aws-sdk-bedrockagentcorecontrol 1.74.0 → 1.75.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 336ecc063d468e75eec7ce771e859a029a9d8b9f0d3ebaf48f5ba3285c0f6ff9
-  data.tar.gz: 4411862594f36960c7a9b1272d706ed7467a91778a5d4fe01bc8676e1e15157b
+  metadata.gz: f8dba3b2e6111d67d92156cd27fc345595dc7dfdf095e8f58ac6355cfa63784b
+  data.tar.gz: 45f607411ca02a6662456bb1212474a6ba0fd6dba4f0d4683fd02b59f9622111
 SHA512:
-  metadata.gz: 06b56331b1822f2623bbde72938261bbc7682bb1c666f10a952bc28cb619f836270fffdc3bd27730a9dece2f5a1dc1c0acbb44d0bb005f9d730590cae57e0129
-  data.tar.gz: 2c0a5bd2aeb47665494f395be8357469565dce09ace136f8031fe8b7c3ba814506053ab2b7cce11dc6d62736147404ac90095d3df38d97e8df13e6adf078faf2
+  metadata.gz: e14a358c0d224b38ca5f3b2a8b4df875ee2898851d8d3539a5aa9142db1d53e8ab4f0f5f5faef0746a1fbab888a43e432b55818f0e2d163dec9997e472a06dfe
+  data.tar.gz: b940dca38ea4deed2764b8426bc2b34caff57a0826121ea3ebad7eacfabf0cec5db5815d6e879da0c19edb58bf93321c677e959473db73450d6f949c8d7080fe

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.75.0 (2026-09-25)
+------------------
+
+* Feature - Amazon Bedrock AgentCore Payments now supports credential rotation for payment connectors, letting you rotate API and wallet secrets for Quick Create payment auths from the console. This release also adds Type and Creation type columns to the payment managers views.
+
 1.74.0 (2026-09-21)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.74.0
+1.75.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -8909,11 +8909,13 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetPaymentConnectorResponse#name #name} => String
     #   * {Types::GetPaymentConnectorResponse#description #description} => String
     #   * {Types::GetPaymentConnectorResponse#type #type} => String
+    #   * {Types::GetPaymentConnectorResponse#provision_mode #provision_mode} => String
     #   * {Types::GetPaymentConnectorResponse#credential_provider_configurations #credential_provider_configurations} => Array<Types::CredentialsProviderConfiguration>
     #   * {Types::GetPaymentConnectorResponse#created_at #created_at} => Time
     #   * {Types::GetPaymentConnectorResponse#last_updated_at #last_updated_at} => Time
     #   * {Types::GetPaymentConnectorResponse#status #status} => String
     #   * {Types::GetPaymentConnectorResponse#authorization_url #authorization_url} => String
+    #   * {Types::GetPaymentConnectorResponse#credentials_updated_at #credentials_updated_at} => Time
     #
     # @example Request syntax with placeholder values
     #
@@ -8928,6 +8930,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.name #=> String
     #   resp.description #=> String
     #   resp.type #=> String, one of "CoinbaseCDP", "StripePrivy"
+    #   resp.provision_mode #=> String, one of "MANUAL", "QUICK_CREATE"
     #   resp.credential_provider_configurations #=> Array
     #   resp.credential_provider_configurations[0].coinbase_cdp.credential_provider_arn #=> String
     #   resp.credential_provider_configurations[0].stripe_privy.credential_provider_arn #=> String
@@ -8935,6 +8938,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.last_updated_at #=> Time
     #   resp.status #=> String, one of "CREATING", "UPDATING", "DELETING", "READY", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED", "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED", "PENDING_AUTHENTICATION", "PROVISIONING", "AUTHENTICATION_EXPIRED", "AUTHENTICATION_FAILED"
     #   resp.authorization_url #=> String
+    #   resp.credentials_updated_at #=> Time
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetPaymentConnector AWS API Documentation
     #
@@ -11074,6 +11078,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.payment_connectors[0].payment_connector_id #=> String
     #   resp.payment_connectors[0].name #=> String
     #   resp.payment_connectors[0].type #=> String, one of "CoinbaseCDP", "StripePrivy"
+    #   resp.payment_connectors[0].provision_mode #=> String, one of "MANUAL", "QUICK_CREATE"
     #   resp.payment_connectors[0].status #=> String, one of "CREATING", "UPDATING", "DELETING", "READY", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED", "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED", "PENDING_AUTHENTICATION", "PROVISIONING", "AUTHENTICATION_EXPIRED", "AUTHENTICATION_FAILED"
     #   resp.payment_connectors[0].last_updated_at #=> Time
     #   resp.next_token #=> String
@@ -11884,6 +11889,88 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
 
+    # Replaces the service-managed credentials of a payment connector with
+    # newly issued credentials.
+    #
+    # Use this operation only for payment connectors with a `provisionMode`
+    # of `QUICK_CREATE`. For payment connectors with a `provisionMode` of
+    # `MANUAL`, call `UpdatePaymentCredentialProvider` instead after
+    # rotating credentials with the payment provider directly.
+    #
+    # The rotation finishes before the response is returned, and only one
+    # rotation runs at a time for a given payment connector. When it
+    # succeeds, the new credential is in effect and the payment connector
+    # stays in the `READY` state. When it fails, an error is returned, the
+    # payment connector and its existing credential are left unchanged, and
+    # you can retry the request.
+    #
+    # Rotation replaces the credential on the connector's credential
+    # provider, so every payment connector that uses that provider is
+    # affected. Replace any copy of the previous credential that you use
+    # outside AgentCore.
+    #
+    # @option params [required, String] :payment_manager_id
+    #   The unique identifier of the parent payment manager.
+    #
+    # @option params [required, String] :payment_connector_id
+    #   The unique identifier of the payment connector whose credentials you
+    #   want to rotate.
+    #
+    # @option params [required, Types::CredentialRotationConfig] :credentials_to_rotate
+    #   The credentials to rotate. Specify the member that matches the payment
+    #   connector's `type`. Each credential that you select is rotated
+    #   independently.
+    #
+    # @option params [String] :client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a previous
+    #   request, the service ignores the request, but doesn't return an
+    #   error. For more information, see [Ensuring idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.**
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #
+    # @return [Types::RotatePaymentConnectorCredentialsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::RotatePaymentConnectorCredentialsResponse#payment_connector_id #payment_connector_id} => String
+    #   * {Types::RotatePaymentConnectorCredentialsResponse#payment_manager_id #payment_manager_id} => String
+    #   * {Types::RotatePaymentConnectorCredentialsResponse#last_updated_at #last_updated_at} => Time
+    #   * {Types::RotatePaymentConnectorCredentialsResponse#status #status} => String
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.rotate_payment_connector_credentials({
+    #     payment_manager_id: "PaymentManagerId", # required
+    #     payment_connector_id: "PaymentConnectorId", # required
+    #     credentials_to_rotate: { # required
+    #       coinbase_cdp: {
+    #         secrets: ["API_KEY"], # required, accepts API_KEY, WALLET_SECRET
+    #       },
+    #     },
+    #     client_token: "ClientToken",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.payment_connector_id #=> String
+    #   resp.payment_manager_id #=> String
+    #   resp.last_updated_at #=> Time
+    #   resp.status #=> String, one of "CREATING", "UPDATING", "DELETING", "READY", "CREATE_FAILED", "UPDATE_FAILED", "DELETE_FAILED", "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED", "PENDING_AUTHENTICATION", "PROVISIONING", "AUTHENTICATION_EXPIRED", "AUTHENTICATION_FAILED"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RotatePaymentConnectorCredentials AWS API Documentation
+    #
+    # @overload rotate_payment_connector_credentials(params = {})
+    # @param [Hash] params ({})
+    def rotate_payment_connector_credentials(params = {}, options = {})
+      req = build_request(:rotate_payment_connector_credentials, params)
+      req.send_request(options)
+    end
+
     # Sets the customer master key (CMK) for a token vault.
     #
     # @option params [String] :token_vault_id
@@ -16945,7 +17032,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.74.0'
+      context[:gem_version] = '1.75.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb

@@ -162,6 +162,9 @@ module Aws::BedrockAgentCoreControl
     CoinbaseCdpApiKeyIdType = Shapes::StringShape.new(name: 'CoinbaseCdpApiKeyIdType')
     CoinbaseCdpConfigurationInput = Shapes::StructureShape.new(name: 'CoinbaseCdpConfigurationInput')
     CoinbaseCdpConfigurationOutput = Shapes::StructureShape.new(name: 'CoinbaseCdpConfigurationOutput')
+    CoinbaseCdpRotationTargets = Shapes::StructureShape.new(name: 'CoinbaseCdpRotationTargets')
+    CoinbaseCdpSecret = Shapes::StringShape.new(name: 'CoinbaseCdpSecret')
+    CoinbaseCdpSecrets = Shapes::ListShape.new(name: 'CoinbaseCdpSecrets')
     ComponentConfiguration = Shapes::StructureShape.new(name: 'ComponentConfiguration')
     ComponentConfigurationMap = Shapes::MapShape.new(name: 'ComponentConfigurationMap')
     ComponentIdentifier = Shapes::StringShape.new(name: 'ComponentIdentifier')
@@ -287,6 +290,7 @@ module Aws::BedrockAgentCoreControl
     CredentialProviderName = Shapes::StringShape.new(name: 'CredentialProviderName')
     CredentialProviderType = Shapes::StringShape.new(name: 'CredentialProviderType')
     CredentialProviderVendorType = Shapes::StringShape.new(name: 'CredentialProviderVendorType')
+    CredentialRotationConfig = Shapes::UnionShape.new(name: 'CredentialRotationConfig')
     CredentialsProviderConfiguration = Shapes::UnionShape.new(name: 'CredentialsProviderConfiguration')
     CredentialsProviderConfigurations = Shapes::ListShape.new(name: 'CredentialsProviderConfigurations')
     CustomClaimValidationType = Shapes::StructureShape.new(name: 'CustomClaimValidationType')
@@ -1128,6 +1132,8 @@ module Aws::BedrockAgentCoreControl
     RootVolumeConfiguration = Shapes::StructureShape.new(name: 'RootVolumeConfiguration')
     RootVolumeConfigurationFreeSpaceGiBInteger = Shapes::IntegerShape.new(name: 'RootVolumeConfigurationFreeSpaceGiBInteger')
     RootVolumeConfigurationThroughputInteger = Shapes::IntegerShape.new(name: 'RootVolumeConfigurationThroughputInteger')
+    RotatePaymentConnectorCredentialsRequest = Shapes::StructureShape.new(name: 'RotatePaymentConnectorCredentialsRequest')
+    RotatePaymentConnectorCredentialsResponse = Shapes::StructureShape.new(name: 'RotatePaymentConnectorCredentialsResponse')
     RouteToTargetAction = Shapes::UnionShape.new(name: 'RouteToTargetAction')
     RoutingDomain = Shapes::StringShape.new(name: 'RoutingDomain')
     Rule = Shapes::StructureShape.new(name: 'Rule')
@@ -1797,6 +1803,11 @@ module Aws::BedrockAgentCoreControl
     CoinbaseCdpConfigurationOutput.add_member(:wallet_secret_source, Shapes::ShapeRef.new(shape: SecretSourceType, location_name: "walletSecretSource"))
     CoinbaseCdpConfigurationOutput.struct_class = Types::CoinbaseCdpConfigurationOutput
 
+    CoinbaseCdpRotationTargets.add_member(:secrets, Shapes::ShapeRef.new(shape: CoinbaseCdpSecrets, required: true, location_name: "secrets"))
+    CoinbaseCdpRotationTargets.struct_class = Types::CoinbaseCdpRotationTargets
+
+    CoinbaseCdpSecrets.member = Shapes::ShapeRef.new(shape: CoinbaseCdpSecret)
+
     ComponentConfiguration.add_member(:configuration, Shapes::ShapeRef.new(shape: Document, required: true, location_name: "configuration"))
     ComponentConfiguration.struct_class = Types::ComponentConfiguration
 
@@ -2463,6 +2474,12 @@ module Aws::BedrockAgentCoreControl
 
     CredentialProviderConfigurations.member = Shapes::ShapeRef.new(shape: CredentialProviderConfiguration)
 
+    CredentialRotationConfig.add_member(:coinbase_cdp, Shapes::ShapeRef.new(shape: CoinbaseCdpRotationTargets, location_name: "coinbaseCDP"))
+    CredentialRotationConfig.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    CredentialRotationConfig.add_member_subclass(:coinbase_cdp, Types::CredentialRotationConfig::CoinbaseCdp)
+    CredentialRotationConfig.add_member_subclass(:unknown, Types::CredentialRotationConfig::Unknown)
+    CredentialRotationConfig.struct_class = Types::CredentialRotationConfig
+
     CredentialsProviderConfiguration.add_member(:coinbase_cdp, Shapes::ShapeRef.new(shape: PaymentCredentialProviderConfiguration, location_name: "coinbaseCDP"))
     CredentialsProviderConfiguration.add_member(:stripe_privy, Shapes::ShapeRef.new(shape: PaymentCredentialProviderConfiguration, location_name: "stripePrivy"))
     CredentialsProviderConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
@@ -3547,11 +3564,13 @@ module Aws::BedrockAgentCoreControl
     GetPaymentConnectorResponse.add_member(:name, Shapes::ShapeRef.new(shape: PaymentConnectorName, required: true, location_name: "name"))
     GetPaymentConnectorResponse.add_member(:description, Shapes::ShapeRef.new(shape: PaymentsDescription, location_name: "description"))
     GetPaymentConnectorResponse.add_member(:type, Shapes::ShapeRef.new(shape: PaymentConnectorType, required: true, location_name: "type"))
+    GetPaymentConnectorResponse.add_member(:provision_mode, Shapes::ShapeRef.new(shape: PaymentConnectorProvisionMode, location_name: "provisionMode"))
     GetPaymentConnectorResponse.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialsProviderConfigurations, required: true, location_name: "credentialProviderConfigurations"))
     GetPaymentConnectorResponse.add_member(:created_at, Shapes::ShapeRef.new(shape: DateTimestamp, required: true, location_name: "createdAt"))
     GetPaymentConnectorResponse.add_member(:last_updated_at, Shapes::ShapeRef.new(shape: DateTimestamp, required: true, location_name: "lastUpdatedAt"))
     GetPaymentConnectorResponse.add_member(:status, Shapes::ShapeRef.new(shape: PaymentConnectorStatus, required: true, location_name: "status"))
     GetPaymentConnectorResponse.add_member(:authorization_url, Shapes::ShapeRef.new(shape: PaymentConnectorAuthorizationUrl, location_name: "authorizationUrl"))
+    GetPaymentConnectorResponse.add_member(:credentials_updated_at, Shapes::ShapeRef.new(shape: DateTimestamp, location_name: "credentialsUpdatedAt"))
     GetPaymentConnectorResponse.struct_class = Types::GetPaymentConnectorResponse
 
     GetPaymentCredentialProviderRequest.add_member(:name, Shapes::ShapeRef.new(shape: CredentialProviderName, required: true, location_name: "name"))
@@ -5050,6 +5069,7 @@ module Aws::BedrockAgentCoreControl
     PaymentConnectorSummary.add_member(:payment_connector_id, Shapes::ShapeRef.new(shape: PaymentConnectorId, required: true, location_name: "paymentConnectorId"))
     PaymentConnectorSummary.add_member(:name, Shapes::ShapeRef.new(shape: PaymentConnectorName, required: true, location_name: "name"))
     PaymentConnectorSummary.add_member(:type, Shapes::ShapeRef.new(shape: PaymentConnectorType, required: true, location_name: "type"))
+    PaymentConnectorSummary.add_member(:provision_mode, Shapes::ShapeRef.new(shape: PaymentConnectorProvisionMode, location_name: "provisionMode"))
     PaymentConnectorSummary.add_member(:status, Shapes::ShapeRef.new(shape: PaymentConnectorStatus, required: true, location_name: "status"))
     PaymentConnectorSummary.add_member(:last_updated_at, Shapes::ShapeRef.new(shape: DateTimestamp, required: true, location_name: "lastUpdatedAt"))
     PaymentConnectorSummary.struct_class = Types::PaymentConnectorSummary
@@ -5372,6 +5392,18 @@ module Aws::BedrockAgentCoreControl
     RootVolumeConfiguration.add_member(:free_space_gi_b, Shapes::ShapeRef.new(shape: RootVolumeConfigurationFreeSpaceGiBInteger, location_name: "freeSpaceGiB"))
     RootVolumeConfiguration.struct_class = Types::RootVolumeConfiguration
 
+    RotatePaymentConnectorCredentialsRequest.add_member(:payment_manager_id, Shapes::ShapeRef.new(shape: PaymentManagerId, required: true, location: "uri", location_name: "paymentManagerId"))
+    RotatePaymentConnectorCredentialsRequest.add_member(:payment_connector_id, Shapes::ShapeRef.new(shape: PaymentConnectorId, required: true, location: "uri", location_name: "paymentConnectorId"))
+    RotatePaymentConnectorCredentialsRequest.add_member(:credentials_to_rotate, Shapes::ShapeRef.new(shape: CredentialRotationConfig, required: true, location_name: "credentialsToRotate"))
+    RotatePaymentConnectorCredentialsRequest.add_member(:client_token, Shapes::ShapeRef.new(shape: ClientToken, location_name: "clientToken", metadata: {"idempotencyToken" => true}))
+    RotatePaymentConnectorCredentialsRequest.struct_class = Types::RotatePaymentConnectorCredentialsRequest
+
+    RotatePaymentConnectorCredentialsResponse.add_member(:payment_connector_id, Shapes::ShapeRef.new(shape: PaymentConnectorId, required: true, location_name: "paymentConnectorId"))
+    RotatePaymentConnectorCredentialsResponse.add_member(:payment_manager_id, Shapes::ShapeRef.new(shape: PaymentManagerId, required: true, location_name: "paymentManagerId"))
+    RotatePaymentConnectorCredentialsResponse.add_member(:last_updated_at, Shapes::ShapeRef.new(shape: DateTimestamp, required: true, location_name: "lastUpdatedAt"))
+    RotatePaymentConnectorCredentialsResponse.add_member(:status, Shapes::ShapeRef.new(shape: PaymentConnectorStatus, required: true, location_name: "status"))
+    RotatePaymentConnectorCredentialsResponse.struct_class = Types::RotatePaymentConnectorCredentialsResponse
+
     RouteToTargetAction.add_member(:static_route, Shapes::ShapeRef.new(shape: StaticRoute, location_name: "staticRoute"))
     RouteToTargetAction.add_member(:weighted_route, Shapes::ShapeRef.new(shape: WeightedRoute, location_name: "weightedRoute"))
     RouteToTargetAction.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
@@ -8614,6 +8646,20 @@ module Aws::BedrockAgentCoreControl
         o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
       end)
 
+      api.add_operation(:rotate_payment_connector_credentials, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "RotatePaymentConnectorCredentials"
+        o.http_method = "POST"
+        o.http_request_uri = "/payments/managers/{paymentManagerId}/connectors/{paymentConnectorId}/rotate-credentials"
+        o.input = Shapes::ShapeRef.new(shape: RotatePaymentConnectorCredentialsRequest)
+        o.output = Shapes::ShapeRef.new(shape: RotatePaymentConnectorCredentialsResponse)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+        o.errors << Shapes::ShapeRef.new(shape: ConflictException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+      end)
+
       api.add_operation(:set_token_vault_cmk, Seahorse::Model::Operation.new.tap do |o|
         o.name = "SetTokenVaultCMK"
         o.http_method = "POST"

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -1602,6 +1602,30 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Specifies the service-managed Coinbase CDP secrets to rotate.
+    #
+    # @!attribute [rw] secrets
+    #   The secrets to rotate. Specify at least one value. Each secret that
+    #   you specify is rotated independently.
+    #
+    #   * `API_KEY` - The API key that the payment connector uses to call
+    #     Coinbase CDP. Rotate it as routine maintenance, or if you suspect
+    #     that it is compromised.
+    #
+    #   * `WALLET_SECRET` - The wallet secret that signs transactions.
+    #     Rotate it only if it is lost or compromised. Coinbase CDP allows
+    #     one wallet secret per project, so it is replaced in place and
+    #     signing can be briefly interrupted.
+    #   @return [Array<String>]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CoinbaseCdpRotationTargets AWS API Documentation
+    #
+    class CoinbaseCdpRotationTargets < Struct.new(
+      :secrets)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The configuration for a component within a configuration bundle. The
     # component type is inferred from the component identifier ARN.
     #
@@ -5201,6 +5225,28 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # Specifies the service-managed credentials to rotate. Provide the
+    # member that matches the payment connector's `type`.
+    #
+    # @note CredentialRotationConfig is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @!attribute [rw] coinbase_cdp
+    #   The credentials to rotate for a Coinbase CDP payment connector.
+    #   @return [Types::CoinbaseCdpRotationTargets]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CredentialRotationConfig AWS API Documentation
+    #
+    class CredentialRotationConfig < Struct.new(
+      :coinbase_cdp,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class CoinbaseCdp < CredentialRotationConfig; end
+      class Unknown < CredentialRotationConfig; end
+    end
+
     # The credential provider configuration for a payment connector.
     # Specifies the payment provider type and its associated credential
     # provider.
@@ -10264,6 +10310,20 @@ module Aws::BedrockAgentCoreControl
     #   provider integration.
     #   @return [String]
     #
+    # @!attribute [rw] provision_mode
+    #   Specifies how the payment connector was provisioned. Payment
+    #   connectors that were created before this field was available return
+    #   `MANUAL`.
+    #
+    #   * `MANUAL` - You provided the credential provider configurations, so
+    #     you own the credentials. Rotate them with the payment provider,
+    #     then call `UpdatePaymentCredentialProvider`.
+    #
+    #   * `QUICK_CREATE` - AgentCore provisioned the credential provider for
+    #     you, so the credentials are service-managed. You can rotate them
+    #     with `RotatePaymentConnectorCredentials`.
+    #   @return [String]
+    #
     # @!attribute [rw] credential_provider_configurations
     #   The credential provider configurations for the payment connector.
     #   @return [Array<Types::CredentialsProviderConfiguration>]
@@ -10288,6 +10348,14 @@ module Aws::BedrockAgentCoreControl
     #   `PENDING_AUTHENTICATION`.
     #   @return [String]
     #
+    # @!attribute [rw] credentials_updated_at
+    #   The timestamp when the payment connector's current service-managed
+    #   credentials took effect. It is first set when the credentials are
+    #   provisioned and is updated by each rotation. This field is present
+    #   only for payment connectors with a `provisionMode` of
+    #   `QUICK_CREATE`.
+    #   @return [Time]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetPaymentConnectorResponse AWS API Documentation
     #
     class GetPaymentConnectorResponse < Struct.new(
@@ -10295,11 +10363,13 @@ module Aws::BedrockAgentCoreControl
       :name,
       :description,
       :type,
+      :provision_mode,
       :credential_provider_configurations,
       :created_at,
       :last_updated_at,
       :status,
-      :authorization_url)
+      :authorization_url,
+      :credentials_updated_at)
       SENSITIVE = []
       include Aws::Structure
     end
@@ -15760,11 +15830,9 @@ module Aws::BedrockAgentCoreControl
     #   @return [String]
     #
     # @!attribute [rw] mcp_tool_schema
-    #   The tool schema configuration for the MCP server target. Supported
-    #   only when the credential provider is configured with an
-    #   authorization code grant type. Dynamic tool
-    #   discovery/synchronization will be disabled when target is configured
-    #   with mcpToolSchema.
+    #   A static tool list for the MCP server target. It is supported for
+    #   all credential providers. Dynamic tool discovery/synchronization
+    #   will be disabled when a target is configured with mcpToolSchema.
     #   @return [Types::McpToolSchemaConfiguration]
     #
     # @!attribute [rw] listing_mode
@@ -17173,6 +17241,19 @@ module Aws::BedrockAgentCoreControl
     #   provider integration.
     #   @return [String]
     #
+    # @!attribute [rw] provision_mode
+    #   Specifies how the payment connector was provisioned. Payment
+    #   connectors that were created before this field was available return
+    #   `MANUAL`.
+    #
+    #   * `MANUAL` - You provided the credential provider configurations, so
+    #     you own the credentials.
+    #
+    #   * `QUICK_CREATE` - AgentCore provisioned the credential provider for
+    #     you, so the credentials are service-managed and you can rotate
+    #     them with `RotatePaymentConnectorCredentials`.
+    #   @return [String]
+    #
     # @!attribute [rw] status
     #   The current status of the payment connector. Possible values include
     #   `CREATING`, `READY`, `UPDATING`, `DELETING`, `CREATE_FAILED`,
@@ -17189,6 +17270,7 @@ module Aws::BedrockAgentCoreControl
       :payment_connector_id,
       :name,
       :type,
+      :provision_mode,
       :status,
       :last_updated_at)
       SENSITIVE = []
@@ -18668,6 +18750,77 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] payment_manager_id
+    #   The unique identifier of the parent payment manager.
+    #   @return [String]
+    #
+    # @!attribute [rw] payment_connector_id
+    #   The unique identifier of the payment connector whose credentials you
+    #   want to rotate.
+    #   @return [String]
+    #
+    # @!attribute [rw] credentials_to_rotate
+    #   The credentials to rotate. Specify the member that matches the
+    #   payment connector's `type`. Each credential that you select is
+    #   rotated independently.
+    #   @return [Types::CredentialRotationConfig]
+    #
+    # @!attribute [rw] client_token
+    #   A unique, case-sensitive identifier to ensure that the API request
+    #   completes no more than one time. If you don't specify this field, a
+    #   value is randomly generated for you. If this token matches a
+    #   previous request, the service ignores the request, but doesn't
+    #   return an error. For more information, see [Ensuring
+    #   idempotency][1].
+    #
+    #   **A suitable default value is auto-generated.** You should normally
+    #   not need to pass this option.
+    #
+    #
+    #
+    #   [1]: https://docs.aws.amazon.com/AWSEC2/latest/APIReference/Run_Instance_Idempotency.html
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RotatePaymentConnectorCredentialsRequest AWS API Documentation
+    #
+    class RotatePaymentConnectorCredentialsRequest < Struct.new(
+      :payment_manager_id,
+      :payment_connector_id,
+      :credentials_to_rotate,
+      :client_token)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
+    # @!attribute [rw] payment_connector_id
+    #   The unique identifier of the payment connector.
+    #   @return [String]
+    #
+    # @!attribute [rw] payment_manager_id
+    #   The unique identifier of the parent payment manager.
+    #   @return [String]
+    #
+    # @!attribute [rw] last_updated_at
+    #   The timestamp when the payment connector was last updated, which is
+    #   when the rotation completed.
+    #   @return [Time]
+    #
+    # @!attribute [rw] status
+    #   The current status of the payment connector, which is `READY` after
+    #   a successful rotation.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/RotatePaymentConnectorCredentialsResponse AWS API Documentation
+    #
+    class RotatePaymentConnectorCredentialsResponse < Struct.new(
+      :payment_connector_id,
+      :payment_manager_id,
+      :last_updated_at,
+      :status)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # An action that routes requests to a gateway target, either statically
     # or with weighted traffic splitting.
     #

data/lib/aws-sdk-bedrockagentcorecontrol.rb

@@ -55,7 +55,7 @@ module Aws::BedrockAgentCoreControl
   autoload :EndpointProvider, 'aws-sdk-bedrockagentcorecontrol/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-bedrockagentcorecontrol/endpoints'
 
-  GEM_VERSION = '1.74.0'
+  GEM_VERSION = '1.75.0'
 
 end
 

data/sig/client.rbs

@@ -1827,11 +1827,13 @@ module Aws
         def name: () -> ::String
         def description: () -> ::String
         def type: () -> ("CoinbaseCDP" | "StripePrivy")
+        def provision_mode: () -> ("MANUAL" | "QUICK_CREATE")
         def credential_provider_configurations: () -> ::Array[Types::CredentialsProviderConfiguration]
         def created_at: () -> ::Time
         def last_updated_at: () -> ::Time
         def status: () -> ("CREATING" | "UPDATING" | "DELETING" | "READY" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED" | "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" | "PENDING_AUTHENTICATION" | "PROVISIONING" | "AUTHENTICATION_EXPIRED" | "AUTHENTICATION_FAILED")
         def authorization_url: () -> ::String
+        def credentials_updated_at: () -> ::Time
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#get_payment_connector-instance_method
       def get_payment_connector: (
@@ -2597,6 +2599,26 @@ module Aws
                                ) -> _PutResourcePolicyResponseSuccess
                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _PutResourcePolicyResponseSuccess
 
+      interface _RotatePaymentConnectorCredentialsResponseSuccess
+        include ::Seahorse::Client::_ResponseSuccess[Types::RotatePaymentConnectorCredentialsResponse]
+        def payment_connector_id: () -> ::String
+        def payment_manager_id: () -> ::String
+        def last_updated_at: () -> ::Time
+        def status: () -> ("CREATING" | "UPDATING" | "DELETING" | "READY" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED" | "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" | "PENDING_AUTHENTICATION" | "PROVISIONING" | "AUTHENTICATION_EXPIRED" | "AUTHENTICATION_FAILED")
+      end
+      # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#rotate_payment_connector_credentials-instance_method
+      def rotate_payment_connector_credentials: (
+                                                  payment_manager_id: ::String,
+                                                  payment_connector_id: ::String,
+                                                  credentials_to_rotate: {
+                                                    coinbase_cdp: {
+                                                      secrets: Array[("API_KEY" | "WALLET_SECRET")]
+                                                    }?
+                                                  },
+                                                  ?client_token: ::String
+                                                ) -> _RotatePaymentConnectorCredentialsResponseSuccess
+                                              | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _RotatePaymentConnectorCredentialsResponseSuccess
+
       interface _SetTokenVaultCMKResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::SetTokenVaultCMKResponse]
         def token_vault_id: () -> ::String

data/sig/types.rbs

@@ -451,6 +451,11 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class CoinbaseCdpRotationTargets
+      attr_accessor secrets: ::Array[("API_KEY" | "WALLET_SECRET")]
+      SENSITIVE: []
+    end
+
     class ComponentConfiguration
       attr_accessor configuration: untyped
       SENSITIVE: []
@@ -1276,6 +1281,17 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class CredentialRotationConfig
+      attr_accessor coinbase_cdp: Types::CoinbaseCdpRotationTargets
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class CoinbaseCdp < CredentialRotationConfig
+      end
+      class Unknown < CredentialRotationConfig
+      end
+    end
+
     class CredentialsProviderConfiguration
       attr_accessor coinbase_cdp: Types::PaymentCredentialProviderConfiguration
       attr_accessor stripe_privy: Types::PaymentCredentialProviderConfiguration
@@ -2706,11 +2722,13 @@ module Aws::BedrockAgentCoreControl
       attr_accessor name: ::String
       attr_accessor description: ::String
       attr_accessor type: ("CoinbaseCDP" | "StripePrivy")
+      attr_accessor provision_mode: ("MANUAL" | "QUICK_CREATE")
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialsProviderConfiguration]
       attr_accessor created_at: ::Time
       attr_accessor last_updated_at: ::Time
       attr_accessor status: ("CREATING" | "UPDATING" | "DELETING" | "READY" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED" | "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" | "PENDING_AUTHENTICATION" | "PROVISIONING" | "AUTHENTICATION_EXPIRED" | "AUTHENTICATION_FAILED")
       attr_accessor authorization_url: ::String
+      attr_accessor credentials_updated_at: ::Time
       SENSITIVE: []
     end
 
@@ -4741,6 +4759,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor payment_connector_id: ::String
       attr_accessor name: ::String
       attr_accessor type: ("CoinbaseCDP" | "StripePrivy")
+      attr_accessor provision_mode: ("MANUAL" | "QUICK_CREATE")
       attr_accessor status: ("CREATING" | "UPDATING" | "DELETING" | "READY" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED" | "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" | "PENDING_AUTHENTICATION" | "PROVISIONING" | "AUTHENTICATION_EXPIRED" | "AUTHENTICATION_FAILED")
       attr_accessor last_updated_at: ::Time
       SENSITIVE: []
@@ -5147,6 +5166,22 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class RotatePaymentConnectorCredentialsRequest
+      attr_accessor payment_manager_id: ::String
+      attr_accessor payment_connector_id: ::String
+      attr_accessor credentials_to_rotate: Types::CredentialRotationConfig
+      attr_accessor client_token: ::String
+      SENSITIVE: []
+    end
+
+    class RotatePaymentConnectorCredentialsResponse
+      attr_accessor payment_connector_id: ::String
+      attr_accessor payment_manager_id: ::String
+      attr_accessor last_updated_at: ::Time
+      attr_accessor status: ("CREATING" | "UPDATING" | "DELETING" | "READY" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETE_FAILED" | "AWS_MARKETPLACE_SUBSCRIPTION_REQUIRED" | "PENDING_AUTHENTICATION" | "PROVISIONING" | "AUTHENTICATION_EXPIRED" | "AUTHENTICATION_FAILED")
+      SENSITIVE: []
+    end
+
     class RouteToTargetAction
       attr_accessor static_route: Types::StaticRoute
       attr_accessor weighted_route: Types::WeightedRoute

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-bedrockagentcorecontrol
 version: !ruby/object:Gem::Version
-  version: 1.74.0
+  version: 1.75.0
 platform: ruby
 authors:
 - Amazon Web Services