@aws-cdk/aws-bedrock-agentcore-alpha 2.221.1-alpha.0 → 2.223.0-alpha.0

package/.jsii

@@ -8,7 +8,8 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "aws-cdk-lib": "^2.221.1",
+    "@aws-cdk/aws-bedrock-alpha": "2.223.0-alpha.0",
+    "aws-cdk-lib": "^2.223.0",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -64,6 +65,37 @@
         }
       }
     },
+    "@aws-cdk/aws-bedrock-alpha": {
+      "targets": {
+        "dotnet": {
+          "iconUrl": "https://raw.githubusercontent.com/aws/aws-cdk/main/logo/default-256-dark.png",
+          "namespace": "Amazon.CDK.AWS.Bedrock.Alpha",
+          "packageId": "Amazon.CDK.AWS.Bedrock.Alpha"
+        },
+        "go": {
+          "moduleName": "github.com/aws/aws-cdk-go",
+          "packageName": "awsbedrockalpha"
+        },
+        "java": {
+          "maven": {
+            "artifactId": "bedrock-alpha",
+            "groupId": "software.amazon.awscdk"
+          },
+          "package": "software.amazon.awscdk.services.bedrock.alpha"
+        },
+        "js": {
+          "npm": "@aws-cdk/aws-bedrock-alpha"
+        },
+        "python": {
+          "classifiers": [
+            "Framework :: AWS CDK",
+            "Framework :: AWS CDK :: 2"
+          ],
+          "distName": "aws-cdk.aws-bedrock-alpha",
+          "module": "aws_cdk.aws_bedrock_alpha"
+        }
+      }
+    },
     "@aws-cdk/cloud-assembly-schema": {
       "targets": {
         "dotnet": {
@@ -3217,6 +3249,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_rtbfabric": {
+          "targets": {
+            "dotnet": {
+              "package": "Amazon.CDK.AWS.RTBFabric"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.rtbfabric"
+            },
+            "python": {
+              "module": "aws_cdk.aws_rtbfabric"
+            }
+          }
+        },
         "aws-cdk-lib.aws_rum": {
           "targets": {
             "dotnet": {
@@ -3334,6 +3379,19 @@
             }
           }
         },
+        "aws-cdk-lib.aws_s3vectors": {
+          "targets": {
+            "dotnet": {
+              "package": "Amazon.CDK.AWS.S3Vectors"
+            },
+            "java": {
+              "package": "software.amazon.awscdk.services.s3vectors"
+            },
+            "python": {
+              "module": "aws_cdk.aws_s3vectors"
+            }
+          }
+        },
         "aws-cdk-lib.aws_sagemaker": {
           "targets": {
             "dotnet": {
@@ -4104,7 +4162,7 @@
   },
   "name": "@aws-cdk/aws-bedrock-agentcore-alpha",
   "readme": {
-    "markdown": "# Amazon Bedrock AgentCore Construct Library\n\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n| **Language**                                                                                   | **Package**                             |\n| :--------------------------------------------------------------------------------------------- | --------------------------------------- |\n| ![Typescript Logo](https://docs.aws.amazon.com/cdk/api/latest/img/typescript32.png) TypeScript | `@aws-cdk/aws-bedrock-agentcore-alpha` |\n\n[Amazon Bedrock AgentCore](https://aws.amazon.com/bedrock/agentcore/) enables you to deploy and operate highly capable AI agents securely, at scale. It offers infrastructure purpose-built for dynamic agent workloads, powerful tools to enhance agents, and essential controls for real-world deployment. AgentCore services can be used together or independently and work with any framework including CrewAI, LangGraph, LlamaIndex, and Strands Agents, as well as any foundation model in or outside of Amazon Bedrock, giving you ultimate flexibility. AgentCore eliminates the undifferentiated heavy lifting of building specialized agent infrastructure, so you can accelerate agents to production.\n\nThis construct library facilitates the deployment of Bedrock AgentCore primitives, enabling you to create sophisticated AI applications that can interact with your systems and data sources.\n\n## Table of contents\n\n- [AgentCore Runtime](#agentcore-runtime)\n  - [Runtime Versioning](#runtime-versioning)\n  - [Runtime Endpoints](#runtime-endpoints)\n  - [AgentCore Runtime Properties](#agentcore-runtime-properties)\n  - [Runtime Endpoint Properties](#runtime-endpoint-properties)\n  - [Creating a Runtime](#creating-a-runtime)\n    - [Option 1: Use an existing image in ECR](#option-1-use-an-existing-image-in-ecr)\n    - [Managing Endpoints and Versions](#managing-endpoints-and-versions)\n    - [Option 2: Use a local asset](#option-2-use-a-local-asset)\n- [Browser Custom tool](#browser)\n  - [Browser properties](#browser-properties)\n  - [Browser Network modes](#browser-network-modes)\n  - [Basic Browser Creation](#basic-browser-creation)\n  - [Browser IAM permissions](#browser-iam-permissions)\n- [Code Interpreter Custom tool](#code-interpreter)\n  - [Code Interpreter properties](#code-interpreter-properties)\n  - [Code Interpreter Network Modes](#code-interpreter-network-modes)\n  - [Basic Code Interpreter Creation](#basic-code-interpreter-creation)\n  - [Code Interpreter IAM permissions](#code-interpreter-iam-permissions)\n\n\n## AgentCore Runtime\n\nThe AgentCore Runtime construct enables you to deploy containerized agents on Amazon Bedrock AgentCore.\nThis L2 construct simplifies runtime creation just pass your ECR repository name\nand the construct handles all the configuration with sensible defaults.\n\n### Runtime Endpoints\n\nEndpoints provide a stable way to invoke specific versions of your agent runtime, enabling controlled deployments across different environments.\nWhen you create an agent runtime, Amazon Bedrock AgentCore automatically creates a \"DEFAULT\" endpoint which always points to the latest version\nof runtime.\n\nYou can create additional endpoints in two ways:\n\n1. **Using Runtime.addEndpoint()** - Convenient method when creating endpoints alongside the runtime.\n2. **Using RuntimeEndpoint** - Flexible approach for existing runtimes.\n\nFor example, you might keep a \"production\" endpoint on a stable version while testing newer versions\nthrough a \"staging\" endpoint. This separation allows you to test changes thoroughly before promoting them\nto production by simply updating the endpoint to point to the newer version.\n\n### AgentCore Runtime Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `runtimeName` | `string` | Yes | The name of the agent runtime. Valid characters are a-z, A-Z, 0-9, _ (underscore). Must start with a letter and can be up to 48 characters long |\n| `agentRuntimeArtifact` | `AgentRuntimeArtifact` | Yes | The artifact configuration for the agent runtime containing the container configuration with ECR URI |\n| `executionRole` | `iam.IRole` | No | The IAM role that provides permissions for the agent runtime. If not provided, a role will be created automatically |\n| `networkConfiguration` | `NetworkConfiguration` | No | Network configuration for the agent runtime. Defaults to `RuntimeNetworkConfiguration.usingPublicNetwork()` |\n| `description` | `string` | No | Optional description for the agent runtime |\n| `protocolConfiguration` | `ProtocolType` | No | Protocol configuration for the agent runtime. Defaults to `ProtocolType.HTTP` |\n| `authorizerConfiguration` | `RuntimeAuthorizerConfiguration` | No | Authorizer configuration for the agent runtime. Use `RuntimeAuthorizerConfiguration` static methods to create configurations for IAM, Cognito, JWT, or OAuth authentication |\n| `environmentVariables` | `{ [key: string]: string }` | No | Environment variables for the agent runtime. Maximum 50 environment variables |\n| `tags` | `{ [key: string]: string }` | No | Tags for the agent runtime. A list of key:value pairs of tags to apply to this Runtime resource |\n\n### Runtime Endpoint Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `endpointName` | `string` | Yes | The name of the runtime endpoint. Valid characters are a-z, A-Z, 0-9, _ (underscore). Must start with a letter and can be up to 48 characters long |\n| `agentRuntimeId` | `string` | Yes | The Agent Runtime ID for this endpoint |\n| `agentRuntimeVersion` | `string` | Yes | The Agent Runtime version for this endpoint. Must be between 1 and 5 characters long.|\n| `description` | `string` | No | Optional description for the runtime endpoint |\n| `tags` | `{ [key: string]: string }` | No | Tags for the runtime endpoint |\n\n### Creating a Runtime\n\n#### Option 1: Use an existing image in ECR\n\nReference an image available within ECR.\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\n// The runtime by default create ECR permission only for the repository available in the account the stack is being deployed\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Create runtime using the built image\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact\n});\n```\n\nTo grant the runtime permission to invoke a Bedrock model or inference profile:\n\n```text\n// Note: This example uses @aws-cdk/aws-bedrock-alpha which must be installed separately\nimport * as bedrock from '@aws-cdk/aws-bedrock-alpha';\n\n// Create a cross-region inference profile for Claude 3.7 Sonnet\nconst inferenceProfile = bedrock.CrossRegionInferenceProfile.fromConfig({\n  geoRegion: bedrock.CrossRegionInferenceProfileRegion.US,\n  model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_7_SONNET_V1_0\n});\n\n// Grant the runtime permission to invoke the inference profile\ninferenceProfile.grantInvoke(runtime);\n```\n\n#### Option 2: Use a local asset\n\nReference a local directory containing a Dockerfile.\nImages are built from a local Docker context directory (with a Dockerfile), uploaded to Amazon Elastic Container Registry (ECR)\nby the CDK toolkit,and can be naturally referenced in your CDK app .\n\n```typescript\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromAsset(\n  path.join(__dirname, \"path to agent dockerfile directory\")\n);\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n});\n```\n\n### Runtime Versioning\n\nAmazon Bedrock AgentCore automatically manages runtime versioning to ensure safe deployments and rollback capabilities.\nWhen you create an agent runtime, AgentCore automatically creates version 1 (V1). Each subsequent update to the\nruntime configuration (such as updating the container image, modifying network settings, or changing protocol configurations)\ncreates a new immutable version. These versions contain complete, self-contained configurations that can be referenced by endpoints,\nallowing you to maintain different versions for different environments or gradually roll out updates.\n\n#### Managing Endpoints and Versions\n\nAmazon Bedrock AgentCore automatically manages runtime versioning to provide safe deployments and rollback capabilities. You can follow\nthe steps below to understand how to use versioning with runtime for controlled deployments across different environments.\n\n##### Step 1: Initial Deployment\n\nWhen you first create an agent runtime, AgentCore automatically creates Version 1 of your runtime. At this point, a DEFAULT endpoint is\nautomatically created that points to Version 1. This DEFAULT endpoint serves as the main access point for your runtime.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\"),\n});\n```\n\n##### Step 2: Creating Custom Endpoints\n\nAfter the initial deployment, you can create additional endpoints for different environments. For example, you might create a \"production\"\nendpoint that explicitly points to Version 1. This allows you to maintain stable access points for specific environments while keeping the\nflexibility to test newer versions elsewhere.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\"),\n});\n\nconst prodEndpoint = runtime.addEndpoint(\"production\", {\n  version: \"1\",\n  description: \"Stable production endpoint - pinned to v1\"\n});\n```\n\n##### Step 3: Runtime Update Deployment\n\nWhen you update the runtime configuration (such as updating the container image, modifying network settings, or changing protocol\nconfigurations), AgentCore automatically creates a new version (Version 2). Upon this update:\n\n- Version 2 is created automatically with the new configuration\n- The DEFAULT endpoint automatically updates to point to Version 2\n- Any explicitly pinned endpoints (like the production endpoint) remain on their specified versions\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst agentRuntimeArtifactNew = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v2.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifactNew,\n});\n```\n\n##### Step 4: Testing with Staging Endpoints\n\nOnce Version 2 exists, you can create a staging endpoint that points to the new version. This staging endpoint allows you to test the\nnew version in a controlled environment before promoting it to production. This separation ensures that production traffic continues\nto use the stable version while you validate the new version.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst agentRuntimeArtifactNew = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v2.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifactNew,\n});\n\nconst stagingEndpoint = runtime.addEndpoint(\"staging\", {\n  version: \"2\",\n  description: \"Staging environment for testing new version\"\n});\n```\n\n##### Step 5: Promoting to Production\n\nAfter thoroughly testing the new version through the staging endpoint, you can update the production endpoint to point to Version 2.\nThis controlled promotion process ensures that you can validate changes before they affect production traffic.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst agentRuntimeArtifactNew = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v2.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifactNew,\n});\n\nconst prodEndpoint = runtime.addEndpoint(\"production\", {\n  version: \"2\",  // New version added here\n  description: \"Stable production endpoint\"\n});\n```\n\n### Creating Standalone Runtime Endpoints\n\nRuntimeEndpoint can also be created as a standalone resource.\n\n#### Example: Creating an endpoint for an existing runtime\n\n```typescript\n// Reference an existing runtime by its ID\nconst existingRuntimeId = \"abc123-runtime-id\"; // The ID of an existing runtime\n\n// Create a standalone endpoint\nconst endpoint = new agentcore.RuntimeEndpoint(this, \"MyEndpoint\", {\n  endpointName: \"production\",\n  agentRuntimeId: existingRuntimeId,\n  agentRuntimeVersion: \"1\", // Specify which version to use\n  description: \"Production endpoint for existing runtime\"\n});\n```\n\n### Runtime Authentication Configuration\n\nThe AgentCore Runtime supports multiple authentication modes to secure access to your agent endpoints. Authentication is configured during runtime creation using the `RuntimeAuthorizerConfiguration` class's static factory methods.\n\n#### IAM Authentication (Default)\n\nIAM authentication is the default mode, when no authorizerConfiguration is set then the underlying service use IAM.\n\n#### Cognito Authentication\n\nTo configure AWS Cognito User Pool authentication:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingCognito(\n    \"us-west-2_ABC123\",  // User Pool ID (required)\n    \"client123\",         // Client ID (required)\n    \"us-west-2\"         // Region (optional, defaults to stack region)\n  ),\n});\n```\n\n#### JWT Authentication\n\nTo configure custom JWT authentication with your own OpenID Connect (OIDC) provider:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingJWT(\n    \"https://example.com/.well-known/openid-configuration\",  // Discovery URL (required)\n    [\"client1\", \"client2\"],  // Allowed Client IDs (optional)\n    [\"audience1\"]           // Allowed Audiences (optional)\n  ),\n});\n```\n\n**Note**: The discovery URL must end with `/.well-known/openid-configuration`.\n\n#### OAuth Authentication\n\nTo configure OAuth 2.0 authentication:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingOAuth(\n    \"https://github.com/.well-known/openid-configuration\",\n    \"oauth_client_123\",\n  ),\n});\n```\n\n#### Using a Custom IAM Role\n\nInstead of using the auto-created execution role, you can provide your own IAM role with specific permissions:\nThe auto-created role includes all necessary baseline permissions for ECR access, CloudWatch logging, and X-Ray tracing. When providing a custom role, ensure these permissions are included.\n\n### Runtime Network Configuration\n\nThe AgentCore Runtime supports two network modes for deployment:\n\n#### Public Network Mode (Default)\n\nBy default, runtimes are deployed in PUBLIC network mode, which provides internet access suitable for less sensitive or open-use scenarios:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Explicitly using public network (this is the default)\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  networkConfiguration: agentcore.RuntimeNetworkConfiguration.usingPublicNetwork(),\n});\n```\n\n#### VPC Network Mode\n\nFor enhanced security and network isolation, you can deploy your runtime within a VPC:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Create or use an existing VPC\nconst vpc = new ec2.Vpc(this, 'MyVpc', {\n  maxAzs: 2,\n});\n\n// Configure runtime with VPC\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  networkConfiguration: agentcore.RuntimeNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n    vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },\n    // Optionally specify security groups, or one will be created automatically\n    // securityGroups: [mySecurityGroup],\n  }),\n});\n```\n\n#### Managing Security Groups with VPC Configuration\n\nWhen using VPC mode, the Runtime implements `ec2.IConnectable`, allowing you to manage network access using the `connections` property:\n\n```typescript\n\nconst vpc = new ec2.Vpc(this, 'MyVpc', {\n  maxAzs: 2,\n});\n\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Create runtime with VPC configuration\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  networkConfiguration: agentcore.RuntimeNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n    vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },\n  }),\n});\n\n// Now you can manage network access using the connections property\n// Allow inbound HTTPS traffic from a specific security group\nconst webServerSecurityGroup = new ec2.SecurityGroup(this, 'WebServerSG', { vpc });\nruntime.connections.allowFrom(webServerSecurityGroup, ec2.Port.tcp(443), 'Allow HTTPS from web servers');\n\n// Allow outbound connections to a database\nconst databaseSecurityGroup = new ec2.SecurityGroup(this, 'DatabaseSG', { vpc });\nruntime.connections.allowTo(databaseSecurityGroup, ec2.Port.tcp(5432), 'Allow PostgreSQL connection');\n\n// Allow outbound HTTPS to anywhere (for external API calls)\nruntime.connections.allowToAnyIpv4(ec2.Port.tcp(443), 'Allow HTTPS outbound');\n```\n\n## Browser\n\nThe Amazon Bedrock AgentCore Browser provides a secure, cloud-based browser that enables AI agents to interact with websites. It includes security features such as session isolation, built-in observability through live viewing, CloudTrail logging, and session replay capabilities.\n\nAdditional information about the browser tool can be found in the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-tool.html)\n\n### Browser Network modes\n\nThe Browser construct supports the following network modes:\n\n1. **Public Network Mode** (`BrowserNetworkMode.usingPublicNetwork()`) - Default\n\n   - Allows internet access for web browsing and external API calls\n   - Suitable for scenarios where agents need to interact with publicly available websites\n   - Enables full web browsing capabilities\n   - VPC mode is not supported with this option\n\n2. **VPC (Virtual Private Cloud)** (`BrowserNetworkMode.usingVpc()`)\n\n   - Select whether to run the browser in a virtual private cloud (VPC).\n   - By configuring VPC connectivity, you enable secure access to private resources such as databases, internal APIs, and services within your VPC.\n\n    While the VPC itself is mandatory, these are optional:\n    - Subnets - if not provided, CDK will select appropriate subnets from the VPC\n    - Security Groups - if not provided, CDK will create a default security group\n    - Specific subnet selection criteria - you can let CDK choose automatically\n\nFor more information on VPC connectivity for Amazon Bedrock AgentCore Browser, please refer to the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agentcore-vpc.html).\n\n### Browser Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `browserCustomName` | `string` | Yes | The name of the browser. Must start with a letter and can be up to 48 characters long. Pattern: `[a-zA-Z][a-zA-Z0-9_]{0,47}` |\n| `description` | `string` | No | Optional description for the browser. Can have up to 200 characters |\n| `networkConfiguration` | `BrowserNetworkConfiguration` | No | Network configuration for browser. Defaults to PUBLIC network mode |\n| `recordingConfig` | `RecordingConfig` | No | Recording configuration for browser. Defaults to no recording |\n| `executionRole` | `iam.IRole` | No | The IAM role that provides permissions for the browser to access AWS services. A new role will be created if not provided |\n| `tags` | `{ [key: string]: string }` | No | Tags to apply to the browser resource |\n\n### Basic Browser Creation\n\n```typescript fixture=default\n// Create a basic browser with public network access\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"A browser for web automation\",\n});\n```\n\n### Browser with Tags\n\n```typescript fixture=default\n// Create a browser with custom tags\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"A browser for web automation with tags\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  tags: {\n    Environment: \"Production\",\n    Team: \"AI/ML\",\n    Project: \"AgentCore\",\n  },\n});\n```\n\n### Browser with VPC\n\n```typescript fixture=default\nconst browser = new agentcore.BrowserCustom(this, 'BrowserVpcWithRecording', {\n  browserCustomName: 'browser_recording',\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: new ec2.Vpc(this, 'VPC', { restrictDefaultSecurityGroup: false }),\n  }),\n});\n```\n\nBrowser exposes a [connections](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Connections.html) property. This property returns a connections object, which simplifies the process of defining and managing ingress and egress rules for security groups in your AWS CDK applications. Instead of directly manipulating security group rules, you interact with the Connections object of a construct, which then translates your connectivity requirements into the appropriate security group rules. For instance:\n\n```typescript fixture=default\nconst vpc = new ec2.Vpc(this, 'testVPC');\n\nconst browser = new agentcore.BrowserCustom(this, 'test-browser', {\n  browserCustomName: 'test_browser',\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n  }),\n});\n\nbrowser.connections.addSecurityGroup(new ec2.SecurityGroup(this, 'AdditionalGroup', { vpc }));\n```\n\nSo security groups can be added after the browser construct creation. You can use methods like allowFrom() and allowTo() to grant ingress access to/egress access from a specified peer over a given portRange. The Connections object automatically adds the necessary ingress or egress rules to the security group(s) associated with the calling construct.\n\n### Browser with Recording Configuration\n\n```typescript fixture=default\n// Create an S3 bucket for recordings\nconst recordingBucket = new s3.Bucket(this, \"RecordingBucket\", {\n  bucketName: \"my-browser-recordings\",\n  removalPolicy: RemovalPolicy.DESTROY, // For demo purposes\n});\n\n// Create browser with recording enabled\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser with recording enabled\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  recordingConfig: {\n    enabled: true,\n    s3Location: {\n      bucketName: recordingBucket.bucketName,\n      objectKey: \"browser-recordings/\",\n    },\n  },\n});\n```\n\n### Browser with Custom Execution Role\n\n```typescript fixture=default\n// Create a custom execution role\nconst executionRole = new iam.Role(this, \"BrowserExecutionRole\", {\n  assumedBy: new iam.ServicePrincipal(\"bedrock-agentcore.amazonaws.com\"),\n  managedPolicies: [\n    iam.ManagedPolicy.fromAwsManagedPolicyName(\"AmazonBedrockAgentCoreBrowserExecutionRolePolicy\"),\n  ],\n});\n\n// Create browser with custom execution role\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser with custom execution role\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  executionRole: executionRole,\n});\n```\n\n### Browser with S3 Recording and Permissions\n\n```typescript fixture=default\n// Create an S3 bucket for recordings\nconst recordingBucket = new s3.Bucket(this, \"RecordingBucket\", {\n  bucketName: \"my-browser-recordings\",\n  removalPolicy: RemovalPolicy.DESTROY, // For demo purposes\n});\n\n// Create browser with recording enabled\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser with recording enabled\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  recordingConfig: {\n    enabled: true,\n    s3Location: {\n      bucketName: recordingBucket.bucketName,\n      objectKey: \"browser-recordings/\",\n    },\n  },\n});\n\n// The browser construct automatically grants S3 permissions to the execution role\n// when recording is enabled, so no additional IAM configuration is needed\n```\n\n### Browser IAM Permissions\n\nThe Browser construct provides convenient methods for granting IAM permissions:\n\n```typescript fixture=default\n// Create a browser\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser for web automation\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n});\n\n// Create a role that needs access to the browser\nconst userRole = new iam.Role(this, \"UserRole\", {\n  assumedBy: new iam.ServicePrincipal(\"lambda.amazonaws.com\"),\n});\n\n// Grant read permissions (Get and List actions)\nbrowser.grantRead(userRole);\n\n// Grant use permissions (Start, Update, Stop actions)\nbrowser.grantUse(userRole);\n\n// Grant specific custom permissions\nbrowser.grant(userRole, \"bedrock-agentcore:GetBrowserSession\");\n```\n\n## Code Interpreter\n\nThe Amazon Bedrock AgentCore Code Interpreter enables AI agents to write and execute code securely in sandbox environments, enhancing their accuracy and expanding their ability to solve complex end-to-end tasks. This is critical in Agentic AI applications where the agents may execute arbitrary code that can lead to data compromise or security risks. The AgentCore Code Interpreter tool provides secure code execution, which helps you avoid running into these issues.\n\nFor more information about code interpreter, please refer to the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html)\n\n### Code Interpreter Network Modes\n\nThe Code Interpreter construct supports the following network modes:\n\n1. **Public Network Mode** (`CodeInterpreterNetworkMode.usingPublicNetwork()`) - Default\n\n   - Allows internet access for package installation and external API calls\n   - Suitable for development and testing environments\n   - Enables downloading Python packages from PyPI\n\n2. **Sandbox Network Mode** (`CodeInterpreterNetworkMode.usingSandboxNetwork()`)\n   - Isolated network environment with no internet access\n   - Suitable for production environments with strict security requirements\n   - Only allows access to pre-installed packages and local resources\n\n3. **VPC (Virtual Private Cloud)** (`CodeInterpreterNetworkMode.usingVpc()`)\n   - Select whether to run the browser in a virtual private cloud (VPC).\n   - By configuring VPC connectivity, you enable secure access to private resources such as databases, internal APIs, and services within your VPC.\n\n    While the VPC itself is mandatory, these are optional:\n    - Subnets - if not provided, CDK will select appropriate subnets from the VPC\n    - Security Groups - if not provided, CDK will create a default security group\n    - Specific subnet selection criteria - you can let CDK choose automatically\n\nFor more information on VPC connectivity for Amazon Bedrock AgentCore Browser, please refer to the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agentcore-vpc.html).\n\n### Code Interpreter Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `codeInterpreterCustomName` | `string` | Yes | The name of the code interpreter. Must start with a letter and can be up to 48 characters long. Pattern: `[a-zA-Z][a-zA-Z0-9_]{0,47}` |\n| `description` | `string` | No | Optional description for the code interpreter. Can have up to 200 characters |\n| `executionRole` | `iam.IRole` | No | The IAM role that provides permissions for the code interpreter to access AWS services. A new role will be created if not provided |\n| `networkConfiguration` | `CodeInterpreterNetworkConfiguration` | No | Network configuration for code interpreter. Defaults to PUBLIC network mode |\n| `tags` | `{ [key: string]: string }` | No | Tags to apply to the code interpreter resource |\n\n### Basic Code Interpreter Creation\n\n```typescript fixture=default\n// Create a basic code interpreter with public network access\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_code_interpreter\",\n  description: \"A code interpreter for Python execution\",\n});\n```\n\n### Code Interpreter with VPC\n\n```typescript fixture=default\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: new ec2.Vpc(this, 'VPC', { restrictDefaultSecurityGroup: false }),\n  }),\n});\n```\n\nCode Interpreter exposes a [connections](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Connections.html) property. This property returns a connections object, which simplifies the process of defining and managing ingress and egress rules for security groups in your AWS CDK applications. Instead of directly manipulating security group rules, you interact with the Connections object of a construct, which then translates your connectivity requirements into the appropriate security group rules. For instance:\n\n```typescript fixture=default\nconst vpc = new ec2.Vpc(this, 'testVPC');\n\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n  }),\n});\n\ncodeInterpreter.connections.addSecurityGroup(new ec2.SecurityGroup(this, 'AdditionalGroup', { vpc }));\n```\n\nSo security groups can be added after the browser construct creation. You can use methods like allowFrom() and allowTo() to grant ingress access to/egress access from a specified peer over a given portRange. The Connections object automatically adds the necessary ingress or egress rules to the security group(s) associated with the calling construct.\n\n### Code Interpreter with Sandbox Network Mode\n\n```typescript fixture=default\n// Create code interpreter with sandbox network mode (isolated)\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingSandboxNetwork(),\n});\n```\n\n### Code Interpreter with Custom Execution Role\n\n```typescript fixture=default\n// Create a custom execution role\nconst executionRole = new iam.Role(this, \"CodeInterpreterExecutionRole\", {\n  assumedBy: new iam.ServicePrincipal(\"bedrock-agentcore.amazonaws.com\"),\n});\n\n// Create code interpreter with custom execution role\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_code_interpreter\",\n  description: \"Code interpreter with custom execution role\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingPublicNetwork(),\n  executionRole: executionRole,\n});\n```\n\n### Code Interpreter IAM Permissions\n\nThe Code Interpreter construct provides convenient methods for granting IAM permissions:\n\n```typescript fixture=default\n// Create a code interpreter\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_code_interpreter\",\n  description: \"Code interpreter for Python execution\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingPublicNetwork(),\n});\n\n// Create a role that needs access to the code interpreter\nconst userRole = new iam.Role(this, \"UserRole\", {\n  assumedBy: new iam.ServicePrincipal(\"lambda.amazonaws.com\"),\n});\n\n// Grant read permissions (Get and List actions)\ncodeInterpreter.grantRead(userRole);\n\n// Grant use permissions (Start, Invoke, Stop actions)\ncodeInterpreter.grantUse(userRole);\n\n// Grant specific custom permissions\ncodeInterpreter.grant(userRole, \"bedrock-agentcore:GetCodeInterpreterSession\");\n```\n\n### Code interpreter with tags\n\n```typescript fixture=default\n// Create code interpreter with sandbox network mode (isolated)\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingPublicNetwork(),\n  tags: {\n    Environment: \"Production\",\n    Team: \"AI/ML\",\n    Project: \"AgentCore\",\n  },\n});\n```\n"
+    "markdown": "# Amazon Bedrock AgentCore Construct Library\n\n<!--BEGIN STABILITY BANNER-->\n\n---\n\n![cdk-constructs: Experimental](https://img.shields.io/badge/cdk--constructs-experimental-important.svg?style=for-the-badge)\n\n> The APIs of higher level constructs in this module are experimental and under active development.\n> They are subject to non-backward compatible changes or removal in any future version. These are\n> not subject to the [Semantic Versioning](https://semver.org/) model and breaking changes will be\n> announced in the release notes. This means that while you may use them, you may need to update\n> your source code when upgrading to a newer version of this package.\n\n---\n\n<!--END STABILITY BANNER-->\n\n| **Language**                                                                                   | **Package**                             |\n| :--------------------------------------------------------------------------------------------- | --------------------------------------- |\n| ![Typescript Logo](https://docs.aws.amazon.com/cdk/api/latest/img/typescript32.png) TypeScript | `@aws-cdk/aws-bedrock-agentcore-alpha` |\n\n[Amazon Bedrock AgentCore](https://aws.amazon.com/bedrock/agentcore/) enables you to deploy and operate highly capable AI agents securely, at scale. It offers infrastructure purpose-built for dynamic agent workloads, powerful tools to enhance agents, and essential controls for real-world deployment. AgentCore services can be used together or independently and work with any framework including CrewAI, LangGraph, LlamaIndex, and Strands Agents, as well as any foundation model in or outside of Amazon Bedrock, giving you ultimate flexibility. AgentCore eliminates the undifferentiated heavy lifting of building specialized agent infrastructure, so you can accelerate agents to production.\n\nThis construct library facilitates the deployment of Bedrock AgentCore primitives, enabling you to create sophisticated AI applications that can interact with your systems and data sources.\n\n## Table of contents\n\n- [AgentCore Runtime](#agentcore-runtime)\n  - [Runtime Versioning](#runtime-versioning)\n  - [Runtime Endpoints](#runtime-endpoints)\n  - [AgentCore Runtime Properties](#agentcore-runtime-properties)\n  - [Runtime Endpoint Properties](#runtime-endpoint-properties)\n  - [Creating a Runtime](#creating-a-runtime)\n    - [Option 1: Use an existing image in ECR](#option-1-use-an-existing-image-in-ecr)\n    - [Managing Endpoints and Versions](#managing-endpoints-and-versions)\n    - [Option 2: Use a local asset](#option-2-use-a-local-asset)\n- [Browser Custom tool](#browser)\n  - [Browser properties](#browser-properties)\n  - [Browser Network modes](#browser-network-modes)\n  - [Basic Browser Creation](#basic-browser-creation)\n  - [Browser IAM permissions](#browser-iam-permissions)\n- [Code Interpreter Custom tool](#code-interpreter)\n  - [Code Interpreter properties](#code-interpreter-properties)\n  - [Code Interpreter Network Modes](#code-interpreter-network-modes)\n  - [Basic Code Interpreter Creation](#basic-code-interpreter-creation)\n  - [Code Interpreter IAM permissions](#code-interpreter-iam-permissions)\n- [Memory](#memory)\n  - [Memory properties](#memory-properties)\n  - [Basic Memory Creation](#basic-memory-creation)\n  - [LTM Memory Extraction Stategies](#ltm-memory-extraction-stategies)\n  - [Memory Strategy Methods](#memory-strategy-methods)\n\n\n## AgentCore Runtime\n\nThe AgentCore Runtime construct enables you to deploy containerized agents on Amazon Bedrock AgentCore.\nThis L2 construct simplifies runtime creation just pass your ECR repository name\nand the construct handles all the configuration with sensible defaults.\n\n### Runtime Endpoints\n\nEndpoints provide a stable way to invoke specific versions of your agent runtime, enabling controlled deployments across different environments.\nWhen you create an agent runtime, Amazon Bedrock AgentCore automatically creates a \"DEFAULT\" endpoint which always points to the latest version\nof runtime.\n\nYou can create additional endpoints in two ways:\n\n1. **Using Runtime.addEndpoint()** - Convenient method when creating endpoints alongside the runtime.\n2. **Using RuntimeEndpoint** - Flexible approach for existing runtimes.\n\nFor example, you might keep a \"production\" endpoint on a stable version while testing newer versions\nthrough a \"staging\" endpoint. This separation allows you to test changes thoroughly before promoting them\nto production by simply updating the endpoint to point to the newer version.\n\n### AgentCore Runtime Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `runtimeName` | `string` | Yes | The name of the agent runtime. Valid characters are a-z, A-Z, 0-9, _ (underscore). Must start with a letter and can be up to 48 characters long |\n| `agentRuntimeArtifact` | `AgentRuntimeArtifact` | Yes | The artifact configuration for the agent runtime containing the container configuration with ECR URI |\n| `executionRole` | `iam.IRole` | No | The IAM role that provides permissions for the agent runtime. If not provided, a role will be created automatically |\n| `networkConfiguration` | `NetworkConfiguration` | No | Network configuration for the agent runtime. Defaults to `RuntimeNetworkConfiguration.usingPublicNetwork()` |\n| `description` | `string` | No | Optional description for the agent runtime |\n| `protocolConfiguration` | `ProtocolType` | No | Protocol configuration for the agent runtime. Defaults to `ProtocolType.HTTP` |\n| `authorizerConfiguration` | `RuntimeAuthorizerConfiguration` | No | Authorizer configuration for the agent runtime. Use `RuntimeAuthorizerConfiguration` static methods to create configurations for IAM, Cognito, JWT, or OAuth authentication |\n| `environmentVariables` | `{ [key: string]: string }` | No | Environment variables for the agent runtime. Maximum 50 environment variables |\n| `tags` | `{ [key: string]: string }` | No | Tags for the agent runtime. A list of key:value pairs of tags to apply to this Runtime resource |\n\n### Runtime Endpoint Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `endpointName` | `string` | Yes | The name of the runtime endpoint. Valid characters are a-z, A-Z, 0-9, _ (underscore). Must start with a letter and can be up to 48 characters long |\n| `agentRuntimeId` | `string` | Yes | The Agent Runtime ID for this endpoint |\n| `agentRuntimeVersion` | `string` | Yes | The Agent Runtime version for this endpoint. Must be between 1 and 5 characters long.|\n| `description` | `string` | No | Optional description for the runtime endpoint |\n| `tags` | `{ [key: string]: string }` | No | Tags for the runtime endpoint |\n\n### Creating a Runtime\n\n#### Option 1: Use an existing image in ECR\n\nReference an image available within ECR.\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\n// The runtime by default create ECR permission only for the repository available in the account the stack is being deployed\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Create runtime using the built image\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact\n});\n```\n\nTo grant the runtime permission to invoke a Bedrock model or inference profile:\n\n```typescript fixture=default\n// Note: This example uses @aws-cdk/aws-bedrock-alpha which must be installed separately\ndeclare const runtime: agentcore.Runtime;\n\n// Create a cross-region inference profile for Claude 3.7 Sonnet\nconst inferenceProfile = bedrock.CrossRegionInferenceProfile.fromConfig({\n  geoRegion: bedrock.CrossRegionInferenceProfileRegion.US,\n  model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_7_SONNET_V1_0\n});\n\n// Grant the runtime permission to invoke the inference profile\ninferenceProfile.grantInvoke(runtime);\n```\n\n#### Option 2: Use a local asset\n\nReference a local directory containing a Dockerfile.\nImages are built from a local Docker context directory (with a Dockerfile), uploaded to Amazon Elastic Container Registry (ECR)\nby the CDK toolkit,and can be naturally referenced in your CDK app .\n\n```typescript\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromAsset(\n  path.join(__dirname, \"path to agent dockerfile directory\")\n);\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n});\n```\n\n### Runtime Versioning\n\nAmazon Bedrock AgentCore automatically manages runtime versioning to ensure safe deployments and rollback capabilities.\nWhen you create an agent runtime, AgentCore automatically creates version 1 (V1). Each subsequent update to the\nruntime configuration (such as updating the container image, modifying network settings, or changing protocol configurations)\ncreates a new immutable version. These versions contain complete, self-contained configurations that can be referenced by endpoints,\nallowing you to maintain different versions for different environments or gradually roll out updates.\n\n#### Managing Endpoints and Versions\n\nAmazon Bedrock AgentCore automatically manages runtime versioning to provide safe deployments and rollback capabilities. You can follow\nthe steps below to understand how to use versioning with runtime for controlled deployments across different environments.\n\n##### Step 1: Initial Deployment\n\nWhen you first create an agent runtime, AgentCore automatically creates Version 1 of your runtime. At this point, a DEFAULT endpoint is\nautomatically created that points to Version 1. This DEFAULT endpoint serves as the main access point for your runtime.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\"),\n});\n```\n\n##### Step 2: Creating Custom Endpoints\n\nAfter the initial deployment, you can create additional endpoints for different environments. For example, you might create a \"production\"\nendpoint that explicitly points to Version 1. This allows you to maintain stable access points for specific environments while keeping the\nflexibility to test newer versions elsewhere.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\"),\n});\n\nconst prodEndpoint = runtime.addEndpoint(\"production\", {\n  version: \"1\",\n  description: \"Stable production endpoint - pinned to v1\"\n});\n```\n\n##### Step 3: Runtime Update Deployment\n\nWhen you update the runtime configuration (such as updating the container image, modifying network settings, or changing protocol\nconfigurations), AgentCore automatically creates a new version (Version 2). Upon this update:\n\n- Version 2 is created automatically with the new configuration\n- The DEFAULT endpoint automatically updates to point to Version 2\n- Any explicitly pinned endpoints (like the production endpoint) remain on their specified versions\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst agentRuntimeArtifactNew = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v2.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifactNew,\n});\n```\n\n##### Step 4: Testing with Staging Endpoints\n\nOnce Version 2 exists, you can create a staging endpoint that points to the new version. This staging endpoint allows you to test the\nnew version in a controlled environment before promoting it to production. This separation ensures that production traffic continues\nto use the stable version while you validate the new version.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst agentRuntimeArtifactNew = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v2.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifactNew,\n});\n\nconst stagingEndpoint = runtime.addEndpoint(\"staging\", {\n  version: \"2\",\n  description: \"Staging environment for testing new version\"\n});\n```\n\n##### Step 5: Promoting to Production\n\nAfter thoroughly testing the new version through the staging endpoint, you can update the production endpoint to point to Version 2.\nThis controlled promotion process ensures that you can validate changes before they affect production traffic.\n\n```ts\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\n\nconst agentRuntimeArtifactNew = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v2.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifactNew,\n});\n\nconst prodEndpoint = runtime.addEndpoint(\"production\", {\n  version: \"2\",  // New version added here\n  description: \"Stable production endpoint\"\n});\n```\n\n### Creating Standalone Runtime Endpoints\n\nRuntimeEndpoint can also be created as a standalone resource.\n\n#### Example: Creating an endpoint for an existing runtime\n\n```typescript\n// Reference an existing runtime by its ID\nconst existingRuntimeId = \"abc123-runtime-id\"; // The ID of an existing runtime\n\n// Create a standalone endpoint\nconst endpoint = new agentcore.RuntimeEndpoint(this, \"MyEndpoint\", {\n  endpointName: \"production\",\n  agentRuntimeId: existingRuntimeId,\n  agentRuntimeVersion: \"1\", // Specify which version to use\n  description: \"Production endpoint for existing runtime\"\n});\n```\n\n### Runtime Authentication Configuration\n\nThe AgentCore Runtime supports multiple authentication modes to secure access to your agent endpoints. Authentication is configured during runtime creation using the `RuntimeAuthorizerConfiguration` class's static factory methods.\n\n#### IAM Authentication (Default)\n\nIAM authentication is the default mode, when no authorizerConfiguration is set then the underlying service use IAM.\n\n#### Cognito Authentication\n\nTo configure AWS Cognito User Pool authentication:\n\n```typescript\ndeclare const userPool: cognito.UserPool;\ndeclare const userPoolClient: cognito.UserPoolClient;\ndeclare const anotherUserPoolClient: cognito.UserPoolClient;\n\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingCognito(\n    userPool, // User Pool (required)\n    [userPoolClient, anotherUserPoolClient], // User Pool Clients\n  ),\n});\n```\n\n#### JWT Authentication\n\nTo configure custom JWT authentication with your own OpenID Connect (OIDC) provider:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingJWT(\n    \"https://example.com/.well-known/openid-configuration\",  // Discovery URL (required)\n    [\"client1\", \"client2\"],  // Allowed Client IDs (optional)\n    [\"audience1\"]           // Allowed Audiences (optional)\n  ),\n});\n```\n\n**Note**: The discovery URL must end with `/.well-known/openid-configuration`.\n\n#### OAuth Authentication\n\nTo configure OAuth 2.0 authentication:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingOAuth(\n    \"https://github.com/.well-known/openid-configuration\",\n    \"oauth_client_123\",\n  ),\n});\n```\n\n#### Using a Custom IAM Role\n\nInstead of using the auto-created execution role, you can provide your own IAM role with specific permissions:\nThe auto-created role includes all necessary baseline permissions for ECR access, CloudWatch logging, and X-Ray tracing. When providing a custom role, ensure these permissions are included.\n\n### Runtime Network Configuration\n\nThe AgentCore Runtime supports two network modes for deployment:\n\n#### Public Network Mode (Default)\n\nBy default, runtimes are deployed in PUBLIC network mode, which provides internet access suitable for less sensitive or open-use scenarios:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Explicitly using public network (this is the default)\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  networkConfiguration: agentcore.RuntimeNetworkConfiguration.usingPublicNetwork(),\n});\n```\n\n#### VPC Network Mode\n\nFor enhanced security and network isolation, you can deploy your runtime within a VPC:\n\n```typescript\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Create or use an existing VPC\nconst vpc = new ec2.Vpc(this, 'MyVpc', {\n  maxAzs: 2,\n});\n\n// Configure runtime with VPC\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  networkConfiguration: agentcore.RuntimeNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n    vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },\n    // Optionally specify security groups, or one will be created automatically\n    // securityGroups: [mySecurityGroup],\n  }),\n});\n```\n\n#### Managing Security Groups with VPC Configuration\n\nWhen using VPC mode, the Runtime implements `ec2.IConnectable`, allowing you to manage network access using the `connections` property:\n\n```typescript\n\nconst vpc = new ec2.Vpc(this, 'MyVpc', {\n  maxAzs: 2,\n});\n\nconst repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\n// Create runtime with VPC configuration\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  networkConfiguration: agentcore.RuntimeNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n    vpcSubnets: { subnetType: ec2.SubnetType.PRIVATE_WITH_EGRESS },\n  }),\n});\n\n// Now you can manage network access using the connections property\n// Allow inbound HTTPS traffic from a specific security group\nconst webServerSecurityGroup = new ec2.SecurityGroup(this, 'WebServerSG', { vpc });\nruntime.connections.allowFrom(webServerSecurityGroup, ec2.Port.tcp(443), 'Allow HTTPS from web servers');\n\n// Allow outbound connections to a database\nconst databaseSecurityGroup = new ec2.SecurityGroup(this, 'DatabaseSG', { vpc });\nruntime.connections.allowTo(databaseSecurityGroup, ec2.Port.tcp(5432), 'Allow PostgreSQL connection');\n\n// Allow outbound HTTPS to anywhere (for external API calls)\nruntime.connections.allowToAnyIpv4(ec2.Port.tcp(443), 'Allow HTTPS outbound');\n```\n\n## Browser\n\nThe Amazon Bedrock AgentCore Browser provides a secure, cloud-based browser that enables AI agents to interact with websites. It includes security features such as session isolation, built-in observability through live viewing, CloudTrail logging, and session replay capabilities.\n\nAdditional information about the browser tool can be found in the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-tool.html)\n\n### Browser Network modes\n\nThe Browser construct supports the following network modes:\n\n1. **Public Network Mode** (`BrowserNetworkMode.usingPublicNetwork()`) - Default\n\n   - Allows internet access for web browsing and external API calls\n   - Suitable for scenarios where agents need to interact with publicly available websites\n   - Enables full web browsing capabilities\n   - VPC mode is not supported with this option\n\n2. **VPC (Virtual Private Cloud)** (`BrowserNetworkMode.usingVpc()`)\n\n   - Select whether to run the browser in a virtual private cloud (VPC).\n   - By configuring VPC connectivity, you enable secure access to private resources such as databases, internal APIs, and services within your VPC.\n\n    While the VPC itself is mandatory, these are optional:\n    - Subnets - if not provided, CDK will select appropriate subnets from the VPC\n    - Security Groups - if not provided, CDK will create a default security group\n    - Specific subnet selection criteria - you can let CDK choose automatically\n\nFor more information on VPC connectivity for Amazon Bedrock AgentCore Browser, please refer to the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agentcore-vpc.html).\n\n### Browser Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `browserCustomName` | `string` | Yes | The name of the browser. Must start with a letter and can be up to 48 characters long. Pattern: `[a-zA-Z][a-zA-Z0-9_]{0,47}` |\n| `description` | `string` | No | Optional description for the browser. Can have up to 200 characters |\n| `networkConfiguration` | `BrowserNetworkConfiguration` | No | Network configuration for browser. Defaults to PUBLIC network mode |\n| `recordingConfig` | `RecordingConfig` | No | Recording configuration for browser. Defaults to no recording |\n| `executionRole` | `iam.IRole` | No | The IAM role that provides permissions for the browser to access AWS services. A new role will be created if not provided |\n| `tags` | `{ [key: string]: string }` | No | Tags to apply to the browser resource |\n\n### Basic Browser Creation\n\n```typescript fixture=default\n// Create a basic browser with public network access\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"A browser for web automation\",\n});\n```\n\n### Browser with Tags\n\n```typescript fixture=default\n// Create a browser with custom tags\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"A browser for web automation with tags\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  tags: {\n    Environment: \"Production\",\n    Team: \"AI/ML\",\n    Project: \"AgentCore\",\n  },\n});\n```\n\n### Browser with VPC\n\n```typescript fixture=default\nconst browser = new agentcore.BrowserCustom(this, 'BrowserVpcWithRecording', {\n  browserCustomName: 'browser_recording',\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: new ec2.Vpc(this, 'VPC', { restrictDefaultSecurityGroup: false }),\n  }),\n});\n```\n\nBrowser exposes a [connections](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Connections.html) property. This property returns a connections object, which simplifies the process of defining and managing ingress and egress rules for security groups in your AWS CDK applications. Instead of directly manipulating security group rules, you interact with the Connections object of a construct, which then translates your connectivity requirements into the appropriate security group rules. For instance:\n\n```typescript fixture=default\nconst vpc = new ec2.Vpc(this, 'testVPC');\n\nconst browser = new agentcore.BrowserCustom(this, 'test-browser', {\n  browserCustomName: 'test_browser',\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n  }),\n});\n\nbrowser.connections.addSecurityGroup(new ec2.SecurityGroup(this, 'AdditionalGroup', { vpc }));\n```\n\nSo security groups can be added after the browser construct creation. You can use methods like allowFrom() and allowTo() to grant ingress access to/egress access from a specified peer over a given portRange. The Connections object automatically adds the necessary ingress or egress rules to the security group(s) associated with the calling construct.\n\n### Browser with Recording Configuration\n\n```typescript fixture=default\n// Create an S3 bucket for recordings\nconst recordingBucket = new s3.Bucket(this, \"RecordingBucket\", {\n  bucketName: \"my-browser-recordings\",\n  removalPolicy: RemovalPolicy.DESTROY, // For demo purposes\n});\n\n// Create browser with recording enabled\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser with recording enabled\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  recordingConfig: {\n    enabled: true,\n    s3Location: {\n      bucketName: recordingBucket.bucketName,\n      objectKey: \"browser-recordings/\",\n    },\n  },\n});\n```\n\n### Browser with Custom Execution Role\n\n```typescript fixture=default\n// Create a custom execution role\nconst executionRole = new iam.Role(this, \"BrowserExecutionRole\", {\n  assumedBy: new iam.ServicePrincipal(\"bedrock-agentcore.amazonaws.com\"),\n  managedPolicies: [\n    iam.ManagedPolicy.fromAwsManagedPolicyName(\"AmazonBedrockAgentCoreBrowserExecutionRolePolicy\"),\n  ],\n});\n\n// Create browser with custom execution role\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser with custom execution role\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  executionRole: executionRole,\n});\n```\n\n### Browser with S3 Recording and Permissions\n\n```typescript fixture=default\n// Create an S3 bucket for recordings\nconst recordingBucket = new s3.Bucket(this, \"RecordingBucket\", {\n  bucketName: \"my-browser-recordings\",\n  removalPolicy: RemovalPolicy.DESTROY, // For demo purposes\n});\n\n// Create browser with recording enabled\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser with recording enabled\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n  recordingConfig: {\n    enabled: true,\n    s3Location: {\n      bucketName: recordingBucket.bucketName,\n      objectKey: \"browser-recordings/\",\n    },\n  },\n});\n\n// The browser construct automatically grants S3 permissions to the execution role\n// when recording is enabled, so no additional IAM configuration is needed\n```\n\n### Browser IAM Permissions\n\nThe Browser construct provides convenient methods for granting IAM permissions:\n\n```typescript fixture=default\n// Create a browser\nconst browser = new agentcore.BrowserCustom(this, \"MyBrowser\", {\n  browserCustomName: \"my_browser\",\n  description: \"Browser for web automation\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingPublicNetwork(),\n});\n\n// Create a role that needs access to the browser\nconst userRole = new iam.Role(this, \"UserRole\", {\n  assumedBy: new iam.ServicePrincipal(\"lambda.amazonaws.com\"),\n});\n\n// Grant read permissions (Get and List actions)\nbrowser.grantRead(userRole);\n\n// Grant use permissions (Start, Update, Stop actions)\nbrowser.grantUse(userRole);\n\n// Grant specific custom permissions\nbrowser.grant(userRole, \"bedrock-agentcore:GetBrowserSession\");\n```\n\n## Code Interpreter\n\nThe Amazon Bedrock AgentCore Code Interpreter enables AI agents to write and execute code securely in sandbox environments, enhancing their accuracy and expanding their ability to solve complex end-to-end tasks. This is critical in Agentic AI applications where the agents may execute arbitrary code that can lead to data compromise or security risks. The AgentCore Code Interpreter tool provides secure code execution, which helps you avoid running into these issues.\n\nFor more information about code interpreter, please refer to the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/code-interpreter-tool.html)\n\n### Code Interpreter Network Modes\n\nThe Code Interpreter construct supports the following network modes:\n\n1. **Public Network Mode** (`CodeInterpreterNetworkMode.usingPublicNetwork()`) - Default\n\n   - Allows internet access for package installation and external API calls\n   - Suitable for development and testing environments\n   - Enables downloading Python packages from PyPI\n\n2. **Sandbox Network Mode** (`CodeInterpreterNetworkMode.usingSandboxNetwork()`)\n   - Isolated network environment with no internet access\n   - Suitable for production environments with strict security requirements\n   - Only allows access to pre-installed packages and local resources\n\n3. **VPC (Virtual Private Cloud)** (`CodeInterpreterNetworkMode.usingVpc()`)\n   - Select whether to run the browser in a virtual private cloud (VPC).\n   - By configuring VPC connectivity, you enable secure access to private resources such as databases, internal APIs, and services within your VPC.\n\n    While the VPC itself is mandatory, these are optional:\n    - Subnets - if not provided, CDK will select appropriate subnets from the VPC\n    - Security Groups - if not provided, CDK will create a default security group\n    - Specific subnet selection criteria - you can let CDK choose automatically\n\nFor more information on VPC connectivity for Amazon Bedrock AgentCore Browser, please refer to the [official documentation](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agentcore-vpc.html).\n\n### Code Interpreter Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `codeInterpreterCustomName` | `string` | Yes | The name of the code interpreter. Must start with a letter and can be up to 48 characters long. Pattern: `[a-zA-Z][a-zA-Z0-9_]{0,47}` |\n| `description` | `string` | No | Optional description for the code interpreter. Can have up to 200 characters |\n| `executionRole` | `iam.IRole` | No | The IAM role that provides permissions for the code interpreter to access AWS services. A new role will be created if not provided |\n| `networkConfiguration` | `CodeInterpreterNetworkConfiguration` | No | Network configuration for code interpreter. Defaults to PUBLIC network mode |\n| `tags` | `{ [key: string]: string }` | No | Tags to apply to the code interpreter resource |\n\n### Basic Code Interpreter Creation\n\n```typescript fixture=default\n// Create a basic code interpreter with public network access\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_code_interpreter\",\n  description: \"A code interpreter for Python execution\",\n});\n```\n\n### Code Interpreter with VPC\n\n```typescript fixture=default\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: new ec2.Vpc(this, 'VPC', { restrictDefaultSecurityGroup: false }),\n  }),\n});\n```\n\nCode Interpreter exposes a [connections](https://docs.aws.amazon.com/cdk/api/v2/docs/aws-cdk-lib.aws_ec2.Connections.html) property. This property returns a connections object, which simplifies the process of defining and managing ingress and egress rules for security groups in your AWS CDK applications. Instead of directly manipulating security group rules, you interact with the Connections object of a construct, which then translates your connectivity requirements into the appropriate security group rules. For instance:\n\n```typescript fixture=default\nconst vpc = new ec2.Vpc(this, 'testVPC');\n\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.BrowserNetworkConfiguration.usingVpc(this, {\n    vpc: vpc,\n  }),\n});\n\ncodeInterpreter.connections.addSecurityGroup(new ec2.SecurityGroup(this, 'AdditionalGroup', { vpc }));\n```\n\nSo security groups can be added after the browser construct creation. You can use methods like allowFrom() and allowTo() to grant ingress access to/egress access from a specified peer over a given portRange. The Connections object automatically adds the necessary ingress or egress rules to the security group(s) associated with the calling construct.\n\n### Code Interpreter with Sandbox Network Mode\n\n```typescript fixture=default\n// Create code interpreter with sandbox network mode (isolated)\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingSandboxNetwork(),\n});\n```\n\n### Code Interpreter with Custom Execution Role\n\n```typescript fixture=default\n// Create a custom execution role\nconst executionRole = new iam.Role(this, \"CodeInterpreterExecutionRole\", {\n  assumedBy: new iam.ServicePrincipal(\"bedrock-agentcore.amazonaws.com\"),\n});\n\n// Create code interpreter with custom execution role\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_code_interpreter\",\n  description: \"Code interpreter with custom execution role\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingPublicNetwork(),\n  executionRole: executionRole,\n});\n```\n\n### Code Interpreter IAM Permissions\n\nThe Code Interpreter construct provides convenient methods for granting IAM permissions:\n\n```typescript fixture=default\n// Create a code interpreter\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_code_interpreter\",\n  description: \"Code interpreter for Python execution\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingPublicNetwork(),\n});\n\n// Create a role that needs access to the code interpreter\nconst userRole = new iam.Role(this, \"UserRole\", {\n  assumedBy: new iam.ServicePrincipal(\"lambda.amazonaws.com\"),\n});\n\n// Grant read permissions (Get and List actions)\ncodeInterpreter.grantRead(userRole);\n\n// Grant use permissions (Start, Invoke, Stop actions)\ncodeInterpreter.grantUse(userRole);\n\n// Grant specific custom permissions\ncodeInterpreter.grant(userRole, \"bedrock-agentcore:GetCodeInterpreterSession\");\n```\n\n### Code interpreter with tags\n\n```typescript fixture=default\n// Create code interpreter with sandbox network mode (isolated)\nconst codeInterpreter = new agentcore.CodeInterpreterCustom(this, \"MyCodeInterpreter\", {\n  codeInterpreterCustomName: \"my_sandbox_interpreter\",\n  description: \"Code interpreter with isolated network access\",\n  networkConfiguration: agentcore.CodeInterpreterNetworkConfiguration.usingPublicNetwork(),\n  tags: {\n    Environment: \"Production\",\n    Team: \"AI/ML\",\n    Project: \"AgentCore\",\n  },\n});\n```\n\n## Memory\n\nMemory is a critical component of intelligence. While Large Language Models (LLMs) have impressive capabilities, they lack persistent memory across conversations. Amazon Bedrock AgentCore Memory addresses this limitation by providing a managed service that enables AI agents to maintain context over time, remember important facts, and deliver consistent, personalized experiences.\n\nAgentCore Memory operates on two levels:\n\n- **Short-Term Memory**: Immediate conversation context and session-based information that provides continuity within a single interaction or closely related sessions.\n- **Long-Term Memory**: Persistent information extracted and stored across multiple conversations, including facts, preferences, and summaries that enable personalized experiences over time.\n\nWhen you interact with the memory via the `CreateEvent` API, you store interactions in Short-Term Memory (STM) instantly. These interactions can include everything from user messages, assistant responses, to tool actions.\n\nTo write to long-term memory, you need to configure extraction strategies which define how and where to store information from conversations for future use. These strategies are asynchronously processed from raw events after every few turns based on the strategy that was selected. You can't create long term memory records directly, as they are extracted asynchronously by AgentCore Memory.\n\n### Memory Properties\n\n| Name | Type | Required | Description |\n|------|------|----------|-------------|\n| `memoryName` | `string` | Yes | The name of the memory |\n| `expirationDuration` | `Duration` | No | Short-term memory expiration in days (between 7 and 365). Default: 90 days |\n| `description` | `string` | No | Optional description for the memory. Default: no description. |\n| `kmsKey` | `IKey` | No | Custom KMS key to use for encryption. Default: Your data is encrypted with a key that AWS owns and manages for you |\n| `memoryStrategies` | `MemoryStrategyBase[]` | No | Built-in extraction strategies to use for this memory. Default: No extraction strategies (short term memory only) |\n| `executionRole` | `iam.IRole` | No | The IAM role that provides permissions for the memory to access AWS services. Default: A new role will be created. |\n| `tags` | `{ [key: string]: string }` | No | Tags for memory. Default: no tags. |\n\n### Basic Memory Creation\n\nBelow you can find how to configure a simple short-term memory (STM) with no long-term memory extraction strategies.\nNote how you set `expirationDuration`, which defines the time the events will be stored in the short-term memory before they expire.\n\n```typescript fixture=default\n\n// Create a basic memory with default settings, no LTM strategies\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_memory\",\n  description: \"A memory for storing user interactions for a period of 90 days\",\n  expirationDuration: cdk.Duration.days(90),\n});\n```\n\nBasic Memory with Custom KMS Encryption\n\n```typescript fixture=default\n// Create a custom KMS key for encryption\nconst encryptionKey = new kms.Key(this, \"MemoryEncryptionKey\", {\n  enableKeyRotation: true,\n  description: \"KMS key for memory encryption\",\n});\n\n// Create memory with custom encryption\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_encrypted_memory\",\n  description: \"Memory with custom KMS encryption\",\n  expirationDuration: cdk.Duration.days(90),\n  kmsKey: encryptionKey,\n});\n```\n\n### LTM Memory Extraction Stategies\n\nIf you need long-term memory for context recall across sessions, you can setup memory extraction strategies\nto extract the relevant memory from the raw events.\n\nAmazon Bedrock AgentCore Memory has different memory strategies for extracting and organizing information:\n\n- **Summarization**: to summarize interactions to preserve critical context and key insights.\n- **Semantic Memory**: to extract general factual knowledge, concepts and meanings from raw conversations using vector embeddings.\nThis enables similarity-based retrieval of relevant facts and context.\n- **User Preferences**: to extract user behavior patterns from raw conversations.\n\nYou can use built-in extraction strategies for quick setup, or create custom extraction strategies with specific models and prompt templates.\n\n### Memory with Built-in Strategies\n\nThe library provides three built-in LTM strategies. These are default strategies for organizing and extracting memory data,\neach optimized for specific use cases.\n\nFor example: An agent helps multiple users with cloud storage setup. From these conversations,\nsee how each strategy processes users expressing confusion about account connection:\n\n1. **Summarization Strategy** (`MemoryStrategy.usingBuiltInSummarization()`)\nThis strategy compresses conversations into concise overviews, preserving essential context and key insights for quick recall.\nExtracted memory example: Users confused by cloud setup during onboarding.\n\n   - Extracts concise summaries to preserve critical context and key insights\n   - Namespace: `/strategies/{memoryStrategyId}/actors/{actorId}/sessions/{sessionId}`\n\n2. **Semantic Memory Strategy** (`MemoryStrategy.usingBuiltInSemantic()`)\nDistills general facts, concepts, and underlying meanings from raw conversational data, presenting the information in a context-independent format.\nExtracted memory example: In-context learning = task-solving via examples, no training needed.\n\n   - Extracts general factual knowledge, concepts and meanings from raw conversations\n   - Namespace: `/strategies/{memoryStrategyId}/actors/{actorId}`\n\n3. **User Preference Strategy** (`MemoryStrategy.usingBuiltInUserPreference()`)\nCaptures individual preferences, interaction patterns, and personalized settings to enhance future experiences.\nExtracted memory example: User needs clear guidance on cloud storage account connection during onboarding.\n\n   - Extracts user behavior patterns from raw conversations\n   - Namespace: `/strategies/{memoryStrategyId}/actors/{actorId}`\n\n```typescript fixture=default\n// Create memory with built-in strategies\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_memory\",\n  description: \"Memory with built-in strategies\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [\n    agentcore.MemoryStrategy.usingBuiltInSummarization(),\n    agentcore.MemoryStrategy.usingBuiltInSemantic(),\n    agentcore.MemoryStrategy.usingBuiltInUserPreference(),\n  ],\n});\n```\n\nThe name generated for each built in memory strategy is as follows:\n\n- For Summarization: `summary_builtin_cdk001`\n- For Semantic:`semantic_builtin_cdk001>`\n- For User Preferences: `preference_builtin_cdk001`\n\n### Memory with custom Strategies\n\nWith Long-Term Memory, organization is managed through Namespaces.\n\nAn `actor` refers to entity such as end users or agent/user combinations. For example, in a coding support chatbot,\nthe actor is usually the developer asking questions. Using the actor ID helps the system know which user the memory belongs to,\nkeeping each user's data separate and organized.\n\nA `session` is usually a single conversation or interaction period between the user and the AI agent.\nIt groups all related messages and events that happen during that conversation.\n\nA `namespace` is used to logically group and organize long-term memories. It ensures data stays neat, separate, and secure.\n\nWith AgentCore Memory, you need to add a namespace when you define a memory strategy. This namespace helps define where the long-term memory\nwill be logically grouped. Every time a new long-term memory is extracted using this memory strategy, it is saved under the namespace you set.\nThis means that all long-term memories are scoped to their specific namespace, keeping them organized and preventing any mix-ups with other\nusers or sessions. You should use a hierarchical format separated by forward slashes /. This helps keep memories organized clearly. As needed,\nyou can choose to use the below pre-defined variables within braces in the namespace based on your applications' organization needs:\n\n- `actorId` – Identifies who the long-term memory belongs to, such as a user\n- `memoryStrategyId` – Shows which memory strategy is being used. This strategy identifier is auto-generated when you create a memory using CreateMemory operation.\n- `sessionId` – Identifies which session or conversation the memory is from.\n\nFor example, if you define the following namespace as the input to your strategy in CreateMemory operation:\n\n```shell\n/strategy/{memoryStrategyId}/actor/{actorId}/session/{sessionId}\n```\n\nAfter memory creation, this namespace might look like:\n\n```shell\n/strategy/summarization-93483043//actor/actor-9830m2w3/session/session-9330sds8\n```\n\nYou can customise the namespace, i.e. where the memories are stored by using the following methods:\n\n1. **Summarization Strategy** (`MemoryStrategy.usingSummarization(props)`)\n1. **Semantic Memory Strategy** (`MemoryStrategy.usingSemantic(props)`)\n1. **User Preference Strategy** (`MemoryStrategy.usingUserPreference(props)`)\n\n```typescript fixture=default\n// Create memory with built-in strategies\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_memory\",\n  description: \"Memory with built-in strategies\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [\n    agentcore.MemoryStrategy.usingUserPreference({\n        name: \"CustomerPreferences\",\n        namespaces: [\"support/customer/{actorId}/preferences\"]\n    }),\n    agentcore.MemoryStrategy.usingSemantic({\n        name: \"CustomerSupportSemantic\",\n        namespaces: [\"support/customer/{actorId}/semantic\"]\n    }),\n  ],\n});\n```\n\nCustom memory strategies let you tailor memory extraction and consolidation to your specific domain or use case.\nYou can override the prompts for extracting and consolidating semantic, summary, or user preferences.\nYou can also choose the model that you want to use for extraction and consolidation.\n\nThe custom prompts you create are appended to a non-editable system prompt.\n\nSince a custom strategy requires you to invoke certain FMs, you need a role with appropriate permissions. For that, you can:\n\n- Let the L2 construct create a minimum permission role for you when use L2 Bedrock Foundation Models.\n- Use a custom role with the overly permissive `AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy` managed policy.\n- Use a custom role with your own custom policies.\n\n#### Memory with Custom Execution Role\n\nKeep in mind that memories that **do not** use custom strategies do not require a service role.\nSo even if you provide it, it will be ignored as it will never be used.\n\n```typescript fixture=default\n// Create a custom execution role\nconst executionRole = new iam.Role(this, \"MemoryExecutionRole\", {\n  assumedBy: new iam.ServicePrincipal(\"bedrock-agentcore.amazonaws.com\"),\n  managedPolicies: [\n    iam.ManagedPolicy.fromAwsManagedPolicyName(\n      \"AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy\"\n    ),\n  ],\n});\n\n// Create memory with custom execution role\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_memory\",\n  description: \"Memory with custom execution role\",\n  expirationDuration: cdk.Duration.days(90),\n  executionRole: executionRole,\n});\n```\n\nIn customConsolidation and customExtraction, the model property uses the [@aws-cdk/aws-bedrock-alph](https://www.npmjs.com/package/@aws-cdk/aws-bedrock-alpha) library which must be installed separately.\n\n```typescript fixture=default\n// Create a custom semantic memory strategy\nconst customSemanticStrategy = agentcore.MemoryStrategy.usingSemantic({\n  name: \"customSemanticStrategy\",\n  description: \"Custom semantic memory strategy\",\n  namespaces: [\"/custom/strategies/{memoryStrategyId}/actors/{actorId}\"],\n  customConsolidation: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom consolidation prompt for semantic memory\",\n  },\n  customExtraction: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom extraction prompt for semantic memory\",\n  },\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [customSemanticStrategy],\n});\n```\n\n### Memory with self-managed Strategies\n\nA self-managed strategy in Amazon Bedrock AgentCore Memory gives you complete control over your memory extraction and consolidation pipelines.\nWith a self-managed strategy, you can build custom memory processing workflows while leveraging Amazon Bedrock AgentCore for storage and retrieval.\n\nFor additional information, you can refer to the [developer guide for self managed strategies](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-self-managed-strategies.html).\n\nCreate the required AWS resources including:\n\n- an S3 bucket in your account where Amazon Bedrock AgentCore will deliver batched event payloads.\n- an SNS topic for job notifications. Use FIFO topics if processing order within sessions is important for your use case.\n\nThe construct will apply the correct permissions to the memory execution role to access these resources.\n\n```typescript fixture=default\n\nconst bucket = new s3.Bucket(this, 'memoryBucket', {\n  bucketName: 'test-memory',\n  removalPolicy: cdk.RemovalPolicy.DESTROY,\n  autoDeleteObjects: true,\n});\n\nconst topic = new sns.Topic(this, 'topic');\n\n// Create a custom semantic memory strategy\nconst selfManagedStrategy = agentcore.MemoryStrategy.usingSelfManaged({\n  name: \"selfManagedStrategy\",\n  description: \"self managed memory strategy\",\n  historicalContextWindowSize: 5,\n  invocationConfiguration: {\n    topic: topic,\n    s3Location: {\n      bucketName: bucket.bucketName,\n      objectKey: 'memory/',\n    }\n  },\n  triggerConditions: {\n    messageBasedTrigger: 1,\n    timeBasedTrigger: cdk.Duration.seconds(10),\n    tokenBasedTrigger: 100\n  }\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [selfManagedStrategy],\n});\n```\n\n### Memory Strategy Methods\n\nYou can add new memory strategies to the memory construct using the `addMemoryStrategy()` method, for instance:\n\n```typescript fixture=default\n// Create memory without initial strategies\nconst memory = new agentcore.Memory(this, \"test-memory\", {\n  memoryName: \"test_memory_add_strategy\",\n  description: \"A test memory for testing addMemoryStrategy method\",\n  expirationDuration: cdk.Duration.days(90),\n});\n\n// Add strategies after instantiation\nmemory.addMemoryStrategy(agentcore.MemoryStrategy.usingBuiltInSummarization());\nmemory.addMemoryStrategy(agentcore.MemoryStrategy.usingBuiltInSemantic());\n```\n"
   },
   "repository": {
     "directory": "packages/@aws-cdk/aws-bedrock-agentcore-alpha",
@@ -4339,7 +4397,7 @@
       "kind": "interface",
       "locationInModule": {
         "filename": "agentcore/runtime/runtime-base.ts",
-        "line": 401
+        "line": 392
       },
       "name": "AgentRuntimeAttributes",
       "properties": [
@@ -4352,7 +4410,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 405
+            "line": 396
           },
           "name": "agentRuntimeArn",
           "type": {
@@ -4368,7 +4426,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 410
+            "line": 401
           },
           "name": "agentRuntimeId",
           "type": {
@@ -4384,7 +4442,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 415
+            "line": 406
           },
           "name": "agentRuntimeName",
           "type": {
@@ -4400,7 +4458,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 420
+            "line": 411
           },
           "name": "roleArn",
           "type": {
@@ -4417,7 +4475,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 428
+            "line": 419
           },
           "name": "agentRuntimeVersion",
           "optional": true,
@@ -4435,7 +4493,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 446
+            "line": 437
           },
           "name": "agentStatus",
           "optional": true,
@@ -4453,7 +4511,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 452
+            "line": 443
           },
           "name": "createdAt",
           "optional": true,
@@ -4471,7 +4529,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 434
+            "line": 425
           },
           "name": "description",
           "optional": true,
@@ -4489,7 +4547,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 458
+            "line": 449
           },
           "name": "lastUpdatedAt",
           "optional": true,
@@ -4507,7 +4565,7 @@
           "immutable": true,
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 440
+            "line": 431
           },
           "name": "securityGroups",
           "optional": true,
@@ -9116,177 +9174,2973 @@
       ],
       "symbolId": "agentcore/tools/code-interpreter:ICodeInterpreterCustom"
     },
-    "@aws-cdk/aws-bedrock-agentcore-alpha.IRuntimeEndpoint": {
+    "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory": {
       "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
       "docs": {
         "stability": "experimental",
-        "summary": "Interface for Runtime Endpoint resources."
+        "summary": "Interface for Memory resources."
       },
-      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IRuntimeEndpoint",
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
       "interfaces": [
-        "aws-cdk-lib.IResource"
+        "aws-cdk-lib.IResource",
+        "aws-cdk-lib.aws_iam.IGrantable"
       ],
       "kind": "interface",
       "locationInModule": {
-        "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-        "line": 24
+        "filename": "agentcore/memory/memory.ts",
+        "line": 78
       },
-      "name": "IRuntimeEndpoint",
-      "properties": [
+      "methods": [
         {
           "abstract": true,
           "docs": {
-            "custom": {
-              "attribute": "true"
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to perform actions on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 115
+          },
+          "name": "grant",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
             },
+            {
+              "name": "actions",
+              "type": {
+                "primitive": "string"
+              },
+              "variadic": true
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          },
+          "variadic": true
+        },
+        {
+          "abstract": true,
+          "docs": {
             "stability": "experimental",
-            "summary": "The ARN of the parent agent runtime."
+            "summary": "Grant the given principal identity permissions to manage the control plane of this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 41
+            "filename": "agentcore/memory/memory.ts",
+            "line": 148
           },
-          "name": "agentRuntimeArn",
-          "type": {
-            "primitive": "string"
+          "name": "grantAdmin",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
-            "custom": {
-              "attribute": "true"
-            },
-            "example": "\"arn:aws:bedrock-agentcore:us-west-2:123456789012:agent-runtime-endpoint/endpoint-abc123\"",
             "stability": "experimental",
-            "summary": "The ARN of the runtime endpoint resource."
+            "summary": "Grant the given principal identity permissions to delete content on this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 30
+            "filename": "agentcore/memory/memory.ts",
+            "line": 136
           },
-          "name": "agentRuntimeEndpointArn",
-          "type": {
-            "primitive": "string"
+          "name": "grantDelete",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
             "stability": "experimental",
-            "summary": "The name of the runtime endpoint."
+            "summary": "Grant the given principal identity permissions to delete Long-Term Memory (LTM) content on this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 35
+            "filename": "agentcore/memory/memory.ts",
+            "line": 144
           },
-          "name": "endpointName",
-          "type": {
-            "primitive": "string"
+          "name": "grantDeleteLongTermMemory",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
-            "custom": {
-              "attribute": "true"
-            },
             "stability": "experimental",
-            "summary": "When the endpoint was created."
+            "summary": "Grant the given principal identity permissions to delete Short-Term Memory (STM) content on this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 65
+            "filename": "agentcore/memory/memory.ts",
+            "line": 140
           },
-          "name": "createdAt",
-          "optional": true,
-          "type": {
-            "primitive": "string"
+          "name": "grantDeleteShortTermMemory",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
             "stability": "experimental",
-            "summary": "The description of the runtime endpoint."
+            "summary": "Grant the given principal identity permissions to do every action on this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 70
+            "filename": "agentcore/memory/memory.ts",
+            "line": 152
           },
-          "name": "description",
-          "optional": true,
-          "type": {
-            "primitive": "string"
+          "name": "grantFullAccess",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
-            "custom": {
-              "attribute": "true"
-            },
+            "remarks": "Both Short-Term Memory (STM) and Long-Term Memory (LTM).",
             "stability": "experimental",
-            "summary": "The live version of the agent runtime that is currently serving requests."
+            "summary": "Grant the given principal identity permissions to read the contents of this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 53
+            "filename": "agentcore/memory/memory.ts",
+            "line": 124
           },
-          "name": "liveVersion",
-          "optional": true,
-          "type": {
-            "primitive": "string"
+          "name": "grantRead",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
-            "custom": {
-              "attribute": "true"
-            },
             "stability": "experimental",
-            "summary": "The current status of the runtime endpoint."
+            "summary": "Grant the given principal identity permissions to read the Long-Term Memory (LTM) contents of this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 47
+            "filename": "agentcore/memory/memory.ts",
+            "line": 132
           },
-          "name": "status",
-          "optional": true,
-          "type": {
-            "primitive": "string"
+          "name": "grantReadLongTermMemory",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
           }
         },
         {
           "abstract": true,
           "docs": {
-            "custom": {
-              "attribute": "true"
-            },
             "stability": "experimental",
-            "summary": "The target version the endpoint is transitioning to (during updates)."
+            "summary": "Grant the given principal identity permissions to read the Short-Term Memory (STM) contents of this memory."
           },
-          "immutable": true,
           "locationInModule": {
-            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
-            "line": 59
+            "filename": "agentcore/memory/memory.ts",
+            "line": 128
           },
-          "name": "targetVersion",
-          "optional": true,
-          "type": {
-            "primitive": "string"
-          }
+          "name": "grantReadShortTermMemory",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to write content to this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 119
+          },
+          "name": "grantWrite",
+          "parameters": [
+            {
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return the given named metric for this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 160
+          },
+          "name": "metric",
+          "parameters": [
+            {
+              "name": "metricName",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "dimensions",
+              "type": {
+                "collection": {
+                  "elementtype": {
+                    "primitive": "string"
+                  },
+                  "kind": "map"
+                }
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return a metric containing the number of errors for a specific API operation performed on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 176
+          },
+          "name": "metricErrorsForApiOperation",
+          "parameters": [
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Returns the metric containing the number of created memory events and memory records."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 180
+          },
+          "name": "metricEventCreationCount",
+          "parameters": [
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return the given named metric related to the API operation performed on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 164
+          },
+          "name": "metricForApiOperation",
+          "parameters": [
+            {
+              "name": "metricName",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return a metric containing the total number of API requests made for a specific memory operation."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 172
+          },
+          "name": "metricInvocationsForApiOperation",
+          "parameters": [
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return a metric measuring the latency of a specific API operation performed on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 168
+          },
+          "name": "metricLatencyForApiOperation",
+          "parameters": [
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        }
+      ],
+      "name": "IMemory",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The ARN of the memory resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 83
+          },
+          "name": "memoryArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The id of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 88
+          },
+          "name": "memoryId",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "Timestamp when the memory was created."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 111
+          },
+          "name": "createdAt",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The IAM role that provides permissions for the memory to access AWS services."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 92
+          },
+          "name": "executionRole",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Custom KMS key for encryption (if provided)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 96
+          },
+          "name": "kmsKey",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The status of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 101
+          },
+          "name": "status",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "Timestamp when the memory was last updated."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 106
+          },
+          "name": "updatedAt",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/memory:IMemory"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Interface for Memory strategies."
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory-strategy.ts",
+        "line": 81
+      },
+      "methods": [
+        {
+          "abstract": true,
+          "docs": {
+            "returns": "The Grant object for chaining",
+            "stability": "experimental",
+            "summary": "Grants the necessary permissions to the role."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 103
+          },
+          "name": "grant",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The grantee to grant permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "optional": true,
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Renders internal attributes to CloudFormation."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 97
+          },
+          "name": "render",
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_bedrockagentcore.CfnMemory.MemoryStrategyProperty"
+            }
+          }
+        }
+      ],
+      "name": "IMemoryStrategy",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The name of the memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 85
+          },
+          "name": "name",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The type of memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 93
+          },
+          "name": "strategyType",
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyType"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The description of the memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 89
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/memory-strategy:IMemoryStrategy"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.IRuntimeEndpoint": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Interface for Runtime Endpoint resources."
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IRuntimeEndpoint",
+      "interfaces": [
+        "aws-cdk-lib.IResource"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+        "line": 24
+      },
+      "name": "IRuntimeEndpoint",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The ARN of the parent agent runtime."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 41
+          },
+          "name": "agentRuntimeArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "example": "\"arn:aws:bedrock-agentcore:us-west-2:123456789012:agent-runtime-endpoint/endpoint-abc123\"",
+            "stability": "experimental",
+            "summary": "The ARN of the runtime endpoint resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 30
+          },
+          "name": "agentRuntimeEndpointArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The name of the runtime endpoint."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 35
+          },
+          "name": "endpointName",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "When the endpoint was created."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 65
+          },
+          "name": "createdAt",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The description of the runtime endpoint."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 70
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The live version of the agent runtime that is currently serving requests."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 53
+          },
+          "name": "liveVersion",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The current status of the runtime endpoint."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 47
+          },
+          "name": "status",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The target version the endpoint is transitioning to (during updates)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/runtime/runtime-endpoint-base.ts",
+            "line": 59
+          },
+          "name": "targetVersion",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/runtime/runtime-endpoint-base:IRuntimeEndpoint"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.InvocationConfiguration": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Invocation configuration for self managed memory strategy.",
+        "example": "\nconst bucket = new s3.Bucket(this, 'memoryBucket', {\n  bucketName: 'test-memory',\n  removalPolicy: cdk.RemovalPolicy.DESTROY,\n  autoDeleteObjects: true,\n});\n\nconst topic = new sns.Topic(this, 'topic');\n\n// Create a custom semantic memory strategy\nconst selfManagedStrategy = agentcore.MemoryStrategy.usingSelfManaged({\n  name: \"selfManagedStrategy\",\n  description: \"self managed memory strategy\",\n  historicalContextWindowSize: 5,\n  invocationConfiguration: {\n    topic: topic,\n    s3Location: {\n      bucketName: bucket.bucketName,\n      objectKey: 'memory/',\n    }\n  },\n  triggerConditions: {\n    messageBasedTrigger: 1,\n    timeBasedTrigger: cdk.Duration.seconds(10),\n    tokenBasedTrigger: 100\n  }\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [selfManagedStrategy],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.InvocationConfiguration",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+        "line": 113
+      },
+      "name": "InvocationConfiguration",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "S3 Location Configuration."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 121
+          },
+          "name": "s3Location",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_s3.Location"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "SNS Topic Configuration."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 117
+          },
+          "name": "topic",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_sns.ITopic"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/strategies/self-managed-strategy:InvocationConfiguration"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "docs": {
+        "remarks": "This strategy can be used for quick setup with built-in defaults or customized\nwith specific models and prompt templates.",
+        "stability": "experimental",
+        "summary": "Managed memory strategy that handles both built-in and override configurations.",
+        "example": "// Create a custom semantic memory strategy\nconst customSemanticStrategy = agentcore.MemoryStrategy.usingSemantic({\n  name: \"customSemanticStrategy\",\n  description: \"Custom semantic memory strategy\",\n  namespaces: [\"/custom/strategies/{memoryStrategyId}/actors/{actorId}\"],\n  customConsolidation: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom consolidation prompt for semantic memory\",\n  },\n  customExtraction: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom extraction prompt for semantic memory\",\n  },\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [customSemanticStrategy],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy",
+      "initializer": {
+        "docs": {
+          "stability": "experimental",
+          "summary": "Constructor to create a new managed memory strategy."
+        },
+        "locationInModule": {
+          "filename": "agentcore/memory/strategies/managed-strategy.ts",
+          "line": 122
+        },
+        "parameters": [
+          {
+            "docs": {
+              "summary": "the strategy type."
+            },
+            "name": "strategyType",
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyType"
+            }
+          },
+          {
+            "docs": {
+              "summary": "the properties for the strategy."
+            },
+            "name": "props",
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedStrategyProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "agentcore/memory/strategies/managed-strategy.ts",
+        "line": 100
+      },
+      "methods": [
+        {
+          "docs": {
+            "returns": "The Grant object for chaining",
+            "stability": "experimental",
+            "summary": "Grants the necessary permissions to the role."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 210
+          },
+          "name": "grant",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The grantee to grant permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "optional": true,
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "returns": "The CloudFormation property for the memory strategy.",
+            "stability": "experimental",
+            "summary": "Renders the network configuration as a CloudFormation property."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 148
+          },
+          "name": "render",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_bedrockagentcore.CfnMemory.MemoryStrategyProperty"
+            }
+          }
+        }
+      ],
+      "name": "ManagedMemoryStrategy",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The name of the memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 101
+          },
+          "name": "name",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The namespaces for the strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 106
+          },
+          "name": "namespaces",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The type of memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 115
+          },
+          "name": "strategyType",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyType"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The configuration for the custom consolidation."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 110
+          },
+          "name": "consolidationOverride",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.OverrideConfig"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The description of the memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 102
+          },
+          "name": "description",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The configuration for the custom extraction."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 114
+          },
+          "name": "extractionOverride",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.OverrideConfig"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/strategies/managed-strategy:ManagedMemoryStrategy"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedStrategyProps": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Configuration parameters for a memory strategy that can override existing built-in default prompts/models.",
+        "example": "// Create memory with built-in strategies\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_memory\",\n  description: \"Memory with built-in strategies\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [\n    agentcore.MemoryStrategy.usingUserPreference({\n        name: \"CustomerPreferences\",\n        namespaces: [\"support/customer/{actorId}/preferences\"]\n    }),\n    agentcore.MemoryStrategy.usingSemantic({\n        name: \"CustomerSupportSemantic\",\n        namespaces: [\"support/customer/{actorId}/semantic\"]\n    }),\n  ],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedStrategyProps",
+      "interfaces": [
+        "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyCommonProps"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/strategies/managed-strategy.ts",
+        "line": 59
+      },
+      "name": "ManagedStrategyProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "Use a hierarchical format separated by forward slashes (/) to organize namespaces logically.\nYou can include these defined variables:\n\n- {sessionId} - the user identifier to be created in the CreateEvent API\n- {memoryStrategyId} - an identifier for an extraction strategy\n- {sessionId} - an identifier for each session\n\nExample namespace path:\n/strategies/{memoryStrategyId}/actions/{actionId}/sessions/{sessionId}\n\nAfter memory creation, this namespace might look like:\n/actor/actor-3afc5aa8fef9/strategy/summarization-fy5c5fwc7/session/session-qj7tpd1kvr8",
+            "stability": "experimental",
+            "summary": "The namespaces for the strategy Represents a namespace for organizing memory data Use a hierarchical format separated by forward slashes (/)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 92
+          },
+          "name": "namespaces",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- No custom extraction",
+            "remarks": "This configuration provides customization to how the model identifies\nand extracts relevant information for memory storage.",
+            "stability": "experimental",
+            "summary": "The configuration for the custom consolidation."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 73
+          },
+          "name": "customConsolidation",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.OverrideConfig"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- No custom extraction",
+            "remarks": "This configuration provides customization to how the model identifies\nand extracts relevant information for memory storage.",
+            "stability": "experimental",
+            "summary": "The configuration for the custom extraction."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 66
+          },
+          "name": "customExtraction",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.OverrideConfig"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/strategies/managed-strategy:ManagedStrategyProps"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.Memory": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "base": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+      "docs": {
+        "custom": {
+          "resource": "AWS::BedrockAgentCore::Memory",
+          "exampleMetadata": "fixture=default infused"
+        },
+        "remarks": "Enables knowledge retention across sessions by storing user preferences (e.g. coding style),\nsemantic facts (e.g. learned info) and interaction summaries for context optimization.",
+        "see": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory.html",
+        "stability": "experimental",
+        "summary": "Long-term memory store for extracted insights like user preferences, semantic facts and summaries.",
+        "example": "// Create a custom execution role\nconst executionRole = new iam.Role(this, \"MemoryExecutionRole\", {\n  assumedBy: new iam.ServicePrincipal(\"bedrock-agentcore.amazonaws.com\"),\n  managedPolicies: [\n    iam.ManagedPolicy.fromAwsManagedPolicyName(\n      \"AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy\"\n    ),\n  ],\n});\n\n// Create memory with custom execution role\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_memory\",\n  description: \"Memory with custom execution role\",\n  expirationDuration: cdk.Duration.days(90),\n  executionRole: executionRole,\n});"
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.Memory",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "agentcore/memory/memory.ts",
+          "line": 652
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryProps"
+            }
+          }
+        ]
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory.ts",
+        "line": 540
+      },
+      "methods": [
+        {
+          "docs": {
+            "returns": "An IBrowserCustom reference to the existing browser",
+            "stability": "experimental",
+            "summary": "Creates an Memory reference from an existing memory's attributes."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 556
+          },
+          "name": "fromMemoryAttributes",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The construct scope."
+              },
+              "name": "scope",
+              "type": {
+                "fqn": "constructs.Construct"
+              }
+            },
+            {
+              "docs": {
+                "summary": "- Identifier of the construct."
+              },
+              "name": "id",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "docs": {
+                "summary": "- Attributes of the existing browser custom."
+              },
+              "name": "attrs",
+              "type": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryAttributes"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "default": "- No memory strategies.",
+            "stability": "experimental",
+            "summary": "Add memory strategy to the memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 734
+          },
+          "name": "addMemoryStrategy",
+          "parameters": [
+            {
+              "name": "memoryStrategy",
+              "type": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy"
+              }
+            }
+          ]
+        }
+      ],
+      "name": "Memory",
+      "properties": [
+        {
+          "const": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Uniquely identifies this class."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 543
+          },
+          "name": "PROPERTY_INJECTION_ID",
+          "static": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The principal to grant permissions to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 634
+          },
+          "name": "grantPrincipal",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IPrincipal"
+          }
+        },
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The ARN of the memory resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 585
+          },
+          "name": "memoryArn",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The id of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 595
+          },
+          "name": "memoryId",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The name of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 590
+          },
+          "name": "memoryName",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The memory strategies used by the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 643
+          },
+          "name": "memoryStrategies",
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The created timestamp of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 620
+          },
+          "name": "createdAt",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The description of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 608
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The execution role of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 612
+          },
+          "name": "executionRole",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The expiration days of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 599
+          },
+          "name": "expirationDuration",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The failure reason of the browser."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 604
+          },
+          "name": "failureReason",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The KMS key used to encrypt the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 638
+          },
+          "name": "kmsKey",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The status of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 616
+          },
+          "name": "status",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "default": "- No tags applied",
+            "stability": "experimental",
+            "summary": "Tags applied to this browser resource A map of key-value pairs for resource tagging."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 630
+          },
+          "name": "tags",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "map"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The updated at timestamp of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 624
+          },
+          "name": "updatedAt",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/memory:Memory"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryAttributes": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Attributes for specifying an imported Memory.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as bedrock_agentcore_alpha from '@aws-cdk/aws-bedrock-agentcore-alpha';\nconst memoryAttributes: bedrock_agentcore_alpha.MemoryAttributes = {\n  memoryArn: 'memoryArn',\n  roleArn: 'roleArn',\n\n  // the properties below are optional\n  createdAt: 'createdAt',\n  kmsKeyArn: 'kmsKeyArn',\n  status: 'status',\n  updatedAt: 'updatedAt',\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryAttributes",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory.ts",
+        "line": 496
+      },
+      "name": "MemoryAttributes",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The ARN of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 501
+          },
+          "name": "memoryArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "custom": {
+              "attribute": "true"
+            },
+            "stability": "experimental",
+            "summary": "The ARN of the IAM role associated to the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 506
+          },
+          "name": "roleArn",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "undefined - No created timestamp is provided",
+            "stability": "experimental",
+            "summary": "The created timestamp of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 526
+          },
+          "name": "createdAt",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "undefined - An AWS managed key is used",
+            "stability": "experimental",
+            "summary": "Optional KMS encryption key associated with this memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 516
+          },
+          "name": "kmsKeyArn",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "undefined - No status is provided",
+            "stability": "experimental",
+            "summary": "The status of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 521
+          },
+          "name": "status",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "undefined - No last updated timestamp is provided",
+            "stability": "experimental",
+            "summary": "When this memory was last updated."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 511
+          },
+          "name": "updatedAt",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/memory:MemoryAttributes"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase": {
+      "abstract": true,
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "base": "aws-cdk-lib.Resource",
+      "docs": {
+        "remarks": "Contains methods and attributes valid for Memories either created with CDK or imported.",
+        "stability": "experimental",
+        "summary": "Abstract base class for a Memory."
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "agentcore/memory/memory.ts",
+          "line": 203
+        },
+        "parameters": [
+          {
+            "name": "scope",
+            "type": {
+              "fqn": "constructs.Construct"
+            }
+          },
+          {
+            "name": "id",
+            "type": {
+              "primitive": "string"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory.ts",
+        "line": 190
+      },
+      "methods": [
+        {
+          "docs": {
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grants IAM actions to the IAM Principal."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 212
+          },
+          "name": "grant",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            },
+            {
+              "docs": {
+                "summary": "- The actions to grant."
+              },
+              "name": "actions",
+              "type": {
+                "primitive": "string"
+              },
+              "variadic": true
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          },
+          "variadic": true
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:CreateMemory',\n'bedrock-agentcore:GetMemory',\n'bedrock-agentcore:DeleteMemory',\n'bedrock-agentcore:UpdateMemory'] on this.memoryArn",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to manage the control plane of this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 323
+          },
+          "name": "grantAdmin",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant admin permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:DeleteEvent',\n'bedrock-agentcore:DeleteMemoryRecord'] on this.memoryArn",
+            "remarks": "Both Short-Term Memory (STM) and Long-Term Memory (LTM).",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to delete content on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 287
+          },
+          "name": "grantDelete",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant delete permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:DeleteMemoryRecord'] on this.memoryArn",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to delete Long-Term Memory (LTM) content on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 309
+          },
+          "name": "grantDeleteLongTermMemory",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant delete permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:DeleteEvent'] on this.memoryArn",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to delete Short-Term Memory (STM) content on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 298
+          },
+          "name": "grantDeleteShortTermMemory",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant delete permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:CreateEvent',\n'bedrock-agentcore:GetEvent',\n'bedrock-agentcore:DeleteEvent',\n'bedrock-agentcore:GetMemoryRecord',\n'bedrock-agentcore:RetrieveMemoryRecords',\n'bedrock-agentcore:ListMemoryRecords',\n'bedrock-agentcore:ListActors',\n'bedrock-agentcore:ListSessions',\n'bedrock-agentcore:CreateMemory',\n'bedrock-agentcore:GetMemory',\n'bedrock-agentcore:DeleteMemory',\n'bedrock-agentcore:UpdateMemory'] on this.memoryArn",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to do every action on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 345
+          },
+          "name": "grantFullAccess",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant full access permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:GetMemoryRecord',\n'bedrock-agentcore:RetrieveMemoryRecords',\n'bedrock-agentcore:ListMemoryRecords',\n'bedrock-agentcore:ListActors',\n'bedrock-agentcore:ListSessions] on this.memoryArn",
+            "remarks": "Both Short-Term Memory (STM) and Long-Term Memory (LTM).",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to read the contents of this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 244
+          },
+          "name": "grantRead",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant read permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:GetMemoryRecord',\n'bedrock-agentcore:RetrieveMemoryRecords',\n'bedrock-agentcore:ListMemoryRecords',\n'bedrock-agentcore:ListActors',\n'bedrock-agentcore:ListSessions',] on this.memoryArn",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to read the Long-Term Memory (LTM) contents of this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 273
+          },
+          "name": "grantReadLongTermMemory",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant read permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:GetEvent',\n'bedrock-agentcore:ListEvents',\n'bedrock-agentcore:ListActors',\n'bedrock-agentcore:ListSessions',] on this.memoryArn",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to read the Short-Term Memory (STM) contents of this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 258
+          },
+          "name": "grantReadShortTermMemory",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant read permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "default": "- Default grant configuration:\n- actions: ['bedrock-agentcore:CreateEvent'] on this.memoryArn",
+            "returns": "An IAM Grant object representing the granted permissions",
+            "stability": "experimental",
+            "summary": "Grant the given principal identity permissions to write content to short-term memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 228
+          },
+          "name": "grantWrite",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The IAM principal to grant read permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "By default, the metric will be calculated as a sum over a period of 5 minutes.\nYou can customize this by using the `statistic` and `period` properties.",
+            "stability": "experimental",
+            "summary": "Return the given named metric for this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 358
+          },
+          "name": "metric",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "name": "metricName",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "dimensions",
+              "type": {
+                "collection": {
+                  "elementtype": {
+                    "primitive": "string"
+                  },
+                  "kind": "map"
+                }
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return a metric containing the number of errors for a specific API operation performed on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 403
+          },
+          "name": "metricErrorsForApiOperation",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Returns the metric containing the number of short-term memory events."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 409
+          },
+          "name": "metricEventCreationCount",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return the given named metric related to the API operation performed on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 370
+          },
+          "name": "metricForApiOperation",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "name": "metricName",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Return a metric containing the total number of API requests made for a specific memory operation like `CreateEvent`, `ListEvents`, `RetrieveMemoryRecords` ..."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 394
+          },
+          "name": "metricInvocationsForApiOperation",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "docs": {
+            "remarks": "The latency metric represents the total time elapsed between receiving the request and sending\nthe final response token, measuring complete end-to-end processing time.\n\nFor memory creation events specifically, this measures the time from the last CreateEvent\nthat met strategy criteria until memory storage is completed.",
+            "stability": "experimental",
+            "summary": "Return a metric measuring the latency of a specific API operation performed on this memory."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 387
+          },
+          "name": "metricLatencyForApiOperation",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "parameters": [
+            {
+              "name": "operation",
+              "type": {
+                "primitive": "string"
+              }
+            },
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Returns the metric containing the number of long-term memory records created by the long-term extraction strategies."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 416
+          },
+          "name": "metricMemoryRecordCreationCount",
+          "parameters": [
+            {
+              "name": "props",
+              "optional": true,
+              "type": {
+                "fqn": "aws-cdk-lib.aws_cloudwatch.MetricOptions"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_cloudwatch.Metric"
+            }
+          }
+        }
+      ],
+      "name": "MemoryBase",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The principal to grant permissions to."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 201
+          },
+          "name": "grantPrincipal",
+          "overrides": "aws-cdk-lib.aws_iam.IGrantable",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IPrincipal"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The ARN of the memory resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 191
+          },
+          "name": "memoryArn",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The id of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 192
+          },
+          "name": "memoryId",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Timestamp when the memory was created."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 195
+          },
+          "name": "createdAt",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The IAM role that provides permissions for the memory to access AWS services."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 196
+          },
+          "name": "executionRole",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Custom KMS key for encryption (if provided)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 197
+          },
+          "name": "kmsKey",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The status of the memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 193
+          },
+          "name": "status",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Timestamp when the memory was last updated."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 194
+          },
+          "name": "updatedAt",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemory",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/memory:MemoryBase"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryProps": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Properties for creating a Memory resource.",
+        "example": "// Create a custom execution role\nconst executionRole = new iam.Role(this, \"MemoryExecutionRole\", {\n  assumedBy: new iam.ServicePrincipal(\"bedrock-agentcore.amazonaws.com\"),\n  managedPolicies: [\n    iam.ManagedPolicy.fromAwsManagedPolicyName(\n      \"AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy\"\n    ),\n  ],\n});\n\n// Create memory with custom execution role\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my_memory\",\n  description: \"Memory with custom execution role\",\n  expirationDuration: cdk.Duration.days(90),\n  executionRole: executionRole,\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory.ts",
+        "line": 441
+      },
+      "name": "MemoryProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The name of the memory Valid characters are a-z, A-Z, 0-9, _ (underscore) The name must start with a letter and can be up to 48 characters long Pattern: [a-zA-Z][a-zA-Z0-9_]{0,47}."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 448
+          },
+          "name": "memoryName",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- No description",
+            "stability": "experimental",
+            "summary": "Optional description for the memory Valid characters are a-z, A-Z, 0-9, _ (underscore), - (hyphen) and spaces The description can have up to 200 characters."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 462
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- A new role will be created.",
+            "stability": "experimental",
+            "summary": "The IAM role that provides permissions for the memory to access AWS services when using custom strategies."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 480
+          },
+          "name": "executionRole",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_iam.IRole"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- 90 days",
+            "remarks": "Sets the short-term (raw event) memory retention.\nEvents older than the specified duration will expire and no longer be stored.",
+            "stability": "experimental",
+            "summary": "Short-term memory expiration in days (between 7 and 365)."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 455
+          },
+          "name": "expirationDuration",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- Your data is encrypted with a key that AWS owns and manages for you",
+            "stability": "experimental",
+            "summary": "Custom KMS key to use for encryption."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 467
+          },
+          "name": "kmsKey",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.aws_kms.IKey"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- No extraction strategies (short term memory only)",
+            "stability": "experimental",
+            "summary": "If you need long-term memory for context recall across sessions, you can setup memory extraction strategies to extract the relevant memory from the raw events."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 473
+          },
+          "name": "memoryStrategies",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy"
+              },
+              "kind": "array"
+            }
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- no tags",
+            "stability": "experimental",
+            "summary": "Tags (optional) A list of key:value pairs of tags to apply to this memory resource."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory.ts",
+            "line": 487
+          },
+          "name": "tags",
+          "optional": true,
+          "type": {
+            "collection": {
+              "elementtype": {
+                "primitive": "string"
+              },
+              "kind": "map"
+            }
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/memory:MemoryProps"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategy": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "docs": {
+        "remarks": "Use built-in strategies for quick setup, use built-in strategies with override to specify models and prompt templates.",
+        "see": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-strategies.html",
+        "stability": "experimental",
+        "summary": "Factory class for creating memory strategies If you need long-term memory for context recall across sessions, you can setup memory extraction strategies to extract the relevant memory from the raw events.",
+        "example": "// Create a custom semantic memory strategy\nconst customSemanticStrategy = agentcore.MemoryStrategy.usingSemantic({\n  name: \"customSemanticStrategy\",\n  description: \"Custom semantic memory strategy\",\n  namespaces: [\"/custom/strategies/{memoryStrategyId}/actors/{actorId}\"],\n  customConsolidation: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom consolidation prompt for semantic memory\",\n  },\n  customExtraction: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom extraction prompt for semantic memory\",\n  },\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [customSemanticStrategy],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategy",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        }
+      },
+      "kind": "class",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory-strategy.ts",
+        "line": 116
+      },
+      "methods": [
+        {
+          "docs": {
+            "remarks": "Distills general facts, concepts, and underlying meanings from raw conversational data, presenting the information in a context-independent format.\nExtracted memory example: In-context learning = task-solving via examples, no training needed.",
+            "returns": "A ManagedMemoryStrategy.",
+            "stability": "experimental",
+            "summary": "Default strategies for organizing and extracting memory data, each optimized for specific use cases."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 136
+          },
+          "name": "usingBuiltInSemantic",
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "This strategy compresses conversations into concise overviews, preserving essential context and key insights for quick recall.\nExtracted memory example: Users confused by cloud setup during onboarding.",
+            "returns": "A ManagedMemoryStrategy.",
+            "stability": "experimental",
+            "summary": "Default strategies for organizing and extracting memory data, each optimized for specific use cases."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 123
+          },
+          "name": "usingBuiltInSummarization",
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "Captures individual preferences, interaction patterns, and personalized settings to enhance future experiences.\nExtracted memory example: User needs clear guidance on cloud storage account connection during onboarding.",
+            "returns": "A ManagedMemoryStrategy.",
+            "stability": "experimental",
+            "summary": "Default strategies for organizing and extracting memory data, each optimized for specific use cases."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 150
+          },
+          "name": "usingBuiltInUserPreference",
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "A self-managed strategy gives you complete control over your memory extraction and consolidation pipelines.",
+            "returns": "A SelfManagedMemoryStrategy.",
+            "stability": "experimental",
+            "summary": "Creates a self-managed memory strategy."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 193
+          },
+          "name": "usingSelfManaged",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The configuration for the self-managed memory strategy."
+              },
+              "name": "config",
+              "type": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedStrategyProps"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedMemoryStrategy"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "Distills general facts, concepts, and underlying meanings from raw conversational data, presenting the information in a context-independent format.\nExtracted memory example: In-context learning = task-solving via examples, no training needed.",
+            "returns": "A ManagedMemoryStrategy.",
+            "stability": "experimental",
+            "summary": "Creates a semantic memory strategy with custom configuration."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 164
+          },
+          "name": "usingSemantic",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The configuration for the semantic memory strategy."
+              },
+              "name": "config",
+              "type": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedStrategyProps"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "This strategy compresses conversations into concise overviews, preserving essential context and key insights for quick recall.\nExtracted memory example: Users confused by cloud setup during onboarding.",
+            "returns": "A ManagedMemoryStrategy.",
+            "stability": "experimental",
+            "summary": "Creates a summarization memory strategy with custom configuration."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 184
+          },
+          "name": "usingSummarization",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The configuration for the summarization memory strategy."
+              },
+              "name": "config",
+              "type": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedStrategyProps"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy"
+            }
+          },
+          "static": true
+        },
+        {
+          "docs": {
+            "remarks": "Captures individual preferences, interaction patterns, and personalized settings to enhance future experiences.\nExtracted memory example: User needs clear guidance on cloud storage account connection during onboarding.",
+            "returns": "A ManagedMemoryStrategy.",
+            "stability": "experimental",
+            "summary": "Creates a user preference memory strategy with custom configuration."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 174
+          },
+          "name": "usingUserPreference",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The configuration for the user preference memory strategy."
+              },
+              "name": "config",
+              "type": {
+                "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedStrategyProps"
+              }
+            }
+          ],
+          "returns": {
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy"
+            }
+          },
+          "static": true
         }
       ],
-      "symbolId": "agentcore/runtime/runtime-endpoint-base:IRuntimeEndpoint"
+      "name": "MemoryStrategy",
+      "symbolId": "agentcore/memory/memory-strategy:MemoryStrategy"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyCommonProps": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Configuration parameters common for any memory strategy.",
+        "example": "// The code below shows an example of how to instantiate this type.\n// The values are placeholders you should change.\nimport * as bedrock_agentcore_alpha from '@aws-cdk/aws-bedrock-agentcore-alpha';\nconst memoryStrategyCommonProps: bedrock_agentcore_alpha.MemoryStrategyCommonProps = {\n  name: 'name',\n\n  // the properties below are optional\n  description: 'description',\n};",
+        "custom": {
+          "exampleMetadata": "fixture=_generated"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyCommonProps",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory-strategy.ts",
+        "line": 63
+      },
+      "name": "MemoryStrategyCommonProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The name for the strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 67
+          },
+          "name": "name",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- No description",
+            "stability": "experimental",
+            "summary": "The description of the strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/memory-strategy.ts",
+            "line": 72
+          },
+          "name": "description",
+          "optional": true,
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/memory-strategy:MemoryStrategyCommonProps"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyType": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "docs": {
+        "stability": "experimental",
+        "summary": "Long-term memory extraction strategy types."
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyType",
+      "kind": "enum",
+      "locationInModule": {
+        "filename": "agentcore/memory/memory-strategy.ts",
+        "line": 37
+      },
+      "members": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Summarization strategy - extracts concise summaries to preserve critical context and key insights."
+          },
+          "name": "SUMMARIZATION"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Semantic memory strategy - extracts general factual knowledge, concepts and meanings from raw conversations using vector embeddings for similarity search."
+          },
+          "name": "SEMANTIC"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "User preferences strategy - extracts user behavior patterns from raw conversations."
+          },
+          "name": "USER_PREFERENCE"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Customize memory processing through custom foundation model and prompt templates."
+          },
+          "name": "CUSTOM"
+        }
+      ],
+      "name": "MemoryStrategyType",
+      "symbolId": "agentcore/memory/memory-strategy:MemoryStrategyType"
     },
     "@aws-cdk/aws-bedrock-agentcore-alpha.NetworkConfiguration": {
       "abstract": true,
@@ -9406,6 +12260,62 @@
       ],
       "symbolId": "agentcore/network/network-configuration:NetworkConfiguration"
     },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.OverrideConfig": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Configuration for overriding model and prompt template.",
+        "example": "// Create a custom semantic memory strategy\nconst customSemanticStrategy = agentcore.MemoryStrategy.usingSemantic({\n  name: \"customSemanticStrategy\",\n  description: \"Custom semantic memory strategy\",\n  namespaces: [\"/custom/strategies/{memoryStrategyId}/actors/{actorId}\"],\n  customConsolidation: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom consolidation prompt for semantic memory\",\n  },\n  customExtraction: {\n    model: bedrock.BedrockFoundationModel.ANTHROPIC_CLAUDE_3_5_SONNET_V1_0,\n    appendToPrompt: \"Custom extraction prompt for semantic memory\",\n  },\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [customSemanticStrategy],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.OverrideConfig",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/strategies/managed-strategy.ts",
+        "line": 39
+      },
+      "name": "OverrideConfig",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "remarks": "This configuration provides customization to how the model identifies and extracts\nrelevant information for memory storage. You can use the default user prompt or create a customized one.",
+            "see": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/system-prompts.html",
+            "stability": "experimental",
+            "summary": "The prompt that will be appended to the system prompt to define the model's memory consolidation/extraction strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 52
+          },
+          "name": "appendToPrompt",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "The model to use for consolidation/extraction."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/managed-strategy.ts",
+            "line": 43
+          },
+          "name": "model",
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-alpha.IBedrockInvokable"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/strategies/managed-strategy:OverrideConfig"
+    },
     "@aws-cdk/aws-bedrock-agentcore-alpha.ProtocolType": {
       "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
       "docs": {
@@ -9432,6 +12342,13 @@
             "summary": "HTTP protocol."
           },
           "name": "HTTP"
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "A2A protocol."
+          },
+          "name": "A2A"
         }
       ],
       "name": "ProtocolType",
@@ -9599,7 +12516,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime.ts",
-            "line": 686
+            "line": 684
           },
           "name": "addEndpoint",
           "parameters": [
@@ -9866,7 +12783,7 @@
         "remarks": "Provides static factory methods to create different authentication types.",
         "stability": "experimental",
         "summary": "Abstract base class for runtime authorizer configurations.",
-        "example": "const repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingCognito(\n    \"us-west-2_ABC123\",  // User Pool ID (required)\n    \"client123\",         // Client ID (required)\n    \"us-west-2\"         // Region (optional, defaults to stack region)\n  ),\n});",
+        "example": "const repository = new ecr.Repository(this, \"TestRepository\", {\n  repositoryName: \"test-agent-runtime\",\n});\nconst agentRuntimeArtifact = agentcore.AgentRuntimeArtifact.fromEcrRepository(repository, \"v1.0.0\");\n\nconst runtime = new agentcore.Runtime(this, \"MyAgentRuntime\", {\n  runtimeName: \"myAgent\",\n  agentRuntimeArtifact: agentRuntimeArtifact,\n  authorizerConfiguration: agentcore.RuntimeAuthorizerConfiguration.usingOAuth(\n    \"https://github.com/.well-known/openid-configuration\",\n    \"oauth_client_123\",\n  ),\n});",
         "custom": {
           "exampleMetadata": "infused"
         }
@@ -9892,36 +12809,28 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-authorizer-configuration.ts",
-            "line": 63
+            "line": 62
           },
           "name": "usingCognito",
           "parameters": [
             {
               "docs": {
-                "summary": "The Cognito User Pool ID (e.g., 'us-west-2_ABC123')."
-              },
-              "name": "userPoolId",
-              "type": {
-                "primitive": "string"
-              }
-            },
-            {
-              "docs": {
-                "summary": "The Cognito App Client ID."
+                "summary": "The Cognito User Pool."
               },
-              "name": "clientId",
+              "name": "userPool",
               "type": {
-                "primitive": "string"
+                "fqn": "aws-cdk-lib.aws_cognito.IUserPool"
               }
             },
             {
-              "docs": {
-                "summary": "Optional AWS region where the User Pool is located (defaults to stack region)."
-              },
-              "name": "region",
-              "optional": true,
+              "name": "userPoolClients",
               "type": {
-                "primitive": "string"
+                "collection": {
+                  "elementtype": {
+                    "fqn": "aws-cdk-lib.aws_cognito.IUserPoolClient"
+                  },
+                  "kind": "array"
+                }
               }
             },
             {
@@ -10034,7 +12943,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-authorizer-configuration.ts",
-            "line": 81
+            "line": 79
           },
           "name": "usingOAuth",
           "parameters": [
@@ -10208,7 +13117,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 293
+            "line": 284
           },
           "name": "grantInvoke",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10236,7 +13145,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 266
+            "line": 257
           },
           "name": "grantInvokeRuntime",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10264,7 +13173,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 280
+            "line": 271
           },
           "name": "grantInvokeRuntimeForUser",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10293,7 +13202,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 310
+            "line": 301
           },
           "name": "metric",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10336,7 +13245,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 323
+            "line": 314
           },
           "name": "metricInvocations",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10362,7 +13271,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 330
+            "line": 321
           },
           "name": "metricInvocationsAggregated",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10389,7 +13298,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 361
+            "line": 352
           },
           "name": "metricLatency",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10415,7 +13324,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 375
+            "line": 366
           },
           "name": "metricSessionCount",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10441,7 +13350,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 382
+            "line": 373
           },
           "name": "metricSessionsAggregated",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10467,7 +13376,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 344
+            "line": 335
           },
           "name": "metricSystemErrors",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10493,7 +13402,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 337
+            "line": 328
           },
           "name": "metricThrottles",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10519,7 +13428,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 368
+            "line": 359
           },
           "name": "metricTotalErrors",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -10545,7 +13454,7 @@
           },
           "locationInModule": {
             "filename": "agentcore/runtime/runtime-base.ts",
-            "line": 351
+            "line": 342
           },
           "name": "metricUserErrors",
           "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IBedrockAgentRuntime",
@@ -11893,6 +14802,355 @@
       ],
       "symbolId": "agentcore/runtime/runtime:RuntimeProps"
     },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedMemoryStrategy": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "docs": {
+        "remarks": "Define memory processing logic in your own environment.",
+        "stability": "experimental",
+        "summary": "Use AgentCore memory for event storage with custom triggers.",
+        "example": "\nconst bucket = new s3.Bucket(this, 'memoryBucket', {\n  bucketName: 'test-memory',\n  removalPolicy: cdk.RemovalPolicy.DESTROY,\n  autoDeleteObjects: true,\n});\n\nconst topic = new sns.Topic(this, 'topic');\n\n// Create a custom semantic memory strategy\nconst selfManagedStrategy = agentcore.MemoryStrategy.usingSelfManaged({\n  name: \"selfManagedStrategy\",\n  description: \"self managed memory strategy\",\n  historicalContextWindowSize: 5,\n  invocationConfiguration: {\n    topic: topic,\n    s3Location: {\n      bucketName: bucket.bucketName,\n      objectKey: 'memory/',\n    }\n  },\n  triggerConditions: {\n    messageBasedTrigger: 1,\n    timeBasedTrigger: cdk.Duration.seconds(10),\n    tokenBasedTrigger: 100\n  }\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [selfManagedStrategy],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedMemoryStrategy",
+      "initializer": {
+        "docs": {
+          "stability": "experimental"
+        },
+        "locationInModule": {
+          "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+          "line": 165
+        },
+        "parameters": [
+          {
+            "docs": {
+              "summary": "The type of memory strategy."
+            },
+            "name": "strategyType",
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyType"
+            }
+          },
+          {
+            "name": "props",
+            "type": {
+              "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedStrategyProps"
+            }
+          }
+        ]
+      },
+      "interfaces": [
+        "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy"
+      ],
+      "kind": "class",
+      "locationInModule": {
+        "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+        "line": 148
+      },
+      "methods": [
+        {
+          "docs": {
+            "returns": "The Grant object for chaining",
+            "stability": "experimental",
+            "summary": "Grants the necessary permissions to the role."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 226
+          },
+          "name": "grant",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "parameters": [
+            {
+              "docs": {
+                "summary": "- The grantee to grant permissions to."
+              },
+              "name": "grantee",
+              "type": {
+                "fqn": "aws-cdk-lib.aws_iam.IGrantable"
+              }
+            }
+          ],
+          "returns": {
+            "optional": true,
+            "type": {
+              "fqn": "aws-cdk-lib.aws_iam.Grant"
+            }
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Renders internal attributes to CloudFormation."
+          },
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 185
+          },
+          "name": "render",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "returns": {
+            "type": {
+              "fqn": "aws-cdk-lib.aws_bedrockagentcore.CfnMemory.MemoryStrategyProperty"
+            }
+          }
+        }
+      ],
+      "name": "SelfManagedMemoryStrategy",
+      "properties": [
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Historical context window size for self managed memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 163
+          },
+          "name": "historicalContextWindowSize",
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Invocation configuration for self managed memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 155
+          },
+          "name": "invocationConfiguration",
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.InvocationConfiguration"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The name of the memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 149
+          },
+          "name": "name",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "type": {
+            "primitive": "string"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The type of memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 151
+          },
+          "name": "strategyType",
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyType"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "Trigger conditions for self managed memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 159
+          },
+          "name": "triggerConditions",
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.TriggerConditions"
+          }
+        },
+        {
+          "docs": {
+            "stability": "experimental",
+            "summary": "The description of the memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 150
+          },
+          "name": "description",
+          "optional": true,
+          "overrides": "@aws-cdk/aws-bedrock-agentcore-alpha.IMemoryStrategy",
+          "type": {
+            "primitive": "string"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/strategies/self-managed-strategy:SelfManagedMemoryStrategy"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedStrategyProps": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Configuration parameters for a self managed memory strategy existing built-in default prompts/models.",
+        "example": "\nconst bucket = new s3.Bucket(this, 'memoryBucket', {\n  bucketName: 'test-memory',\n  removalPolicy: cdk.RemovalPolicy.DESTROY,\n  autoDeleteObjects: true,\n});\n\nconst topic = new sns.Topic(this, 'topic');\n\n// Create a custom semantic memory strategy\nconst selfManagedStrategy = agentcore.MemoryStrategy.usingSelfManaged({\n  name: \"selfManagedStrategy\",\n  description: \"self managed memory strategy\",\n  historicalContextWindowSize: 5,\n  invocationConfiguration: {\n    topic: topic,\n    s3Location: {\n      bucketName: bucket.bucketName,\n      objectKey: 'memory/',\n    }\n  },\n  triggerConditions: {\n    messageBasedTrigger: 1,\n    timeBasedTrigger: cdk.Duration.seconds(10),\n    tokenBasedTrigger: 100\n  }\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [selfManagedStrategy],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedStrategyProps",
+      "interfaces": [
+        "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategyCommonProps"
+      ],
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+        "line": 128
+      },
+      "name": "SelfManagedStrategyProps",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "stability": "experimental",
+            "summary": "Invocation configuration for self managed memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 137
+          },
+          "name": "invocationConfiguration",
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.InvocationConfiguration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "4",
+            "remarks": "A larger history window provides more context from past conversations.",
+            "stability": "experimental",
+            "summary": "Define the number of previous events to be included when processing memory."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 133
+          },
+          "name": "historicalContextWindowSize",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- undefined",
+            "stability": "experimental",
+            "summary": "Trigger conditions for self managed memory strategy."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 142
+          },
+          "name": "triggerConditions",
+          "optional": true,
+          "type": {
+            "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.TriggerConditions"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/strategies/self-managed-strategy:SelfManagedStrategyProps"
+    },
+    "@aws-cdk/aws-bedrock-agentcore-alpha.TriggerConditions": {
+      "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
+      "datatype": true,
+      "docs": {
+        "stability": "experimental",
+        "summary": "Trigger conditions for self managed memory strategy When first condition is met, batched payloads are sent to specified S3 bucket.",
+        "example": "\nconst bucket = new s3.Bucket(this, 'memoryBucket', {\n  bucketName: 'test-memory',\n  removalPolicy: cdk.RemovalPolicy.DESTROY,\n  autoDeleteObjects: true,\n});\n\nconst topic = new sns.Topic(this, 'topic');\n\n// Create a custom semantic memory strategy\nconst selfManagedStrategy = agentcore.MemoryStrategy.usingSelfManaged({\n  name: \"selfManagedStrategy\",\n  description: \"self managed memory strategy\",\n  historicalContextWindowSize: 5,\n  invocationConfiguration: {\n    topic: topic,\n    s3Location: {\n      bucketName: bucket.bucketName,\n      objectKey: 'memory/',\n    }\n  },\n  triggerConditions: {\n    messageBasedTrigger: 1,\n    timeBasedTrigger: cdk.Duration.seconds(10),\n    tokenBasedTrigger: 100\n  }\n});\n\n// Create memory with custom strategy\nconst memory = new agentcore.Memory(this, \"MyMemory\", {\n  memoryName: \"my-custom-memory\",\n  description: \"Memory with custom strategy\",\n  expirationDuration: cdk.Duration.days(90),\n  memoryStrategies: [selfManagedStrategy],\n});",
+        "custom": {
+          "exampleMetadata": "fixture=default infused"
+        }
+      },
+      "fqn": "@aws-cdk/aws-bedrock-agentcore-alpha.TriggerConditions",
+      "kind": "interface",
+      "locationInModule": {
+        "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+        "line": 91
+      },
+      "name": "TriggerConditions",
+      "properties": [
+        {
+          "abstract": true,
+          "docs": {
+            "default": "1",
+            "stability": "experimental",
+            "summary": "Triggers memory processing when specified number of new messages is reached."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 96
+          },
+          "name": "messageBasedTrigger",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "- 10 seconds",
+            "remarks": "Value in seconds.",
+            "stability": "experimental",
+            "summary": "Triggers memory processing when the session has been idle for the specified duration."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 102
+          },
+          "name": "timeBasedTrigger",
+          "optional": true,
+          "type": {
+            "fqn": "aws-cdk-lib.Duration"
+          }
+        },
+        {
+          "abstract": true,
+          "docs": {
+            "default": "100",
+            "stability": "experimental",
+            "summary": "Triggers memory processing when the token size reaches the specified threshold."
+          },
+          "immutable": true,
+          "locationInModule": {
+            "filename": "agentcore/memory/strategies/self-managed-strategy.ts",
+            "line": 107
+          },
+          "name": "tokenBasedTrigger",
+          "optional": true,
+          "type": {
+            "primitive": "number"
+          }
+        }
+      ],
+      "symbolId": "agentcore/memory/strategies/self-managed-strategy:TriggerConditions"
+    },
     "@aws-cdk/aws-bedrock-agentcore-alpha.VpcConfigProps": {
       "assembly": "@aws-cdk/aws-bedrock-agentcore-alpha",
       "datatype": true,
@@ -11995,6 +15253,6 @@
       "symbolId": "agentcore/network/network-configuration:VpcConfigProps"
     }
   },
-  "version": "2.221.1-alpha.0",
+  "version": "2.223.0-alpha.0",
   "fingerprint": "**********"
 }