@aws-cdk/cfn-property-mixins 2.259.0 → 2.260.0

package/lib/services/aws-bedrockagentcore/cfn-props-mixins.generated.d.ts

@@ -31,6 +31,27 @@ export declare class CfnApiKeyCredentialProviderPropsMixin extends cdk.Mixin imp
     applyTo(construct: constructs.IConstruct): void;
 }
 export declare namespace CfnApiKeyCredentialProviderPropsMixin {
+    /**
+     * A reference to a customer-provided secret stored in AWS Secrets Manager.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-apikeycredentialprovider-secretreference.html
+     */
+    interface SecretReferenceProperty {
+        /**
+         * The JSON key within the secret that contains the credential value.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-apikeycredentialprovider-secretreference.html#cfn-bedrockagentcore-apikeycredentialprovider-secretreference-jsonkey
+         */
+        readonly jsonKey?: string;
+        /**
+         * The ID or ARN of the secret in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-apikeycredentialprovider-secretreference.html#cfn-bedrockagentcore-apikeycredentialprovider-secretreference-secretid
+         */
+        readonly secretId?: string;
+    }
     /**
      * Contains information about the API key secret in AWS Secrets Manager.
      *
@@ -61,6 +82,20 @@ export interface CfnApiKeyCredentialProviderMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-apikeycredentialprovider.html#cfn-bedrockagentcore-apikeycredentialprovider-apikey
      */
     readonly apiKey?: string;
+    /**
+     * A reference to a customer-provided secret stored in AWS Secrets Manager.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-apikeycredentialprovider.html#cfn-bedrockagentcore-apikeycredentialprovider-apikeysecretconfig
+     */
+    readonly apiKeySecretConfig?: cdk.IResolvable | CfnApiKeyCredentialProviderPropsMixin.SecretReferenceProperty;
+    /**
+     * The source of the API key secret.
+     *
+     * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-apikeycredentialprovider.html#cfn-bedrockagentcore-apikeycredentialprovider-apikeysecretsource
+     */
+    readonly apiKeySecretSource?: string;
     /**
      * The name of the API key credential provider.
      *
@@ -574,6 +609,158 @@ export interface CfnCodeInterpreterCustomMixinProps {
      */
     readonly tags?: Record<string, string>;
 }
+/**
+ * Definition of AWS::BedrockAgentCore::ConfigurationBundle Resource Type.
+ *
+ * @cloudformationResource AWS::BedrockAgentCore::ConfigurationBundle
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html
+ */
+export declare class CfnConfigurationBundlePropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnConfigurationBundleMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::BedrockAgentCore::ConfigurationBundle`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnConfigurationBundleMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnConfigurationBundle;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnConfigurationBundlePropsMixin {
+    /**
+     * The configuration for a component within a configuration bundle.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-componentconfiguration.html
+     */
+    interface ComponentConfigurationProperty {
+        /**
+         * The configuration values as a flexible JSON document.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-componentconfiguration.html#cfn-bedrockagentcore-configurationbundle-componentconfiguration-configuration
+         */
+        readonly configuration?: any | cdk.IResolvable;
+    }
+    /**
+     * The source that created a configuration bundle version.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versioncreatedbysource.html
+     */
+    interface VersionCreatedBySourceProperty {
+        /**
+         * The Amazon Resource Name (ARN) of the source, if applicable.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versioncreatedbysource.html#cfn-bedrockagentcore-configurationbundle-versioncreatedbysource-arn
+         */
+        readonly arn?: string;
+        /**
+         * The name of the source (for example, user, optimization-job, or system).
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versioncreatedbysource.html#cfn-bedrockagentcore-configurationbundle-versioncreatedbysource-name
+         */
+        readonly name?: string;
+    }
+    /**
+     * The version lineage metadata that tracks parent versions and creation source.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versionlineagemetadata.html
+     */
+    interface VersionLineageMetadataProperty {
+        /**
+         * The branch name for this version.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versionlineagemetadata.html#cfn-bedrockagentcore-configurationbundle-versionlineagemetadata-branchname
+         */
+        readonly branchName?: string;
+        /**
+         * A commit message describing the changes in this version.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versionlineagemetadata.html#cfn-bedrockagentcore-configurationbundle-versionlineagemetadata-commitmessage
+         */
+        readonly commitMessage?: string;
+        /**
+         * The source that created a configuration bundle version.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versionlineagemetadata.html#cfn-bedrockagentcore-configurationbundle-versionlineagemetadata-createdby
+         */
+        readonly createdBy?: cdk.IResolvable | CfnConfigurationBundlePropsMixin.VersionCreatedBySourceProperty;
+        /**
+         * A list of parent version identifiers.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-configurationbundle-versionlineagemetadata.html#cfn-bedrockagentcore-configurationbundle-versionlineagemetadata-parentversionids
+         */
+        readonly parentVersionIds?: Array<string>;
+    }
+}
+/**
+ * Properties for CfnConfigurationBundlePropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html
+ */
+export interface CfnConfigurationBundleMixinProps {
+    /**
+     * The branch name for version tracking.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html#cfn-bedrockagentcore-configurationbundle-branchname
+     */
+    readonly branchName?: string;
+    /**
+     * The name for the configuration bundle.
+     *
+     * Names must be unique within your account.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html#cfn-bedrockagentcore-configurationbundle-bundlename
+     */
+    readonly bundleName?: string;
+    /**
+     * A commit message describing the version of the configuration bundle.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html#cfn-bedrockagentcore-configurationbundle-commitmessage
+     */
+    readonly commitMessage?: string;
+    /**
+     * A map of component identifiers to their configurations.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html#cfn-bedrockagentcore-configurationbundle-components
+     */
+    readonly components?: cdk.IResolvable | Record<string, CfnConfigurationBundlePropsMixin.ComponentConfigurationProperty | cdk.IResolvable>;
+    /**
+     * The source that created a configuration bundle version.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html#cfn-bedrockagentcore-configurationbundle-createdby
+     */
+    readonly createdBy?: cdk.IResolvable | CfnConfigurationBundlePropsMixin.VersionCreatedBySourceProperty;
+    /**
+     * The description for the configuration bundle.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html#cfn-bedrockagentcore-configurationbundle-description
+     */
+    readonly description?: string;
+    /**
+     * Tags to assign to the configuration bundle.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-configurationbundle.html#cfn-bedrockagentcore-configurationbundle-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
 /**
  * Definition of AWS::BedrockAgentCore::Dataset Resource Type.
  *
@@ -1261,6 +1448,14 @@ export declare namespace CfnGatewayPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-mcpgatewayconfiguration.html#cfn-bedrockagentcore-gateway-mcpgatewayconfiguration-searchtype
          */
         readonly searchType?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-mcpgatewayconfiguration.html#cfn-bedrockagentcore-gateway-mcpgatewayconfiguration-sessionconfiguration
+         */
+        readonly sessionConfiguration?: cdk.IResolvable | CfnGatewayPropsMixin.SessionConfigurationProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-mcpgatewayconfiguration.html#cfn-bedrockagentcore-gateway-mcpgatewayconfiguration-streamingconfiguration
+         */
+        readonly streamingConfiguration?: cdk.IResolvable | CfnGatewayPropsMixin.StreamingConfigurationProperty;
         /**
          * The supported versions for the MCP configuration for the gateway target.
          *
@@ -1268,6 +1463,28 @@ export declare namespace CfnGatewayPropsMixin {
          */
         readonly supportedVersions?: Array<string>;
     }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-sessionconfiguration.html
+     */
+    interface SessionConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-sessionconfiguration.html#cfn-bedrockagentcore-gateway-sessionconfiguration-sessiontimeoutinseconds
+         */
+        readonly sessionTimeoutInSeconds?: number;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-streamingconfiguration.html
+     */
+    interface StreamingConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-streamingconfiguration.html#cfn-bedrockagentcore-gateway-streamingconfiguration-enableresponsestreaming
+         */
+        readonly enableResponseStreaming?: boolean | cdk.IResolvable;
+    }
     /**
      * The workload identity details for the gateway.
      *
@@ -1540,6 +1757,59 @@ export declare namespace CfnGatewayTargetPropsMixin {
          */
         readonly allowedResponseHeaders?: Array<string>;
     }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-privateendpoint.html
+     */
+    interface PrivateEndpointProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-privateendpoint.html#cfn-bedrockagentcore-gatewaytarget-privateendpoint-managedvpcresource
+         */
+        readonly managedVpcResource?: cdk.IResolvable | CfnGatewayTargetPropsMixin.ManagedVpcResourceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-privateendpoint.html#cfn-bedrockagentcore-gatewaytarget-privateendpoint-selfmanagedlatticeresource
+         */
+        readonly selfManagedLatticeResource?: cdk.IResolvable | CfnGatewayTargetPropsMixin.SelfManagedLatticeResourceProperty;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-selfmanagedlatticeresource.html
+     */
+    interface SelfManagedLatticeResourceProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-selfmanagedlatticeresource.html#cfn-bedrockagentcore-gatewaytarget-selfmanagedlatticeresource-resourceconfigurationidentifier
+         */
+        readonly resourceConfigurationIdentifier?: string;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedvpcresource.html
+     */
+    interface ManagedVpcResourceProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedvpcresource.html#cfn-bedrockagentcore-gatewaytarget-managedvpcresource-endpointipaddresstype
+         */
+        readonly endpointIpAddressType?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedvpcresource.html#cfn-bedrockagentcore-gatewaytarget-managedvpcresource-routingdomain
+         */
+        readonly routingDomain?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedvpcresource.html#cfn-bedrockagentcore-gatewaytarget-managedvpcresource-securitygroupids
+         */
+        readonly securityGroupIds?: Array<string>;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedvpcresource.html#cfn-bedrockagentcore-gatewaytarget-managedvpcresource-subnetids
+         */
+        readonly subnetIds?: Array<string>;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedvpcresource.html#cfn-bedrockagentcore-gatewaytarget-managedvpcresource-vpcidentifier
+         */
+        readonly vpcIdentifier?: string;
+    }
     /**
      * The target configuration.
      *
@@ -1764,6 +2034,10 @@ export declare namespace CfnGatewayTargetPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-mcpservertargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-mcpservertargetconfiguration-mcptoolschema
          */
         readonly mcpToolSchema?: cdk.IResolvable | CfnGatewayTargetPropsMixin.McpToolSchemaConfigurationProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-mcpservertargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-mcpservertargetconfiguration-resourcepriority
+         */
+        readonly resourcePriority?: number;
     }
     /**
      * @struct
@@ -1878,6 +2152,25 @@ export declare namespace CfnGatewayTargetPropsMixin {
          */
         readonly qualifier?: string;
     }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedresourcedetails.html
+     */
+    interface ManagedResourceDetailsProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedresourcedetails.html#cfn-bedrockagentcore-gatewaytarget-managedresourcedetails-domain
+         */
+        readonly domain?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedresourcedetails.html#cfn-bedrockagentcore-gatewaytarget-managedresourcedetails-resourceassociationarn
+         */
+        readonly resourceAssociationArn?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-managedresourcedetails.html#cfn-bedrockagentcore-gatewaytarget-managedresourcedetails-resourcegatewayarn
+         */
+        readonly resourceGatewayArn?: string;
+    }
     /**
      * @struct
      * @stability external
@@ -1941,6 +2234,10 @@ export interface CfnGatewayTargetMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-gatewaytarget.html#cfn-bedrockagentcore-gatewaytarget-name
      */
     readonly name?: string;
+    /**
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-gatewaytarget.html#cfn-bedrockagentcore-gatewaytarget-privateendpoint
+     */
+    readonly privateEndpoint?: cdk.IResolvable | CfnGatewayTargetPropsMixin.PrivateEndpointProperty;
     /**
      * The target configuration for the Smithy model target.
      *
@@ -3911,6 +4208,12 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput.html
      */
     interface CustomOauth2ProviderConfigInputProperty {
+        /**
+         * The client authentication method to use when authenticating with the token endpoint.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput-clientauthenticationmethod
+         */
+        readonly clientAuthenticationMethod?: string;
         /**
          * The client ID for the custom OAuth2 provider.
          *
@@ -3923,6 +4226,18 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * The source of the client secret.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-customoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
         /**
          * Discovery information for an OAuth2 provider.
          *
@@ -3990,6 +4305,27 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          */
         readonly tokenEndpoint?: string;
     }
+    /**
+     * A reference to a customer-provided secret stored in AWS Secrets Manager.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html
+     */
+    interface SecretReferenceProperty {
+        /**
+         * The JSON key within the secret that contains the credential value.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html#cfn-bedrockagentcore-oauth2credentialprovider-secretreference-jsonkey
+         */
+        readonly jsonKey?: string;
+        /**
+         * The ID or ARN of the secret in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-secretreference.html#cfn-bedrockagentcore-oauth2credentialprovider-secretreference-secretid
+         */
+        readonly secretId?: string;
+    }
     /**
      * Configuration for on-behalf-of token exchange.
      *
@@ -4050,6 +4386,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-googleoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-googleoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-googleoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-googleoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-googleoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-googleoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
     }
     /**
      * Input configuration for a GitHub OAuth2 provider.
@@ -4067,6 +4413,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-githuboauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
     }
     /**
      * Input configuration for a Slack OAuth2 provider.
@@ -4084,6 +4440,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-slackoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
     }
     /**
      * Input configuration for a Salesforce OAuth2 provider.
@@ -4101,6 +4467,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-salesforceoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-salesforceoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-salesforceoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-salesforceoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-salesforceoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-salesforceoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
     }
     /**
      * Input configuration for a Microsoft OAuth2 provider.
@@ -4118,6 +4494,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-microsoftoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
         /**
          * The Microsoft Entra ID tenant ID.
          *
@@ -4141,6 +4527,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-atlassianoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-atlassianoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-atlassianoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-atlassianoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-atlassianoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-atlassianoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
     }
     /**
      * Input configuration for a LinkedIn OAuth2 provider.
@@ -4158,6 +4554,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-linkedinoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-linkedinoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-linkedinoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-linkedinoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-linkedinoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-linkedinoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
     }
     /**
      * Input configuration for a supported non-custom OAuth2 provider.
@@ -4181,6 +4587,16 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput-clientsecret
          */
         readonly clientSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput-clientsecretconfig
+         */
+        readonly clientSecretConfig?: cdk.IResolvable | CfnOAuth2CredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput.html#cfn-bedrockagentcore-oauth2credentialprovider-includedoauth2providerconfiginput-clientsecretsource
+         */
+        readonly clientSecretSource?: string;
         /**
          * Token issuer of your isolated OAuth2 application tenant.
          *
@@ -4217,6 +4633,12 @@ export declare namespace CfnOAuth2CredentialProviderPropsMixin {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-oauth2providerconfigoutput.html
      */
     interface Oauth2ProviderConfigOutputProperty {
+        /**
+         * The client authentication method used when authenticating with the token endpoint.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-oauth2providerconfigoutput.html#cfn-bedrockagentcore-oauth2credentialprovider-oauth2providerconfigoutput-clientauthenticationmethod
+         */
+        readonly clientAuthenticationMethod?: string;
         /**
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-oauth2credentialprovider-oauth2providerconfigoutput.html#cfn-bedrockagentcore-oauth2credentialprovider-oauth2providerconfigoutput-clientid
          */
@@ -4460,44 +4882,80 @@ export declare namespace CfnOnlineEvaluationConfigPropsMixin {
         readonly sessionTimeoutMinutes?: number;
     }
     /**
-     * The configuration that specifies where evaluation results should be written.
+     * An insight configuration for failure analysis.
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-outputconfig.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-insight.html
      */
-    interface OutputConfigProperty {
+    interface InsightProperty {
         /**
-         * The CloudWatch configuration for writing evaluation results.
+         * The unique identifier of the insight.
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-outputconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-outputconfig-cloudwatchconfig
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-insight.html#cfn-bedrockagentcore-onlineevaluationconfig-insight-insightid
          */
-        readonly cloudWatchConfig?: CfnOnlineEvaluationConfigPropsMixin.CloudWatchOutputConfigProperty | cdk.IResolvable;
+        readonly insightId?: string;
     }
     /**
-     * The CloudWatch configuration for writing evaluation results.
+     * The configuration for clustering analysis of evaluation results.
      *
      * @struct
      * @stability external
-     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-cloudwatchoutputconfig.html
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-clusteringconfig.html
      */
-    interface CloudWatchOutputConfigProperty {
+    interface ClusteringConfigProperty {
         /**
-         * The CloudWatch log group name for evaluation results.
+         * The list of frequencies at which clustering reports are generated.
          *
-         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-cloudwatchoutputconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-cloudwatchoutputconfig-loggroupname
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-clusteringconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-clusteringconfig-frequencies
          */
-        readonly logGroupName?: string;
+        readonly frequencies?: Array<string>;
     }
-}
-/**
- * Properties for CfnOnlineEvaluationConfigPropsMixin
- *
- * @struct
+    /**
+     * The configuration that specifies where evaluation results should be written.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-outputconfig.html
+     */
+    interface OutputConfigProperty {
+        /**
+         * The CloudWatch configuration for writing evaluation results.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-outputconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-outputconfig-cloudwatchconfig
+         */
+        readonly cloudWatchConfig?: CfnOnlineEvaluationConfigPropsMixin.CloudWatchOutputConfigProperty | cdk.IResolvable;
+    }
+    /**
+     * The CloudWatch configuration for writing evaluation results.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-cloudwatchoutputconfig.html
+     */
+    interface CloudWatchOutputConfigProperty {
+        /**
+         * The CloudWatch log group name for evaluation results.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-onlineevaluationconfig-cloudwatchoutputconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-cloudwatchoutputconfig-loggroupname
+         */
+        readonly logGroupName?: string;
+    }
+}
+/**
+ * Properties for CfnOnlineEvaluationConfigPropsMixin
+ *
+ * @struct
  * @stability external
  * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-onlineevaluationconfig.html
  */
 export interface CfnOnlineEvaluationConfigMixinProps {
+    /**
+     * The configuration for clustering analysis of evaluation results.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-onlineevaluationconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-clusteringconfig
+     */
+    readonly clusteringConfig?: CfnOnlineEvaluationConfigPropsMixin.ClusteringConfigProperty | cdk.IResolvable;
     /**
      * The configuration that specifies where to read agent traces for online evaluation.
      *
@@ -4526,6 +4984,12 @@ export interface CfnOnlineEvaluationConfigMixinProps {
      * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-onlineevaluationconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-executionstatus
      */
     readonly executionStatus?: string;
+    /**
+     * The list of insights to enable for failure analysis.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-onlineevaluationconfig.html#cfn-bedrockagentcore-onlineevaluationconfig-insights
+     */
+    readonly insights?: Array<CfnOnlineEvaluationConfigPropsMixin.InsightProperty | cdk.IResolvable> | cdk.IResolvable;
     /**
      * The name of the online evaluation configuration.
      *
@@ -4547,6 +5011,101 @@ export interface CfnOnlineEvaluationConfigMixinProps {
      */
     readonly tags?: Array<cdk.CfnTag>;
 }
+/**
+ * Resource Type definition for AWS::BedrockAgentCore::PaymentConnector.
+ *
+ * @cloudformationResource AWS::BedrockAgentCore::PaymentConnector
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentconnector.html
+ */
+export declare class CfnPaymentConnectorPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnPaymentConnectorMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::BedrockAgentCore::PaymentConnector`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnPaymentConnectorMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnPaymentConnector;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnPaymentConnectorPropsMixin {
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentconnector-credentialsproviderconfiguration.html
+     */
+    interface CredentialsProviderConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentconnector-credentialsproviderconfiguration.html#cfn-bedrockagentcore-paymentconnector-credentialsproviderconfiguration-coinbasecdp
+         */
+        readonly coinbaseCdp?: cdk.IResolvable | CfnPaymentConnectorPropsMixin.PaymentCredentialProviderConfigurationProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentconnector-credentialsproviderconfiguration.html#cfn-bedrockagentcore-paymentconnector-credentialsproviderconfiguration-stripeprivy
+         */
+        readonly stripePrivy?: cdk.IResolvable | CfnPaymentConnectorPropsMixin.PaymentCredentialProviderConfigurationProperty;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentconnector-paymentcredentialproviderconfiguration.html
+     */
+    interface PaymentCredentialProviderConfigurationProperty {
+        /**
+         * The ARN of the payment credential provider.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentconnector-paymentcredentialproviderconfiguration.html#cfn-bedrockagentcore-paymentconnector-paymentcredentialproviderconfiguration-credentialproviderarn
+         */
+        readonly credentialProviderArn?: string;
+    }
+}
+/**
+ * Properties for CfnPaymentConnectorPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentconnector.html
+ */
+export interface CfnPaymentConnectorMixinProps {
+    /**
+     * The name of the payment connector.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentconnector.html#cfn-bedrockagentcore-paymentconnector-connectorname
+     */
+    readonly connectorName?: string;
+    /**
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentconnector.html#cfn-bedrockagentcore-paymentconnector-connectortype
+     */
+    readonly connectorType?: string;
+    /**
+     * The credential provider configurations for the connector.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentconnector.html#cfn-bedrockagentcore-paymentconnector-credentialproviderconfigurations
+     */
+    readonly credentialProviderConfigurations?: Array<CfnPaymentConnectorPropsMixin.CredentialsProviderConfigurationProperty | cdk.IResolvable> | cdk.IResolvable;
+    /**
+     * A description of the payment connector.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentconnector.html#cfn-bedrockagentcore-paymentconnector-description
+     */
+    readonly description?: string;
+    /**
+     * The identifier of the parent payment manager.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentconnector.html#cfn-bedrockagentcore-paymentconnector-paymentmanagerid
+     */
+    readonly paymentManagerId?: string;
+}
 /**
  * Resource Type definition for AWS::BedrockAgentCore::PaymentCredentialProvider.
  *
@@ -4617,12 +5176,61 @@ export declare namespace CfnPaymentCredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput-apikeysecret
          */
         readonly apiKeySecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput-apikeysecretconfig
+         */
+        readonly apiKeySecretConfig?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput-apikeysecretsource
+         */
+        readonly apiKeySecretSource?: string;
         /**
          * The Coinbase CDP wallet secret.
          *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput-walletsecret
          */
         readonly walletSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput-walletsecretconfig
+         */
+        readonly walletSecretConfig?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationinput-walletsecretsource
+         */
+        readonly walletSecretSource?: string;
+    }
+    /**
+     * A reference to a customer-provided secret stored in AWS Secrets Manager.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html
+     */
+    interface SecretReferenceProperty {
+        /**
+         * The JSON key within the secret that contains the credential value.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html#cfn-bedrockagentcore-paymentcredentialprovider-secretreference-jsonkey
+         */
+        readonly jsonKey?: string;
+        /**
+         * The ID or ARN of the secret in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-secretreference.html#cfn-bedrockagentcore-paymentcredentialprovider-secretreference-secretid
+         */
+        readonly secretId?: string;
     }
     /**
      * Stripe Privy configuration with credentials.
@@ -4644,6 +5252,20 @@ export declare namespace CfnPaymentCredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput-appsecret
          */
         readonly appSecret?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput-appsecretconfig
+         */
+        readonly appSecretConfig?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput-appsecretsource
+         */
+        readonly appSecretSource?: string;
         /**
          * The authorization ID for the Stripe Privy integration.
          *
@@ -4656,6 +5278,20 @@ export declare namespace CfnPaymentCredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput-authorizationprivatekey
          */
         readonly authorizationPrivateKey?: string;
+        /**
+         * A reference to a customer-provided secret stored in AWS Secrets Manager.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput-authorizationprivatekeyconfig
+         */
+        readonly authorizationPrivateKeyConfig?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretReferenceProperty;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationinput-authorizationprivatekeysource
+         */
+        readonly authorizationPrivateKeySource?: string;
     }
     /**
      * Provider configuration output containing secret ARNs (no raw secrets).
@@ -4698,12 +5334,40 @@ export declare namespace CfnPaymentCredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput-apikeysecretarn
          */
         readonly apiKeySecretArn?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretInfoProperty;
+        /**
+         * The JSON key within the secret that contains the API key secret value.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput-apikeysecretjsonkey
+         */
+        readonly apiKeySecretJsonKey?: string;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput-apikeysecretsource
+         */
+        readonly apiKeySecretSource?: string;
         /**
          * Contains information about a secret in AWS Secrets Manager.
          *
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput-walletsecretarn
          */
         readonly walletSecretArn?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretInfoProperty;
+        /**
+         * The JSON key within the secret that contains the wallet secret value.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput-walletsecretjsonkey
+         */
+        readonly walletSecretJsonKey?: string;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-coinbasecdpconfigurationoutput-walletsecretsource
+         */
+        readonly walletSecretSource?: string;
     }
     /**
      * Contains information about a secret in AWS Secrets Manager.
@@ -4740,6 +5404,20 @@ export declare namespace CfnPaymentCredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput-appsecretarn
          */
         readonly appSecretArn?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretInfoProperty;
+        /**
+         * The JSON key within the secret that contains the app secret value.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput-appsecretjsonkey
+         */
+        readonly appSecretJsonKey?: string;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput-appsecretsource
+         */
+        readonly appSecretSource?: string;
         /**
          * The authorization ID for the Stripe Privy integration.
          *
@@ -4752,6 +5430,20 @@ export declare namespace CfnPaymentCredentialProviderPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput-authorizationprivatekeyarn
          */
         readonly authorizationPrivateKeyArn?: cdk.IResolvable | CfnPaymentCredentialProviderPropsMixin.SecretInfoProperty;
+        /**
+         * The JSON key within the secret that contains the authorization private key value.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput-authorizationprivatekeyjsonkey
+         */
+        readonly authorizationPrivateKeyJsonKey?: string;
+        /**
+         * The source of the secret.
+         *
+         * Use MANAGED for service-managed secrets or EXTERNAL for customer-provided secrets.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput.html#cfn-bedrockagentcore-paymentcredentialprovider-stripeprivyconfigurationoutput-authorizationprivatekeysource
+         */
+        readonly authorizationPrivateKeySource?: string;
     }
 }
 /**
@@ -4787,6 +5479,175 @@ export interface CfnPaymentCredentialProviderMixinProps {
      */
     readonly tags?: Array<cdk.CfnTag>;
 }
+/**
+ * Resource Type definition for AWS::BedrockAgentCore::PaymentManager.
+ *
+ * @cloudformationResource AWS::BedrockAgentCore::PaymentManager
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html
+ */
+export declare class CfnPaymentManagerPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnPaymentManagerMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::BedrockAgentCore::PaymentManager`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnPaymentManagerMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnPaymentManager;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnPaymentManagerPropsMixin {
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-authorizerconfiguration.html
+     */
+    interface AuthorizerConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-authorizerconfiguration.html#cfn-bedrockagentcore-paymentmanager-authorizerconfiguration-customjwtauthorizer
+         */
+        readonly customJwtAuthorizer?: CfnPaymentManagerPropsMixin.CustomJWTAuthorizerConfigurationProperty | cdk.IResolvable;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration.html
+     */
+    interface CustomJWTAuthorizerConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration-allowedaudience
+         */
+        readonly allowedAudience?: Array<string>;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration-allowedclients
+         */
+        readonly allowedClients?: Array<string>;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration-allowedscopes
+         */
+        readonly allowedScopes?: Array<string>;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration-customclaims
+         */
+        readonly customClaims?: Array<CfnPaymentManagerPropsMixin.CustomClaimValidationTypeProperty | cdk.IResolvable> | cdk.IResolvable;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-paymentmanager-customjwtauthorizerconfiguration-discoveryurl
+         */
+        readonly discoveryUrl?: string;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customclaimvalidationtype.html
+     */
+    interface CustomClaimValidationTypeProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customclaimvalidationtype.html#cfn-bedrockagentcore-paymentmanager-customclaimvalidationtype-authorizingclaimmatchvalue
+         */
+        readonly authorizingClaimMatchValue?: CfnPaymentManagerPropsMixin.AuthorizingClaimMatchValueTypeProperty | cdk.IResolvable;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customclaimvalidationtype.html#cfn-bedrockagentcore-paymentmanager-customclaimvalidationtype-inboundtokenclaimname
+         */
+        readonly inboundTokenClaimName?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-customclaimvalidationtype.html#cfn-bedrockagentcore-paymentmanager-customclaimvalidationtype-inboundtokenclaimvaluetype
+         */
+        readonly inboundTokenClaimValueType?: string;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-authorizingclaimmatchvaluetype.html
+     */
+    interface AuthorizingClaimMatchValueTypeProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-authorizingclaimmatchvaluetype.html#cfn-bedrockagentcore-paymentmanager-authorizingclaimmatchvaluetype-claimmatchoperator
+         */
+        readonly claimMatchOperator?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-authorizingclaimmatchvaluetype.html#cfn-bedrockagentcore-paymentmanager-authorizingclaimmatchvaluetype-claimmatchvalue
+         */
+        readonly claimMatchValue?: CfnPaymentManagerPropsMixin.ClaimMatchValueTypeProperty | cdk.IResolvable;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-claimmatchvaluetype.html
+     */
+    interface ClaimMatchValueTypeProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-claimmatchvaluetype.html#cfn-bedrockagentcore-paymentmanager-claimmatchvaluetype-matchvaluestring
+         */
+        readonly matchValueString?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-claimmatchvaluetype.html#cfn-bedrockagentcore-paymentmanager-claimmatchvaluetype-matchvaluestringlist
+         */
+        readonly matchValueStringList?: Array<string>;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-workloadidentitydetails.html
+     */
+    interface WorkloadIdentityDetailsProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-paymentmanager-workloadidentitydetails.html#cfn-bedrockagentcore-paymentmanager-workloadidentitydetails-workloadidentityarn
+         */
+        readonly workloadIdentityArn?: string;
+    }
+}
+/**
+ * Properties for CfnPaymentManagerPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html
+ */
+export interface CfnPaymentManagerMixinProps {
+    /**
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html#cfn-bedrockagentcore-paymentmanager-authorizerconfiguration
+     */
+    readonly authorizerConfiguration?: CfnPaymentManagerPropsMixin.AuthorizerConfigurationProperty | cdk.IResolvable;
+    /**
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html#cfn-bedrockagentcore-paymentmanager-authorizertype
+     */
+    readonly authorizerType?: string;
+    /**
+     * A description of the payment manager.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html#cfn-bedrockagentcore-paymentmanager-description
+     */
+    readonly description?: string;
+    /**
+     * The name of the payment manager.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html#cfn-bedrockagentcore-paymentmanager-name
+     */
+    readonly name?: string;
+    /**
+     * The ARN of the IAM role for the payment manager.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html#cfn-bedrockagentcore-paymentmanager-rolearn
+     */
+    readonly roleArn?: string;
+    /**
+     * Tags to assign to the payment manager.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-paymentmanager.html#cfn-bedrockagentcore-paymentmanager-tags
+     */
+    readonly tags?: Array<cdk.CfnTag>;
+}
 /**
  * Resource Type definition for AWS::BedrockAgentCore::Policy.
  *
@@ -4955,6 +5816,55 @@ export interface CfnPolicyEngineMixinProps {
      */
     readonly tags?: Array<cdk.CfnTag>;
 }
+/**
+ * Resource Type definition for AWS::BedrockAgentCore::ResourcePolicy.
+ *
+ * @cloudformationResource AWS::BedrockAgentCore::ResourcePolicy
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-resourcepolicy.html
+ */
+export declare class CfnResourcePolicyPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnResourcePolicyMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::BedrockAgentCore::ResourcePolicy`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnResourcePolicyMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnResourcePolicy;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnResourcePolicyPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-resourcepolicy.html
+ */
+export interface CfnResourcePolicyMixinProps {
+    /**
+     * The resource policy to create or update.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-resourcepolicy.html#cfn-bedrockagentcore-resourcepolicy-policy
+     */
+    readonly policy?: string;
+    /**
+     * The Amazon Resource Name (ARN) of the resource for which to create or update the resource policy.
+     *
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-resourcepolicy.html#cfn-bedrockagentcore-resourcepolicy-resourcearn
+     */
+    readonly resourceArn?: string;
+}
 /**
  * Contains information about an agent runtime. An agent runtime is the execution environment for a Amazon Bedrock Agent.
  *