@aws-cdk/aws-bedrock-agentcore-alpha 2.253.1-alpha.0 → 2.255.0-alpha.0

package/lib/gateway/outbound-auth/oauth.js

@@ -1,6 +1,7 @@
 "use strict";
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.OAuthCredentialProviderConfiguration = void 0;
+const aws_cdk_lib_1 = require("aws-cdk-lib");
 const aws_iam_1 = require("aws-cdk-lib/aws-iam");
 const credential_provider_1 = require("./credential-provider");
 const perms_1 = require("../perms");
@@ -34,27 +35,76 @@ class OAuthCredentialProviderConfiguration {
         this.customParameters = configuration.customParameters;
     }
     /**
-     * Grant the needed permissions to the role for OAuth authentication
+     * Grant the needed permissions to the gateway role for OAuth authentication.
+     *
+     * Produces four scoped IAM statements matching the console-generated policy:
+     * 1. `GetWorkloadAccessToken[ForJWT|ForUserId]` on the workload identity directory ARNs
+     * 2. `CompleteResourceTokenAuth` on the token vault, credential provider, directory, and identity ARNs
+     * 3. `GetResourceOauth2Token` on the token vault, credential provider, directory, and identity ARNs
+     * 4. `secretsmanager:GetSecretValue` on the specific credential secret ARN
+     *
+     * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-outbound-auth.html
      */
-    grantNeededPermissionsToRole(role) {
-        const statements = [
-            new aws_iam_1.PolicyStatement({
-                actions: [
-                    ...perms_1.GATEWAY_OAUTH_PERMS,
-                    ...perms_1.GATEWAY_WORKLOAD_IDENTITY_PERMS,
-                ],
-                resources: [this.providerArn],
-            }),
-            new aws_iam_1.PolicyStatement({
-                actions: perms_1.GATEWAY_SECRETS_PERMS,
-                resources: [this.secretArn],
-            }),
-        ];
-        return aws_iam_1.Grant.addToPrincipal({
-            grantee: role,
-            actions: statements.flatMap(s => s.actions),
-            resourceArns: statements.flatMap(s => s.resources),
+    grantNeededPermissionsToRole(gateway) {
+        const stack = aws_cdk_lib_1.Stack.of(gateway);
+        const directoryArn = stack.formatArn({
+            service: 'bedrock-agentcore',
+            resource: 'workload-identity-directory',
+            resourceName: 'default',
+            arnFormat: aws_cdk_lib_1.ArnFormat.SLASH_RESOURCE_NAME,
         });
+        const identityWildcardArn = `${directoryArn}/workload-identity/${gateway.name}-*`;
+        const tokenVaultArn = stack.formatArn({
+            service: 'bedrock-agentcore',
+            resource: 'token-vault',
+            resourceName: 'default',
+            arnFormat: aws_cdk_lib_1.ArnFormat.SLASH_RESOURCE_NAME,
+        });
+        const credentialAndIdentityArns = [tokenVaultArn, this.providerArn, directoryArn, identityWildcardArn];
+        const workloadIdentityGrant = aws_iam_1.Grant.addToPrincipal({
+            grantee: gateway.role,
+            actions: [...perms_1.GATEWAY_WORKLOAD_IDENTITY_OAUTH_PERMS],
+            resourceArns: [directoryArn, identityWildcardArn],
+            scope: gateway,
+        });
+        const completeAuthGrant = aws_iam_1.Grant.addToPrincipal({
+            grantee: gateway.role,
+            actions: [...perms_1.GATEWAY_OAUTH_COMPLETE_AUTH_PERMS],
+            resourceArns: credentialAndIdentityArns,
+            scope: gateway,
+        });
+        const oauthGrant = aws_iam_1.Grant.addToPrincipal({
+            grantee: gateway.role,
+            actions: [...perms_1.GATEWAY_OAUTH_PERMS],
+            resourceArns: credentialAndIdentityArns,
+            scope: gateway,
+        });
+        // The CFN attribute ClientSecretArn is an object { SecretArn: string }, not a
+        // plain string, so the Token resolves to an object which cannot be placed in
+        // IAM Resource fields. When the caller supplies a literal ARN string (e.g. via
+        // fromOauthIdentityArn) we can scope tightly; otherwise fall back to a
+        // service-managed prefix wildcard.
+        let secretResourceArns;
+        if (aws_cdk_lib_1.Token.isUnresolved(this.secretArn)) {
+            aws_cdk_lib_1.Annotations.of(gateway).addWarningV2('@aws-cdk/aws-bedrock-agentcore-alpha:wildcardSecretArnGrant', 'The secret ARN is an unresolved token. Granting access using a wildcard prefix (bedrock-agentcore-identity!*). ' +
+                'To scope the grant to a specific secret, supply a literal secret ARN via fromOauthIdentityArn.');
+            secretResourceArns = [stack.formatArn({
+                    service: 'secretsmanager',
+                    resource: 'secret',
+                    resourceName: 'bedrock-agentcore-identity!*',
+                    arnFormat: aws_cdk_lib_1.ArnFormat.COLON_RESOURCE_NAME,
+                })];
+        }
+        else {
+            secretResourceArns = [this.secretArn];
+        }
+        const secretGrant = aws_iam_1.Grant.addToPrincipal({
+            grantee: gateway.role,
+            actions: [...perms_1.GATEWAY_SECRETS_PERMS],
+            resourceArns: secretResourceArns,
+            scope: gateway,
+        });
+        return workloadIdentityGrant.combine(completeAuthGrant).combine(oauthGrant).combine(secretGrant);
     }
     /**
      * @internal
@@ -73,4 +123,4 @@ class OAuthCredentialProviderConfiguration {
     }
 }
 exports.OAuthCredentialProviderConfiguration = OAuthCredentialProviderConfiguration;
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/gateway/perms.d.ts

@@ -20,15 +20,25 @@ export declare const GATEWAY_KMS_KEY_PERMS: string[];
  */
 export declare const GATEWAY_ASSUME_ROLE: string[];
 /**
- * Outbound auth - Workload identity permissions
+ * Outbound auth - Workload identity permissions (API key targets)
  * Used to obtain access tokens for workload identity
  */
 export declare const GATEWAY_WORKLOAD_IDENTITY_PERMS: string[];
+/**
+ * Outbound auth - Workload identity permissions (OAuth targets)
+ * OAuth flows additionally require JWT-based and user-ID-based token exchange
+ */
+export declare const GATEWAY_WORKLOAD_IDENTITY_OAUTH_PERMS: string[];
 /**
  * Outbound auth - OAuth permissions
- * Used to obtain OAuth tokens for target authentication
+ * Used to obtain OAuth tokens and complete token auth for target authentication
  */
 export declare const GATEWAY_OAUTH_PERMS: string[];
+/**
+ * Outbound auth - OAuth complete token auth permissions
+ * Used to complete the OAuth token authorization flow
+ */
+export declare const GATEWAY_OAUTH_COMPLETE_AUTH_PERMS: string[];
 /**
  * Outbound auth - API Key permissions
  * Used to retrieve API keys for target authentication
@@ -36,7 +46,9 @@ export declare const GATEWAY_OAUTH_PERMS: string[];
 export declare const GATEWAY_API_KEY_PERMS: string[];
 /**
  * Secrets Manager permissions
- * Required for storing and retrieving API keys and OAuth credentials
+ * Required for reading credential secrets backing Token Vault providers.
+ *
+ * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-outbound-auth.html
  */
 export declare const GATEWAY_SECRETS_PERMS: string[];
 /******************************************************************************

package/lib/gateway/perms.js

@@ -3,7 +3,7 @@
    * Data Plane Permissions
    *****************************************************************************/
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.GATEWAY_SYNC_PERMS = exports.GATEWAY_MANAGE_PERMS = exports.GATEWAY_DELETE_PERMS = exports.GATEWAY_UPDATE_PERMS = exports.GATEWAY_CREATE_PERMS = exports.GATEWAY_LIST_PERMS = exports.GATEWAY_GET_PERMS = exports.GATEWAY_SECRETS_PERMS = exports.GATEWAY_API_KEY_PERMS = exports.GATEWAY_OAUTH_PERMS = exports.GATEWAY_WORKLOAD_IDENTITY_PERMS = exports.GATEWAY_ASSUME_ROLE = exports.GATEWAY_KMS_KEY_PERMS = exports.GATEWAY_INVOKE_PERMS = void 0;
+exports.GATEWAY_SYNC_PERMS = exports.GATEWAY_MANAGE_PERMS = exports.GATEWAY_DELETE_PERMS = exports.GATEWAY_UPDATE_PERMS = exports.GATEWAY_CREATE_PERMS = exports.GATEWAY_LIST_PERMS = exports.GATEWAY_GET_PERMS = exports.GATEWAY_SECRETS_PERMS = exports.GATEWAY_API_KEY_PERMS = exports.GATEWAY_OAUTH_COMPLETE_AUTH_PERMS = exports.GATEWAY_OAUTH_PERMS = exports.GATEWAY_WORKLOAD_IDENTITY_OAUTH_PERMS = exports.GATEWAY_WORKLOAD_IDENTITY_PERMS = exports.GATEWAY_ASSUME_ROLE = exports.GATEWAY_KMS_KEY_PERMS = exports.GATEWAY_INVOKE_PERMS = void 0;
 /**
  * Permissions to invoke the gateway
  * Used by agents or other services that need to call the gateway
@@ -34,19 +34,35 @@ exports.GATEWAY_KMS_KEY_PERMS = [
  */
 exports.GATEWAY_ASSUME_ROLE = ['sts:AssumeRole'];
 /**
- * Outbound auth - Workload identity permissions
+ * Outbound auth - Workload identity permissions (API key targets)
  * Used to obtain access tokens for workload identity
  */
 exports.GATEWAY_WORKLOAD_IDENTITY_PERMS = [
     'bedrock-agentcore:GetWorkloadAccessToken',
 ];
+/**
+ * Outbound auth - Workload identity permissions (OAuth targets)
+ * OAuth flows additionally require JWT-based and user-ID-based token exchange
+ */
+exports.GATEWAY_WORKLOAD_IDENTITY_OAUTH_PERMS = [
+    'bedrock-agentcore:GetWorkloadAccessToken',
+    'bedrock-agentcore:GetWorkloadAccessTokenForJWT',
+    'bedrock-agentcore:GetWorkloadAccessTokenForUserId',
+];
 /**
  * Outbound auth - OAuth permissions
- * Used to obtain OAuth tokens for target authentication
+ * Used to obtain OAuth tokens and complete token auth for target authentication
  */
 exports.GATEWAY_OAUTH_PERMS = [
     'bedrock-agentcore:GetResourceOauth2Token',
 ];
+/**
+ * Outbound auth - OAuth complete token auth permissions
+ * Used to complete the OAuth token authorization flow
+ */
+exports.GATEWAY_OAUTH_COMPLETE_AUTH_PERMS = [
+    'bedrock-agentcore:CompleteResourceTokenAuth',
+];
 /**
  * Outbound auth - API Key permissions
  * Used to retrieve API keys for target authentication
@@ -56,12 +72,11 @@ exports.GATEWAY_API_KEY_PERMS = [
 ];
 /**
  * Secrets Manager permissions
- * Required for storing and retrieving API keys and OAuth credentials
+ * Required for reading credential secrets backing Token Vault providers.
+ *
+ * @see https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/gateway-outbound-auth.html
  */
-exports.GATEWAY_SECRETS_PERMS = [
-    'secretsmanager:GetSecretValue',
-    'secretsmanager:DescribeSecret',
-];
+exports.GATEWAY_SECRETS_PERMS = ['secretsmanager:GetSecretValue'];
 /******************************************************************************
    * Control Plane Permissions
    *****************************************************************************/
@@ -106,4 +121,4 @@ exports.GATEWAY_MANAGE_PERMS = [...new Set([...exports.GATEWAY_CREATE_PERMS, ...
  * Used to refresh tool catalogs when MCP server tools change
  */
 exports.GATEWAY_SYNC_PERMS = ['bedrock-agentcore:SynchronizeGatewayTargets'];
-//# sourceMappingURL=data:application/json;base64,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
+//# sourceMappingURL=data:application/json;base64,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

package/lib/gateway/protocol.js

@@ -21,7 +21,7 @@ var GatewayProtocolType;
  * Factory class for instantiating Gateway Protocols
  */
 class GatewayProtocol {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayProtocol", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayProtocol", version: "2.255.0-alpha.0" };
     /**
      * Create an MCP protocol configuration
      * @param props - Optional MCP configuration properties
@@ -75,7 +75,7 @@ var McpGatewaySearchType;
  * MCP (Model Context Protocol) configuration implementation
  */
 class McpProtocolConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpProtocolConfiguration", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpProtocolConfiguration", version: "2.255.0-alpha.0" };
     protocolType;
     /**
      * The supported MCP protocol versions

package/lib/gateway/targets/schema/api-schema.js

@@ -15,7 +15,7 @@ const base_schema_1 = require("./base-schema");
  * Represents the concept of an API Schema for a Gateway Target.
  */
 class ApiSchema extends base_schema_1.TargetSchema {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiSchema", version: "2.255.0-alpha.0" };
     /**
      * Creates an API Schema from a local file.
      * @param path - the path to the local file containing the OpenAPI schema for the action group
@@ -73,7 +73,7 @@ exports.ApiSchema = ApiSchema;
 class AssetApiSchema extends ApiSchema {
     path;
     options;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetApiSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetApiSchema", version: "2.255.0-alpha.0" };
     asset;
     constructor(path, options = {}) {
         super();
@@ -135,7 +135,7 @@ exports.AssetApiSchema = AssetApiSchema;
  */
 class InlineApiSchema extends ApiSchema {
     schema;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineApiSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineApiSchema", version: "2.255.0-alpha.0" };
     constructor(schema) {
         super(undefined, undefined, schema);
         this.schema = schema;
@@ -165,7 +165,7 @@ exports.InlineApiSchema = InlineApiSchema;
 class S3ApiSchema extends ApiSchema {
     location;
     bucketOwnerAccountId;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ApiSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ApiSchema", version: "2.255.0-alpha.0" };
     constructor(location, bucketOwnerAccountId) {
         super(location, bucketOwnerAccountId, undefined);
         this.location = location;

package/lib/gateway/targets/schema/tool-schema.js

@@ -30,7 +30,7 @@ var SchemaDefinitionType;
  *                       TOOL SCHEMA CLASS
  *****************************************************************************/
 class ToolSchema extends base_schema_1.TargetSchema {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ToolSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ToolSchema", version: "2.255.0-alpha.0" };
     /**
      * Creates a tool Schema from a local file.
      * @param path - the path to the local file containing the function schema for the tool
@@ -88,7 +88,7 @@ exports.ToolSchema = ToolSchema;
 class AssetToolSchema extends ToolSchema {
     path;
     options;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetToolSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.AssetToolSchema", version: "2.255.0-alpha.0" };
     asset;
     constructor(path, options = {}) {
         super();
@@ -141,7 +141,7 @@ exports.AssetToolSchema = AssetToolSchema;
  */
 class InlineToolSchema extends ToolSchema {
     schema;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineToolSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.InlineToolSchema", version: "2.255.0-alpha.0" };
     constructor(schema) {
         super(undefined, undefined, schema);
         this.schema = schema;
@@ -171,7 +171,7 @@ exports.InlineToolSchema = InlineToolSchema;
 class S3ToolSchema extends ToolSchema {
     location;
     bucketOwnerAccountId;
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ToolSchema", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.S3ToolSchema", version: "2.255.0-alpha.0" };
     constructor(location, bucketOwnerAccountId) {
         super(location, bucketOwnerAccountId, undefined);
         this.location = location;

package/lib/gateway/targets/target-base.js

@@ -41,7 +41,7 @@ var McpTargetType;
  * permission management and property definitions.
  */
 class GatewayTargetBase extends aws_cdk_lib_1.Resource {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayTargetBase", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.GatewayTargetBase", version: "2.255.0-alpha.0" };
     /**
      * A reference to a GatewayTarget resource.
      */

package/lib/gateway/targets/target-configuration.js

@@ -19,7 +19,7 @@ const target_base_1 = require("./target-base");
  * Provides common functionality for all MCP target types
  */
 class McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpTargetConfiguration", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpTargetConfiguration", version: "2.255.0-alpha.0" };
     /**
      * Renders the configuration as CloudFormation properties
      * @internal
@@ -41,7 +41,7 @@ exports.McpTargetConfiguration = McpTargetConfiguration;
  * allowing the gateway to invoke the function to provide tool capabilities.
  */
 class LambdaTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.LambdaTargetConfiguration", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.LambdaTargetConfiguration", version: "2.255.0-alpha.0" };
     /**
      * Create a Lambda target configuration
      *
@@ -131,7 +131,7 @@ exports.LambdaTargetConfiguration = LambdaTargetConfiguration;
  * allowing the gateway to transform API operations into tool calls.
  */
 class OpenApiTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.OpenApiTargetConfiguration", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.OpenApiTargetConfiguration", version: "2.255.0-alpha.0" };
     /**
      * Create an OpenAPI target configuration
      *
@@ -249,7 +249,7 @@ exports.OpenApiTargetConfiguration = OpenApiTargetConfiguration;
  * allowing the gateway to transform Smithy operations into tool calls.
  */
 class SmithyTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.SmithyTargetConfiguration", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.SmithyTargetConfiguration", version: "2.255.0-alpha.0" };
     /**
      * Create a Smithy target configuration
      *
@@ -331,7 +331,7 @@ exports.SmithyTargetConfiguration = SmithyTargetConfiguration;
  * synchronization.
  */
 class McpServerTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpServerTargetConfiguration", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.McpServerTargetConfiguration", version: "2.255.0-alpha.0" };
     /**
      * Create an MCP server target configuration
      *
@@ -445,7 +445,7 @@ var ApiGatewayHttpMethod;
  * - Proxy resources (e.g., `/pets/{proxy+}`) are not supported
  */
 class ApiGatewayTargetConfiguration extends McpTargetConfiguration {
-    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiGatewayTargetConfiguration", version: "2.253.1-alpha.0" };
+    static [JSII_RTTI_SYMBOL_1] = { fqn: "@aws-cdk/aws-bedrock-agentcore-alpha.ApiGatewayTargetConfiguration", version: "2.255.0-alpha.0" };
     /**
      * Create an API Gateway target configuration
      *