@aws-cdk/aws-bedrock-agentcore-alpha 2.232.0-alpha.0 → 2.232.2-alpha.0

package/.jsii

@@ -8,8 +8,8 @@
     "url": "https://aws.amazon.com"
   },
   "dependencies": {
-    "@aws-cdk/aws-bedrock-alpha": "2.232.0-alpha.0",
-    "aws-cdk-lib": "^2.232.0",
+    "@aws-cdk/aws-bedrock-alpha": "2.232.2-alpha.0",
+    "aws-cdk-lib": "^2.232.2",
     "constructs": "^10.0.0"
   },
   "dependencyClosure": {
@@ -28149,6 +28149,6 @@
       "symbolId": "lib/network/network-configuration:VpcConfigProps"
     }
   },
-  "version": "2.232.0-alpha.0",
+  "version": "2.232.2-alpha.0",
   "fingerprint": "**********"
 }

package/lib/gateway/gateway-base.d.ts

@@ -284,4 +284,9 @@ export declare abstract class GatewayBase extends Resource implements IGateway {
      * Return a metric containing the number of requests served by each target type for this gateway.
      */
     metricTargetType(targetType: string, props?: MetricOptions): Metric;
+    /**
+     * Internal method to create a metric.
+     * @internal
+     */
+    private configureMetric;
 }

package/lib/gateway/gateway-base.js

@@ -25,7 +25,7 @@ var GatewayExceptionLevel;
  *                                Base Class
  *****************************************************************************/
 class GatewayBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayBase", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayBase", version: "2.232.2-alpha.0" };
     constructor(scope, id) {
         super(scope, id);
     }

package/lib/gateway/gateway.d.ts

@@ -340,4 +340,44 @@ export declare class Gateway extends GatewayBase {
      * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-target-MCPservers.html
      */
     addMcpServerTarget(id: string, props: AddMcpServerTargetOptions): GatewayTarget;
+    /**
+     * Creates the service role for the gateway to assume
+     *
+     * The service role starts with minimal permissions. Additional permissions
+     * are added automatically when targets are configured:
+     * - KMS encryption: Automatically grants encrypt/decrypt permissions
+     *
+     * For other target types, manually grant permissions using standard CDK grant methods:
+     * @internal
+     */
+    private createGatewayRole;
+    /**
+     * Validates the gateway name format
+     * Pattern: ^([0-9a-zA-Z][-]?){1,100}$
+     * Max length: 48 characters
+     * @param name The gateway name to validate
+     * @throws Error if the name is invalid
+     * @internal
+     */
+    private validateGatewayName;
+    /**
+     * Validates the description format
+     * Max length: 200 characters
+     * @param description The description to validate
+     * @throws Error if validation fails
+     * @internal
+     */
+    private validateDescription;
+    /**
+     * Creates a default Cognito authorizer for the gateway
+     * Provisions a Cognito User Pool and configures JWT authentication
+     * @internal
+     */
+    private createDefaultCognitoAuthorizerConfig;
+    /**
+     * Creates a default MCP protocol configuration for the gateway
+     * Provides sensible defaults for MCP protocol settings
+     * @internal
+     */
+    private createDefaultMcpProtocolConfiguration;
 }

package/lib/gateway/gateway.js

@@ -87,7 +87,7 @@ let Gateway = (() => {
             Gateway = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.Gateway", version: "2.232.0-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.Gateway", version: "2.232.2-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-bedrock-agentcore-alpha.Gateway';
         /**

package/lib/gateway/inbound-auth/authorizer.d.ts

@@ -19,6 +19,11 @@ export interface IGatewayAuthorizerConfig {
      * The authorizer type
      */
     readonly authorizerType: GatewayAuthorizerType;
+    /**
+     * The authorizer configuration in CFN format
+     * @internal
+     */
+    _render(): any;
 }
 /******************************************************************************
  *                                  Custom JWT
@@ -55,6 +60,10 @@ export declare class CustomJwtAuthorizer implements IGatewayAuthorizerConfig {
     private readonly allowedAudience?;
     private readonly allowedClients?;
     constructor(config: CustomJwtConfiguration);
+    /**
+     * @internal
+     */
+    _render(): any;
 }
 /******************************************************************************
  *                               AWS IAM
@@ -65,6 +74,10 @@ export declare class CustomJwtAuthorizer implements IGatewayAuthorizerConfig {
  */
 export declare class IamAuthorizer implements IGatewayAuthorizerConfig {
     readonly authorizerType = GatewayAuthorizerType.AWS_IAM;
+    /**
+     * @internal
+     */
+    _render(): any;
 }
 /******************************************************************************
  *                               Factory

package/lib/gateway/inbound-auth/authorizer.js

@@ -21,7 +21,7 @@ var GatewayAuthorizerType;
  * Custom JWT authorizer configuration implementation
  */
 class CustomJwtAuthorizer {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CustomJwtAuthorizer", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CustomJwtAuthorizer", version: "2.232.2-alpha.0" };
     authorizerType = GatewayAuthorizerType.CUSTOM_JWT;
     discoveryUrl;
     allowedAudience;
@@ -62,7 +62,7 @@ exports.CustomJwtAuthorizer = CustomJwtAuthorizer;
  *
  */
 class IamAuthorizer {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.IamAuthorizer", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.IamAuthorizer", version: "2.232.2-alpha.0" };
     authorizerType = GatewayAuthorizerType.AWS_IAM;
     /**
      * @internal
@@ -78,7 +78,7 @@ exports.IamAuthorizer = IamAuthorizer;
  * Factory class for creating Gateway Authorizers
  */
 class GatewayAuthorizer {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayAuthorizer", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayAuthorizer", version: "2.232.2-alpha.0" };
     /**
      * AWS IAM authorizer instance
      */

package/lib/gateway/outbound-auth/api-key.d.ts

@@ -1,3 +1,5 @@
+import { Grant, IRole } from 'aws-cdk-lib/aws-iam';
+import { CredentialProviderType, ICredentialProviderConfig } from './credential-provider';
 /******************************************************************************
  *                                 API KEY
  *****************************************************************************/
@@ -22,6 +24,14 @@ export interface ApiKeyAdditionalConfiguration {
      */
     readonly credentialPrefix?: string;
 }
+/**
+ * API Key credential location type
+ * @internal
+ */
+export declare enum ApiKeyCredentialLocationType {
+    HEADER = "HEADER",
+    QUERY_PARAMETER = "QUERY_PARAMETER"
+}
 /**
  * API Key location within the request
  */
@@ -76,3 +86,32 @@ export interface ApiKeyCredentialProviderProps {
      */
     readonly credentialLocation?: ApiKeyCredentialLocation;
 }
+/**
+ * API Key credential provider configuration implementation
+ * Can be used with OpenAPI targets
+ * @internal
+ */
+export declare class ApiKeyCredentialProviderConfiguration implements ICredentialProviderConfig {
+    readonly credentialProviderType = CredentialProviderType.API_KEY;
+    /**
+     * The ARN of the API key provider
+     */
+    readonly providerArn: string;
+    /**
+     * The ARN of the Secrets Manager secret
+     */
+    readonly secretArn: string;
+    /**
+     * The location configuration for the API key credential
+     */
+    readonly credentialLocation: ApiKeyCredentialLocation;
+    constructor(configuration: ApiKeyCredentialProviderProps);
+    /**
+     * Grant the needed permissions to the role for API key authentication
+     */
+    grantNeededPermissionsToRole(role: IRole): Grant | undefined;
+    /**
+     * @internal
+     */
+    _render(): any;
+}

package/lib/gateway/outbound-auth/api-key.js

@@ -19,7 +19,7 @@ var ApiKeyCredentialLocationType;
  * API Key location within the request
  */
 class ApiKeyCredentialLocation {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiKeyCredentialLocation", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiKeyCredentialLocation", version: "2.232.2-alpha.0" };
     /**
      * Create a header-based API key credential location
      * @param config - Optional configuration for the credential location

package/lib/gateway/outbound-auth/credential-provider.d.ts

@@ -1,3 +1,5 @@
+import { IResolvable } from 'aws-cdk-lib';
+import { CfnGatewayTarget } from 'aws-cdk-lib/aws-bedrockagentcore';
 import { Grant, IRole } from 'aws-cdk-lib/aws-iam';
 import { ApiKeyCredentialProviderProps } from './api-key';
 import { OAuthConfiguration } from './oauth';
@@ -32,6 +34,11 @@ export interface ICredentialProviderConfig {
      * The credential provider type
      */
     readonly credentialProviderType: CredentialProviderType;
+    /**
+     * Renders as CFN Property
+     *  @internal
+     */
+    _render(): CfnGatewayTarget.CredentialProviderConfigurationProperty | IResolvable;
     /**
      * Grant the role the permissions
      */

package/lib/gateway/outbound-auth/credential-provider.js

@@ -31,7 +31,7 @@ var CredentialProviderType;
  * Factory class for creating different Gateway Credential Providers
  */
 class GatewayCredentialProvider {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayCredentialProvider", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayCredentialProvider", version: "2.232.2-alpha.0" };
     /**
      * Create an API key credential provider from Identity ARN
      * Use this method when you have the Identity ARN as a string

package/lib/gateway/outbound-auth/iam-role.d.ts

@@ -1,4 +1,28 @@
 /******************************************************************************
  *                                 IAM Role
  *****************************************************************************/
-export {};
+import { Grant, IRole } from 'aws-cdk-lib/aws-iam';
+import { CredentialProviderType, ICredentialProviderConfig } from './credential-provider';
+/**
+ * Gateway IAM Role credential provider configuration implementation
+ * Can be used with Lambda and Smithy targets
+ * @internal
+ */
+export declare class GatewayIamRoleCredentialProviderConfig implements ICredentialProviderConfig {
+    readonly credentialProviderType = CredentialProviderType.GATEWAY_IAM_ROLE;
+    constructor();
+    /**
+     * @internal
+     */
+    _render(): any;
+    /**
+     * No-op for IAM role authentication - no additional permissions are required.
+     * When using IAM role authentication for outbound calls, the gateway uses its own execution
+     * role to authenticate with the target endpoint. Unlike API Key and OAuth credential providers
+     * which require permissions to access external credential stores (Secrets Manager, Token Vault),
+     * IAM role authentication leverages AWS IAM's native authentication without additional resources.
+     * @param role The gateway's execution role (unused - no credential provider permissions needed)
+     * @returns undefined - no additional credential provider permissions to grant
+     */
+    grantNeededPermissionsToRole(role: IRole): Grant | undefined;
+}

package/lib/gateway/outbound-auth/oauth.d.ts

@@ -1,3 +1,5 @@
+import { Grant, IRole } from 'aws-cdk-lib/aws-iam';
+import { CredentialProviderType, ICredentialProviderConfig } from './credential-provider';
 /******************************************************************************
  *                                OAuth
  *****************************************************************************/
@@ -43,3 +45,36 @@ export interface OAuthConfiguration {
      */
     readonly customParameters?: Record<string, string>;
 }
+/**
+ * OAuth credential provider configuration implementation
+ * Can be used with OpenAPI targets
+ * @internal
+ */
+export declare class OAuthCredentialProviderConfiguration implements ICredentialProviderConfig {
+    readonly credentialProviderType = CredentialProviderType.OAUTH;
+    /**
+     * The ARN of the OAuth provider
+     */
+    readonly providerArn: string;
+    /**
+     * The ARN of the Secrets Manager secret
+     */
+    readonly secretArn: string;
+    /**
+     * The OAuth scopes to request
+     */
+    readonly scopes: string[];
+    /**
+     * Custom parameters for the OAuth flow
+     */
+    readonly customParameters?: Record<string, string>;
+    constructor(configuration: OAuthConfiguration);
+    /**
+     * Grant the needed permissions to the role for OAuth authentication
+     */
+    grantNeededPermissionsToRole(role: IRole): Grant | undefined;
+    /**
+     * @internal
+     */
+    _render(): any;
+}

package/lib/gateway/protocol.d.ts

@@ -1,3 +1,17 @@
+import { CfnGateway } from 'aws-cdk-lib/aws-bedrockagentcore';
+/******************************************************************************
+ *                                 Enums
+ *****************************************************************************/
+/**
+ * The type of protocols
+ * @internal
+ */
+export declare enum GatewayProtocolType {
+    /**
+     * MCP (Model Context Protocol) protocol type.
+     */
+    MCP = "MCP"
+}
 /******************************************************************************
  *                                Protocol Configuration
  *****************************************************************************/
@@ -9,6 +23,11 @@ export interface IGatewayProtocolConfig {
      * The protocol type
      */
     readonly protocolType: string;
+    /**
+     * Returns internal info as the CFN protocol configuration object
+     * @internal
+     */
+    _render(): any;
 }
 /**
  * Factory class for instantiating Gateway Protocols
@@ -95,4 +114,8 @@ export declare class McpProtocolConfiguration implements IGatewayProtocolConfig
      */
     readonly instructions?: string;
     constructor(props?: McpConfiguration);
+    /**
+     * @internal
+     */
+    _render(): CfnGateway.GatewayProtocolConfigurationProperty;
 }

package/lib/gateway/protocol.js

@@ -21,7 +21,7 @@ var GatewayProtocolType;
  * Factory class for instantiating Gateway Protocols
  */
 class GatewayProtocol {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayProtocol", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayProtocol", version: "2.232.2-alpha.0" };
     /**
      * Create an MCP protocol configuration
      * @param props - Optional MCP configuration properties
@@ -75,7 +75,7 @@ var McpGatewaySearchType;
  * MCP (Model Context Protocol) configuration implementation
  */
 class McpProtocolConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpProtocolConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpProtocolConfiguration", version: "2.232.2-alpha.0" };
     protocolType;
     /**
      * The supported MCP protocol versions

package/lib/gateway/targets/schema/api-schema.d.ts

@@ -42,6 +42,11 @@ export declare abstract class ApiSchema extends TargetSchema {
      */
     readonly bucketOwnerAccountId?: string;
     protected constructor(s3File?: Location, bucketOwnerAccountId?: string, inlineSchema?: string);
+    /**
+     * Format as CFN properties
+     * @internal This is an internal core function and should not be called directly.
+     */
+    abstract _render(): any;
 }
 /**
  * API Schema from a local asset.
@@ -54,6 +59,11 @@ export declare class AssetApiSchema extends ApiSchema {
     private readonly options;
     private asset?;
     constructor(path: string, options?: s3_assets.AssetOptions);
+    /**
+     * Gets the file path for internal validation purposes
+     * @internal
+     */
+    _getFilePath(): string;
     /**
      * Binds this API schema to a construct scope.
      * This method initializes the S3 asset if it hasn't been initialized yet.
@@ -62,6 +72,11 @@ export declare class AssetApiSchema extends ApiSchema {
      * @param scope - The construct scope to bind to
      */
     bind(scope: Construct): void;
+    /**
+     * Format as CFN properties
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(): any;
     grantPermissionsToRole(role: IRole): void;
 }
 /**
@@ -72,6 +87,10 @@ export declare class AssetApiSchema extends ApiSchema {
 export declare class InlineApiSchema extends ApiSchema {
     private readonly schema;
     constructor(schema: string);
+    /**
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(): any;
     grantPermissionsToRole(_role: IRole): void;
     bind(scope: Construct): void;
 }
@@ -82,6 +101,10 @@ export declare class S3ApiSchema extends ApiSchema {
     private readonly location;
     readonly bucketOwnerAccountId?: string | undefined;
     constructor(location: Location, bucketOwnerAccountId?: string | undefined);
+    /**
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(): any;
     bind(scope: Construct): void;
     grantPermissionsToRole(role: IRole): void;
 }

package/lib/gateway/targets/schema/api-schema.js

@@ -24,7 +24,7 @@ class ApiSchemaError extends Error {
  * Represents the concept of an API Schema for a Gateway Target.
  */
 class ApiSchema extends base_schema_1.TargetSchema {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiSchema", version: "2.232.2-alpha.0" };
     /**
      * Creates an API Schema from a local file.
      * @param path - the path to the local file containing the OpenAPI schema for the action group
@@ -82,7 +82,7 @@ exports.ApiSchema = ApiSchema;
 class AssetApiSchema extends ApiSchema {
     path;
     options;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetApiSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetApiSchema", version: "2.232.2-alpha.0" };
     asset;
     constructor(path, options = {}) {
         super();
@@ -144,7 +144,7 @@ exports.AssetApiSchema = AssetApiSchema;
  */
 class InlineApiSchema extends ApiSchema {
     schema;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineApiSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineApiSchema", version: "2.232.2-alpha.0" };
     constructor(schema) {
         super(undefined, undefined, schema);
         this.schema = schema;
@@ -174,7 +174,7 @@ exports.InlineApiSchema = InlineApiSchema;
 class S3ApiSchema extends ApiSchema {
     location;
     bucketOwnerAccountId;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ApiSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ApiSchema", version: "2.232.2-alpha.0" };
     constructor(location, bucketOwnerAccountId) {
         super(location, bucketOwnerAccountId, undefined);
         this.location = location;

package/lib/gateway/targets/schema/base-schema.d.ts

@@ -1 +1,24 @@
-export {};
+import { IRole } from 'aws-cdk-lib/aws-iam';
+import { Construct } from 'constructs';
+/**
+ * Base abstract class for all schema types used in Bedrock AgentCore Gateway Targets.
+ * This provides a common interface for both API schemas and tool schemas.
+ * @internal
+ */
+export declare abstract class TargetSchema {
+    /**
+     * Format as CFN properties
+     *
+     * @internal This is an internal core function and should not be called directly.
+     */
+    abstract _render(): any;
+    /**
+     * Bind the schema to a construct
+     */
+    abstract bind(scope: Construct): void;
+    /**
+     * Grant permissions to the role
+     *
+     */
+    abstract grantPermissionsToRole(role: IRole): void;
+}

package/lib/gateway/targets/schema/tool-schema.d.ts

@@ -3,6 +3,23 @@ import { IBucket, Location } from 'aws-cdk-lib/aws-s3';
 import * as s3_assets from 'aws-cdk-lib/aws-s3-assets';
 import { Construct } from 'constructs';
 import { TargetSchema } from './base-schema';
+/******************************************************************************
+ *                                Tool Schema Configuration
+ *****************************************************************************/
+/**
+ * Abstract interface for tool schema configuration
+ * @internal
+ */
+export interface IToolSchemaConfiguration {
+    /**
+     * The tool schema configuration type
+     */
+    readonly toolSchemaType: string;
+    /**
+     * The tool schema configuration object
+     */
+    readonly configuration: any;
+}
 /**
  * Schema definition types
  */
@@ -119,6 +136,11 @@ export declare abstract class ToolSchema extends TargetSchema {
      */
     readonly bucketOwnerAccountId?: string;
     protected constructor(s3File?: Location, bucketOwnerAccountId?: string, inlineSchema?: ToolDefinition[]);
+    /**
+     * Format as CFN properties
+     * @internal This is an internal core function and should not be called directly.
+     */
+    abstract _render(): any;
 }
 /**
  * Tool Schema from a local asset.
@@ -139,6 +161,11 @@ export declare class AssetToolSchema extends ToolSchema {
      * @param scope - The construct scope to bind to
      */
     bind(scope: Construct): void;
+    /**
+     * Format as CFN properties
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(): any;
     grantPermissionsToRole(role: IRole): void;
 }
 /**
@@ -148,6 +175,10 @@ export declare class AssetToolSchema extends ToolSchema {
 export declare class InlineToolSchema extends ToolSchema {
     private readonly schema;
     constructor(schema: ToolDefinition[]);
+    /**
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(): any;
     bind(scope: Construct): void;
     grantPermissionsToRole(_role: IRole): void;
 }
@@ -158,6 +189,10 @@ export declare class S3ToolSchema extends ToolSchema {
     private readonly location;
     readonly bucketOwnerAccountId?: string | undefined;
     constructor(location: Location, bucketOwnerAccountId?: string | undefined);
+    /**
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(): any;
     bind(scope: Construct): void;
     grantPermissionsToRole(role: IRole): void;
 }

package/lib/gateway/targets/schema/tool-schema.js

@@ -39,7 +39,7 @@ class ToolSchemaError extends Error {
  *                       TOOL SCHEMA CLASS
  *****************************************************************************/
 class ToolSchema extends base_schema_1.TargetSchema {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ToolSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ToolSchema", version: "2.232.2-alpha.0" };
     /**
      * Creates a tool Schema from a local file.
      * @param path - the path to the local file containing the function schema for the tool
@@ -97,7 +97,7 @@ exports.ToolSchema = ToolSchema;
 class AssetToolSchema extends ToolSchema {
     path;
     options;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetToolSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetToolSchema", version: "2.232.2-alpha.0" };
     asset;
     constructor(path, options = {}) {
         super();
@@ -150,7 +150,7 @@ exports.AssetToolSchema = AssetToolSchema;
  */
 class InlineToolSchema extends ToolSchema {
     schema;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineToolSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineToolSchema", version: "2.232.2-alpha.0" };
     constructor(schema) {
         super(undefined, undefined, schema);
         this.schema = schema;
@@ -180,7 +180,7 @@ exports.InlineToolSchema = InlineToolSchema;
 class S3ToolSchema extends ToolSchema {
     location;
     bucketOwnerAccountId;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ToolSchema", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ToolSchema", version: "2.232.2-alpha.0" };
     constructor(location, bucketOwnerAccountId) {
         super(location, bucketOwnerAccountId, undefined);
         this.location = location;

package/lib/gateway/targets/target-base.js

@@ -39,7 +39,7 @@ var McpTargetType;
  * permission management and property definitions.
  */
 class GatewayTargetBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayTargetBase", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayTargetBase", version: "2.232.2-alpha.0" };
     /**
      * Grants IAM actions to the IAM Principal
      *

package/lib/gateway/targets/target-configuration.d.ts

@@ -29,6 +29,11 @@ export interface ITargetConfiguration {
      * Sets up permissions and dependencies
      */
     bind(scope: Construct, gateway: IGateway): TargetConfigurationConfig;
+    /**
+     * Renders the configuration as CloudFormation properties
+     * @internal
+     */
+    _render(): any;
 }
 /******************************************************************************
  *                     MCP Target Configuration Base
@@ -51,6 +56,11 @@ export declare abstract class McpTargetConfiguration implements ITargetConfigura
      * Renders the MCP-specific configuration
      */
     protected abstract renderMcpConfiguration(): any;
+    /**
+     * Renders the configuration as CloudFormation properties
+     * @internal
+     */
+    _render(): any;
 }
 /******************************************************************************
  *                     Lambda Target Configuration
@@ -207,4 +217,14 @@ export declare class McpServerTargetConfiguration extends McpTargetConfiguration
      * Renders the MCP-specific configuration
      */
     protected renderMcpConfiguration(): any;
+    /**
+     * Validates the MCP server endpoint
+     * - Must use HTTPS protocol
+     * - Should be properly URL encoded
+     *
+     * @param endpoint The endpoint URL to validate
+     * @throws ValidationError if the endpoint is invalid
+     * @internal
+     */
+    private validateEndpoint;
 }