aws-sdk-bedrockagentcorecontrol 1.68.0 → 1.69.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: df3dca5e59c839473d19f04538f2240737e16f411fb95740412d585b04c03b28
-  data.tar.gz: 5901740c794fa61d97dbbe1c7d4d34be65db54a6ca66acb0fd0083c7d3ebffa6
+  metadata.gz: b30fdc30ccb7b8cb437fa0b2002362ffbe90395258925662926226c450bdf0ee
+  data.tar.gz: 4813dfba9b26b7fa68ec752f86bf14fd183da32eacc47be8d66cf30bfbd03a02
 SHA512:
-  metadata.gz: ef977f9ac563b15e15ad31c63d34e836817e493917066027d62b0c630b55c8494f3fc650419f96177283ed8b91144efa747acab4deea03470df1659482cffb38
-  data.tar.gz: 522256650b8c5bee01a83f765b41d7e78048494c529372c314a77f3d8648bb6c630d05555a5979f42b31729284fd86809a6717cfaf81c8b61572d1b815ccecaa
+  metadata.gz: 9175f919cb79d990a2c8aa4dd036dd9ead16334286211db9b745d7f4711e5c52483d91a6ff55e31e2c513cd9742c8dffd5539eeadfe426a50cbd8b8cf0dd1c5a
+  data.tar.gz: bc50fcd493ca43bbc20e9f30036c43f8b7ffc3f1a102fde1588e6ea596158777be17d5597dc95ced9a9656709d27edb86bbd0bc8bdacd8bb66f530c23175a630

data/CHANGELOG.md

@@ -1,6 +1,11 @@
 Unreleased Changes
 ------------------
 
+1.69.0 (2026-09-03)
+------------------
+
+* Feature - AgentCore Identity adds Consent Portal APIs to manage portals that let end users grant OAuth authorization for agents to access resources. AgentCore Evaluation adds trace source selection by log group prefix, custom or source log group result destinations, and metrics namespace customization.
+
 1.68.0 (2026-09-01)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.68.0
+1.69.0

data/lib/aws-sdk-bedrockagentcorecontrol/client.rb

@@ -1574,6 +1574,98 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
 
+    # Creates a new consent portal.
+    #
+    # @option params [required, String] :execution_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that the consent portal
+    #   assumes to access the resources defined in its sources.
+    #
+    # @option params [required, Types::ConsentPortalIdpConfig] :idp_config
+    #   The identity provider configuration that the consent portal uses to
+    #   authenticate end users.
+    #
+    # @option params [required, String] :name
+    #   The name of the consent portal. The name must be unique within your
+    #   account.
+    #
+    # @option params [required, Array<Types::ConsentPortalSource>] :sources
+    #   The resources served by the consent portal. Currently, we only support
+    #   type `agentcore-gateway`.
+    #
+    # @option params [String] :description
+    #   The description of the consent portal.
+    #
+    # @option params [Hash<String,String>] :tags
+    #   A map of tag keys and values to assign to the consent portal. Tags
+    #   enable you to categorize your resources in different ways, for
+    #   example, by purpose, owner, or environment.
+    #
+    # @return [Types::CreateConsentPortalResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CreateConsentPortalResponse#sources #sources} => Array&lt;Types::ConsentPortalSource&gt;
+    #   * {Types::CreateConsentPortalResponse#consent_portal_arn #consent_portal_arn} => String
+    #   * {Types::CreateConsentPortalResponse#consent_portal_id #consent_portal_id} => String
+    #   * {Types::CreateConsentPortalResponse#created_at #created_at} => Time
+    #   * {Types::CreateConsentPortalResponse#description #description} => String
+    #   * {Types::CreateConsentPortalResponse#execution_role_arn #execution_role_arn} => String
+    #   * {Types::CreateConsentPortalResponse#idp_config #idp_config} => Types::ConsentPortalIdpConfig
+    #   * {Types::CreateConsentPortalResponse#name #name} => String
+    #   * {Types::CreateConsentPortalResponse#portal_url #portal_url} => String
+    #   * {Types::CreateConsentPortalResponse#status #status} => String
+    #   * {Types::CreateConsentPortalResponse#status_reason #status_reason} => String
+    #   * {Types::CreateConsentPortalResponse#updated_at #updated_at} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.create_consent_portal({
+    #     execution_role_arn: "ExecutionRoleArnType", # required
+    #     idp_config: { # required
+    #       credential_provider_arn: "OAuth2CredentialProviderArn", # required
+    #       scopes: ["AllowedScopeType"], # required
+    #       audience: "AllowedAudienceType",
+    #     },
+    #     name: "ConsentPortalNameType", # required
+    #     sources: [ # required
+    #       {
+    #         identifier: "ConsentPortalSourceIdentifierType", # required
+    #         type: "agentcore-gateway", # required, accepts agentcore-gateway
+    #       },
+    #     ],
+    #     description: "ConsentPortalDescriptionType",
+    #     tags: {
+    #       "TagKey" => "TagValue",
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.sources #=> Array
+    #   resp.sources[0].identifier #=> String
+    #   resp.sources[0].type #=> String, one of "agentcore-gateway"
+    #   resp.consent_portal_arn #=> String
+    #   resp.consent_portal_id #=> String
+    #   resp.created_at #=> Time
+    #   resp.description #=> String
+    #   resp.execution_role_arn #=> String
+    #   resp.idp_config.credential_provider_arn #=> String
+    #   resp.idp_config.scopes #=> Array
+    #   resp.idp_config.scopes[0] #=> String
+    #   resp.idp_config.audience #=> String
+    #   resp.name #=> String
+    #   resp.portal_url #=> String
+    #   resp.status #=> String, one of "CREATING", "ACTIVE", "UPDATING", "UPDATE_FAILED", "DELETING", "FAILED"
+    #   resp.status_reason #=> String
+    #   resp.updated_at #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/CreateConsentPortal AWS API Documentation
+    #
+    # @overload create_consent_portal(params = {})
+    # @param [Hash] params ({})
+    def create_consent_portal(params = {}, options = {})
+      req = build_request(:create_consent_portal, params)
+      req.send_request(options)
+    end
+
     # Creates a new dataset resource asynchronously. Returns immediately
     # with status CREATING. Poll `GetDataset` until status transitions to
     # ACTIVE or CREATE\_FAILED.
@@ -4378,6 +4470,10 @@ module Aws::BedrockAgentCoreControl
     #   Configuration for periodic batch evaluation clustering of insight
     #   results.
     #
+    # @option params [Types::OutputConfig] :output_config
+    #   The configuration that specifies where evaluation results should be
+    #   written for monitoring and analysis.
+    #
     # @option params [required, String] :evaluation_execution_role_arn
     #   The Amazon Resource Name (ARN) of the IAM role that grants permissions
     #   to read from CloudWatch logs, write evaluation results, and invoke
@@ -4437,7 +4533,8 @@ module Aws::BedrockAgentCoreControl
     #     },
     #     data_source_config: { # required
     #       cloud_watch_logs: {
-    #         log_group_names: ["LogGroupName"], # required
+    #         log_group_names: ["LogGroupName"],
+    #         log_group_name_prefixes: ["LogGroupNamePrefix"],
     #         service_names: ["ServiceName"], # required
     #       },
     #     },
@@ -4454,6 +4551,13 @@ module Aws::BedrockAgentCoreControl
     #     clustering_config: {
     #       frequencies: ["DAILY"], # required, accepts DAILY, WEEKLY, MONTHLY
     #     },
+    #     output_config: {
+    #       cloud_watch_config: { # required
+    #         log_group_name: "OptionalLogGroupName",
+    #         metrics_namespace: "MetricsNamespace",
+    #         result_destination: "DEDICATED_LOG_GROUP", # accepts DEDICATED_LOG_GROUP, SOURCE_LOG_GROUP
+    #       },
+    #     },
     #     evaluation_execution_role_arn: "RoleArn", # required
     #     enable_on_create: false, # required
     #     tags: {
@@ -4467,6 +4571,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.online_evaluation_config_id #=> String
     #   resp.created_at #=> Time
     #   resp.output_config.cloud_watch_config.log_group_name #=> String
+    #   resp.output_config.cloud_watch_config.metrics_namespace #=> String
+    #   resp.output_config.cloud_watch_config.result_destination #=> String, one of "DEDICATED_LOG_GROUP", "SOURCE_LOG_GROUP"
     #   resp.status #=> String, one of "ACTIVE", "CREATING", "CREATE_FAILED", "UPDATING", "UPDATE_FAILED", "DELETING", "ERROR"
     #   resp.execution_status #=> String, one of "ENABLED", "DISABLED"
     #   resp.failure_reason #=> String
@@ -5780,6 +5886,29 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
 
+    # Deletes a consent portal.
+    #
+    # @option params [required, String] :consent_portal_identifier
+    #   The identifier of the consent portal. You can specify either the
+    #   consent portal ID or its Amazon Resource Name (ARN).
+    #
+    # @return [Struct] Returns an empty {Seahorse::Client::Response response}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.delete_consent_portal({
+    #     consent_portal_identifier: "ConsentPortalIdentifier", # required
+    #   })
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/DeleteConsentPortal AWS API Documentation
+    #
+    # @overload delete_consent_portal(params = {})
+    # @param [Hash] params ({})
+    def delete_consent_portal(params = {}, options = {})
+      req = build_request(:delete_consent_portal, params)
+      req.send_request(options)
+    end
+
     # Deletes a dataset version or an entire dataset asynchronously. If
     # `datasetVersion` is absent, deletes all versions and the dataset
     # record itself. If provided, deletes only that specific version.
@@ -7355,6 +7484,62 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
 
+    # Retrieves information about a consent portal.
+    #
+    # @option params [required, String] :consent_portal_identifier
+    #   The identifier of the consent portal. You can specify either the
+    #   consent portal ID or its Amazon Resource Name (ARN).
+    #
+    # @return [Types::GetConsentPortalResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetConsentPortalResponse#sources #sources} => Array&lt;Types::ConsentPortalSource&gt;
+    #   * {Types::GetConsentPortalResponse#consent_portal_arn #consent_portal_arn} => String
+    #   * {Types::GetConsentPortalResponse#consent_portal_id #consent_portal_id} => String
+    #   * {Types::GetConsentPortalResponse#created_at #created_at} => Time
+    #   * {Types::GetConsentPortalResponse#description #description} => String
+    #   * {Types::GetConsentPortalResponse#execution_role_arn #execution_role_arn} => String
+    #   * {Types::GetConsentPortalResponse#idp_config #idp_config} => Types::ConsentPortalIdpConfig
+    #   * {Types::GetConsentPortalResponse#name #name} => String
+    #   * {Types::GetConsentPortalResponse#portal_url #portal_url} => String
+    #   * {Types::GetConsentPortalResponse#status #status} => String
+    #   * {Types::GetConsentPortalResponse#status_reason #status_reason} => String
+    #   * {Types::GetConsentPortalResponse#updated_at #updated_at} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_consent_portal({
+    #     consent_portal_identifier: "ConsentPortalIdentifier", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.sources #=> Array
+    #   resp.sources[0].identifier #=> String
+    #   resp.sources[0].type #=> String, one of "agentcore-gateway"
+    #   resp.consent_portal_arn #=> String
+    #   resp.consent_portal_id #=> String
+    #   resp.created_at #=> Time
+    #   resp.description #=> String
+    #   resp.execution_role_arn #=> String
+    #   resp.idp_config.credential_provider_arn #=> String
+    #   resp.idp_config.scopes #=> Array
+    #   resp.idp_config.scopes[0] #=> String
+    #   resp.idp_config.audience #=> String
+    #   resp.name #=> String
+    #   resp.portal_url #=> String
+    #   resp.status #=> String, one of "CREATING", "ACTIVE", "UPDATING", "UPDATE_FAILED", "DELETING", "FAILED"
+    #   resp.status_reason #=> String
+    #   resp.updated_at #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/GetConsentPortal AWS API Documentation
+    #
+    # @overload get_consent_portal(params = {})
+    # @param [Hash] params ({})
+    def get_consent_portal(params = {}, options = {})
+      req = build_request(:get_consent_portal, params)
+      req.send_request(options)
+    end
+
     # Retrieves dataset metadata. Use the `datasetVersion` query parameter
     # to retrieve a specific version's metadata. If absent, defaults to
     # DRAFT. For paginated example content, use `ListDatasetExamples`.
@@ -8525,6 +8710,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.rule.session_config.session_timeout_minutes #=> Integer
     #   resp.data_source_config.cloud_watch_logs.log_group_names #=> Array
     #   resp.data_source_config.cloud_watch_logs.log_group_names[0] #=> String
+    #   resp.data_source_config.cloud_watch_logs.log_group_name_prefixes #=> Array
+    #   resp.data_source_config.cloud_watch_logs.log_group_name_prefixes[0] #=> String
     #   resp.data_source_config.cloud_watch_logs.service_names #=> Array
     #   resp.data_source_config.cloud_watch_logs.service_names[0] #=> String
     #   resp.evaluators #=> Array
@@ -8534,6 +8721,8 @@ module Aws::BedrockAgentCoreControl
     #   resp.clustering_config.frequencies #=> Array
     #   resp.clustering_config.frequencies[0] #=> String, one of "DAILY", "WEEKLY", "MONTHLY"
     #   resp.output_config.cloud_watch_config.log_group_name #=> String
+    #   resp.output_config.cloud_watch_config.metrics_namespace #=> String
+    #   resp.output_config.cloud_watch_config.result_destination #=> String, one of "DEDICATED_LOG_GROUP", "SOURCE_LOG_GROUP"
     #   resp.evaluation_execution_role_arn #=> String
     #   resp.status #=> String, one of "ACTIVE", "CREATING", "CREATE_FAILED", "UPDATING", "UPDATE_FAILED", "DELETING", "ERROR"
     #   resp.execution_status #=> String, one of "ENABLED", "DISABLED"
@@ -9918,6 +10107,54 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
 
+    # Lists all of the consent portals in your account.
+    #
+    # @option params [Integer] :max_results
+    #   The maximum number of consent portals to return in a single call.
+    #
+    # @option params [String] :next_token
+    #   A token to retrieve the next page of results. Use the value returned
+    #   in a previous response to request the next page.
+    #
+    # @return [Types::ListConsentPortalsResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::ListConsentPortalsResponse#consent_portals #consent_portals} => Array&lt;Types::ConsentPortalSummary&gt;
+    #   * {Types::ListConsentPortalsResponse#next_token #next_token} => String
+    #
+    # The returned {Seahorse::Client::Response response} is a pageable response and is Enumerable. For details on usage see {Aws::PageableResponse PageableResponse}.
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.list_consent_portals({
+    #     max_results: 1,
+    #     next_token: "String",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.consent_portals #=> Array
+    #   resp.consent_portals[0].sources #=> Array
+    #   resp.consent_portals[0].sources[0].identifier #=> String
+    #   resp.consent_portals[0].sources[0].type #=> String, one of "agentcore-gateway"
+    #   resp.consent_portals[0].consent_portal_arn #=> String
+    #   resp.consent_portals[0].consent_portal_id #=> String
+    #   resp.consent_portals[0].created_at #=> Time
+    #   resp.consent_portals[0].description #=> String
+    #   resp.consent_portals[0].name #=> String
+    #   resp.consent_portals[0].portal_url #=> String
+    #   resp.consent_portals[0].status #=> String, one of "CREATING", "ACTIVE", "UPDATING", "UPDATE_FAILED", "DELETING", "FAILED"
+    #   resp.consent_portals[0].updated_at #=> Time
+    #   resp.next_token #=> String
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/ListConsentPortals AWS API Documentation
+    #
+    # @overload list_consent_portals(params = {})
+    # @param [Hash] params ({})
+    def list_consent_portals(params = {}, options = {})
+      req = build_request(:list_consent_portals, params)
+      req.send_request(options)
+    end
+
     # Returns paginated examples from the dataset. The server embeds the
     # resolved version in the pagination token. Once pagination begins, all
     # subsequent pages are pinned to that version regardless of concurrent
@@ -12416,6 +12653,80 @@ module Aws::BedrockAgentCoreControl
       req.send_request(options)
     end
 
+    # Updates an existing consent portal.
+    #
+    # @option params [required, String] :consent_portal_identifier
+    #   The identifier of the consent portal. You can specify either the
+    #   consent portal ID or its Amazon Resource Name (ARN).
+    #
+    # @option params [String] :execution_role_arn
+    #   The Amazon Resource Name (ARN) of the IAM role that the consent portal
+    #   assumes to access the resources defined in its sources.
+    #
+    # @option params [Types::ConsentPortalIdpConfig] :idp_config
+    #   The identity provider configuration that the consent portal uses to
+    #   authenticate end users.
+    #
+    # @option params [String] :description
+    #   The description of the consent portal.
+    #
+    # @return [Types::UpdateConsentPortalResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::UpdateConsentPortalResponse#sources #sources} => Array&lt;Types::ConsentPortalSource&gt;
+    #   * {Types::UpdateConsentPortalResponse#consent_portal_arn #consent_portal_arn} => String
+    #   * {Types::UpdateConsentPortalResponse#consent_portal_id #consent_portal_id} => String
+    #   * {Types::UpdateConsentPortalResponse#created_at #created_at} => Time
+    #   * {Types::UpdateConsentPortalResponse#description #description} => String
+    #   * {Types::UpdateConsentPortalResponse#execution_role_arn #execution_role_arn} => String
+    #   * {Types::UpdateConsentPortalResponse#idp_config #idp_config} => Types::ConsentPortalIdpConfig
+    #   * {Types::UpdateConsentPortalResponse#name #name} => String
+    #   * {Types::UpdateConsentPortalResponse#portal_url #portal_url} => String
+    #   * {Types::UpdateConsentPortalResponse#status #status} => String
+    #   * {Types::UpdateConsentPortalResponse#status_reason #status_reason} => String
+    #   * {Types::UpdateConsentPortalResponse#updated_at #updated_at} => Time
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.update_consent_portal({
+    #     consent_portal_identifier: "ConsentPortalIdentifier", # required
+    #     execution_role_arn: "ExecutionRoleArnType",
+    #     idp_config: {
+    #       credential_provider_arn: "OAuth2CredentialProviderArn", # required
+    #       scopes: ["AllowedScopeType"], # required
+    #       audience: "AllowedAudienceType",
+    #     },
+    #     description: "ConsentPortalDescriptionType",
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.sources #=> Array
+    #   resp.sources[0].identifier #=> String
+    #   resp.sources[0].type #=> String, one of "agentcore-gateway"
+    #   resp.consent_portal_arn #=> String
+    #   resp.consent_portal_id #=> String
+    #   resp.created_at #=> Time
+    #   resp.description #=> String
+    #   resp.execution_role_arn #=> String
+    #   resp.idp_config.credential_provider_arn #=> String
+    #   resp.idp_config.scopes #=> Array
+    #   resp.idp_config.scopes[0] #=> String
+    #   resp.idp_config.audience #=> String
+    #   resp.name #=> String
+    #   resp.portal_url #=> String
+    #   resp.status #=> String, one of "CREATING", "ACTIVE", "UPDATING", "UPDATE_FAILED", "DELETING", "FAILED"
+    #   resp.status_reason #=> String
+    #   resp.updated_at #=> Time
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agentcore-control-2023-06-05/UpdateConsentPortal AWS API Documentation
+    #
+    # @overload update_consent_portal(params = {})
+    # @param [Hash] params ({})
+    def update_consent_portal(params = {}, options = {})
+      req = build_request(:update_consent_portal, params)
+      req.send_request(options)
+    end
+
     # Updates a dataset's metadata. Synchronous operation. Only provided
     # fields are updated; omitted fields remain unchanged. To modify dataset
     # content, use `AddDatasetExamples`, `UpdateDatasetExamples`, or
@@ -15271,6 +15582,10 @@ module Aws::BedrockAgentCoreControl
     # @option params [Types::ClusteringConfig] :clustering_config
     #   The updated clustering configuration for periodic batch evaluation.
     #
+    # @option params [Types::OutputConfig] :output_config
+    #   The configuration that specifies where evaluation results should be
+    #   written for monitoring and analysis.
+    #
     # @option params [String] :evaluation_execution_role_arn
     #   The updated Amazon Resource Name (ARN) of the IAM role used for
     #   evaluation execution.
@@ -15315,7 +15630,8 @@ module Aws::BedrockAgentCoreControl
     #     },
     #     data_source_config: {
     #       cloud_watch_logs: {
-    #         log_group_names: ["LogGroupName"], # required
+    #         log_group_names: ["LogGroupName"],
+    #         log_group_name_prefixes: ["LogGroupNamePrefix"],
     #         service_names: ["ServiceName"], # required
     #       },
     #     },
@@ -15332,6 +15648,13 @@ module Aws::BedrockAgentCoreControl
     #     clustering_config: {
     #       frequencies: ["DAILY"], # required, accepts DAILY, WEEKLY, MONTHLY
     #     },
+    #     output_config: {
+    #       cloud_watch_config: { # required
+    #         log_group_name: "OptionalLogGroupName",
+    #         metrics_namespace: "MetricsNamespace",
+    #         result_destination: "DEDICATED_LOG_GROUP", # accepts DEDICATED_LOG_GROUP, SOURCE_LOG_GROUP
+    #       },
+    #     },
     #     evaluation_execution_role_arn: "RoleArn",
     #     execution_status: "ENABLED", # accepts ENABLED, DISABLED
     #   })
@@ -16361,7 +16684,7 @@ module Aws::BedrockAgentCoreControl
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentcorecontrol'
-      context[:gem_version] = '1.68.0'
+      context[:gem_version] = '1.69.0'
       Seahorse::Client::Request.new(handlers, context)
     end