
+    # @!attribute [rw] secrets
+    #   The secrets to rotate. Specify at least one value. Each secret that
+    #   you specify is rotated independently.
+    #
+    #   * `API_KEY` - The API key that the payment connector uses to call
+    #     Coinbase CDP. Rotate it as routine maintenance, or if you suspect
+    #     that it is compromised.
+    #
+    #   * `WALLET_SECRET` - The wallet secret that signs transactions.
+    #     Rotate it only if it is lost or compromised. Coinbase CDP allows
+    #     one wallet secret per project, so it is replaced in place and
+    #     signing can be briefly interrupted.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CoinbaseCdpRotationTargets AWS API Documentation
+    #
+    class CoinbaseCdpRotationTargets < Struct.new(
+      :secrets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The configuration for a component within a configuration bundle. The
     # component type is inferred from the component identifier ARN.
     #
@@ -3949,6 +3973,10 @@ module Aws::BedrockAgentCoreControl
     #   it exceeds model limits.
     #   @return [Types::HarnessTruncationConfiguration]
     #
+    # @!attribute [rw] hooks
+    #   The lifecycle hooks to run at defined points in the agent loop.
+    #   @return [Array<Types::HarnessHook>]
+    #
     # @!attribute [rw] max_iterations
     #   The maximum number of iterations the agent loop can execute per
     #   invocation.
@@ -3985,6 +4013,7 @@ module Aws::BedrockAgentCoreControl
       :allowed_tools,
       :memory,
       :truncation,
+      :hooks,
       :max_iterations,
       :max_tokens,
       :timeout_seconds,
@@ -5196,6 +5225,28 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Specifies the service-managed credentials to rotate. Provide the
+    # member that matches the payment connector's `type`.
+    #
+    # @note CredentialRotationConfig is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @!attribute [rw] coinbase_cdp
+    #   The credentials to rotate for a Coinbase CDP payment connector.
+    #   @return [Types::CoinbaseCdpRotationTargets]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CredentialRotationConfig AWS API Documentation
+    #
+    class CredentialRotationConfig < Struct.new(
+      :coinbase_cdp,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class CoinbaseCdp < CredentialRotationConfig; end
+      class Unknown < CredentialRotationConfig; end
+    end
+
     # The credential provider configuration for a payment connector.
     # Specifies the payment provider type and its associated credential
     # provider.
@@ -10259,6 +10310,20 @@ module Aws::BedrockAgentCoreControl
     #   provider integration.
     #   @return [String]
     #
+    # @!attribute [rw] provision_mode
+    #   Specifies how the payment connector was provisioned. Payment
+    #   connectors that were created before this field was available return
+    #   `MANUAL`.
+    #
+    #   * `MANUAL` - You provided the credential provider configurations, so
+    #     you own the credentials. Rotate them with the payment provider,
+    #     then call `UpdatePaymentCredentialProvider`.
+    #
+    #   * `QUICK_CREATE` - AgentCore provisioned the credential provider for
+    #     you, so the credentials are service-managed. You can rotate them
+    #     with `RotatePaymentConnectorCredentials`.
+    #   @return [String]
+    #
     # @!attribute [rw] credential_provider_configurations
     #   The credential provider configurations for the payment connector.
     #   @return [Array<Types::CredentialsProviderConfiguration>]
@@ -10283,6 +10348,14 @@ module Aws::BedrockAgentCoreControl
     #   `PENDING_AUTHENTICATION`.
     #   @return [String]
     #
+    # @!attribute [rw] credentials_updated_at
+    #   The timestamp when the payment connector's current service-managed
+    #   credentials took effect. It is first set when the credentials are
+    #   provisioned and is updated by each rotation. This field is present
+    #   only for payment connectors with a `provisionMode` of
+    #   `QUICK_CREATE`.
+    #   @return [Time]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetPaymentConnectorResponse AWS API Documentation
     #
     class GetPaymentConnectorResponse < Struct.new(
@@ -10290,11 +10363,13 @@ module Aws::BedrockAgentCoreControl
       :name,
       :description,
       :type,
+      :provision_mode,
       :credential_provider_configurations,
       :created_at,
       :last_updated_at,
       :status,
-      :authorization_url)
+      :authorization_url,
+      :credentials_updated_at)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -11403,6 +11478,10 @@ module Aws::BedrockAgentCoreControl
     #   memory.
     #   @return [Types::HarnessMemoryConfiguration]
     #
+    # @!attribute [rw] hooks
+    #   The lifecycle hooks configured for the harness.
+    #   @return [Array<Types::HarnessHook>]
+    #
     # @!attribute [rw] max_iterations
     #   The maximum number of iterations in the agent loop allowed before
     #   exiting per invocation.
@@ -11443,6 +11522,7 @@ module Aws::BedrockAgentCoreControl
       :environment_variables,
       :authorizer_configuration,
       :memory,
+      :hooks,
       :max_iterations,
       :max_tokens,
       :timeout_seconds,
@@ -11451,6 +11531,44 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The configuration for a hook that runs after an invocation completes.
+    #
+    # @!attribute [rw] name
+    #   The name of the hook.
+    #   @return [String]
+    #
+    # @!attribute [rw] target
+    #   The target that receives the hook event.
+    #   @return [Types::HarnessHookTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessAfterInvocationHook AWS API Documentation
+    #
+    class HarnessAfterInvocationHook < Struct.new(
+      :name,
+      :target)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for a hook that runs after a tool call completes.
+    #
+    # @!attribute [rw] name
+    #   The name of the hook.
+    #   @return [String]
+    #
+    # @!attribute [rw] target
+    #   The target that receives the hook event.
+    #   @return [Types::HarnessHookTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessAfterToolCallHook AWS API Documentation
+    #
+    class HarnessAfterToolCallHook < Struct.new(
+      :name,
+      :target)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Configuration for AgentCore Browser.
     #
     # @!attribute [rw] browser_arn
@@ -11665,6 +11783,44 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # The configuration for a hook that runs before an invocation begins.
+    #
+    # @!attribute [rw] name
+    #   The name of the hook.
+    #   @return [String]
+    #
+    # @!attribute [rw] target
+    #   The target that receives the hook event.
+    #   @return [Types::HarnessHookTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessBeforeInvocationHook AWS API Documentation
+    #
+    class HarnessBeforeInvocationHook < Struct.new(
+      :name,
+      :target)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for a hook that runs before the agent calls a tool.
+    #
+    # @!attribute [rw] name
+    #   The name of the hook.
+    #   @return [String]
+    #
+    # @!attribute [rw] target
+    #   The target that receives the hook event.
+    #   @return [Types::HarnessHookTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessBeforeToolCallHook AWS API Documentation
+    #
+    class HarnessBeforeToolCallHook < Struct.new(
+      :name,
+      :target)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # Explicitly opt out of memory.
     #
     # @api private
@@ -11890,6 +12046,140 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # A lifecycle hook configuration. Specify one hook type.
+    #
+    # @note HarnessHook is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note HarnessHook is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of HarnessHook corresponding to the set member.
+    #
+    # @!attribute [rw] before_invocation
+    #   A hook that runs before an invocation begins.
+    #   @return [Types::HarnessBeforeInvocationHook]
+    #
+    # @!attribute [rw] after_invocation
+    #   A hook that runs after an invocation completes.
+    #   @return [Types::HarnessAfterInvocationHook]
+    #
+    # @!attribute [rw] before_tool_call
+    #   A hook that runs before the agent calls a tool.
+    #   @return [Types::HarnessBeforeToolCallHook]
+    #
+    # @!attribute [rw] after_tool_call
+    #   A hook that runs after a tool call completes.
+    #   @return [Types::HarnessAfterToolCallHook]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessHook AWS API Documentation
+    #
+    class HarnessHook < Struct.new(
+      :before_invocation,
+      :after_invocation,
+      :before_tool_call,
+      :after_tool_call,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class BeforeInvocation < HarnessHook; end
+      class AfterInvocation < HarnessHook; end
+      class BeforeToolCall < HarnessHook; end
+      class AfterToolCall < HarnessHook; end
+      class Unknown < HarnessHook; end
+    end
+
+    # The configuration for an Amazon EventBridge hook target.
+    #
+    # @!attribute [rw] arn
+    #   The ARN of the Amazon EventBridge event bus to send hook events to.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessHookEventBridgeTarget AWS API Documentation
+    #
+    class HarnessHookEventBridgeTarget < Struct.new(
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for an AWS Lambda hook target.
+    #
+    # @!attribute [rw] arn
+    #   The ARN of the Lambda function to invoke.
+    #   @return [String]
+    #
+    # @!attribute [rw] timeout_seconds
+    #   The maximum number of seconds to wait for the Lambda function
+    #   response. The default is 60 seconds.
+    #   @return [Integer]
+    #
+    # @!attribute [rw] failure_mode
+    #   The behavior when the Lambda function times out, returns an error,
+    #   or returns an invalid response. The default is `DENY`.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessHookLambdaTarget AWS API Documentation
+    #
+    class HarnessHookLambdaTarget < Struct.new(
+      :arn,
+      :timeout_seconds,
+      :failure_mode)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The configuration for an Amazon SNS hook target.
+    #
+    # @!attribute [rw] arn
+    #   The ARN of the Amazon SNS topic to publish hook events to.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessHookSnsTarget AWS API Documentation
+    #
+    class HarnessHookSnsTarget < Struct.new(
+      :arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # The target that receives lifecycle hook events. Specify one target
+    # type.
+    #
+    # @note HarnessHookTarget is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note HarnessHookTarget is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of HarnessHookTarget corresponding to the set member.
+    #
+    # @!attribute [rw] lambda
+    #   A Lambda hook target that invokes an AWS Lambda function
+    #   synchronously and waits for its response.
+    #   @return [Types::HarnessHookLambdaTarget]
+    #
+    # @!attribute [rw] sns
+    #   An Amazon SNS hook target that publishes the hook event without
+    #   waiting for a response.
+    #   @return [Types::HarnessHookSnsTarget]
+    #
+    # @!attribute [rw] event_bridge
+    #   An Amazon EventBridge hook target that sends the hook event without
+    #   waiting for a response.
+    #   @return [Types::HarnessHookEventBridgeTarget]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/HarnessHookTarget AWS API Documentation
+    #
+    class HarnessHookTarget < Struct.new(
+      :lambda,
+      :sns,
+      :event_bridge,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class Lambda < HarnessHookTarget; end
+      class Sns < HarnessHookTarget; end
+      class EventBridge < HarnessHookTarget; end
+      class Unknown < HarnessHookTarget; end
+    end
+
     # Configuration for an inline function tool. When the agent calls this
     # tool, the tool call is returned to the caller for external execution.
     #
@@ -12078,6 +12368,10 @@ module Aws::BedrockAgentCoreControl
     #   The ARN of your OpenAI API key on AgentCore Identity.
     #   @return [String]
     #
+    # @!attribute [rw] api_base
+    #   Optional custom endpoint URL for an OpenAI-compatible endpoint.
+    #   @return [String]
+    #
     # @!attribute [rw] max_tokens
     #   The maximum number of tokens to allow in the generated response per
     #   model call.
@@ -12105,12 +12399,13 @@ module Aws::BedrockAgentCoreControl
     class HarnessOpenAiModelConfig < Struct.new(
       :model_id,
       :api_key_arn,
+      :api_base,
       :max_tokens,
       :temperature,
       :top_p,
       :api_format,
       :additional_params)
-      SENSITIVE = []
+      SENSITIVE = [:api_base]
       include Aws::Structure
     end
 
@@ -15535,11 +15830,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] mcp_tool_schema
-    #   The tool schema configuration for the MCP server target. Supported
-    #   only when the credential provider is configured with an
-    #   authorization code grant type. Dynamic tool
-    #   discovery/synchronization will be disabled when target is configured
-    #   with mcpToolSchema.
+    #   A static tool list for the MCP server target. It is supported for
+    #   all credential providers. Dynamic tool discovery/synchronization
+    #   will be disabled when a target is configured with mcpToolSchema.
     #   @return [Types::McpToolSchemaConfiguration]
     #
     # @!attribute [rw] listing_mode
@@ -16948,6 +17241,19 @@ module Aws::BedrockAgentCoreControl
     #   provider integration.
     #   @return [String]
     #
+    # @!attribute [rw] provision_mode
+    #   Specifies how the payment connector was provisioned. Payment
+    #   connectors that were created before this field was available return
+    #   `MANUAL`.
+    #
+    #   * `MANUAL` - You provided the credential provider configurations, so
+    #     you own the credentials.
+    #
+    #   * `QUICK_CREATE` - AgentCore provisioned the credential provider for
+    #     you, so the credentials are service-managed and you can rotate
+    #     them with `RotatePaymentConnectorCredentials`.
+    #   @return [String]
+    #
     # @!attribute [rw] status
     #   The current status of the payment connector. Possible values include
     #   `CREATING`, `READY`, `UPDATING`, `DELETING`, `CREATE_FAILED`,
@@ -16964,6 +17270,7 @@ module Aws::BedrockAgentCoreControl
       :payment_connector_id,
       :name,
       :type,
+      :provision_mode,
       :status,
       :last_updated_at)
       SENSITIVE = []
@@ -18443,6 +18750,77 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] payment_manager_id
+    #   The unique identifier of the parent payment manager.
+    #   @return [String]
+    #
+    # @!attribute [rw] payment_connector_id
+    #   The unique identifier of the payment connector whose credentials you
+    #   want to rotate.
+    #   @return [String]
+    #
+    # @!attribute [rw] credentials_to_rotate
+    #   The credentials to rotate. Specify the member that matches the
+    #   payment connector's `type`. Each credential that you select is
+    #   rotated independently.
+    #   @return [Types::CredentialRotationConfig]
+    #
+    # @!attribute [rw] client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a
+    #   previous request, the service ignores the request, but doesn't
+    #   return an error. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RotatePaymentConnectorCredentialsRequest AWS API Documentation
+    #
+    class RotatePaymentConnectorCredentialsRequest < Struct.new(
+      :payment_manager_id,
+      :payment_connector_id,
+      :credentials_to_rotate,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] payment_connector_id
+    #   The unique identifier of the payment connector.
+    #   @return [String]
+    #
+    # @!attribute [rw] payment_manager_id
+    #   The unique identifier of the parent payment manager.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The timestamp when the payment connector was last updated, which is
+    #   when the rotation completed.
+    #   @return [Time]
+    #
+    # @!attribute [rw] status
+    #   The current status of the payment connector, which is `READY` after
+    #   a successful rotation.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RotatePaymentConnectorCredentialsResponse AWS API Documentation
+    #
+    class RotatePaymentConnectorCredentialsResponse < Struct.new(
+      :payment_connector_id,
+      :payment_manager_id,
+      :last_updated_at,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An action that routes requests to a gateway target, either statically
     # or with weighted traffic splitting.
     #
@@ -21892,6 +22270,12 @@ module Aws::BedrockAgentCoreControl
     #   not specified, the existing value is retained.
     #   @return [Types::HarnessTruncationConfiguration]
     #
+    # @!attribute [rw] hooks
+    #   The lifecycle hooks to run at defined points in the agent loop. If
+    #   specified, this replaces all existing hooks. If not specified, the
+    #   existing hooks are retained.
+    #   @return [Array<Types::HarnessHook>]
+    #
     # @!attribute [rw] max_iterations
     #   The maximum number of iterations the agent loop can execute per
     #   invocation. If not specified, the existing value is retained.
@@ -21925,6 +22309,7 @@ module Aws::BedrockAgentCoreControl
       :allowed_tools,
       :memory,
       :truncation,
+      :hooks,
       :max_iterations,
       :max_tokens,
       :timeout_seconds)

data/lib/aws-sdk-bedrockagentcorecontrol.rb

@@ -55,7 +55,7 @@ module Aws::BedrockAgentCoreControl
   autoload :EndpointProvider, 'aws-sdk-bedrockagentcorecontrol/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-bedrockagentcorecontrol/endpoints'
 
-  GEM_VERSION = '1.73.0'
+  GEM_VERSION = '1.75.0'
 
 end
 

data/sig/client.rbs

@@ -689,6 +689,9 @@ module Aws
                             ?allowed_tools: Array[::String],
                             ?memory: Params::harness_memory_configuration,
                             ?truncation: Params::harness_truncation_configuration,
+                            ?hooks: Array[
+                              Params::harness_hook
+                            ],
                             ?max_iterations: ::Integer,
                             ?max_tokens: ::Integer,
                             ?timeout_seconds: ::Integer,
@@ -1824,11 +1827,13 @@ module Aws
         def name: () -> ::String
         def description: () -> ::String
         def type: () -> ("CoinbaseCDP" | "StripePrivy")
+        def provision_mode: () -> ("MANUAL" | "QUICK_CREATE")
         def credential_provider_configurations: () -> ::Array[Types::CredentialsProviderConfiguration]
         def created_at: () -> ::Time
         def last_updated_at: () -> ::Time
         def status: () -> ("CREATING" | "UPDATING" | "DELETING" | "READY" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED" | "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" | "PENDING_AUTHENTICATION" | "PROVISIONING" | "AUTHENTICATION_EXPIRED" | "AUTHENTICATION_FAILED")
         def authorization_url: () -> ::String
+        def credentials_updated_at: () -> ::Time
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#get_payment_connector-instance_method
       def get_payment_connector: (
@@ -2594,6 +2599,26 @@ module Aws
                                ) -> _PutResourcePolicyResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutResourcePolicyResponseSuccess
 
+      interface _RotatePaymentConnectorCredentialsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::RotatePaymentConnectorCredentialsResponse]
+        def payment_connector_id: () -> ::String
+        def payment_manager_id: () -> ::String
+        def last_updated_at: () -> ::Time
+        def status: () -> ("CREATING" | "UPDATING" | "DELETING" | "READY" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED" | "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" | "PENDING_AUTHENTICATION" | "PROVISIONING" | "AUTHENTICATION_EXPIRED" | "AUTHENTICATION_FAILED")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#rotate_payment_connector_credentials-instance_method
+      def rotate_payment_connector_credentials: (
+                                                  payment_manager_id: ::String,
+                                                  payment_connector_id: ::String,
+                                                  credentials_to_rotate: {
+                                                    coinbase_cdp: {
+                                                      secrets: Array[("API_KEY" | "WALLET_SECRET")]
+                                                    }?
+                                                  },
+                                                  ?client_token: ::String
+                                                ) -> _RotatePaymentConnectorCredentialsResponseSuccess
+                                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RotatePaymentConnectorCredentialsResponseSuccess
+
       interface _SetTokenVaultCMKResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::SetTokenVaultCMKResponse]
         def token_vault_id: () -> ::String
@@ -3073,6 +3098,9 @@ module Aws
                               optional_value: Params::harness_memory_configuration?
                             },
                             ?truncation: Params::harness_truncation_configuration,
+                            ?hooks: Array[
+                              Params::harness_hook
+                            ],
                             ?max_iterations: ::Integer,
                             ?max_tokens: ::Integer,
                             ?timeout_seconds: ::Integer

data/sig/params.rbs

@@ -583,6 +583,7 @@ module Aws
       type harness_open_ai_model_config = {
       model_id: ::String,
       api_key_arn: ::String,
+      api_base: ::String?,
       max_tokens: ::Integer?,
       temperature: ::Float?,
       top_p: ::Float?,
@@ -723,6 +724,47 @@ module Aws
       config: Params::harness_truncation_strategy_configuration?
     }
 
+      type harness_hook_target = {
+      lambda: {
+        arn: ::String,
+        timeout_seconds: ::Integer?,
+        failure_mode: ("allow" | "deny")?
+      }?,
+      sns: {
+        arn: ::String
+      }?,
+      event_bridge: {
+        arn: ::String
+      }?
+    }
+
+      type harness_before_invocation_hook = {
+      name: ::String,
+      target: Params::harness_hook_target
+    }
+
+      type harness_after_invocation_hook = {
+      name: ::String,
+      target: Params::harness_hook_target
+    }
+
+      type harness_before_tool_call_hook = {
+      name: ::String,
+      target: Params::harness_hook_target
+    }
+
+      type harness_after_tool_call_hook = {
+      name: ::String,
+      target: Params::harness_hook_target
+    }
+
+      type harness_hook = {
+      before_invocation: Params::harness_before_invocation_hook?,
+      after_invocation: Params::harness_after_invocation_hook?,
+      before_tool_call: Params::harness_before_tool_call_hook?,
+      after_tool_call: Params::harness_after_tool_call_hook?
+    }
+
       type memory_record_schema = {
       metadata_schema: Array[
         Params::metadata_schema_entry