aws-sdk-bedrockagentcorecontrol 1.76.0 → 1.78.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: a42eede2840feea81c35eea301c086b1864ed8d67166968ca8068db3ab635964
-  data.tar.gz: 1d25ed4c9f926885de910c041ef3b496d8f331fc566498e55a03bb143f999ab7
+  metadata.gz: fd377f9e4004e3a09513c16a0ab40ae62605b5ada61ab9d9f678d0c9ebdfbe6d
+  data.tar.gz: 6f15a8a3731c448bf9fa11130acf07aea976621dafae1e65050b6e6c9c224f41
 SHA512:
-  metadata.gz: 1f59b3f087ddb95a9a3dedb6cd262c2e28d6f846d51b6f04f277313343e2a98f0abd344a705fbc4095eb0ce6cd58bf71966c933c036467d77554c8da38510cd6
-  data.tar.gz: 57280296d2168c92de77d5ace824ff138d13a1b9fefc8e73634c5c76df16bf285fe97d2d56ee0f5fa03ff956267105784aeb0ac633b0b3611e0f91c124db9a1a
+  metadata.gz: edf471b9c13135755b5a2f403df371a31dfe051c5c1fd1942dac43c3fbe22b892e85a0027b1809fed07e5cf6610280d495067ecd1d84c6dd315d4d115d277ff9
+  data.tar.gz: 9647b8cab8cd85a7f47cbe74fc651d64511a48ad59ee2ff7522b0808bc18dfdd81575f49d4a5843dfcfda6a784abb374649db3156b02ac45e8886eae5bb75336

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.78.0 (2026-10-12)
+------------------
+
+* Feature - AgentCore Memory now supports configuring Long-Term Memory Time-to-Live (TTL) on Memory Strategies.
+
+1.77.0 (2026-09-30)
+------------------
+
+* Feature - This release adds support for private certificate authorities on Amazon Bedrock AgentCore Gateway targets. The new certificateConfigurations parameter on CreateGatewayTarget and UpdateGatewayTarget references a PEM-encoded CA certificate in Amazon S3 or AWS Secrets Manager.
+
 1.76.0 (2026-09-28)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.76.0
+1.78.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -2611,6 +2611,14 @@ module Aws::BedrockAgentCoreControl
     #   The private endpoint configuration for the gateway target. Use this to
     #   connect the gateway to private resources in your VPC.
     #
+    # @option params [Array<Types::CertificateConfiguration>] :certificate_configurations
+    #   The private certificate authority (CA) configurations for the gateway
+    #   target. Use this to have the gateway trust a private CA when it
+    #   establishes TLS connections to the target endpoint. Provide each
+    #   certificate by reference to an Amazon S3 object or an Amazon Web
+    #   Services Secrets Manager secret. You can specify only one certificate
+    #   authority configuration in this list.
+    #
     # @return [Types::CreateGatewayTargetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::CreateGatewayTargetResponse#gateway_arn #gateway_arn} => String
@@ -2629,6 +2637,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::CreateGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array&lt;Types::ManagedResourceDetails&gt;
     #   * {Types::CreateGatewayTargetResponse#authorization_data #authorization_data} => Types::AuthorizationData
     #   * {Types::CreateGatewayTargetResponse#protocol_type #protocol_type} => String
+    #   * {Types::CreateGatewayTargetResponse#certificate_configurations #certificate_configurations} => Array&lt;Types::CertificateConfiguration&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -2868,6 +2877,17 @@ module Aws::BedrockAgentCoreControl
     #         routing_domain: "RoutingDomain",
     #       },
     #     },
+    #     certificate_configurations: [
+    #       {
+    #         s3: {
+    #           uri: "CertificateS3Uri", # required
+    #           bucket_owner_account_id: "CertificateBucketOwnerAccountId",
+    #         },
+    #         secrets_manager: {
+    #           secret_arn: "CertificateSecretArn", # required
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -3003,6 +3023,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.authorization_data.oauth2.authorization_url #=> String
     #   resp.authorization_data.oauth2.user_id #=> String
     #   resp.protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.certificate_configurations #=> Array
+    #   resp.certificate_configurations[0].s3.uri #=> String
+    #   resp.certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateGatewayTarget AWS API Documentation
     #
@@ -3782,6 +3806,10 @@ module Aws::BedrockAgentCoreControl
     #               },
     #             ],
     #           },
+    #           record_expiry_specification: {
+    #             record_expiry_duration_days: 1,
+    #             action: "REMOVE", # accepts REMOVE
+    #           },
     #         },
     #         summary_memory_strategy: {
     #           name: "Name", # required
@@ -3816,6 +3844,10 @@ module Aws::BedrockAgentCoreControl
     #               },
     #             ],
     #           },
+    #           record_expiry_specification: {
+    #             record_expiry_duration_days: 1,
+    #             action: "REMOVE", # accepts REMOVE
+    #           },
     #         },
     #         user_preference_memory_strategy: {
     #           name: "Name", # required
@@ -3850,6 +3882,10 @@ module Aws::BedrockAgentCoreControl
     #               },
     #             ],
     #           },
+    #           record_expiry_specification: {
+    #             record_expiry_duration_days: 1,
+    #             action: "REMOVE", # accepts REMOVE
+    #           },
     #         },
     #         custom_memory_strategy: {
     #           name: "Name", # required
@@ -3976,6 +4012,10 @@ module Aws::BedrockAgentCoreControl
     #               },
     #             ],
     #           },
+    #           record_expiry_specification: {
+    #             record_expiry_duration_days: 1,
+    #             action: "REMOVE", # accepts REMOVE
+    #           },
     #         },
     #         episodic_memory_strategy: {
     #           name: "Name", # required
@@ -4042,6 +4082,10 @@ module Aws::BedrockAgentCoreControl
     #               },
     #             ],
     #           },
+    #           record_expiry_specification: {
+    #             record_expiry_duration_days: 1,
+    #             action: "REMOVE", # accepts REMOVE
+    #           },
     #         },
     #       },
     #     ],
@@ -4176,6 +4220,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_list_validation.max_items #=> Integer
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.number_validation.min_value #=> Float
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.number_validation.max_value #=> Float
+    #   resp.memory.strategies[0].record_expiry_duration_days #=> Integer
     #   resp.memory.indexed_keys #=> Array
     #   resp.memory.indexed_keys[0].key #=> String
     #   resp.memory.indexed_keys[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
@@ -5169,10 +5214,10 @@ module Aws::BedrockAgentCoreControl
     #
     # @option params [String] :client_token
     #   A unique, case-sensitive identifier to ensure the idempotency of the
-    #   request. The AWS SDK automatically generates this token, so you don't
-    #   need to provide it in most cases. If you retry a request with the same
-    #   client token, the service returns the same response without creating a
-    #   duplicate policy.
+    #   request. The Amazon Web Services SDK automatically generates this
+    #   token, so you don't need to provide it in most cases. If you retry a
+    #   request with the same client token, the service returns the same
+    #   response without creating a duplicate policy.
     #
     #   **A suitable default value is auto-generated.** You should normally
     #   not need to pass this option.**
@@ -5967,6 +6012,7 @@ module Aws::BedrockAgentCoreControl
     #
     # @return [Types::DeleteConfigurationBundleResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
+    #   * {Types::DeleteConfigurationBundleResponse#bundle_arn #bundle_arn} => String
     #   * {Types::DeleteConfigurationBundleResponse#bundle_id #bundle_id} => String
     #   * {Types::DeleteConfigurationBundleResponse#status #status} => String
     #
@@ -5978,6 +6024,7 @@ module Aws::BedrockAgentCoreControl
     #
     # @example Response structure
     #
+    #   resp.bundle_arn #=> String
     #   resp.bundle_id #=> String
     #   resp.status #=> String, one of "ACTIVE", "CREATING", "CREATE_FAILED", "UPDATING", "UPDATE_FAILED", "DELETING", "DELETE_FAILED"
     #
@@ -6561,7 +6608,7 @@ module Aws::BedrockAgentCoreControl
     # @option params [String] :client_token
     #   A client token is used for keeping track of idempotent requests. It
     #   can contain a session id which can be around 250 chars, combined with
-    #   a unique AWS identifier.
+    #   a unique Amazon Web Services identifier.
     #
     #   **A suitable default value is auto-generated.** You should normally
     #   not need to pass this option.**
@@ -8116,6 +8163,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::GetGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array&lt;Types::ManagedResourceDetails&gt;
     #   * {Types::GetGatewayTargetResponse#authorization_data #authorization_data} => Types::AuthorizationData
     #   * {Types::GetGatewayTargetResponse#protocol_type #protocol_type} => String
+    #   * {Types::GetGatewayTargetResponse#certificate_configurations #certificate_configurations} => Array&lt;Types::CertificateConfiguration&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -8257,6 +8305,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.authorization_data.oauth2.authorization_url #=> String
     #   resp.authorization_data.oauth2.user_id #=> String
     #   resp.protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.certificate_configurations #=> Array
+    #   resp.certificate_configurations[0].s3.uri #=> String
+    #   resp.certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetGatewayTarget AWS API Documentation
     #
@@ -8628,6 +8680,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_list_validation.max_items #=> Integer
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.number_validation.min_value #=> Float
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.number_validation.max_value #=> Float
+    #   resp.memory.strategies[0].record_expiry_duration_days #=> Integer
     #   resp.memory.indexed_keys #=> Array
     #   resp.memory.indexed_keys[0].key #=> String
     #   resp.memory.indexed_keys[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
@@ -12053,10 +12106,10 @@ module Aws::BedrockAgentCoreControl
     #
     # @option params [String] :client_token
     #   A unique, case-sensitive identifier to ensure the idempotency of the
-    #   request. The AWS SDK automatically generates this token, so you don't
-    #   need to provide it in most cases. If you retry a request with the same
-    #   client token, the service returns the same response without starting a
-    #   duplicate generation.
+    #   request. The Amazon Web Services SDK automatically generates this
+    #   token, so you don't need to provide it in most cases. If you retry a
+    #   request with the same client token, the service returns the same
+    #   response without starting a duplicate generation.
     #
     #   **A suitable default value is auto-generated.** You should normally
     #   not need to pass this option.**
@@ -12318,6 +12371,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.targets[0].authorization_data.oauth2.authorization_url #=> String
     #   resp.targets[0].authorization_data.oauth2.user_id #=> String
     #   resp.targets[0].protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.targets[0].certificate_configurations #=> Array
+    #   resp.targets[0].certificate_configurations[0].s3.uri #=> String
+    #   resp.targets[0].certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.targets[0].certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/SynchronizeGatewayTargets AWS API Documentation
     #
@@ -12846,7 +12903,7 @@ module Aws::BedrockAgentCoreControl
     #   The branch name for this version. If not specified, inherits the
     #   parent's branch or defaults to `mainline`.
     #
-    # @option params [String] :commit_message
+    # @option params [required, String] :commit_message
     #   A commit message describing the changes in this version.
     #
     # @option params [Types::VersionCreatedBySource] :created_by
@@ -12880,7 +12937,7 @@ module Aws::BedrockAgentCoreControl
     #     },
     #     parent_version_ids: ["ConfigurationBundleVersion"], # required
     #     branch_name: "BranchName",
-    #     commit_message: "UpdateConfigurationBundleRequestCommitMessageString",
+    #     commit_message: "UpdateConfigurationBundleRequestCommitMessageString", # required
     #     created_by: {
     #       name: "String", # required
     #       arn: "String",
@@ -13823,6 +13880,15 @@ module Aws::BedrockAgentCoreControl
     #   The private endpoint configuration for the gateway target. Use this to
     #   connect the gateway to private resources in your VPC.
     #
+    # @option params [Array<Types::CertificateConfiguration>] :certificate_configurations
+    #   The private certificate authority (CA) configurations for the gateway
+    #   target. Use this to have the gateway trust a private CA when it
+    #   establishes TLS connections to the target endpoint. Provide each
+    #   certificate by reference to an Amazon S3 object or an Amazon Web
+    #   Services Secrets Manager secret. You can specify only one certificate
+    #   authority configuration in this list. To remove a previously
+    #   configured certificate authority, omit this field on update.
+    #
     # @return [Types::UpdateGatewayTargetResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
     #   * {Types::UpdateGatewayTargetResponse#gateway_arn #gateway_arn} => String
@@ -13841,6 +13907,7 @@ module Aws::BedrockAgentCoreControl
     #   * {Types::UpdateGatewayTargetResponse#private_endpoint_managed_resources #private_endpoint_managed_resources} => Array&lt;Types::ManagedResourceDetails&gt;
     #   * {Types::UpdateGatewayTargetResponse#authorization_data #authorization_data} => Types::AuthorizationData
     #   * {Types::UpdateGatewayTargetResponse#protocol_type #protocol_type} => String
+    #   * {Types::UpdateGatewayTargetResponse#certificate_configurations #certificate_configurations} => Array&lt;Types::CertificateConfiguration&gt;
     #
     # @example Request syntax with placeholder values
     #
@@ -14080,6 +14147,17 @@ module Aws::BedrockAgentCoreControl
     #         routing_domain: "RoutingDomain",
     #       },
     #     },
+    #     certificate_configurations: [
+    #       {
+    #         s3: {
+    #           uri: "CertificateS3Uri", # required
+    #           bucket_owner_account_id: "CertificateBucketOwnerAccountId",
+    #         },
+    #         secrets_manager: {
+    #           secret_arn: "CertificateSecretArn", # required
+    #         },
+    #       },
+    #     ],
     #   })
     #
     # @example Response structure
@@ -14215,6 +14293,10 @@ module Aws::BedrockAgentCoreControl
     #   resp.authorization_data.oauth2.authorization_url #=> String
     #   resp.authorization_data.oauth2.user_id #=> String
     #   resp.protocol_type #=> String, one of "MCP", "HTTP"
+    #   resp.certificate_configurations #=> Array
+    #   resp.certificate_configurations[0].s3.uri #=> String
+    #   resp.certificate_configurations[0].s3.bucket_owner_account_id #=> String
+    #   resp.certificate_configurations[0].secrets_manager.secret_arn #=> String
     #
     # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateGatewayTarget AWS API Documentation
     #
@@ -14903,7 +14985,7 @@ module Aws::BedrockAgentCoreControl
     # @option params [String] :client_token
     #   A client token is used for keeping track of idempotent requests. It
     #   can contain a session id which can be around 250 chars, combined with
-    #   a unique AWS identifier.
+    #   a unique Amazon Web Services identifier.
     #
     #   **A suitable default value is auto-generated.** You should normally
     #   not need to pass this option.**
@@ -14986,6 +15068,10 @@ module Aws::BedrockAgentCoreControl
     #                 },
     #               ],
     #             },
+    #             record_expiry_specification: {
+    #               record_expiry_duration_days: 1,
+    #               action: "REMOVE", # accepts REMOVE
+    #             },
     #           },
     #           summary_memory_strategy: {
     #             name: "Name", # required
@@ -15020,6 +15106,10 @@ module Aws::BedrockAgentCoreControl
     #                 },
     #               ],
     #             },
+    #             record_expiry_specification: {
+    #               record_expiry_duration_days: 1,
+    #               action: "REMOVE", # accepts REMOVE
+    #             },
     #           },
     #           user_preference_memory_strategy: {
     #             name: "Name", # required
@@ -15054,6 +15144,10 @@ module Aws::BedrockAgentCoreControl
     #                 },
     #               ],
     #             },
+    #             record_expiry_specification: {
+    #               record_expiry_duration_days: 1,
+    #               action: "REMOVE", # accepts REMOVE
+    #             },
     #           },
     #           custom_memory_strategy: {
     #             name: "Name", # required
@@ -15180,6 +15274,10 @@ module Aws::BedrockAgentCoreControl
     #                 },
     #               ],
     #             },
+    #             record_expiry_specification: {
+    #               record_expiry_duration_days: 1,
+    #               action: "REMOVE", # accepts REMOVE
+    #             },
     #           },
     #           episodic_memory_strategy: {
     #             name: "Name", # required
@@ -15246,6 +15344,10 @@ module Aws::BedrockAgentCoreControl
     #                 },
     #               ],
     #             },
+    #             record_expiry_specification: {
+    #               record_expiry_duration_days: 1,
+    #               action: "REMOVE", # accepts REMOVE
+    #             },
     #           },
     #         },
     #       ],
@@ -15411,6 +15513,10 @@ module Aws::BedrockAgentCoreControl
     #               },
     #             ],
     #           },
+    #           record_expiry_specification: {
+    #             record_expiry_duration_days: 1,
+    #             action: "REMOVE", # accepts REMOVE
+    #           },
     #         },
     #       ],
     #       delete_memory_strategies: [
@@ -15547,6 +15653,7 @@ module Aws::BedrockAgentCoreControl
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.string_list_validation.max_items #=> Integer
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.number_validation.min_value #=> Float
     #   resp.memory.strategies[0].memory_record_schema.metadata_schema[0].extraction_config.llm_extraction_config.validation.number_validation.max_value #=> Float
+    #   resp.memory.strategies[0].record_expiry_duration_days #=> Integer
     #   resp.memory.indexed_keys #=> Array
     #   resp.memory.indexed_keys[0].key #=> String
     #   resp.memory.indexed_keys[0].type #=> String, one of "STRING", "STRINGLIST", "NUMBER"
@@ -17037,7 +17144,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.76.0'
+      context[:gem_version] = '1.78.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentcorecontrol/client_api.rb

@@ -133,7 +133,12 @@ module Aws::BedrockAgentCoreControl
     CategoricalScaleDefinitions = Shapes::ListShape.new(name: 'CategoricalScaleDefinitions')
     CedarPolicy = Shapes::StructureShape.new(name: 'CedarPolicy')
     Certificate = Shapes::StructureShape.new(name: 'Certificate')
+    CertificateBucketOwnerAccountId = Shapes::StringShape.new(name: 'CertificateBucketOwnerAccountId')
+    CertificateConfiguration = Shapes::UnionShape.new(name: 'CertificateConfiguration')
+    CertificateConfigurationList = Shapes::ListShape.new(name: 'CertificateConfigurationList')
     CertificateLocation = Shapes::UnionShape.new(name: 'CertificateLocation')
+    CertificateS3Uri = Shapes::StringShape.new(name: 'CertificateS3Uri')
+    CertificateSecretArn = Shapes::StringShape.new(name: 'CertificateSecretArn')
     Certificates = Shapes::ListShape.new(name: 'Certificates')
     ClaimMatchOperatorType = Shapes::StringShape.new(name: 'ClaimMatchOperatorType')
     ClaimMatchValueType = Shapes::UnionShape.new(name: 'ClaimMatchValueType')
@@ -1082,6 +1087,9 @@ module Aws::BedrockAgentCoreControl
     RatingScale = Shapes::UnionShape.new(name: 'RatingScale')
     ReasoningConfiguration = Shapes::StructureShape.new(name: 'ReasoningConfiguration')
     ReasoningConfigurationEffortString = Shapes::StringShape.new(name: 'ReasoningConfigurationEffortString')
+    RecordExpiryAction = Shapes::StringShape.new(name: 'RecordExpiryAction')
+    RecordExpiryDurationDays = Shapes::IntegerShape.new(name: 'RecordExpiryDurationDays')
+    RecordExpirySpecification = Shapes::UnionShape.new(name: 'RecordExpirySpecification')
     RecordIdentifier = Shapes::StringShape.new(name: 'RecordIdentifier')
     RecordingConfig = Shapes::StructureShape.new(name: 'RecordingConfig')
     ReflectionConfiguration = Shapes::UnionShape.new(name: 'ReflectionConfiguration')
@@ -1143,6 +1151,7 @@ module Aws::BedrockAgentCoreControl
     RuntimeQualifier = Shapes::StringShape.new(name: 'RuntimeQualifier')
     RuntimeTargetConfiguration = Shapes::StructureShape.new(name: 'RuntimeTargetConfiguration')
     S3BucketUri = Shapes::StringShape.new(name: 'S3BucketUri')
+    S3CertificateConfiguration = Shapes::StructureShape.new(name: 'S3CertificateConfiguration')
     S3Configuration = Shapes::StructureShape.new(name: 'S3Configuration')
     S3FilesAccessPointArn = Shapes::StringShape.new(name: 'S3FilesAccessPointArn')
     S3FilesAccessPointConfiguration = Shapes::StructureShape.new(name: 'S3FilesAccessPointConfiguration')
@@ -1174,6 +1183,7 @@ module Aws::BedrockAgentCoreControl
     SecretJsonKeyType = Shapes::StringShape.new(name: 'SecretJsonKeyType')
     SecretReference = Shapes::StructureShape.new(name: 'SecretReference')
     SecretSourceType = Shapes::StringShape.new(name: 'SecretSourceType')
+    SecretsManagerCertificateConfiguration = Shapes::StructureShape.new(name: 'SecretsManagerCertificateConfiguration')
     SecretsManagerLocation = Shapes::StructureShape.new(name: 'SecretsManagerLocation')
     SecurityGroupId = Shapes::StringShape.new(name: 'SecurityGroupId')
     SecurityGroupIdentifier = Shapes::StringShape.new(name: 'SecurityGroupIdentifier')
@@ -1714,6 +1724,16 @@ module Aws::BedrockAgentCoreControl
     Certificate.add_member(:location, Shapes::ShapeRef.new(shape: CertificateLocation, required: true, location_name: "location"))
     Certificate.struct_class = Types::Certificate
 
+    CertificateConfiguration.add_member(:s3, Shapes::ShapeRef.new(shape: S3CertificateConfiguration, location_name: "s3"))
+    CertificateConfiguration.add_member(:secrets_manager, Shapes::ShapeRef.new(shape: SecretsManagerCertificateConfiguration, location_name: "secretsManager"))
+    CertificateConfiguration.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    CertificateConfiguration.add_member_subclass(:s3, Types::CertificateConfiguration::S3)
+    CertificateConfiguration.add_member_subclass(:secrets_manager, Types::CertificateConfiguration::SecretsManager)
+    CertificateConfiguration.add_member_subclass(:unknown, Types::CertificateConfiguration::Unknown)
+    CertificateConfiguration.struct_class = Types::CertificateConfiguration
+
+    CertificateConfigurationList.member = Shapes::ShapeRef.new(shape: CertificateConfiguration)
+
     CertificateLocation.add_member(:secrets_manager, Shapes::ShapeRef.new(shape: SecretsManagerLocation, location_name: "secretsManager"))
     CertificateLocation.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
     CertificateLocation.add_member_subclass(:secrets_manager, Types::CertificateLocation::SecretsManager)
@@ -2218,6 +2238,7 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayTargetRequest.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, location_name: "credentialProviderConfigurations"))
     CreateGatewayTargetRequest.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
     CreateGatewayTargetRequest.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    CreateGatewayTargetRequest.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     CreateGatewayTargetRequest.struct_class = Types::CreateGatewayTargetRequest
 
     CreateGatewayTargetResponse.add_member(:gateway_arn, Shapes::ShapeRef.new(shape: GatewayArn, required: true, location_name: "gatewayArn"))
@@ -2236,6 +2257,7 @@ module Aws::BedrockAgentCoreControl
     CreateGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     CreateGatewayTargetResponse.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     CreateGatewayTargetResponse.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    CreateGatewayTargetResponse.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     CreateGatewayTargetResponse.struct_class = Types::CreateGatewayTargetResponse
 
     CreateHarnessEndpointRequest.add_member(:harness_id, Shapes::ShapeRef.new(shape: HarnessId, required: true, location: "uri", location_name: "harnessId"))
@@ -2575,6 +2597,7 @@ module Aws::BedrockAgentCoreControl
     CustomMemoryStrategyInput.add_member(:namespace_templates, Shapes::ShapeRef.new(shape: NamespacesList, location_name: "namespaceTemplates"))
     CustomMemoryStrategyInput.add_member(:configuration, Shapes::ShapeRef.new(shape: CustomConfigurationInput, location_name: "configuration"))
     CustomMemoryStrategyInput.add_member(:memory_record_schema, Shapes::ShapeRef.new(shape: MemoryRecordSchema, location_name: "memoryRecordSchema"))
+    CustomMemoryStrategyInput.add_member(:record_expiry_specification, Shapes::ShapeRef.new(shape: RecordExpirySpecification, location_name: "recordExpirySpecification"))
     CustomMemoryStrategyInput.struct_class = Types::CustomMemoryStrategyInput
 
     CustomOauth2ProviderConfigInput.add_member(:oauth_discovery, Shapes::ShapeRef.new(shape: Oauth2Discovery, required: true, location_name: "oauthDiscovery"))
@@ -2721,6 +2744,7 @@ module Aws::BedrockAgentCoreControl
     DeleteConfigurationBundleRequest.add_member(:bundle_id, Shapes::ShapeRef.new(shape: ConfigurationBundleId, required: true, location: "uri", location_name: "bundleId"))
     DeleteConfigurationBundleRequest.struct_class = Types::DeleteConfigurationBundleRequest
 
+    DeleteConfigurationBundleResponse.add_member(:bundle_arn, Shapes::ShapeRef.new(shape: ConfigurationBundleArn, required: true, location_name: "bundleArn"))
     DeleteConfigurationBundleResponse.add_member(:bundle_id, Shapes::ShapeRef.new(shape: ConfigurationBundleId, required: true, location_name: "bundleId"))
     DeleteConfigurationBundleResponse.add_member(:status, Shapes::ShapeRef.new(shape: ConfigurationBundleStatus, required: true, location_name: "status"))
     DeleteConfigurationBundleResponse.struct_class = Types::DeleteConfigurationBundleResponse
@@ -2990,6 +3014,7 @@ module Aws::BedrockAgentCoreControl
     EpisodicMemoryStrategyInput.add_member(:namespace_templates, Shapes::ShapeRef.new(shape: NamespacesList, location_name: "namespaceTemplates"))
     EpisodicMemoryStrategyInput.add_member(:reflection_configuration, Shapes::ShapeRef.new(shape: EpisodicReflectionConfigurationInput, location_name: "reflectionConfiguration"))
     EpisodicMemoryStrategyInput.add_member(:memory_record_schema, Shapes::ShapeRef.new(shape: MemoryRecordSchema, location_name: "memoryRecordSchema"))
+    EpisodicMemoryStrategyInput.add_member(:record_expiry_specification, Shapes::ShapeRef.new(shape: RecordExpirySpecification, location_name: "recordExpirySpecification"))
     EpisodicMemoryStrategyInput.struct_class = Types::EpisodicMemoryStrategyInput
 
     EpisodicOverrideConfigurationInput.add_member(:extraction, Shapes::ShapeRef.new(shape: EpisodicOverrideExtractionConfigurationInput, location_name: "extraction"))
@@ -3199,6 +3224,7 @@ module Aws::BedrockAgentCoreControl
     GatewayTarget.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     GatewayTarget.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     GatewayTarget.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    GatewayTarget.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     GatewayTarget.struct_class = Types::GatewayTarget
 
     GatewayTargetList.member = Shapes::ShapeRef.new(shape: GatewayTarget)
@@ -3495,6 +3521,7 @@ module Aws::BedrockAgentCoreControl
     GetGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     GetGatewayTargetResponse.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     GetGatewayTargetResponse.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    GetGatewayTargetResponse.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     GetGatewayTargetResponse.struct_class = Types::GetGatewayTargetResponse
 
     GetHarnessEndpointRequest.add_member(:harness_id, Shapes::ShapeRef.new(shape: HarnessId, required: true, location: "uri", location_name: "harnessId"))
@@ -4797,6 +4824,7 @@ module Aws::BedrockAgentCoreControl
     MemoryStrategy.add_member(:updated_at, Shapes::ShapeRef.new(shape: Timestamp, location_name: "updatedAt"))
     MemoryStrategy.add_member(:status, Shapes::ShapeRef.new(shape: MemoryStrategyStatus, location_name: "status"))
     MemoryStrategy.add_member(:memory_record_schema, Shapes::ShapeRef.new(shape: MemoryRecordSchema, location_name: "memoryRecordSchema"))
+    MemoryStrategy.add_member(:record_expiry_duration_days, Shapes::ShapeRef.new(shape: RecordExpiryDurationDays, location_name: "recordExpiryDurationDays"))
     MemoryStrategy.struct_class = Types::MemoryStrategy
 
     MemoryStrategyInput.add_member(:semantic_memory_strategy, Shapes::ShapeRef.new(shape: SemanticMemoryStrategyInput, location_name: "semanticMemoryStrategy"))
@@ -4894,6 +4922,7 @@ module Aws::BedrockAgentCoreControl
     ModifyMemoryStrategyInput.add_member(:namespace_templates, Shapes::ShapeRef.new(shape: NamespacesList, location_name: "namespaceTemplates"))
     ModifyMemoryStrategyInput.add_member(:configuration, Shapes::ShapeRef.new(shape: ModifyStrategyConfiguration, location_name: "configuration"))
     ModifyMemoryStrategyInput.add_member(:memory_record_schema, Shapes::ShapeRef.new(shape: MemoryRecordSchema, location_name: "memoryRecordSchema"))
+    ModifyMemoryStrategyInput.add_member(:record_expiry_specification, Shapes::ShapeRef.new(shape: RecordExpirySpecification, location_name: "recordExpirySpecification"))
     ModifyMemoryStrategyInput.struct_class = Types::ModifyMemoryStrategyInput
 
     ModifyReflectionConfiguration.add_member(:episodic_reflection_configuration, Shapes::ShapeRef.new(shape: EpisodicReflectionConfigurationInput, location_name: "episodicReflectionConfiguration"))
@@ -5284,6 +5313,14 @@ module Aws::BedrockAgentCoreControl
     ReasoningConfiguration.add_member(:effort, Shapes::ShapeRef.new(shape: ReasoningConfigurationEffortString, location_name: "effort"))
     ReasoningConfiguration.struct_class = Types::ReasoningConfiguration
 
+    RecordExpirySpecification.add_member(:record_expiry_duration_days, Shapes::ShapeRef.new(shape: RecordExpiryDurationDays, location_name: "recordExpiryDurationDays"))
+    RecordExpirySpecification.add_member(:action, Shapes::ShapeRef.new(shape: RecordExpiryAction, location_name: "action"))
+    RecordExpirySpecification.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    RecordExpirySpecification.add_member_subclass(:record_expiry_duration_days, Types::RecordExpirySpecification::RecordExpiryDurationDays)
+    RecordExpirySpecification.add_member_subclass(:action, Types::RecordExpirySpecification::Action)
+    RecordExpirySpecification.add_member_subclass(:unknown, Types::RecordExpirySpecification::Unknown)
+    RecordExpirySpecification.struct_class = Types::RecordExpirySpecification
+
     RecordingConfig.add_member(:enabled, Shapes::ShapeRef.new(shape: Boolean, location_name: "enabled"))
     RecordingConfig.add_member(:s3_location, Shapes::ShapeRef.new(shape: S3Location, location_name: "s3Location"))
     RecordingConfig.struct_class = Types::RecordingConfig
@@ -5426,6 +5463,10 @@ module Aws::BedrockAgentCoreControl
     RuntimeTargetConfiguration.add_member(:schema, Shapes::ShapeRef.new(shape: HttpApiSchemaConfiguration, location_name: "schema"))
     RuntimeTargetConfiguration.struct_class = Types::RuntimeTargetConfiguration
 
+    S3CertificateConfiguration.add_member(:uri, Shapes::ShapeRef.new(shape: CertificateS3Uri, required: true, location_name: "uri"))
+    S3CertificateConfiguration.add_member(:bucket_owner_account_id, Shapes::ShapeRef.new(shape: CertificateBucketOwnerAccountId, location_name: "bucketOwnerAccountId"))
+    S3CertificateConfiguration.struct_class = Types::S3CertificateConfiguration
+
     S3Configuration.add_member(:uri, Shapes::ShapeRef.new(shape: S3BucketUri, location_name: "uri"))
     S3Configuration.add_member(:bucket_owner_account_id, Shapes::ShapeRef.new(shape: AwsAccountId, location_name: "bucketOwnerAccountId"))
     S3Configuration.struct_class = Types::S3Configuration
@@ -5481,6 +5522,9 @@ module Aws::BedrockAgentCoreControl
     SecretReference.add_member(:json_key, Shapes::ShapeRef.new(shape: SecretJsonKeyType, required: true, location_name: "jsonKey"))
     SecretReference.struct_class = Types::SecretReference
 
+    SecretsManagerCertificateConfiguration.add_member(:secret_arn, Shapes::ShapeRef.new(shape: CertificateSecretArn, required: true, location_name: "secretArn"))
+    SecretsManagerCertificateConfiguration.struct_class = Types::SecretsManagerCertificateConfiguration
+
     SecretsManagerLocation.add_member(:secret_arn, Shapes::ShapeRef.new(shape: ToolSecretArn, required: true, location_name: "secretArn"))
     SecretsManagerLocation.struct_class = Types::SecretsManagerLocation
 
@@ -5517,6 +5561,7 @@ module Aws::BedrockAgentCoreControl
     SemanticMemoryStrategyInput.add_member(:namespaces, Shapes::ShapeRef.new(shape: NamespacesList, deprecated: true, location_name: "namespaces", metadata: {"deprecatedMessage" => "Use namespaceTemplates instead", "deprecatedSince" => "2026-03-02"}))
     SemanticMemoryStrategyInput.add_member(:namespace_templates, Shapes::ShapeRef.new(shape: NamespacesList, location_name: "namespaceTemplates"))
     SemanticMemoryStrategyInput.add_member(:memory_record_schema, Shapes::ShapeRef.new(shape: MemoryRecordSchema, location_name: "memoryRecordSchema"))
+    SemanticMemoryStrategyInput.add_member(:record_expiry_specification, Shapes::ShapeRef.new(shape: RecordExpirySpecification, location_name: "recordExpirySpecification"))
     SemanticMemoryStrategyInput.struct_class = Types::SemanticMemoryStrategyInput
 
     SemanticOverrideConfigurationInput.add_member(:extraction, Shapes::ShapeRef.new(shape: SemanticOverrideExtractionConfigurationInput, location_name: "extraction"))
@@ -5689,6 +5734,7 @@ module Aws::BedrockAgentCoreControl
     SummaryMemoryStrategyInput.add_member(:namespaces, Shapes::ShapeRef.new(shape: NamespacesList, deprecated: true, location_name: "namespaces", metadata: {"deprecatedMessage" => "Use namespaceTemplates instead", "deprecatedSince" => "2026-03-02"}))
     SummaryMemoryStrategyInput.add_member(:namespace_templates, Shapes::ShapeRef.new(shape: NamespacesList, location_name: "namespaceTemplates"))
     SummaryMemoryStrategyInput.add_member(:memory_record_schema, Shapes::ShapeRef.new(shape: MemoryRecordSchema, location_name: "memoryRecordSchema"))
+    SummaryMemoryStrategyInput.add_member(:record_expiry_specification, Shapes::ShapeRef.new(shape: RecordExpirySpecification, location_name: "recordExpirySpecification"))
     SummaryMemoryStrategyInput.struct_class = Types::SummaryMemoryStrategyInput
 
     SummaryOverrideConfigurationInput.add_member(:consolidation, Shapes::ShapeRef.new(shape: SummaryOverrideConsolidationConfigurationInput, location_name: "consolidation"))
@@ -5936,7 +5982,7 @@ module Aws::BedrockAgentCoreControl
     UpdateConfigurationBundleRequest.add_member(:components, Shapes::ShapeRef.new(shape: ComponentConfigurationMap, location_name: "components"))
     UpdateConfigurationBundleRequest.add_member(:parent_version_ids, Shapes::ShapeRef.new(shape: ConfigurationBundleVersionList, required: true, location_name: "parentVersionIds"))
     UpdateConfigurationBundleRequest.add_member(:branch_name, Shapes::ShapeRef.new(shape: BranchName, location_name: "branchName"))
-    UpdateConfigurationBundleRequest.add_member(:commit_message, Shapes::ShapeRef.new(shape: UpdateConfigurationBundleRequestCommitMessageString, location_name: "commitMessage"))
+    UpdateConfigurationBundleRequest.add_member(:commit_message, Shapes::ShapeRef.new(shape: UpdateConfigurationBundleRequestCommitMessageString, required: true, location_name: "commitMessage"))
     UpdateConfigurationBundleRequest.add_member(:created_by, Shapes::ShapeRef.new(shape: VersionCreatedBySource, location_name: "createdBy"))
     UpdateConfigurationBundleRequest.add_member(:kms_key_arn, Shapes::ShapeRef.new(shape: KmsKeyArn, location_name: "kmsKeyArn"))
     UpdateConfigurationBundleRequest.struct_class = Types::UpdateConfigurationBundleRequest
@@ -6089,6 +6135,7 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayTargetRequest.add_member(:credential_provider_configurations, Shapes::ShapeRef.new(shape: CredentialProviderConfigurations, location_name: "credentialProviderConfigurations"))
     UpdateGatewayTargetRequest.add_member(:metadata_configuration, Shapes::ShapeRef.new(shape: MetadataConfiguration, location_name: "metadataConfiguration"))
     UpdateGatewayTargetRequest.add_member(:private_endpoint, Shapes::ShapeRef.new(shape: PrivateEndpoint, location_name: "privateEndpoint"))
+    UpdateGatewayTargetRequest.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     UpdateGatewayTargetRequest.struct_class = Types::UpdateGatewayTargetRequest
 
     UpdateGatewayTargetResponse.add_member(:gateway_arn, Shapes::ShapeRef.new(shape: GatewayArn, required: true, location_name: "gatewayArn"))
@@ -6107,6 +6154,7 @@ module Aws::BedrockAgentCoreControl
     UpdateGatewayTargetResponse.add_member(:private_endpoint_managed_resources, Shapes::ShapeRef.new(shape: PrivateEndpointManagedResources, location_name: "privateEndpointManagedResources"))
     UpdateGatewayTargetResponse.add_member(:authorization_data, Shapes::ShapeRef.new(shape: AuthorizationData, location_name: "authorizationData"))
     UpdateGatewayTargetResponse.add_member(:protocol_type, Shapes::ShapeRef.new(shape: TargetProtocolType, location_name: "protocolType"))
+    UpdateGatewayTargetResponse.add_member(:certificate_configurations, Shapes::ShapeRef.new(shape: CertificateConfigurationList, location_name: "certificateConfigurations"))
     UpdateGatewayTargetResponse.struct_class = Types::UpdateGatewayTargetResponse
 
     UpdateHarnessEndpointRequest.add_member(:harness_id, Shapes::ShapeRef.new(shape: HarnessId, required: true, location: "uri", location_name: "harnessId"))
@@ -6430,6 +6478,7 @@ module Aws::BedrockAgentCoreControl
     UserPreferenceMemoryStrategyInput.add_member(:namespaces, Shapes::ShapeRef.new(shape: NamespacesList, deprecated: true, location_name: "namespaces", metadata: {"deprecatedMessage" => "Use namespaceTemplates instead", "deprecatedSince" => "2026-03-02"}))
     UserPreferenceMemoryStrategyInput.add_member(:namespace_templates, Shapes::ShapeRef.new(shape: NamespacesList, location_name: "namespaceTemplates"))
     UserPreferenceMemoryStrategyInput.add_member(:memory_record_schema, Shapes::ShapeRef.new(shape: MemoryRecordSchema, location_name: "memoryRecordSchema"))
+    UserPreferenceMemoryStrategyInput.add_member(:record_expiry_specification, Shapes::ShapeRef.new(shape: RecordExpirySpecification, location_name: "recordExpirySpecification"))
     UserPreferenceMemoryStrategyInput.struct_class = Types::UserPreferenceMemoryStrategyInput
 
     UserPreferenceOverrideConfigurationInput.add_member(:extraction, Shapes::ShapeRef.new(shape: UserPreferenceOverrideExtractionConfigurationInput, location_name: "extraction"))