@aws-cdk/aws-bedrock-agentcore-alpha 2.232.0-alpha.0 → 2.232.2-alpha.0

package/lib/gateway/targets/target-configuration.js

@@ -16,7 +16,7 @@ const validation_helpers_1 = require("../validation-helpers");
  * Provides common functionality for all MCP target types
  */
 class McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpTargetConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpTargetConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Renders the configuration as CloudFormation properties
      * @internal
@@ -38,7 +38,7 @@ exports.McpTargetConfiguration = McpTargetConfiguration;
  * allowing the gateway to invoke the function to provide tool capabilities.
  */
 class LambdaTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.LambdaTargetConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.LambdaTargetConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Create a Lambda target configuration
      *
@@ -128,7 +128,7 @@ exports.LambdaTargetConfiguration = LambdaTargetConfiguration;
  * allowing the gateway to transform API operations into tool calls.
  */
 class OpenApiTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.OpenApiTargetConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.OpenApiTargetConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Create an OpenAPI target configuration
      *
@@ -246,7 +246,7 @@ exports.OpenApiTargetConfiguration = OpenApiTargetConfiguration;
  * allowing the gateway to transform Smithy operations into tool calls.
  */
 class SmithyTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.SmithyTargetConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.SmithyTargetConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Create a Smithy target configuration
      *
@@ -328,7 +328,7 @@ exports.SmithyTargetConfiguration = SmithyTargetConfiguration;
  * synchronization.
  */
 class McpServerTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpServerTargetConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpServerTargetConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Create an MCP server target configuration
      *

package/lib/gateway/targets/target.d.ts

@@ -309,4 +309,37 @@ export declare class GatewayTarget extends GatewayTargetBase implements IMcpGate
      * MCP server's tools have changed.
      */
     grantSync(grantee: iam.IGrantable): iam.Grant;
+    /**
+     * Determines the credential provider configurations based on target type
+     *
+     * - Lambda & Smithy: Default to IAM role if not provided
+     * - MCP Server: Return undefined if not provided (service handles NoAuth)
+     * - OpenAPI: Return as-is (must be explicitly provided)
+     *
+     * @param providedCredentials The credentials from props
+     * @returns The credential configurations to use, or undefined
+     * @internal
+     */
+    private _getTargetSpecificCredentials;
+    /**
+     * Renders credential provider configurations for CloudFormation
+     * @internal
+     */
+    private _renderCredentialProviderConfigurations;
+    /**
+     * Validates the gateway target name format
+     * Pattern: ^([0-9a-zA-Z][-]?){1,100}$
+     * Max length: 100 characters
+     * @param gatewayTargetName The gateway target name to validate
+     * @throws Error if the name is invalid
+     * @internal
+     */
+    private validateGatewayTargetName;
+    /**
+     * Validates the description format
+     * Must be between 1 and 200 characters
+     * @throws Error if validation fails
+     * @internal
+     */
+    private validateDescription;
 }

package/lib/gateway/targets/target.js

@@ -78,7 +78,7 @@ let GatewayTarget = (() => {
             GatewayTarget = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayTarget", version: "2.232.0-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayTarget", version: "2.232.2-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-bedrock-agentcore-alpha.GatewayTarget';
         /**

package/lib/gateway/validation-helpers.d.ts

@@ -1 +1,65 @@
+/**
+ * Error thrown when validation fails
+ * @internal
+ */
+export declare class ValidationError extends Error {
+    constructor(message: string);
+}
+interface IntervalValidation {
+    fieldName: string;
+    minLength: number;
+    maxLength: number;
+}
+interface StringLengthValidation extends IntervalValidation {
+    value: string;
+}
+/**
+ * Validates the length of a string field against minimum and maximum constraints.
+ * @param value - The string value to validate
+ * @param fieldName - Name of the field being validated (for error messages)
+ * @param minLength - Minimum allowed length (defaults to 0)
+ * @param maxLength - Maximum allowed length
+ * @returns true if validation passes
+ * @throws Error if validation fails with current length information
+ * @internal
+ */
+export declare function validateStringField(params: StringLengthValidation): string[];
+/**
+ * Validates a string field against a regex pattern.
+ * @param value - The string value to validate
+ * @param fieldName - Name of the field being validated (for error messages)
+ * @param pattern - Regular expression pattern to test against
+ * @param customMessage - Optional custom error message
+ * @returns true if validation passes
+ * @throws Error if validation fails with detailed message
+ * @internal
+ */
+export declare function validateFieldPattern(value: string, fieldName: string, pattern: RegExp, customMessage?: string): string[];
+/**
+ * @internal
+ */
+export type ValidationFn<T> = (param: T) => string[];
+/**
+ * OpenAPI schema validation parameters
+ * @internal
+ */
+export interface OpenApiSchemaValidationParams {
+    /**
+     * The OpenAPI schema to validate (as a string)
+     */
+    schema: string;
+    /**
+     * Optional name for the schema (for error messages)
+     */
+    schemaName?: string;
+}
+/**
+ * Validates an OpenAPI schema against Gateway requirements
+ * Based on AWS documentation: https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-schema-openapi.html
+ *
+ * @param params - The validation parameters
+ * @returns Array of validation error messages (empty if valid)
+ * @internal
+ */
+export declare function validateOpenApiSchema(params: OpenApiSchemaValidationParams): string[];
 export {};

package/lib/memory/memory-strategy.d.ts

@@ -14,6 +14,19 @@ import * as bedrockagentcore from 'aws-cdk-lib/aws-bedrockagentcore';
 import * as iam from 'aws-cdk-lib/aws-iam';
 import { ManagedMemoryStrategy, ManagedStrategyProps } from './strategies/managed-strategy';
 import { SelfManagedMemoryStrategy, SelfManagedStrategyProps } from './strategies/self-managed-strategy';
+/******************************************************************************
+ *                              CONSTANTS
+ *****************************************************************************/
+/**
+ * Minimum length for memory strategy name
+ * @internal
+ */
+export declare const MEMORY_NAME_MIN_LENGTH = 1;
+/**
+ * Maximum length for memory strategy name
+ * @internal
+ */
+export declare const MEMORY_NAME_MAX_LENGTH = 48;
 /**
  * Long-term memory extraction strategy types.
  */

package/lib/memory/memory-strategy.js

@@ -53,7 +53,7 @@ var MemoryStrategyType;
  * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/memory-strategies.html
  */
 class MemoryStrategy {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategy", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryStrategy", version: "2.232.2-alpha.0" };
     /**
      * Default strategies for organizing and extracting memory data, each optimized for specific use cases.
      * This strategy compresses conversations into concise overviews, preserving essential context and key insights for quick recall.

package/lib/memory/memory.d.ts

@@ -496,6 +496,12 @@ export declare class Memory extends MemoryBase {
      * @default - No memory strategies.
      */
     addMemoryStrategy(memoryStrategy: IMemoryStrategy): void;
+    /**
+     * Creates execution role needed for the memory to access AWS services
+     * @returns The created role
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _createMemoryRole;
     /**
      * Validates the memory tags format
      * @param tags The tags object to validate
@@ -514,4 +520,12 @@ export declare class Memory extends MemoryBase {
      * @returns Array of validation error messages, empty if valid
      */
     private _validateMemoryExpirationDays;
+    /**
+     * Render the memory strategies.
+     *
+     * @returns Array of MemoryStrategyProperty objects in CloudFormation format, or undefined if no strategies are defined
+     * @default - undefined if no strategies are defined or array is empty
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _renderMemoryStrategies;
 }

package/lib/memory/memory.js

@@ -99,7 +99,7 @@ const MEMORY_EXPIRATION_DAYS_MAX = 365;
  * Contains methods and attributes valid for Memories either created with CDK or imported.
  */
 class MemoryBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.MemoryBase", version: "2.232.2-alpha.0" };
     constructor(scope, id) {
         super(scope, id);
     }
@@ -352,7 +352,7 @@ let Memory = (() => {
             Memory = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.Memory", version: "2.232.0-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.Memory", version: "2.232.2-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-bedrock-agentcore-alpha.Memory';
         /**

package/lib/memory/strategies/managed-strategy.js

@@ -25,7 +25,7 @@ const PROMPT_MAX_LENGTH = 30000;
  * with specific models and prompt templates.
  */
 class ManagedMemoryStrategy {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ManagedMemoryStrategy", version: "2.232.2-alpha.0" };
     name;
     description;
     /**

package/lib/memory/strategies/self-managed-strategy.js

@@ -86,7 +86,7 @@ const DEFAULT_TOKEN_BASED_TRIGGER = 100;
  * Use AgentCore memory for event storage with custom triggers. Define memory processing logic in your own environment.
  */
 class SelfManagedMemoryStrategy {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedMemoryStrategy", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.SelfManagedMemoryStrategy", version: "2.232.2-alpha.0" };
     name;
     description;
     strategyType;

package/lib/network/network-configuration.d.ts

@@ -1,3 +1,4 @@
+import { CfnBrowserCustom, CfnCodeInterpreterCustom, CfnRuntime } from 'aws-cdk-lib/aws-bedrockagentcore';
 import * as ec2 from 'aws-cdk-lib/aws-ec2';
 import { Construct } from 'constructs';
 /**
@@ -89,6 +90,12 @@ export declare class BrowserNetworkConfiguration extends NetworkConfiguration {
      * @returns A BrowserNetworkConfiguration.
      */
     static usingVpc(scope: Construct, vpcConfig: VpcConfigProps): BrowserNetworkConfiguration;
+    /**
+     * Renders the network configuration as a CloudFormation property.
+     * @param browserConnections - The connections object to the browser.
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(browserConnections?: ec2.Connections): CfnBrowserCustom.BrowserNetworkConfigurationProperty;
 }
 /**
  * Network configuration for the Code Interpreter tool.
@@ -112,6 +119,12 @@ export declare class CodeInterpreterNetworkConfiguration extends NetworkConfigur
      * @returns A CodeInterpreterNetworkConfiguration.
      */
     static usingVpc(scope: Construct, vpcConfig: VpcConfigProps): CodeInterpreterNetworkConfiguration;
+    /**
+     * Renders the network configuration as a CloudFormation property.
+     * @param codeInterpreterConnections - The connections object to the code interpreter.
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(codeInterpreterConnections?: ec2.Connections): CfnCodeInterpreterCustom.CodeInterpreterNetworkConfigurationProperty;
 }
 /**
  * Network configuration for the Runtime.
@@ -130,4 +143,10 @@ export declare class RuntimeNetworkConfiguration extends NetworkConfiguration {
      * @returns A RuntimeNetworkConfiguration.
      */
     static usingVpc(scope: Construct, vpcConfig: VpcConfigProps): RuntimeNetworkConfiguration;
+    /**
+     * Renders the network configuration as a CloudFormation property.
+     * @param runtimeConnections - The connections object to the runtime.
+     * @internal This is an internal core function and should not be called directly.
+     */
+    _render(_runtimeConnections?: ec2.Connections): CfnRuntime.NetworkConfigurationProperty;
 }

package/lib/network/network-configuration.js

@@ -8,7 +8,7 @@ const ec2 = require("aws-cdk-lib/aws-ec2");
  * Abstract base class for network configuration.
  */
 class NetworkConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.NetworkConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.NetworkConfiguration", version: "2.232.2-alpha.0" };
     /**
      * The network mode to use.
      * Configure the security level for agent
@@ -87,7 +87,7 @@ exports.NetworkConfiguration = NetworkConfiguration;
  * Network configuration for the Browser tool.
  */
 class BrowserNetworkConfiguration extends NetworkConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.BrowserNetworkConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.BrowserNetworkConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Creates a public network configuration. PUBLIC is the default network mode.
      * @returns A BrowserNetworkConfiguration.
@@ -133,7 +133,7 @@ exports.BrowserNetworkConfiguration = BrowserNetworkConfiguration;
  * Network configuration for the Code Interpreter tool.
  */
 class CodeInterpreterNetworkConfiguration extends NetworkConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CodeInterpreterNetworkConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CodeInterpreterNetworkConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Creates a public network configuration.
      * @returns A CodeInterpreterNetworkConfiguration.
@@ -187,7 +187,7 @@ exports.CodeInterpreterNetworkConfiguration = CodeInterpreterNetworkConfiguratio
  * Network configuration for the Runtime.
  */
 class RuntimeNetworkConfiguration extends NetworkConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeNetworkConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeNetworkConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Creates a public network configuration. PUBLIC is the default network mode.
      * @returns A RuntimeNetworkConfiguration.

package/lib/runtime/runtime-artifact.d.ts

@@ -10,6 +10,7 @@
  *  OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
  *  and limitations under the License.
  */
+import { CfnRuntime } from 'aws-cdk-lib/aws-bedrockagentcore';
 import * as ecr from 'aws-cdk-lib/aws-ecr';
 import * as assets from 'aws-cdk-lib/aws-ecr-assets';
 import * as s3 from 'aws-cdk-lib/aws-s3';
@@ -74,4 +75,9 @@ export declare abstract class AgentRuntimeArtifact {
      * Called when the image is used by a Runtime to handle side effects like permissions
      */
     abstract bind(scope: Construct, runtime: Runtime): void;
+    /**
+     * Render the artifact configuration for CloudFormation
+     * @internal
+     */
+    abstract _render(): CfnRuntime.AgentRuntimeArtifactProperty;
 }

package/lib/runtime/runtime-artifact.js

@@ -47,7 +47,7 @@ var AgentCoreRuntime;
  * Provides methods to reference container images from ECR repositories or local assets.
  */
 class AgentRuntimeArtifact {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AgentRuntimeArtifact", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AgentRuntimeArtifact", version: "2.232.2-alpha.0" };
     /**
      * Reference an image in an ECR repository
      */

package/lib/runtime/runtime-authorizer-configuration.d.ts

@@ -10,6 +10,7 @@
  *  OR CONDITIONS OF ANY KIND, express or implied. See the License for the specific language governing permissions
  *  and limitations under the License.
  */
+import { CfnRuntime } from 'aws-cdk-lib/aws-bedrockagentcore';
 import { IUserPool, IUserPoolClient } from 'aws-cdk-lib/aws-cognito';
 /**
  * Abstract base class for runtime authorizer configurations.
@@ -53,4 +54,9 @@ export declare abstract class RuntimeAuthorizerConfiguration {
      * @returns RuntimeAuthorizerConfiguration for OAuth authentication
      */
     static usingOAuth(discoveryUrl: string, clientId: string, allowedAudience?: string[]): RuntimeAuthorizerConfiguration;
+    /**
+     * Render the authorizer configuration for CloudFormation
+     * @internal
+     */
+    abstract _render(): CfnRuntime.AuthorizerConfigurationProperty | undefined;
 }

package/lib/runtime/runtime-authorizer-configuration.js

@@ -21,7 +21,7 @@ const validation_helpers_1 = require("./validation-helpers");
  * Provides static factory methods to create different authentication types.
  */
 class RuntimeAuthorizerConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeAuthorizerConfiguration", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeAuthorizerConfiguration", version: "2.232.2-alpha.0" };
     /**
      * Use IAM authentication (default).
      * Requires AWS credentials to sign requests using SigV4.

package/lib/runtime/runtime-base.d.ts

@@ -162,6 +162,12 @@ export declare abstract class RuntimeBase extends Resource implements IBedrockAg
      * configured.
      */
     get connections(): ec2.Connections;
+    /**
+     * The actual Connections object for this Runtime. This may be unset in the event that a VPC has not
+     * been configured.
+     * @internal
+     */
+    protected _connections: ec2.Connections | undefined;
     constructor(scope: Construct, id: string);
     /**
      * Grant the runtime specific actions on AWS resources

package/lib/runtime/runtime-base.js

@@ -26,7 +26,7 @@ const validation_helpers_1 = require("./validation-helpers");
  * Base class for Agent Runtime
  */
 class RuntimeBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeBase", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeBase", version: "2.232.2-alpha.0" };
     /**
      * An accessor for the Connections object that will fail if this Runtime does not have a VPC
      * configured.

package/lib/runtime/runtime-endpoint-base.js

@@ -22,7 +22,7 @@ const aws_cdk_lib_1 = require("aws-cdk-lib");
  * Base class for Runtime Endpoint
  */
 class RuntimeEndpointBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeEndpointBase", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeEndpointBase", version: "2.232.2-alpha.0" };
     constructor(scope, id) {
         super(scope, id);
     }

package/lib/runtime/runtime-endpoint.d.ts

@@ -134,6 +134,21 @@ export declare class RuntimeEndpoint extends RuntimeEndpointBase {
     readonly lastUpdatedAt?: string;
     private readonly endpointResource;
     constructor(scope: Construct, id: string, props: RuntimeEndpointProps);
+    /**
+     * Renders the agent runtime ID for CloudFormation
+     * @internal
+     */
+    private renderAgentRuntimeId;
+    /**
+     * Renders the agent runtime version for CloudFormation
+     * @internal
+     */
+    private renderAgentRuntimeVersion;
+    /**
+     * Renders the description for CloudFormation
+     * @internal
+     */
+    private renderDescription;
     /**
      * Validates the endpoint name format
      * Pattern: ^[a-zA-Z][a-zA-Z0-9_]{0,47}$

package/lib/runtime/runtime-endpoint.js

@@ -67,7 +67,7 @@ let RuntimeEndpoint = (() => {
             RuntimeEndpoint = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeEndpoint", version: "2.232.0-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.RuntimeEndpoint", version: "2.232.2-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-bedrock-agentcore-alpha.RuntimeEndpoint';
         /**

package/lib/runtime/runtime.d.ts

@@ -179,11 +179,31 @@ export declare class Runtime extends RuntimeBase {
     private readonly authorizerConfiguration?;
     private readonly lifecycleConfiguration?;
     constructor(scope: Construct, id: string, props: RuntimeProps);
+    /**
+     * Renders the environment variables for CloudFormation
+     * @internal
+     */
+    private renderEnvironmentVariables;
     /**
      * Adds proper permissions to the execution role for the agent runtime
      * Based on: https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-permissions.html
      */
     private addExecutionRolePermissions;
+    /**
+     * Renders the artifact configuration for CloudFormation
+     * @internal
+     */
+    private renderAgentRuntimeArtifact;
+    /**
+     * Renders the request header configuration for CloudFormation
+     * @internal
+     */
+    private renderRequestHeaderConfiguration;
+    /**
+     * Renders the lifecycle configuration for CloudFormation
+     * @internal
+     */
+    private renderLifecycleConfiguration;
     /**
      * Validates the request header configuration
      * @throws Error if validation fails

package/lib/runtime/runtime.js

@@ -91,7 +91,7 @@ let Runtime = (() => {
             Runtime = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.Runtime", version: "2.232.0-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.Runtime", version: "2.232.2-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-bedrock-agentcore-alpha.Runtime';
         /**

package/lib/tools/browser.d.ts

@@ -143,6 +143,12 @@ export declare abstract class BrowserCustomBase extends Resource implements IBro
      * configured.
      */
     get connections(): ec2.Connections;
+    /**
+     * The actual Connections object for this Browser. This may be unset in the event that a VPC has not
+     * been configured.
+     * @internal
+     */
+    protected _connections: ec2.Connections | undefined;
     constructor(scope: Construct, id: string);
     /**
      * Grants IAM actions to the IAM Principal
@@ -507,6 +513,28 @@ export declare class BrowserCustom extends BrowserCustomBase {
     readonly browserSigning?: BrowserSigning;
     private readonly __resource;
     constructor(scope: Construct, id: string, props: BrowserCustomProps);
+    /**
+     * Render the recording configuration.
+     *
+     * @returns RecordingConfigProperty object in CloudFormation format, or undefined if no recording configuration is defined
+     * @default - undefined if no recording configuration is provided
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _renderRecordingConfig;
+    /**
+     * Render the browser signing configuration.
+     *
+     * @returns BrowserSigningProperty object in CloudFormation format, or undefined if no browser signing configuration is defined
+     * @default - undefined if no browser signing configuration is provided
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _renderBrowserSigning;
+    /**
+     * Creates execution role needed for the browser to access AWS services
+     * @returns The created role
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _createBrowserRole;
     /**
      * Validates the browser name format
      * @param name The browser name to validate

package/lib/tools/browser.js

@@ -99,7 +99,7 @@ var BrowserSigning;
  * Contains methods and attributes valid for Browsers either created with CDK or imported.
  */
 class BrowserCustomBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.BrowserCustomBase", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.BrowserCustomBase", version: "2.232.2-alpha.0" };
     /**
      * An accessor for the Connections object that will fail if this Browser does not have a VPC
      * configured.
@@ -357,7 +357,7 @@ let BrowserCustom = (() => {
             BrowserCustom = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.BrowserCustom", version: "2.232.0-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.BrowserCustom", version: "2.232.2-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-bedrock-agentcore-alpha.BrowserCustom';
         /**

package/lib/tools/code-interpreter.d.ts

@@ -112,6 +112,12 @@ export declare abstract class CodeInterpreterCustomBase extends Resource impleme
      * configured.
      */
     get connections(): ec2.Connections;
+    /**
+     * The actual Connections object for this Browser. This may be unset in the event that a VPC has not
+     * been configured.
+     * @internal
+     */
+    protected _connections: ec2.Connections | undefined;
     constructor(scope: Construct, id: string);
     /**
      * Grants IAM actions to the IAM Principal
@@ -418,4 +424,24 @@ export declare class CodeInterpreterCustom extends CodeInterpreterCustomBase {
     };
     private readonly __resource;
     constructor(scope: Construct, id: string, props: CodeInterpreterCustomProps);
+    /**
+     * Validates the code interpreter name format
+     * @param name The code interpreter name to validate
+     * @returns Array of validation error messages, empty if valid
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _validateCodeInterpreterName;
+    /**
+     * Validates the code interpreter tags format
+     * @param tags The tags object to validate
+     * @returns Array of validation error messages, empty if valid
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _validateCodeInterpreterTags;
+    /**
+     * Creates execution role needed for the code interpreter to access AWS services
+     * @returns The created role
+     * @internal This is an internal core function and should not be called directly.
+     */
+    private _createCodeInterpreterRole;
 }

package/lib/tools/code-interpreter.js

@@ -79,7 +79,7 @@ const CODE_INTERPRETER_TAG_MAX_LENGTH = 256;
  * Contains methods and attributes valid for Code Interpreters either created with CDK or imported.
  */
 class CodeInterpreterCustomBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CodeInterpreterCustomBase", version: "2.232.0-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CodeInterpreterCustomBase", version: "2.232.2-alpha.0" };
     /**
      * An accessor for the Connections object that will fail if this Browser does not have a VPC
      * configured.
@@ -313,7 +313,7 @@ let CodeInterpreterCustom = (() => {
             CodeInterpreterCustom = _classThis = _classDescriptor.value;
             if (_metadata) Object.defineProperty(_classThis, Symbol.metadata, { enumerable: true, configurable: true, writable: true, value: _metadata });
         }
-        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CodeInterpreterCustom", version: "2.232.0-alpha.0" };
+        static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.CodeInterpreterCustom", version: "2.232.2-alpha.0" };
         /** Uniquely identifies this class. */
         static PROPERTY_INJECTION_ID = '@aws-cdk.aws-bedrock-agentcore-alpha.CodeInterpreterCustom';
         /**