aws-sdk-bedrockagentruntime 1.78.0 → 1.80.0

checksums.yaml

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: b6eca6aaea09bb1001fceb3e78d10fc5ec188d5dc756bf79e659d2116fe52024
-  data.tar.gz: 428157d1f5df7d5a3b404ecba7c8060c73bbc04c3ee56aec394b1a1143887611
+  metadata.gz: e0ef58ad0562ed2fe5cd46dd81e34603a964b80307d443b0a2e15f0943110879
+  data.tar.gz: 18bf2741643afbc47ab81a29325a3c559ec209b5b891cdb250565fd6c8750446
 SHA512:
-  metadata.gz: 732fa016b9afccb993707ddf3699bfe1bbe3915f4c3655c7921c3704cdb9dc1ffed4546bfa6f92dc7eadb979773dfd5194714407bd86018666db4aa38be39562
-  data.tar.gz: 6d75cc224981bc60dd881e7abdc17af98bc0f0cff980336f118c3d9ab2997389c667a17854363f934ac0af823bb80628701e0a9aa0a8998abbc32b24eb2dd218
+  metadata.gz: d0cdd24b354fb95aab94b7142b78a31023317b212088d7781fcc40e3264afa200edeafe4b4f510e0740ad10ee69493a33e41861124733c7c2295c5b296f404f8
+  data.tar.gz: 201283cf416a858b94dd887deed683a842cb239c0ceb691b09a85f7692ddb5f115240235ca21f8b94cc5a00e70b42f7ee34f5035cff762eff404de59242320cf

data/CHANGELOG.md

@@ -1,6 +1,16 @@
 Unreleased Changes
 ------------------
 
+1.80.0 (2026-08-17)
+------------------
+
+* Feature - AgenticRetrieveStream API now supports Amazon Bedrock AgentCore Memory. Use the new memoryConfiguration parameter to continue a session from short-term memory and retrieve from long-term memory.
+
+1.79.0 (2026-08-14)
+------------------
+
+* Feature - Adds CheckIngestedDocumentAcl and GetIngestedDocumentAcl APIs to Amazon Bedrock Knowledge Bases. Customers can verify user access to documents based on ingested ACLs and retrieve full ACL details including allow and deny entries, enabling validation of ACL ingestion without test retrievals.
+
 1.78.0 (2026-07-09)
 ------------------
 

data/VERSION

@@ -1 +1 @@
-1.78.0
+1.80.0

data/lib/aws-sdk-bedrockagentruntime/client.rb

@@ -503,6 +503,10 @@ module Aws::BedrockAgentRuntime
     # @option params [Boolean] :generate_response
     #   Whether to generate a response based on the retrieved results.
     #
+    # @option params [Types::AgenticRetrieveMemoryConfiguration] :memory_configuration
+    #   The configuration for using an Amazon Bedrock AgentCore Memory
+    #   resource with this retrieval.
+    #
     # @option params [required, Array<Types::AgenticRetrieveMessage>] :messages
     #   The list of messages for the agentic retrieval conversation.
     #
@@ -737,6 +741,37 @@ module Aws::BedrockAgentRuntime
     #       reranking_model_type: "CUSTOM", # accepts CUSTOM, MANAGED, NONE
     #     },
     #     generate_response: false,
+    #     memory_configuration: {
+    #       memory_id: "AgentCoreMemoryId", # required
+    #       persistence_mode: "DEFAULT", # accepts DEFAULT, NONE
+    #       retrieval_configs: [
+    #         {
+    #           metadata_filters: [
+    #             {
+    #               left: { # required
+    #                 metadata_key: "AgenticRetrieveMemoryMetadataKey",
+    #               },
+    #               operator: "EQUALS_TO", # required, accepts EQUALS_TO, EXISTS, NOT_EXISTS, BEFORE, AFTER, CONTAINS, GREATER_THAN, GREATER_THAN_OR_EQUALS, LESS_THAN, LESS_THAN_OR_EQUALS
+    #               right: {
+    #                 metadata_value: {
+    #                   date_time_value: Time.now,
+    #                   number_value: 1.0,
+    #                   string_list_value: ["AgenticRetrieveMemoryMetadataStringListItem"],
+    #                   string_value: "AgenticRetrieveMemoryMetadataStringValue",
+    #                 },
+    #               },
+    #             },
+    #           ],
+    #           namespace: "MemoryNamespace",
+    #           namespace_path: "MemoryNamespace",
+    #           strategy_id: "MemoryStrategyId",
+    #         },
+    #       ],
+    #       session_binding: {
+    #         actor_id: "AgentCoreMemoryActorId", # required
+    #         session_id: "AgentCoreMemorySessionId", # required
+    #       },
+    #     },
     #     messages: [ # required
     #       {
     #         content: { # required
@@ -892,6 +927,11 @@ module Aws::BedrockAgentRuntime
     #   event.attributes.actions #=> Array
     #   event.attributes.actions[0].full_document_expansion.document_id #=> String
     #   event.attributes.actions[0].full_document_expansion.source_retriever.identifier #=> String
+    #   event.attributes.actions[0].memory_retrieve.input_query.text #=> String
+    #   event.attributes.actions[0].memory_retrieve.memory_id #=> String
+    #   event.attributes.actions[0].memory_retrieve.namespace #=> String
+    #   event.attributes.actions[0].memory_retrieve.namespace_path #=> String
+    #   event.attributes.actions[0].memory_retrieve.strategy_id #=> String
     #   event.attributes.actions[0].retrieve.input_query.text #=> String
     #   event.attributes.actions[0].retrieve.source_retrievers #=> Array
     #   event.attributes.actions[0].retrieve.source_retrievers[0].identifier #=> String
@@ -900,7 +940,7 @@ module Aws::BedrockAgentRuntime
     #   event.attributes.message #=> String
     #   event.attributes.retrieval_metadata #=> Array
     #   event.attributes.retrieval_metadata[0].identifier #=> String
-    #   event.attributes.retrieval_metadata[0].retrieval_type #=> String, one of "BedrockKnowledgeBase"
+    #   event.attributes.retrieval_metadata[0].retrieval_type #=> String, one of "BedrockKnowledgeBase", "BedrockAgentCoreMemory"
     #   event.attributes.retrieval_response #=> Array
     #   event.attributes.retrieval_response[0].content.byte_content #=> String
     #   event.attributes.retrieval_response[0].content.mime_type #=> String
@@ -908,7 +948,7 @@ module Aws::BedrockAgentRuntime
     #   event.attributes.retrieval_response[0].metadata #=> Hash
     #   event.attributes.retrieval_response[0].source_retriever.identifier #=> String
     #   event.attributes.status #=> String, one of "IN_PROGRESS", "SUCCEEDED", "FAILED"
-    #   event.attributes.step #=> String, one of "Planning", "Retrieval", "SpeculativeRetrieval", "FullDocumentExpansion"
+    #   event.attributes.step #=> String, one of "Planning", "Retrieval", "SpeculativeRetrieval", "FullDocumentExpansion", "SessionHistoryLoad"
     #   event.attributes.warnings #=> Array
     #   event.attributes.warnings[0].guardrail.action #=> String, one of "INTERVENED", "NONE"
     #   event.attributes.warnings[0].guardrail.id #=> String
@@ -948,6 +988,55 @@ module Aws::BedrockAgentRuntime
       req.send_request(options, &block)
     end
 
+    # Checks whether a user has access to a specific document by verifying
+    # against the ingested access control list (ACL) in a knowledge base.
+    # Use this operation to validate that document-level access control is
+    # working as expected after ingestion. To use this operation, you must
+    # have the `bedrock:CheckIngestedDocumentAcl` permission.
+    #
+    # @option params [required, String] :data_source_id
+    #   The unique identifier of the data source that contains the document.
+    #
+    # @option params [required, String] :document_id
+    #   The unique identifier of the document to check access for.
+    #
+    # @option params [required, String] :knowledge_base_id
+    #   The unique identifier of the knowledge base that contains the
+    #   document.
+    #
+    # @option params [required, Types::UserContext] :user_context
+    #   The context object containing identity information for access control
+    #   filtering, including user ID and optional group memberships used to
+    #   evaluate the document access control list (ACL).
+    #
+    # @return [Types::CheckIngestedDocumentAclResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::CheckIngestedDocumentAclResponse#has_access #has_access} => Boolean
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.check_ingested_document_acl({
+    #     data_source_id: "DataSourceId", # required
+    #     document_id: "DocumentId", # required
+    #     knowledge_base_id: "KnowledgeBaseIdentifier", # required
+    #     user_context: { # required
+    #       user_id: "String", # required
+    #     },
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.has_access #=> Boolean
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agent-runtime-2023-07-26/CheckIngestedDocumentAcl AWS API Documentation
+    #
+    # @overload check_ingested_document_acl(params = {})
+    # @param [Hash] params ({})
+    def check_ingested_document_acl(params = {}, options = {})
+      req = build_request(:check_ingested_document_acl, params)
+      req.send_request(options)
+    end
+
     # Creates a new invocation within a session. An invocation groups the
     # related invocation steps that store the content from a conversation.
     # For more information about sessions, see [Store and retrieve
@@ -1345,10 +1434,9 @@ module Aws::BedrockAgentRuntime
     #   file. `EXTRACTED` returns parsed text as JSON. Defaults to `RAW`.
     #
     # @option params [Types::UserContext] :user_context
-    #   Contains information about the user making the request. Use this to
-    #   pass user identity information for access control filtering, so that
-    #   retrieval results only include documents the user is authorized to
-    #   access.
+    #   Contains information about the user making the request. This is used
+    #   for access control filtering to ensure that results only include
+    #   documents the user is authorized to access.
     #
     # @return [Types::GetDocumentContentResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -1493,6 +1581,65 @@ module Aws::BedrockAgentRuntime
       req.send_request(options)
     end
 
+    # Retrieves the ingested access control list (ACL) for a specific
+    # document in a knowledge base. Use this operation to inspect the allow
+    # and deny lists that were ingested for a document to troubleshoot
+    # access control issues. To use this operation, you must have the
+    # `bedrock:GetIngestedDocumentAcl` permission.
+    #
+    # @option params [required, String] :data_source_id
+    #   The unique identifier of the data source that contains the document.
+    #
+    # @option params [required, String] :document_id
+    #   The unique identifier of the document to retrieve the ingested access
+    #   control list (ACL) for.
+    #
+    # @option params [required, String] :knowledge_base_id
+    #   The unique identifier of the knowledge base that contains the
+    #   document.
+    #
+    # @return [Types::GetIngestedDocumentAclResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
+    #
+    #   * {Types::GetIngestedDocumentAclResponse#document_acl #document_acl} => Types::DocumentAcl
+    #
+    # @example Request syntax with placeholder values
+    #
+    #   resp = client.get_ingested_document_acl({
+    #     data_source_id: "DataSourceId", # required
+    #     document_id: "DocumentId", # required
+    #     knowledge_base_id: "KnowledgeBaseIdentifier", # required
+    #   })
+    #
+    # @example Response structure
+    #
+    #   resp.document_acl.allow_list.conditions #=> Array
+    #   resp.document_acl.allow_list.conditions[0].condition_operator #=> String, one of "AND", "OR"
+    #   resp.document_acl.allow_list.conditions[0].groups #=> Array
+    #   resp.document_acl.allow_list.conditions[0].groups[0].id #=> String
+    #   resp.document_acl.allow_list.conditions[0].groups[0].type #=> String, one of "KNOWLEDGE_BASE", "DATA_SOURCE"
+    #   resp.document_acl.allow_list.conditions[0].users #=> Array
+    #   resp.document_acl.allow_list.conditions[0].users[0].id #=> String
+    #   resp.document_acl.allow_list.conditions[0].users[0].type #=> String, one of "KNOWLEDGE_BASE", "DATA_SOURCE"
+    #   resp.document_acl.allow_list.member_relation #=> String, one of "AND", "OR"
+    #   resp.document_acl.deny_list.conditions #=> Array
+    #   resp.document_acl.deny_list.conditions[0].condition_operator #=> String, one of "AND", "OR"
+    #   resp.document_acl.deny_list.conditions[0].groups #=> Array
+    #   resp.document_acl.deny_list.conditions[0].groups[0].id #=> String
+    #   resp.document_acl.deny_list.conditions[0].groups[0].type #=> String, one of "KNOWLEDGE_BASE", "DATA_SOURCE"
+    #   resp.document_acl.deny_list.conditions[0].users #=> Array
+    #   resp.document_acl.deny_list.conditions[0].users[0].id #=> String
+    #   resp.document_acl.deny_list.conditions[0].users[0].type #=> String, one of "KNOWLEDGE_BASE", "DATA_SOURCE"
+    #   resp.document_acl.deny_list.member_relation #=> String, one of "AND", "OR"
+    #
+    # @see http://docs.aws.amazon.com/goto/WebAPI/bedrock-agent-runtime-2023-07-26/GetIngestedDocumentAcl AWS API Documentation
+    #
+    # @overload get_ingested_document_acl(params = {})
+    # @param [Hash] params ({})
+    def get_ingested_document_acl(params = {}, options = {})
+      req = build_request(:get_ingested_document_acl, params)
+      req.send_request(options)
+    end
+
     # Retrieves the details of a specific invocation step within an
     # invocation in a session. For more information about sessions, see
     # [Store and retrieve conversation history and context with Amazon
@@ -1595,7 +1742,16 @@ module Aws::BedrockAgentRuntime
       req.send_request(options)
     end
 
-    # <note> </note>
+    # <note markdown="1"> Amazon Bedrock Agents (now Amazon Bedrock Agents
+    # Classic) is no longer
+    # open to new customers. For capabilities similar to Bedrock Agents
+    # Classic, explore Amazon Bedrock AgentCore. Existing customers can
+    # continue to use the service as normal. For more information, see
+    # [Amazon Bedrock Agents Classic availability change][1].
+    #
+    #  </note>
+    #
+    #  <note> </note>
     #
     #  Sends a prompt for the agent to process and respond to. Note the
     # following fields for the request:
@@ -1607,7 +1763,7 @@ module Aws::BedrockAgentRuntime
     #   enablement helps you follow the agent's reasoning process that led
     #   it to the information it processed, the actions it took, and the
     #   final result it yielded. For more information, see [Trace
-    #   enablement][1].
+    #   enablement][2].
     #
     # * End a conversation by setting `endSession` to `true`.
     #
@@ -1635,7 +1791,8 @@ module Aws::BedrockAgentRuntime
     #
     #
     #
-    # [1]: https://docs.aws.amazon.com/bedrock/latest/userguide/agents-test.html#trace-events
+    # [1]: https://docs.aws.amazon.com/bedrock/latest/userguide/agents-classic-maintenance-mode.html
+    # [2]: https://docs.aws.amazon.com/bedrock/latest/userguide/agents-test.html#trace-events
     #
     # @option params [required, String] :agent_alias_id
     #   The alias of the agent to use.
@@ -6684,10 +6841,9 @@ module Aws::BedrockAgentRuntime
     #   Contains the query to send the knowledge base.
     #
     # @option params [Types::UserContext] :user_context
-    #   Contains information about the user making the request. Use this to
-    #   pass user identity information for access control filtering, so that
-    #   retrieval results only include documents the user is authorized to
-    #   access.
+    #   Contains information about the user making the request. This is used
+    #   for access control filtering to ensure that retrieval results only
+    #   include documents the user is authorized to access.
     #
     # @return [Types::RetrieveResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -7009,10 +7165,9 @@ module Aws::BedrockAgentRuntime
     #   explicitly set the `sessionId` yourself.
     #
     # @option params [Types::UserContext] :user_context
-    #   Contains information about the user making the request. Use this to
-    #   pass user identity information for access control filtering, so that
-    #   retrieval results only include documents the user is authorized to
-    #   access.
+    #   Contains information about the user making the request. This is used
+    #   for access control filtering to ensure that retrieval results only
+    #   include documents the user is authorized to access.
     #
     # @return [Types::RetrieveAndGenerateResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -7428,10 +7583,9 @@ module Aws::BedrockAgentRuntime
     #   explicitly set the `sessionId` yourself.
     #
     # @option params [Types::UserContext] :user_context
-    #   Contains information about the user making the request. Use this to
-    #   pass user identity information for access control filtering, so that
-    #   retrieval results only include documents the user is authorized to
-    #   access.
+    #   Contains information about the user making the request. This is used
+    #   for access control filtering to ensure that retrieval results only
+    #   include documents the user is authorized to access.
     #
     # @return [Types::RetrieveAndGenerateStreamResponse] Returns a {Seahorse::Client::Response response} object which responds to the following methods:
     #
@@ -8313,7 +8467,7 @@ module Aws::BedrockAgentRuntime
         tracer: tracer
       )
       context[:gem_name] = 'aws-sdk-bedrockagentruntime'
-      context[:gem_version] = '1.78.0'
+      context[:gem_version] = '1.80.0'
       Seahorse::Client::Request.new(handlers, context)
     end
 

data/lib/aws-sdk-bedrockagentruntime/client_api.rb

@@ -40,6 +40,9 @@ module Aws::BedrockAgentRuntime
     AgentCollaboratorInvocationOutput = Shapes::StructureShape.new(name: 'AgentCollaboratorInvocationOutput')
     AgentCollaboratorOutputPayload = Shapes::StructureShape.new(name: 'AgentCollaboratorOutputPayload')
     AgentCollaboratorPayloadString = Shapes::StringShape.new(name: 'AgentCollaboratorPayloadString')
+    AgentCoreMemoryActorId = Shapes::StringShape.new(name: 'AgentCoreMemoryActorId')
+    AgentCoreMemoryId = Shapes::StringShape.new(name: 'AgentCoreMemoryId')
+    AgentCoreMemorySessionId = Shapes::StringShape.new(name: 'AgentCoreMemorySessionId')
     AgentId = Shapes::StringShape.new(name: 'AgentId')
     AgentTraces = Shapes::ListShape.new(name: 'AgentTraces')
     AgentVersion = Shapes::StringShape.new(name: 'AgentVersion')
@@ -62,6 +65,22 @@ module Aws::BedrockAgentRuntime
     AgenticRetrieveFullDocExpansionDetails = Shapes::StructureShape.new(name: 'AgenticRetrieveFullDocExpansionDetails')
     AgenticRetrieveGeneratedResponse = Shapes::StructureShape.new(name: 'AgenticRetrieveGeneratedResponse')
     AgenticRetrieveGuardrailWarning = Shapes::StructureShape.new(name: 'AgenticRetrieveGuardrailWarning')
+    AgenticRetrieveMemoryConfiguration = Shapes::StructureShape.new(name: 'AgenticRetrieveMemoryConfiguration')
+    AgenticRetrieveMemoryMetadataFilter = Shapes::StructureShape.new(name: 'AgenticRetrieveMemoryMetadataFilter')
+    AgenticRetrieveMemoryMetadataFilterLeft = Shapes::UnionShape.new(name: 'AgenticRetrieveMemoryMetadataFilterLeft')
+    AgenticRetrieveMemoryMetadataFilterList = Shapes::ListShape.new(name: 'AgenticRetrieveMemoryMetadataFilterList')
+    AgenticRetrieveMemoryMetadataFilterOperator = Shapes::StringShape.new(name: 'AgenticRetrieveMemoryMetadataFilterOperator')
+    AgenticRetrieveMemoryMetadataFilterRight = Shapes::UnionShape.new(name: 'AgenticRetrieveMemoryMetadataFilterRight')
+    AgenticRetrieveMemoryMetadataKey = Shapes::StringShape.new(name: 'AgenticRetrieveMemoryMetadataKey')
+    AgenticRetrieveMemoryMetadataStringList = Shapes::ListShape.new(name: 'AgenticRetrieveMemoryMetadataStringList')
+    AgenticRetrieveMemoryMetadataStringListItem = Shapes::StringShape.new(name: 'AgenticRetrieveMemoryMetadataStringListItem')
+    AgenticRetrieveMemoryMetadataStringValue = Shapes::StringShape.new(name: 'AgenticRetrieveMemoryMetadataStringValue')
+    AgenticRetrieveMemoryMetadataValue = Shapes::UnionShape.new(name: 'AgenticRetrieveMemoryMetadataValue')
+    AgenticRetrieveMemoryPersistenceMode = Shapes::StringShape.new(name: 'AgenticRetrieveMemoryPersistenceMode')
+    AgenticRetrieveMemoryRetrievalConfig = Shapes::StructureShape.new(name: 'AgenticRetrieveMemoryRetrievalConfig')
+    AgenticRetrieveMemoryRetrievalConfigList = Shapes::ListShape.new(name: 'AgenticRetrieveMemoryRetrievalConfigList')
+    AgenticRetrieveMemoryRetrieveDetails = Shapes::StructureShape.new(name: 'AgenticRetrieveMemoryRetrieveDetails')
+    AgenticRetrieveMemorySessionBinding = Shapes::StructureShape.new(name: 'AgenticRetrieveMemorySessionBinding')
     AgenticRetrieveMessage = Shapes::StructureShape.new(name: 'AgenticRetrieveMessage')
     AgenticRetrieveMessageContent = Shapes::StructureShape.new(name: 'AgenticRetrieveMessageContent')
     AgenticRetrieveMetadata = Shapes::MapShape.new(name: 'AgenticRetrieveMetadata')
@@ -125,6 +144,8 @@ module Aws::BedrockAgentRuntime
     ByteContentFile = Shapes::StructureShape.new(name: 'ByteContentFile')
     Caller = Shapes::UnionShape.new(name: 'Caller')
     CallerChain = Shapes::ListShape.new(name: 'CallerChain')
+    CheckIngestedDocumentAclRequest = Shapes::StructureShape.new(name: 'CheckIngestedDocumentAclRequest')
+    CheckIngestedDocumentAclResponse = Shapes::StructureShape.new(name: 'CheckIngestedDocumentAclResponse')
     Citation = Shapes::StructureShape.new(name: 'Citation')
     CitationEvent = Shapes::StructureShape.new(name: 'CitationEvent')
     Citations = Shapes::ListShape.new(name: 'Citations')
@@ -162,6 +183,18 @@ module Aws::BedrockAgentRuntime
     DeleteSessionResponse = Shapes::StructureShape.new(name: 'DeleteSessionResponse')
     DependencyFailedException = Shapes::StructureShape.new(name: 'DependencyFailedException')
     Document = Shapes::DocumentShape.new(name: 'Document', document: true)
+    DocumentAcl = Shapes::StructureShape.new(name: 'DocumentAcl')
+    DocumentAclCondition = Shapes::StructureShape.new(name: 'DocumentAclCondition')
+    DocumentAclConditionGroupsList = Shapes::ListShape.new(name: 'DocumentAclConditionGroupsList')
+    DocumentAclConditionUsersList = Shapes::ListShape.new(name: 'DocumentAclConditionUsersList')
+    DocumentAclGroup = Shapes::StructureShape.new(name: 'DocumentAclGroup')
+    DocumentAclGroupIdString = Shapes::StringShape.new(name: 'DocumentAclGroupIdString')
+    DocumentAclMemberRelation = Shapes::StringShape.new(name: 'DocumentAclMemberRelation')
+    DocumentAclMembership = Shapes::StructureShape.new(name: 'DocumentAclMembership')
+    DocumentAclMembershipConditionsList = Shapes::ListShape.new(name: 'DocumentAclMembershipConditionsList')
+    DocumentAclMembershipType = Shapes::StringShape.new(name: 'DocumentAclMembershipType')
+    DocumentAclUser = Shapes::StructureShape.new(name: 'DocumentAclUser')
+    DocumentAclUserIdString = Shapes::StringShape.new(name: 'DocumentAclUserIdString')
     DocumentId = Shapes::StringShape.new(name: 'DocumentId')
     DocumentOutputFormat = Shapes::StringShape.new(name: 'DocumentOutputFormat')
     Double = Shapes::FloatShape.new(name: 'Double')
@@ -277,6 +310,8 @@ module Aws::BedrockAgentRuntime
     GetExecutionFlowSnapshotResponse = Shapes::StructureShape.new(name: 'GetExecutionFlowSnapshotResponse')
     GetFlowExecutionRequest = Shapes::StructureShape.new(name: 'GetFlowExecutionRequest')
     GetFlowExecutionResponse = Shapes::StructureShape.new(name: 'GetFlowExecutionResponse')
+    GetIngestedDocumentAclRequest = Shapes::StructureShape.new(name: 'GetIngestedDocumentAclRequest')
+    GetIngestedDocumentAclResponse = Shapes::StructureShape.new(name: 'GetIngestedDocumentAclResponse')
     GetInvocationStepRequest = Shapes::StructureShape.new(name: 'GetInvocationStepRequest')
     GetInvocationStepResponse = Shapes::StructureShape.new(name: 'GetInvocationStepResponse')
     GetSessionRequest = Shapes::StructureShape.new(name: 'GetSessionRequest')
@@ -417,7 +452,9 @@ module Aws::BedrockAgentRuntime
     Memories = Shapes::ListShape.new(name: 'Memories')
     Memory = Shapes::UnionShape.new(name: 'Memory')
     MemoryId = Shapes::StringShape.new(name: 'MemoryId')
+    MemoryNamespace = Shapes::StringShape.new(name: 'MemoryNamespace')
     MemorySessionSummary = Shapes::StructureShape.new(name: 'MemorySessionSummary')
+    MemoryStrategyId = Shapes::StringShape.new(name: 'MemoryStrategyId')
     MemoryType = Shapes::StringShape.new(name: 'MemoryType')
     Message = Shapes::StructureShape.new(name: 'Message')
     Messages = Shapes::ListShape.new(name: 'Messages')
@@ -648,6 +685,7 @@ module Aws::BedrockAgentRuntime
     TextToSqlConfigurationType = Shapes::StringShape.new(name: 'TextToSqlConfigurationType')
     TextToSqlKnowledgeBaseConfiguration = Shapes::StructureShape.new(name: 'TextToSqlKnowledgeBaseConfiguration')
     ThrottlingException = Shapes::StructureShape.new(name: 'ThrottlingException')
+    Timestamp = Shapes::TimestampShape.new(name: 'Timestamp')
     TopK = Shapes::IntegerShape.new(name: 'TopK')
     TopP = Shapes::FloatShape.new(name: 'TopP')
     Trace = Shapes::UnionShape.new(name: 'Trace')
@@ -749,6 +787,7 @@ module Aws::BedrockAgentRuntime
     AgentTraces.member = Shapes::ShapeRef.new(shape: TracePart, event: true)
 
     AgenticRetrieveAction.add_member(:full_document_expansion, Shapes::ShapeRef.new(shape: AgenticRetrieveFullDocExpansionDetails, location_name: "fullDocumentExpansion"))
+    AgenticRetrieveAction.add_member(:memory_retrieve, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryRetrieveDetails, location_name: "memoryRetrieve"))
     AgenticRetrieveAction.add_member(:retrieve, Shapes::ShapeRef.new(shape: AgenticRetrieveActionDetails, location_name: "retrieve"))
     AgenticRetrieveAction.struct_class = Types::AgenticRetrieveAction
 
@@ -806,6 +845,64 @@ module Aws::BedrockAgentRuntime
     AgenticRetrieveGuardrailWarning.add_member(:version, Shapes::ShapeRef.new(shape: String, required: true, location_name: "version"))
     AgenticRetrieveGuardrailWarning.struct_class = Types::AgenticRetrieveGuardrailWarning
 
+    AgenticRetrieveMemoryConfiguration.add_member(:memory_id, Shapes::ShapeRef.new(shape: AgentCoreMemoryId, required: true, location_name: "memoryId"))
+    AgenticRetrieveMemoryConfiguration.add_member(:persistence_mode, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryPersistenceMode, location_name: "persistenceMode"))
+    AgenticRetrieveMemoryConfiguration.add_member(:retrieval_configs, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryRetrievalConfigList, location_name: "retrievalConfigs"))
+    AgenticRetrieveMemoryConfiguration.add_member(:session_binding, Shapes::ShapeRef.new(shape: AgenticRetrieveMemorySessionBinding, location_name: "sessionBinding"))
+    AgenticRetrieveMemoryConfiguration.struct_class = Types::AgenticRetrieveMemoryConfiguration
+
+    AgenticRetrieveMemoryMetadataFilter.add_member(:left, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataFilterLeft, required: true, location_name: "left"))
+    AgenticRetrieveMemoryMetadataFilter.add_member(:operator, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataFilterOperator, required: true, location_name: "operator"))
+    AgenticRetrieveMemoryMetadataFilter.add_member(:right, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataFilterRight, location_name: "right"))
+    AgenticRetrieveMemoryMetadataFilter.struct_class = Types::AgenticRetrieveMemoryMetadataFilter
+
+    AgenticRetrieveMemoryMetadataFilterLeft.add_member(:metadata_key, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataKey, location_name: "metadataKey"))
+    AgenticRetrieveMemoryMetadataFilterLeft.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    AgenticRetrieveMemoryMetadataFilterLeft.add_member_subclass(:metadata_key, Types::AgenticRetrieveMemoryMetadataFilterLeft::MetadataKey)
+    AgenticRetrieveMemoryMetadataFilterLeft.add_member_subclass(:unknown, Types::AgenticRetrieveMemoryMetadataFilterLeft::Unknown)
+    AgenticRetrieveMemoryMetadataFilterLeft.struct_class = Types::AgenticRetrieveMemoryMetadataFilterLeft
+
+    AgenticRetrieveMemoryMetadataFilterList.member = Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataFilter)
+
+    AgenticRetrieveMemoryMetadataFilterRight.add_member(:metadata_value, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataValue, location_name: "metadataValue"))
+    AgenticRetrieveMemoryMetadataFilterRight.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    AgenticRetrieveMemoryMetadataFilterRight.add_member_subclass(:metadata_value, Types::AgenticRetrieveMemoryMetadataFilterRight::MetadataValue)
+    AgenticRetrieveMemoryMetadataFilterRight.add_member_subclass(:unknown, Types::AgenticRetrieveMemoryMetadataFilterRight::Unknown)
+    AgenticRetrieveMemoryMetadataFilterRight.struct_class = Types::AgenticRetrieveMemoryMetadataFilterRight
+
+    AgenticRetrieveMemoryMetadataStringList.member = Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataStringListItem)
+
+    AgenticRetrieveMemoryMetadataValue.add_member(:date_time_value, Shapes::ShapeRef.new(shape: Timestamp, location_name: "dateTimeValue"))
+    AgenticRetrieveMemoryMetadataValue.add_member(:number_value, Shapes::ShapeRef.new(shape: Double, location_name: "numberValue"))
+    AgenticRetrieveMemoryMetadataValue.add_member(:string_list_value, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataStringList, location_name: "stringListValue"))
+    AgenticRetrieveMemoryMetadataValue.add_member(:string_value, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataStringValue, location_name: "stringValue"))
+    AgenticRetrieveMemoryMetadataValue.add_member(:unknown, Shapes::ShapeRef.new(shape: nil, location_name: 'unknown'))
+    AgenticRetrieveMemoryMetadataValue.add_member_subclass(:date_time_value, Types::AgenticRetrieveMemoryMetadataValue::DateTimeValue)
+    AgenticRetrieveMemoryMetadataValue.add_member_subclass(:number_value, Types::AgenticRetrieveMemoryMetadataValue::NumberValue)
+    AgenticRetrieveMemoryMetadataValue.add_member_subclass(:string_list_value, Types::AgenticRetrieveMemoryMetadataValue::StringListValue)
+    AgenticRetrieveMemoryMetadataValue.add_member_subclass(:string_value, Types::AgenticRetrieveMemoryMetadataValue::StringValue)
+    AgenticRetrieveMemoryMetadataValue.add_member_subclass(:unknown, Types::AgenticRetrieveMemoryMetadataValue::Unknown)
+    AgenticRetrieveMemoryMetadataValue.struct_class = Types::AgenticRetrieveMemoryMetadataValue
+
+    AgenticRetrieveMemoryRetrievalConfig.add_member(:metadata_filters, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryMetadataFilterList, location_name: "metadataFilters"))
+    AgenticRetrieveMemoryRetrievalConfig.add_member(:namespace, Shapes::ShapeRef.new(shape: MemoryNamespace, location_name: "namespace"))
+    AgenticRetrieveMemoryRetrievalConfig.add_member(:namespace_path, Shapes::ShapeRef.new(shape: MemoryNamespace, location_name: "namespacePath"))
+    AgenticRetrieveMemoryRetrievalConfig.add_member(:strategy_id, Shapes::ShapeRef.new(shape: MemoryStrategyId, location_name: "strategyId"))
+    AgenticRetrieveMemoryRetrievalConfig.struct_class = Types::AgenticRetrieveMemoryRetrievalConfig
+
+    AgenticRetrieveMemoryRetrievalConfigList.member = Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryRetrievalConfig)
+
+    AgenticRetrieveMemoryRetrieveDetails.add_member(:input_query, Shapes::ShapeRef.new(shape: AgenticRetrieveMessageContent, required: true, location_name: "inputQuery"))
+    AgenticRetrieveMemoryRetrieveDetails.add_member(:memory_id, Shapes::ShapeRef.new(shape: String, required: true, location_name: "memoryId"))
+    AgenticRetrieveMemoryRetrieveDetails.add_member(:namespace, Shapes::ShapeRef.new(shape: String, location_name: "namespace"))
+    AgenticRetrieveMemoryRetrieveDetails.add_member(:namespace_path, Shapes::ShapeRef.new(shape: String, location_name: "namespacePath"))
+    AgenticRetrieveMemoryRetrieveDetails.add_member(:strategy_id, Shapes::ShapeRef.new(shape: String, location_name: "strategyId"))
+    AgenticRetrieveMemoryRetrieveDetails.struct_class = Types::AgenticRetrieveMemoryRetrieveDetails
+
+    AgenticRetrieveMemorySessionBinding.add_member(:actor_id, Shapes::ShapeRef.new(shape: AgentCoreMemoryActorId, required: true, location_name: "actorId"))
+    AgenticRetrieveMemorySessionBinding.add_member(:session_id, Shapes::ShapeRef.new(shape: AgentCoreMemorySessionId, required: true, location_name: "sessionId"))
+    AgenticRetrieveMemorySessionBinding.struct_class = Types::AgenticRetrieveMemorySessionBinding
+
     AgenticRetrieveMessage.add_member(:content, Shapes::ShapeRef.new(shape: AgenticRetrieveMessageContent, required: true, location_name: "content"))
     AgenticRetrieveMessage.add_member(:role, Shapes::ShapeRef.new(shape: ConversationRole, required: true, location_name: "role"))
     AgenticRetrieveMessage.struct_class = Types::AgenticRetrieveMessage
@@ -851,6 +948,7 @@ module Aws::BedrockAgentRuntime
 
     AgenticRetrieveStreamRequest.add_member(:agentic_retrieve_configuration, Shapes::ShapeRef.new(shape: AgenticRetrieveConfiguration, required: true, location_name: "agenticRetrieveConfiguration"))
     AgenticRetrieveStreamRequest.add_member(:generate_response, Shapes::ShapeRef.new(shape: Boolean, location_name: "generateResponse"))
+    AgenticRetrieveStreamRequest.add_member(:memory_configuration, Shapes::ShapeRef.new(shape: AgenticRetrieveMemoryConfiguration, location_name: "memoryConfiguration"))
     AgenticRetrieveStreamRequest.add_member(:messages, Shapes::ShapeRef.new(shape: AgenticRetrieveStreamRequestMessagesList, required: true, location_name: "messages"))
     AgenticRetrieveStreamRequest.add_member(:next_token, Shapes::ShapeRef.new(shape: NextToken, location_name: "nextToken"))
     AgenticRetrieveStreamRequest.add_member(:policy_configuration, Shapes::ShapeRef.new(shape: AgenticRetrievePolicyConfiguration, location_name: "policyConfiguration"))
@@ -1011,6 +1109,15 @@ module Aws::BedrockAgentRuntime
 
     CallerChain.member = Shapes::ShapeRef.new(shape: Caller)
 
+    CheckIngestedDocumentAclRequest.add_member(:data_source_id, Shapes::ShapeRef.new(shape: DataSourceId, required: true, location: "uri", location_name: "dataSourceId"))
+    CheckIngestedDocumentAclRequest.add_member(:document_id, Shapes::ShapeRef.new(shape: DocumentId, required: true, location_name: "documentId"))
+    CheckIngestedDocumentAclRequest.add_member(:knowledge_base_id, Shapes::ShapeRef.new(shape: KnowledgeBaseIdentifier, required: true, location: "uri", location_name: "knowledgeBaseId"))
+    CheckIngestedDocumentAclRequest.add_member(:user_context, Shapes::ShapeRef.new(shape: UserContext, required: true, location_name: "userContext"))
+    CheckIngestedDocumentAclRequest.struct_class = Types::CheckIngestedDocumentAclRequest
+
+    CheckIngestedDocumentAclResponse.add_member(:has_access, Shapes::ShapeRef.new(shape: Boolean, required: true, location_name: "hasAccess"))
+    CheckIngestedDocumentAclResponse.struct_class = Types::CheckIngestedDocumentAclResponse
+
     Citation.add_member(:generated_response_part, Shapes::ShapeRef.new(shape: GeneratedResponsePart, location_name: "generatedResponsePart"))
     Citation.add_member(:retrieved_references, Shapes::ShapeRef.new(shape: RetrievedReferences, location_name: "retrievedReferences"))
     Citation.struct_class = Types::Citation
@@ -1130,6 +1237,33 @@ module Aws::BedrockAgentRuntime
     DependencyFailedException.add_member(:resource_name, Shapes::ShapeRef.new(shape: NonBlankString, location_name: "resourceName"))
     DependencyFailedException.struct_class = Types::DependencyFailedException
 
+    DocumentAcl.add_member(:allow_list, Shapes::ShapeRef.new(shape: DocumentAclMembership, location_name: "allowList"))
+    DocumentAcl.add_member(:deny_list, Shapes::ShapeRef.new(shape: DocumentAclMembership, location_name: "denyList"))
+    DocumentAcl.struct_class = Types::DocumentAcl
+
+    DocumentAclCondition.add_member(:condition_operator, Shapes::ShapeRef.new(shape: DocumentAclMemberRelation, location_name: "conditionOperator"))
+    DocumentAclCondition.add_member(:groups, Shapes::ShapeRef.new(shape: DocumentAclConditionGroupsList, location_name: "groups"))
+    DocumentAclCondition.add_member(:users, Shapes::ShapeRef.new(shape: DocumentAclConditionUsersList, location_name: "users"))
+    DocumentAclCondition.struct_class = Types::DocumentAclCondition
+
+    DocumentAclConditionGroupsList.member = Shapes::ShapeRef.new(shape: DocumentAclGroup)
+
+    DocumentAclConditionUsersList.member = Shapes::ShapeRef.new(shape: DocumentAclUser)
+
+    DocumentAclGroup.add_member(:id, Shapes::ShapeRef.new(shape: DocumentAclGroupIdString, required: true, location_name: "id"))
+    DocumentAclGroup.add_member(:type, Shapes::ShapeRef.new(shape: DocumentAclMembershipType, required: true, location_name: "type"))
+    DocumentAclGroup.struct_class = Types::DocumentAclGroup
+
+    DocumentAclMembership.add_member(:conditions, Shapes::ShapeRef.new(shape: DocumentAclMembershipConditionsList, location_name: "conditions"))
+    DocumentAclMembership.add_member(:member_relation, Shapes::ShapeRef.new(shape: DocumentAclMemberRelation, location_name: "memberRelation"))
+    DocumentAclMembership.struct_class = Types::DocumentAclMembership
+
+    DocumentAclMembershipConditionsList.member = Shapes::ShapeRef.new(shape: DocumentAclCondition)
+
+    DocumentAclUser.add_member(:id, Shapes::ShapeRef.new(shape: DocumentAclUserIdString, required: true, location_name: "id"))
+    DocumentAclUser.add_member(:type, Shapes::ShapeRef.new(shape: DocumentAclMembershipType, required: true, location_name: "type"))
+    DocumentAclUser.struct_class = Types::DocumentAclUser
+
     EndSessionRequest.add_member(:session_identifier, Shapes::ShapeRef.new(shape: SessionIdentifier, required: true, location: "uri", location_name: "sessionIdentifier"))
     EndSessionRequest.struct_class = Types::EndSessionRequest
 
@@ -1530,6 +1664,14 @@ module Aws::BedrockAgentRuntime
     GetFlowExecutionResponse.add_member(:status, Shapes::ShapeRef.new(shape: FlowExecutionStatus, required: true, location_name: "status"))
     GetFlowExecutionResponse.struct_class = Types::GetFlowExecutionResponse
 
+    GetIngestedDocumentAclRequest.add_member(:data_source_id, Shapes::ShapeRef.new(shape: DataSourceId, required: true, location: "uri", location_name: "dataSourceId"))
+    GetIngestedDocumentAclRequest.add_member(:document_id, Shapes::ShapeRef.new(shape: DocumentId, required: true, location_name: "documentId"))
+    GetIngestedDocumentAclRequest.add_member(:knowledge_base_id, Shapes::ShapeRef.new(shape: KnowledgeBaseIdentifier, required: true, location: "uri", location_name: "knowledgeBaseId"))
+    GetIngestedDocumentAclRequest.struct_class = Types::GetIngestedDocumentAclRequest
+
+    GetIngestedDocumentAclResponse.add_member(:document_acl, Shapes::ShapeRef.new(shape: DocumentAcl, required: true, location_name: "documentAcl"))
+    GetIngestedDocumentAclResponse.struct_class = Types::GetIngestedDocumentAclResponse
+
     GetInvocationStepRequest.add_member(:invocation_identifier, Shapes::ShapeRef.new(shape: InvocationIdentifier, required: true, location_name: "invocationIdentifier"))
     GetInvocationStepRequest.add_member(:invocation_step_id, Shapes::ShapeRef.new(shape: Uuid, required: true, location: "uri", location_name: "invocationStepId"))
     GetInvocationStepRequest.add_member(:session_identifier, Shapes::ShapeRef.new(shape: SessionIdentifier, required: true, location: "uri", location_name: "sessionIdentifier"))
@@ -2844,6 +2986,19 @@ module Aws::BedrockAgentRuntime
         o.errors << Shapes::ShapeRef.new(shape: ServiceQuotaExceededException)
       end)
 
+      api.add_operation(:check_ingested_document_acl, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "CheckIngestedDocumentAcl"
+        o.http_method = "POST"
+        o.http_request_uri = "/knowledgebases/{knowledgeBaseId}/datasources/{dataSourceId}/check-ingested-document-acl"
+        o.input = Shapes::ShapeRef.new(shape: CheckIngestedDocumentAclRequest)
+        o.output = Shapes::ShapeRef.new(shape: CheckIngestedDocumentAclResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
       api.add_operation(:create_invocation, Seahorse::Model::Operation.new.tap do |o|
         o.name = "CreateInvocation"
         o.http_method = "PUT"
@@ -2997,6 +3152,19 @@ module Aws::BedrockAgentRuntime
         o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
       end)
 
+      api.add_operation(:get_ingested_document_acl, Seahorse::Model::Operation.new.tap do |o|
+        o.name = "GetIngestedDocumentAcl"
+        o.http_method = "POST"
+        o.http_request_uri = "/knowledgebases/{knowledgeBaseId}/datasources/{dataSourceId}/get-ingested-document-acl"
+        o.input = Shapes::ShapeRef.new(shape: GetIngestedDocumentAclRequest)
+        o.output = Shapes::ShapeRef.new(shape: GetIngestedDocumentAclResponse)
+        o.errors << Shapes::ShapeRef.new(shape: ResourceNotFoundException)
+        o.errors << Shapes::ShapeRef.new(shape: ValidationException)
+        o.errors << Shapes::ShapeRef.new(shape: InternalServerException)
+        o.errors << Shapes::ShapeRef.new(shape: ThrottlingException)
+        o.errors << Shapes::ShapeRef.new(shape: AccessDeniedException)
+      end)
+
       api.add_operation(:get_invocation_step, Seahorse::Model::Operation.new.tap do |o|
         o.name = "GetInvocationStep"
         o.http_method = "POST"