aws-sdk-bedrockagentcorecontrol 1.76.0 → 1.77.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a42eede2840feea81c35eea301c086b1864ed8d67166968ca8068db3ab635964
-  data.tar.gz: 1d25ed4c9f926885de910c041ef3b496d8f331fc566498e55a03bb143f999ab7
+  metadata.gz: 43369034b849fc2b2647ec1e649ff41066963ebd7babab2f1d54e47c7f784ac5
+  data.tar.gz: 462031b4e6a57d79309126867fb80655057c9d3720b9dd7d9cee2235d3fd4274
 SHA512:
-  metadata.gz: 1f59b3f087ddb95a9a3dedb6cd262c2e28d6f846d51b6f04f277313343e2a98f0abd344a705fbc4095eb0ce6cd58bf71966c933c036467d77554c8da38510cd6
-  data.tar.gz: 57280296d2168c92de77d5ace824ff138d13a1b9fefc8e73634c5c76df16bf285fe97d2d56ee0f5fa03ff956267105784aeb0ac633b0b3611e0f91c124db9a1a
+  metadata.gz: 74eab62d3910628b29b069e351e3d09bd1d5608adb2234e892de8d143d9051e9b9dadd665a6609db25481795878ec708a9e3780a5a3665fe72b04f1b6adea823
+  data.tar.gz: 7681486e35474a3b53a12bceab8c53e360bdbeba438534352842a689744ad33652e51c494ca00a962b9ce59bea5ed03d2d98b27a131575cc26c6765fae202d20

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.77.0 (2026-09-30)
+------------------
+
+* Feature - This release adds support for private certificate authorities on Amazon Bedrock AgentCore Gateway targets. The new certificateConfigurations parameter on CreateGatewayTarget and UpdateGatewayTarget references a PEM-encoded CA certificate in Amazon S3 or AWS Secrets Manager.
+
 1.76.0 (2026-09-28)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.76.0
+1.77.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -2611,6 +2611,14 @@ module Aws::BedrockAgentCoreControl
     #   The private endpoint configuration for the gateway target. Use this to
     #   connect the gateway to private resources in your VPC.
     #
+    # @option params [Array<Types::CertificateConfiguration>] :certificate_configurations
+    #   The private certificate authority (CA) configurations for the gateway
+    #   target. Use this to have the gateway trust a private CA when it
+    #   establishes TLS connections to the target endpoint. Provide each
+    #   certificate by reference to an Amazon S3 object or an Amazon Web
+    #   Services Secrets Manager secret. You can specify only one certificate
+    #   authority configuration in this list.
+    #
     # @return [Types::CreateGatewayTargetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateGatewayTargetResponse#gateway_arn #gateway_arn} => String
@@ -2629,6 +2637,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::CreateGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array&lt;Types::ManagedResourceDetails&gt;
     #   * {Types::CreateGatewayTargetResponse#authorization_data #authorization_data} => Types::AuthorizationData
     #   * {Types::CreateGatewayTargetResponse#protocol_type #protocol_type} => String
+    #   * {Types::CreateGatewayTargetResponse#certificate_configurations #certificate_configurations} => Array&lt;Types::CertificateConfiguration&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -2868,6 +2877,17 @@ module Aws::BedrockAgentCoreControl
     #         routing_domain: "RoutingDomain",
     #       },
     #     },
+    #     certificate_configurations: [
+    #       {
+    #         s3: {
+    #           uri: "CertificateS3Uri", # required
+    #           bucket_owner_account_id: "CertificateBucketOwnerAccountId",
+    #         },
+    #         secrets_manager: {
+    #           secret_arn: "CertificateSecretArn", # required
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -3003,6 +3023,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.authorization_data.oauth2.authorization_url #=> String
     #   resp.authorization_data.oauth2.user_id #=> String
     #   resp.protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.certificate_configurations #=> Array
+    #   resp.certificate_configurations[0].s3.uri #=> String
+    #   resp.certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayTarget AWS API Documentation
     #
@@ -5967,6 +5991,7 @@ module Aws::BedrockAgentCoreControl
     #
     # @return [Types::DeleteConfigurationBundleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
+    #   * {Types::DeleteConfigurationBundleResponse#bundle_arn #bundle_arn} => String
     #   * {Types::DeleteConfigurationBundleResponse#bundle_id #bundle_id} => String
     #   * {Types::DeleteConfigurationBundleResponse#status #status} => String
     #
@@ -5978,6 +6003,7 @@ module Aws::BedrockAgentCoreControl
     #
     # @example Response structure
     #
+    #   resp.bundle_arn #=> String
     #   resp.bundle_id #=> String
     #   resp.status #=> String, one of "ACTIVE", "CREATING", "CREATE_FAILED", "UPDATING", "UPDATE_FAILED", "DELETING", "DELETE_FAILED"
     #
@@ -8116,6 +8142,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array&lt;Types::ManagedResourceDetails&gt;
     #   * {Types::GetGatewayTargetResponse#authorization_data #authorization_data} => Types::AuthorizationData
     #   * {Types::GetGatewayTargetResponse#protocol_type #protocol_type} => String
+    #   * {Types::GetGatewayTargetResponse#certificate_configurations #certificate_configurations} => Array&lt;Types::CertificateConfiguration&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -8257,6 +8284,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.authorization_data.oauth2.authorization_url #=> String
     #   resp.authorization_data.oauth2.user_id #=> String
     #   resp.protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.certificate_configurations #=> Array
+    #   resp.certificate_configurations[0].s3.uri #=> String
+    #   resp.certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetGatewayTarget AWS API Documentation
     #
@@ -12318,6 +12349,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.targets[0].authorization_data.oauth2.authorization_url #=> String
     #   resp.targets[0].authorization_data.oauth2.user_id #=> String
     #   resp.targets[0].protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.targets[0].certificate_configurations #=> Array
+    #   resp.targets[0].certificate_configurations[0].s3.uri #=> String
+    #   resp.targets[0].certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.targets[0].certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/SynchronizeGatewayTargets AWS API Documentation
     #
@@ -12846,7 +12881,7 @@ module Aws::BedrockAgentCoreControl
     #   The branch name for this version. If not specified, inherits the
     #   parent's branch or defaults to `mainline`.
     #
-    # @option params [String] :commit_message
+    # @option params [required, String] :commit_message
     #   A commit message describing the changes in this version.
     #
     # @option params [Types::VersionCreatedBySource] :created_by
@@ -12880,7 +12915,7 @@ module Aws::BedrockAgentCoreControl
     #     },
     #     parent_version_ids: ["ConfigurationBundleVersion"], # required
     #     branch_name: "BranchName",
-    #     commit_message: "UpdateConfigurationBundleRequestCommitMessageString",
+    #     commit_message: "UpdateConfigurationBundleRequestCommitMessageString", # required
     #     created_by: {
     #       name: "String", # required
     #       arn: "String",
@@ -13823,6 +13858,15 @@ module Aws::BedrockAgentCoreControl
     #   The private endpoint configuration for the gateway target. Use this to
     #   connect the gateway to private resources in your VPC.
     #
+    # @option params [Array<Types::CertificateConfiguration>] :certificate_configurations
+    #   The private certificate authority (CA) configurations for the gateway
+    #   target. Use this to have the gateway trust a private CA when it
+    #   establishes TLS connections to the target endpoint. Provide each
+    #   certificate by reference to an Amazon S3 object or an Amazon Web
+    #   Services Secrets Manager secret. You can specify only one certificate
+    #   authority configuration in this list. To remove a previously
+    #   configured certificate authority, omit this field on update.
+    #
     # @return [Types::UpdateGatewayTargetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateGatewayTargetResponse#gateway_arn #gateway_arn} => String
@@ -13841,6 +13885,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::UpdateGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array&lt;Types::ManagedResourceDetails&gt;
     #   * {Types::UpdateGatewayTargetResponse#authorization_data #authorization_data} => Types::AuthorizationData
     #   * {Types::UpdateGatewayTargetResponse#protocol_type #protocol_type} => String
+    #   * {Types::UpdateGatewayTargetResponse#certificate_configurations #certificate_configurations} => Array&lt;Types::CertificateConfiguration&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -14080,6 +14125,17 @@ module Aws::BedrockAgentCoreControl
     #         routing_domain: "RoutingDomain",
     #       },
     #     },
+    #     certificate_configurations: [
+    #       {
+    #         s3: {
+    #           uri: "CertificateS3Uri", # required
+    #           bucket_owner_account_id: "CertificateBucketOwnerAccountId",
+    #         },
+    #         secrets_manager: {
+    #           secret_arn: "CertificateSecretArn", # required
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -14215,6 +14271,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.authorization_data.oauth2.authorization_url #=> String
     #   resp.authorization_data.oauth2.user_id #=> String
     #   resp.protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.certificate_configurations #=> Array
+    #   resp.certificate_configurations[0].s3.uri #=> String
+    #   resp.certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayTarget AWS API Documentation
     #
@@ -17037,7 +17097,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.76.0'
+      context[:gem_version] = '1.77.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb

@@ -133,7 +133,12 @@ module Aws::BedrockAgentCoreControl
     CategoricalScaleDefinitions = Shapes::ListShape.new(name: 'CategoricalScaleDefinitions')
     CedarPolicy = Shapes::StructureShape.new(name: 'CedarPolicy')
     Certificate = Shapes::StructureShape.new(name: 'Certificate')
+    CertificateBucketOwnerAccountId = Shapes::StringShape.new(name: 'CertificateBucketOwnerAccountId')
+    CertificateConfiguration = Shapes::UnionShape.new(name: 'CertificateConfiguration')
+    CertificateConfigurationList = Shapes::ListShape.new(name: 'CertificateConfigurationList')
     CertificateLocation = Shapes::UnionShape.new(name: 'CertificateLocation')
+    CertificateS3Uri = Shapes::StringShape.new(name: 'CertificateS3Uri')
+    CertificateSecretArn = Shapes::StringShape.new(name: 'CertificateSecretArn')
     Certificates = Shapes::ListShape.new(name: 'Certificates')
     ClaimMatchOperatorType = Shapes::StringShape.new(name: 'ClaimMatchOperatorType')
     ClaimMatchValueType = Shapes::UnionShape.new(name: 'ClaimMatchValueType')
@@ -1143,6 +1148,7 @@ module Aws::BedrockAgentCoreControl
     RuntimeQualifier = Shapes::StringShape.new(name: 'RuntimeQualifier')
     RuntimeTargetConfiguration = Shapes::StructureShape.new(name: 'RuntimeTargetConfiguration')
     S3BucketUri = Shapes::StringShape.new(name: 'S3BucketUri')
+    S3CertificateConfiguration = Shapes::StructureShape.new(name: 'S3CertificateConfiguration')
     S3Configuration = Shapes::StructureShape.new(name: 'S3Configuration')
     S3FilesAccessPointArn = Shapes::StringShape.new(name: 'S3FilesAccessPointArn')
     S3FilesAccessPointConfiguration = Shapes::StructureShape.new(name: 'S3FilesAccessPointConfiguration')
@@ -1174,6 +1180,7 @@ module Aws::BedrockAgentCoreControl
     SecretJsonKeyType = Shapes::StringShape.new(name: 'SecretJsonKeyType')
     SecretReference = Shapes::StructureShape.new(name: 'SecretReference')
     SecretSourceType = Shapes::StringShape.new(name: 'SecretSourceType')
+    SecretsManagerCertificateConfiguration = Shapes::StructureShape.new(name: 'SecretsManagerCertificateConfiguration')
     SecretsManagerLocation = Shapes::StructureShape.new(name: 'SecretsManagerLocation')
     SecurityGroupId = Shapes::StringShape.new(name: 'SecurityGroupId')
     SecurityGroupIdentifier = Shapes::StringShape.new(name: 'SecurityGroupIdentifier')
@@ -1714,6 +1721,16 @@ module Aws::BedrockAgentCoreControl
     Certificate.add_member(:location, Shapes::ShapeRef.new(shape: CertificateLocation, required: true, location_name: "location"))
     Certificate.struct_class = Types::Certificate
 
+    CertificateConfiguration.add_member(:s3, Shapes::ShapeRef.new(shape: S3CertificateConfiguration, location_name: "s3"))
+    CertificateConfiguration.add_member(:secrets_manager, Shapes::ShapeRef.new(shape: SecretsManagerCertificateConfiguration, location_name: "secretsManager"))
+    CertificateConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    CertificateConfiguration.add_member_subclass(:s3, Types::CertificateConfiguration::S3)
+    CertificateConfiguration.add_member_subclass(:secrets_manager, Types::CertificateConfiguration::SecretsManager)
+    CertificateConfiguration.add_member_subclass(:unknown, Types::CertificateConfiguration::Unknown)
+    CertificateConfiguration.struct_class = Types::CertificateConfiguration
+
+    CertificateConfigurationList.member = Shapes::ShapeRef.new(shape: CertificateConfiguration)
+
     CertificateLocation.add_member(:secrets_manager, Shapes::ShapeRef.new(shape: SecretsManagerLocation, location_name: "secretsManager"))
     CertificateLocation.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     CertificateLocation.add_member_subclass(:secrets_manager, Types::CertificateLocation::SecretsManager)
@@ -2218,6 +2235,7 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayTargetRequest.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, location_name: "credentialProviderConfigurations"))
     CreateGatewayTargetRequest.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
     CreateGatewayTargetRequest.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    CreateGatewayTargetRequest.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     CreateGatewayTargetRequest.struct_class = Types::CreateGatewayTargetRequest
 
     CreateGatewayTargetResponse.add_member(:gateway_arn, Shapes::ShapeRef.new(shape: GatewayArn, required: true, location_name: "gatewayArn"))
@@ -2236,6 +2254,7 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     CreateGatewayTargetResponse.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     CreateGatewayTargetResponse.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    CreateGatewayTargetResponse.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     CreateGatewayTargetResponse.struct_class = Types::CreateGatewayTargetResponse
 
     CreateHarnessEndpointRequest.add_member(:harness_id, Shapes::ShapeRef.new(shape: HarnessId, required: true, location: "uri", location_name: "harnessId"))
@@ -2721,6 +2740,7 @@ module Aws::BedrockAgentCoreControl
     DeleteConfigurationBundleRequest.add_member(:bundle_id, Shapes::ShapeRef.new(shape: ConfigurationBundleId, required: true, location: "uri", location_name: "bundleId"))
     DeleteConfigurationBundleRequest.struct_class = Types::DeleteConfigurationBundleRequest
 
+    DeleteConfigurationBundleResponse.add_member(:bundle_arn, Shapes::ShapeRef.new(shape: ConfigurationBundleArn, required: true, location_name: "bundleArn"))
     DeleteConfigurationBundleResponse.add_member(:bundle_id, Shapes::ShapeRef.new(shape: ConfigurationBundleId, required: true, location_name: "bundleId"))
     DeleteConfigurationBundleResponse.add_member(:status, Shapes::ShapeRef.new(shape: ConfigurationBundleStatus, required: true, location_name: "status"))
     DeleteConfigurationBundleResponse.struct_class = Types::DeleteConfigurationBundleResponse
@@ -3199,6 +3219,7 @@ module Aws::BedrockAgentCoreControl
     GatewayTarget.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     GatewayTarget.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     GatewayTarget.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    GatewayTarget.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     GatewayTarget.struct_class = Types::GatewayTarget
 
     GatewayTargetList.member = Shapes::ShapeRef.new(shape: GatewayTarget)
@@ -3495,6 +3516,7 @@ module Aws::BedrockAgentCoreControl
     GetGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     GetGatewayTargetResponse.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     GetGatewayTargetResponse.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    GetGatewayTargetResponse.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     GetGatewayTargetResponse.struct_class = Types::GetGatewayTargetResponse
 
     GetHarnessEndpointRequest.add_member(:harness_id, Shapes::ShapeRef.new(shape: HarnessId, required: true, location: "uri", location_name: "harnessId"))
@@ -5426,6 +5448,10 @@ module Aws::BedrockAgentCoreControl
     RuntimeTargetConfiguration.add_member(:schema, Shapes::ShapeRef.new(shape: HttpApiSchemaConfiguration, location_name: "schema"))
     RuntimeTargetConfiguration.struct_class = Types::RuntimeTargetConfiguration
 
+    S3CertificateConfiguration.add_member(:uri, Shapes::ShapeRef.new(shape: CertificateS3Uri, required: true, location_name: "uri"))
+    S3CertificateConfiguration.add_member(:bucket_owner_account_id, Shapes::ShapeRef.new(shape: CertificateBucketOwnerAccountId, location_name: "bucketOwnerAccountId"))
+    S3CertificateConfiguration.struct_class = Types::S3CertificateConfiguration
+
     S3Configuration.add_member(:uri, Shapes::ShapeRef.new(shape: S3BucketUri, location_name: "uri"))
     S3Configuration.add_member(:bucket_owner_account_id, Shapes::ShapeRef.new(shape: AwsAccountId, location_name: "bucketOwnerAccountId"))
     S3Configuration.struct_class = Types::S3Configuration
@@ -5481,6 +5507,9 @@ module Aws::BedrockAgentCoreControl
     SecretReference.add_member(:json_key, Shapes::ShapeRef.new(shape: SecretJsonKeyType, required: true, location_name: "jsonKey"))
     SecretReference.struct_class = Types::SecretReference
 
+    SecretsManagerCertificateConfiguration.add_member(:secret_arn, Shapes::ShapeRef.new(shape: CertificateSecretArn, required: true, location_name: "secretArn"))
+    SecretsManagerCertificateConfiguration.struct_class = Types::SecretsManagerCertificateConfiguration
+
     SecretsManagerLocation.add_member(:secret_arn, Shapes::ShapeRef.new(shape: ToolSecretArn, required: true, location_name: "secretArn"))
     SecretsManagerLocation.struct_class = Types::SecretsManagerLocation
 
@@ -5936,7 +5965,7 @@ module Aws::BedrockAgentCoreControl
     UpdateConfigurationBundleRequest.add_member(:components, Shapes::ShapeRef.new(shape: ComponentConfigurationMap, location_name: "components"))
     UpdateConfigurationBundleRequest.add_member(:parent_version_ids, Shapes::ShapeRef.new(shape: ConfigurationBundleVersionList, required: true, location_name: "parentVersionIds"))
     UpdateConfigurationBundleRequest.add_member(:branch_name, Shapes::ShapeRef.new(shape: BranchName, location_name: "branchName"))
-    UpdateConfigurationBundleRequest.add_member(:commit_message, Shapes::ShapeRef.new(shape: UpdateConfigurationBundleRequestCommitMessageString, location_name: "commitMessage"))
+    UpdateConfigurationBundleRequest.add_member(:commit_message, Shapes::ShapeRef.new(shape: UpdateConfigurationBundleRequestCommitMessageString, required: true, location_name: "commitMessage"))
     UpdateConfigurationBundleRequest.add_member(:created_by, Shapes::ShapeRef.new(shape: VersionCreatedBySource, location_name: "createdBy"))
     UpdateConfigurationBundleRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
     UpdateConfigurationBundleRequest.struct_class = Types::UpdateConfigurationBundleRequest
@@ -6089,6 +6118,7 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayTargetRequest.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, location_name: "credentialProviderConfigurations"))
     UpdateGatewayTargetRequest.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
     UpdateGatewayTargetRequest.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    UpdateGatewayTargetRequest.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     UpdateGatewayTargetRequest.struct_class = Types::UpdateGatewayTargetRequest
 
     UpdateGatewayTargetResponse.add_member(:gateway_arn, Shapes::ShapeRef.new(shape: GatewayArn, required: true, location_name: "gatewayArn"))
@@ -6107,6 +6137,7 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     UpdateGatewayTargetResponse.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     UpdateGatewayTargetResponse.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    UpdateGatewayTargetResponse.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     UpdateGatewayTargetResponse.struct_class = Types::UpdateGatewayTargetResponse
 
     UpdateHarnessEndpointRequest.add_member(:harness_id, Shapes::ShapeRef.new(shape: HarnessId, required: true, location: "uri", location_name: "harnessId"))

data/lib/aws-sdk-bedrockagentcorecontrol/types.rb

@@ -1197,6 +1197,41 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # A reference to a private certificate authority (CA) certificate that
+    # the gateway uses to verify TLS connections to the target endpoint. Use
+    # this when the target presents a certificate issued by a private CA
+    # that is not trusted by default. Specify exactly one certificate
+    # source. The configuration is a reference only and never contains the
+    # certificate content.
+    #
+    # @note CertificateConfiguration is a union - when making an API calls you must set exactly one of the members.
+    #
+    # @note CertificateConfiguration is a union - when returned from an API call exactly one value will be set and the returned type will be a subclass of CertificateConfiguration corresponding to the set member.
+    #
+    # @!attribute [rw] s3
+    #   The Amazon S3 location of the PEM-encoded private CA certificate.
+    #   @return [Types::S3CertificateConfiguration]
+    #
+    # @!attribute [rw] secrets_manager
+    #   The Amazon Web Services Secrets Manager location of the PEM-encoded
+    #   private CA certificate.
+    #   @return [Types::SecretsManagerCertificateConfiguration]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CertificateConfiguration AWS API Documentation
+    #
+    class CertificateConfiguration < Struct.new(
+      :s3,
+      :secrets_manager,
+      :unknown)
+      SENSITIVE = []
+      include Aws::Structure
+      include Aws::Structure::Union
+
+      class S3 < CertificateConfiguration; end
+      class SecretsManager < CertificateConfiguration; end
+      class Unknown < CertificateConfiguration; end
+    end
+
     # The location from which to retrieve a certificate.
     #
     # @note CertificateLocation is a union - when making an API calls you must set exactly one of the members.
@@ -3737,6 +3772,15 @@ module Aws::BedrockAgentCoreControl
     #   to connect the gateway to private resources in your VPC.
     #   @return [Types::PrivateEndpoint]
     #
+    # @!attribute [rw] certificate_configurations
+    #   The private certificate authority (CA) configurations for the
+    #   gateway target. Use this to have the gateway trust a private CA when
+    #   it establishes TLS connections to the target endpoint. Provide each
+    #   certificate by reference to an Amazon S3 object or an Amazon Web
+    #   Services Secrets Manager secret. You can specify only one
+    #   certificate authority configuration in this list.
+    #   @return [Array<Types::CertificateConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayTargetRequest AWS API Documentation
     #
     class CreateGatewayTargetRequest < Struct.new(
@@ -3747,7 +3791,8 @@ module Aws::BedrockAgentCoreControl
       :target_configuration,
       :credential_provider_configurations,
       :metadata_configuration,
-      :private_endpoint)
+      :private_endpoint,
+      :certificate_configurations)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -3820,6 +3865,11 @@ module Aws::BedrockAgentCoreControl
     #   The protocol type of the created gateway target.
     #   @return [String]
     #
+    # @!attribute [rw] certificate_configurations
+    #   The private certificate authority (CA) configurations for the
+    #   gateway target.
+    #   @return [Array<Types::CertificateConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayTargetResponse AWS API Documentation
     #
     class CreateGatewayTargetResponse < Struct.new(
@@ -3838,7 +3888,8 @@ module Aws::BedrockAgentCoreControl
       :private_endpoint,
       :private_endpoint_managed_resources,
       :authorization_data,
-      :protocol_type)
+      :protocol_type,
+      :certificate_configurations)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -6285,6 +6336,10 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # @!attribute [rw] bundle_arn
+    #   The Amazon Resource Name (ARN) of the deleted configuration bundle.
+    #   @return [String]
+    #
     # @!attribute [rw] bundle_id
     #   The unique identifier of the deleted configuration bundle.
     #   @return [String]
@@ -6296,6 +6351,7 @@ module Aws::BedrockAgentCoreControl
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteConfigurationBundleResponse AWS API Documentation
     #
     class DeleteConfigurationBundleResponse < Struct.new(
+      :bundle_arn,
       :bundle_id,
       :status)
       SENSITIVE = []
@@ -8500,6 +8556,11 @@ module Aws::BedrockAgentCoreControl
     #   The protocol type of the gateway target.
     #   @return [String]
     #
+    # @!attribute [rw] certificate_configurations
+    #   The private certificate authority (CA) configurations for the
+    #   gateway target.
+    #   @return [Array<Types::CertificateConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GatewayTarget AWS API Documentation
     #
     class GatewayTarget < Struct.new(
@@ -8518,7 +8579,8 @@ module Aws::BedrockAgentCoreControl
       :private_endpoint,
       :private_endpoint_managed_resources,
       :authorization_data,
-      :protocol_type)
+      :protocol_type,
+      :certificate_configurations)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -9971,6 +10033,11 @@ module Aws::BedrockAgentCoreControl
     #   The protocol type of the gateway target.
     #   @return [String]
     #
+    # @!attribute [rw] certificate_configurations
+    #   The private certificate authority (CA) configurations for the
+    #   gateway target.
+    #   @return [Array<Types::CertificateConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetGatewayTargetResponse AWS API Documentation
     #
     class GetGatewayTargetResponse < Struct.new(
@@ -9989,7 +10056,8 @@ module Aws::BedrockAgentCoreControl
       :private_endpoint,
       :private_endpoint_managed_resources,
       :authorization_data,
-      :protocol_type)
+      :protocol_type,
+      :certificate_configurations)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -18932,6 +19000,28 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # A reference to a PEM-encoded private CA certificate stored as an
+    # Amazon S3 object.
+    #
+    # @!attribute [rw] uri
+    #   The URI of the Amazon S3 object that contains the PEM-encoded
+    #   certificate.
+    #   @return [String]
+    #
+    # @!attribute [rw] bucket_owner_account_id
+    #   The account ID of the Amazon S3 bucket owner. This ID is used for
+    #   cross-account access to the bucket.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/S3CertificateConfiguration AWS API Documentation
+    #
+    class S3CertificateConfiguration < Struct.new(
+      :uri,
+      :bucket_owner_account_id)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon S3 configuration for a gateway. This structure defines how
     # the gateway accesses files in Amazon S3.
     #
@@ -19197,6 +19287,22 @@ module Aws::BedrockAgentCoreControl
       include Aws::Structure
     end
 
+    # A reference to a PEM-encoded private CA certificate stored in an
+    # Amazon Web Services Secrets Manager secret.
+    #
+    # @!attribute [rw] secret_arn
+    #   The Amazon Resource Name (ARN) of the Amazon Web Services Secrets
+    #   Manager secret that contains the PEM-encoded certificate.
+    #   @return [String]
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/SecretsManagerCertificateConfiguration AWS API Documentation
+    #
+    class SecretsManagerCertificateConfiguration < Struct.new(
+      :secret_arn)
+      SENSITIVE = []
+      include Aws::Structure
+    end
+
     # The Amazon Web Services Secrets Manager location configuration.
     #
     # @!attribute [rw] secret_arn
@@ -22043,6 +22149,17 @@ module Aws::BedrockAgentCoreControl
     #   to connect the gateway to private resources in your VPC.
     #   @return [Types::PrivateEndpoint]
     #
+    # @!attribute [rw] certificate_configurations
+    #   The private certificate authority (CA) configurations for the
+    #   gateway target. Use this to have the gateway trust a private CA when
+    #   it establishes TLS connections to the target endpoint. Provide each
+    #   certificate by reference to an Amazon S3 object or an Amazon Web
+    #   Services Secrets Manager secret. You can specify only one
+    #   certificate authority configuration in this list. To remove a
+    #   previously configured certificate authority, omit this field on
+    #   update.
+    #   @return [Array<Types::CertificateConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayTargetRequest AWS API Documentation
     #
     class UpdateGatewayTargetRequest < Struct.new(
@@ -22053,7 +22170,8 @@ module Aws::BedrockAgentCoreControl
       :target_configuration,
       :credential_provider_configurations,
       :metadata_configuration,
-      :private_endpoint)
+      :private_endpoint,
+      :certificate_configurations)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end
@@ -22127,6 +22245,11 @@ module Aws::BedrockAgentCoreControl
     #   The protocol type of the updated gateway target.
     #   @return [String]
     #
+    # @!attribute [rw] certificate_configurations
+    #   The private certificate authority (CA) configurations for the
+    #   gateway target.
+    #   @return [Array<Types::CertificateConfiguration>]
+    #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayTargetResponse AWS API Documentation
     #
     class UpdateGatewayTargetResponse < Struct.new(
@@ -22145,7 +22268,8 @@ module Aws::BedrockAgentCoreControl
       :private_endpoint,
       :private_endpoint_managed_resources,
       :authorization_data,
-      :protocol_type)
+      :protocol_type,
+      :certificate_configurations)
       SENSITIVE = [:name, :description]
       include Aws::Structure
     end

data/lib/aws-sdk-bedrockagentcorecontrol.rb

@@ -55,7 +55,7 @@ module Aws::BedrockAgentCoreControl
   autoload :EndpointProvider, 'aws-sdk-bedrockagentcorecontrol/endpoint_provider'
   autoload :Endpoints, 'aws-sdk-bedrockagentcorecontrol/endpoints'
 
-  GEM_VERSION = '1.76.0'
+  GEM_VERSION = '1.77.0'
 
 end
 

data/sig/client.rbs

@@ -637,6 +637,7 @@ module Aws
         def private_endpoint_managed_resources: () -> ::Array[Types::ManagedResourceDetails]
         def authorization_data: () -> Types::AuthorizationData
         def protocol_type: () -> ("MCP" | "HTTP")
+        def certificate_configurations: () -> ::Array[Types::CertificateConfiguration]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#create_gateway_target-instance_method
       def create_gateway_target: (
@@ -653,7 +654,10 @@ module Aws
                                      allowed_query_parameters: Array[::String]?,
                                      allowed_response_headers: Array[::String]?
                                    },
-                                   ?private_endpoint: Params::private_endpoint
+                                   ?private_endpoint: Params::private_endpoint,
+                                   ?certificate_configurations: Array[
+                                     Params::certificate_configuration
+                                   ]
                                  ) -> _CreateGatewayTargetResponseSuccess
                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _CreateGatewayTargetResponseSuccess
 
@@ -1105,6 +1109,7 @@ module Aws
 
       interface _DeleteConfigurationBundleResponseSuccess
         include ::Seahorse::Client::_ResponseSuccess[Types::DeleteConfigurationBundleResponse]
+        def bundle_arn: () -> ::String
         def bundle_id: () -> ::String
         def status: () -> ("ACTIVE" | "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "DELETING" | "DELETE_FAILED")
       end
@@ -1734,6 +1739,7 @@ module Aws
         def private_endpoint_managed_resources: () -> ::Array[Types::ManagedResourceDetails]
         def authorization_data: () -> Types::AuthorizationData
         def protocol_type: () -> ("MCP" | "HTTP")
+        def certificate_configurations: () -> ::Array[Types::CertificateConfiguration]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#get_gateway_target-instance_method
       def get_gateway_target: (
@@ -2831,7 +2837,7 @@ module Aws
                                            }],
                                          parent_version_ids: Array[::String],
                                          ?branch_name: ::String,
-                                         ?commit_message: ::String,
+                                         commit_message: ::String,
                                          ?created_by: {
                                            name: ::String,
                                            arn: ::String?
@@ -3042,6 +3048,7 @@ module Aws
         def private_endpoint_managed_resources: () -> ::Array[Types::ManagedResourceDetails]
         def authorization_data: () -> Types::AuthorizationData
         def protocol_type: () -> ("MCP" | "HTTP")
+        def certificate_configurations: () -> ::Array[Types::CertificateConfiguration]
       end
       # https://docs.aws.amazon.com/sdk-for-ruby/v3/api/Aws/BedrockAgentCoreControl/Client.html#update_gateway_target-instance_method
       def update_gateway_target: (
@@ -3058,7 +3065,10 @@ module Aws
                                      allowed_query_parameters: Array[::String]?,
                                      allowed_response_headers: Array[::String]?
                                    },
-                                   ?private_endpoint: Params::private_endpoint
+                                   ?private_endpoint: Params::private_endpoint,
+                                   ?certificate_configurations: Array[
+                                     Params::certificate_configuration
+                                   ]
                                  ) -> _UpdateGatewayTargetResponseSuccess
                                | (Hash[Symbol, untyped] params, ?Hash[Symbol, untyped] options) -> _UpdateGatewayTargetResponseSuccess
 

data/sig/params.rbs

@@ -556,6 +556,16 @@ module Aws
       credential_provider: Params::credential_provider?
     }
 
+      type certificate_configuration = {
+      s3: {
+        uri: ::String,
+        bucket_owner_account_id: ::String?
+      }?,
+      secrets_manager: {
+        secret_arn: ::String
+      }?
+    }
+
       type harness_agent_core_runtime_environment_request = {
       lifecycle_configuration: {
         idle_runtime_session_timeout: ::Integer?,

data/sig/types.rbs

@@ -339,6 +339,20 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class CertificateConfiguration
+      attr_accessor s3: Types::S3CertificateConfiguration
+      attr_accessor secrets_manager: Types::SecretsManagerCertificateConfiguration
+      attr_accessor unknown: untyped
+      SENSITIVE: []
+
+      class S3 < CertificateConfiguration
+      end
+      class SecretsManager < CertificateConfiguration
+      end
+      class Unknown < CertificateConfiguration
+      end
+    end
+
     class CertificateLocation
       attr_accessor secrets_manager: Types::SecretsManagerLocation
       attr_accessor unknown: untyped
@@ -963,6 +977,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor metadata_configuration: Types::MetadataConfiguration
       attr_accessor private_endpoint: Types::PrivateEndpoint
+      attr_accessor certificate_configurations: ::Array[Types::CertificateConfiguration]
       SENSITIVE: [:name, :description]
     end
 
@@ -983,6 +998,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       attr_accessor authorization_data: Types::AuthorizationData
       attr_accessor protocol_type: ("MCP" | "HTTP")
+      attr_accessor certificate_configurations: ::Array[Types::CertificateConfiguration]
       SENSITIVE: [:name, :description]
     end
 
@@ -1636,6 +1652,7 @@ module Aws::BedrockAgentCoreControl
     end
 
     class DeleteConfigurationBundleResponse
+      attr_accessor bundle_arn: ::String
       attr_accessor bundle_id: ::String
       attr_accessor status: ("ACTIVE" | "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "DELETING" | "DELETE_FAILED")
       SENSITIVE: []
@@ -2271,6 +2288,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       attr_accessor authorization_data: Types::AuthorizationData
       attr_accessor protocol_type: ("MCP" | "HTTP")
+      attr_accessor certificate_configurations: ::Array[Types::CertificateConfiguration]
       SENSITIVE: [:name, :description]
     end
 
@@ -2629,6 +2647,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       attr_accessor authorization_data: Types::AuthorizationData
       attr_accessor protocol_type: ("MCP" | "HTTP")
+      attr_accessor certificate_configurations: ::Array[Types::CertificateConfiguration]
       SENSITIVE: [:name, :description]
     end
 
@@ -5216,6 +5235,12 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class S3CertificateConfiguration
+      attr_accessor uri: ::String
+      attr_accessor bucket_owner_account_id: ::String
+      SENSITIVE: []
+    end
+
     class S3Configuration
       attr_accessor uri: ::String
       attr_accessor bucket_owner_account_id: ::String
@@ -5286,6 +5311,11 @@ module Aws::BedrockAgentCoreControl
       SENSITIVE: []
     end
 
+    class SecretsManagerCertificateConfiguration
+      attr_accessor secret_arn: ::String
+      SENSITIVE: []
+    end
+
     class SecretsManagerLocation
       attr_accessor secret_arn: ::String
       SENSITIVE: []
@@ -6064,6 +6094,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor credential_provider_configurations: ::Array[Types::CredentialProviderConfiguration]
       attr_accessor metadata_configuration: Types::MetadataConfiguration
       attr_accessor private_endpoint: Types::PrivateEndpoint
+      attr_accessor certificate_configurations: ::Array[Types::CertificateConfiguration]
       SENSITIVE: [:name, :description]
     end
 
@@ -6084,6 +6115,7 @@ module Aws::BedrockAgentCoreControl
       attr_accessor private_endpoint_managed_resources: ::Array[Types::ManagedResourceDetails]
       attr_accessor authorization_data: Types::AuthorizationData
       attr_accessor protocol_type: ("MCP" | "HTTP")
+      attr_accessor certificate_configurations: ::Array[Types::CertificateConfiguration]
       SENSITIVE: [:name, :description]
     end
 

metadata

@@ -1,7 +1,7 @@
 --- !ruby/object:Gem::Specification
 name: aws-sdk-bedrockagentcorecontrol
 version: !ruby/object:Gem::Version
-  version: 1.76.0
+  version: 1.77.0
 platform: ruby
 authors:
 - Amazon Web Services