@aws-cdk/cfn-property-mixins 2.262.2 → 2.264.0

package/lib/services/aws-bedrockagentcore/cfn-props-mixins.generated.d.ts

@@ -454,6 +454,45 @@ export interface CfnBrowserProfileMixinProps {
      */
     readonly tags?: Record<string, string>;
 }
+/**
+ * Definition of AWS::BedrockAgentCore::CodeInterpreter Resource Type.
+ *
+ * This is a read-only resource representing the AWS-managed default code interpreter (aws.codeinterpreter.v1).
+ *
+ * @cloudformationResource AWS::BedrockAgentCore::CodeInterpreter
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-codeinterpreter.html
+ */
+export declare class CfnCodeInterpreterPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnCodeInterpreterMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::BedrockAgentCore::CodeInterpreter`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnCodeInterpreterMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnCodeInterpreter;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+/**
+ * Properties for CfnCodeInterpreterPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-codeinterpreter.html
+ */
+export interface CfnCodeInterpreterMixinProps {
+}
 /**
  * The AgentCore Code Interpreter tool enables agents to securely execute code in isolated sandbox environments.
  *
@@ -1272,6 +1311,10 @@ export declare namespace CfnGatewayPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-gateway-customjwtauthorizerconfiguration-discoveryurl
          */
         readonly discoveryUrl?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-gateway-customjwtauthorizerconfiguration-privateendpoint
+         */
+        readonly privateEndpoint?: cdk.IResolvable | CfnGatewayPropsMixin.PrivateEndpointProperty;
     }
     /**
      * Required custom claim.
@@ -1342,6 +1385,59 @@ export declare namespace CfnGatewayPropsMixin {
          */
         readonly matchValueStringList?: Array<string>;
     }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-privateendpoint.html
+     */
+    interface PrivateEndpointProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-privateendpoint.html#cfn-bedrockagentcore-gateway-privateendpoint-managedvpcresource
+         */
+        readonly managedVpcResource?: cdk.IResolvable | CfnGatewayPropsMixin.ManagedVpcResourceProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-privateendpoint.html#cfn-bedrockagentcore-gateway-privateendpoint-selfmanagedlatticeresource
+         */
+        readonly selfManagedLatticeResource?: cdk.IResolvable | CfnGatewayPropsMixin.SelfManagedLatticeResourceProperty;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-selfmanagedlatticeresource.html
+     */
+    interface SelfManagedLatticeResourceProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-selfmanagedlatticeresource.html#cfn-bedrockagentcore-gateway-selfmanagedlatticeresource-resourceconfigurationidentifier
+         */
+        readonly resourceConfigurationIdentifier?: string;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-managedvpcresource.html
+     */
+    interface ManagedVpcResourceProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-managedvpcresource.html#cfn-bedrockagentcore-gateway-managedvpcresource-endpointipaddresstype
+         */
+        readonly endpointIpAddressType?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-managedvpcresource.html#cfn-bedrockagentcore-gateway-managedvpcresource-routingdomain
+         */
+        readonly routingDomain?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-managedvpcresource.html#cfn-bedrockagentcore-gateway-managedvpcresource-securitygroupids
+         */
+        readonly securityGroupIds?: Array<string>;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-managedvpcresource.html#cfn-bedrockagentcore-gateway-managedvpcresource-subnetids
+         */
+        readonly subnetIds?: Array<string>;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gateway-managedvpcresource.html#cfn-bedrockagentcore-gateway-managedvpcresource-vpcidentifier
+         */
+        readonly vpcIdentifier?: string;
+    }
     /**
      * @struct
      * @stability external
@@ -1828,6 +1924,10 @@ export declare namespace CfnGatewayTargetPropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-targetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-targetconfiguration-http
          */
         readonly http?: CfnGatewayTargetPropsMixin.HttpTargetConfigurationProperty | cdk.IResolvable;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-targetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-targetconfiguration-inference
+         */
+        readonly inference?: CfnGatewayTargetPropsMixin.InferenceTargetConfigurationProperty | cdk.IResolvable;
         /**
          * The target configuration definition for MCP.
          *
@@ -2291,6 +2391,120 @@ export declare namespace CfnGatewayTargetPropsMixin {
          */
         readonly timeout?: number;
     }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferencetargetconfiguration.html
+     */
+    interface InferenceTargetConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferencetargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferencetargetconfiguration-connector
+         */
+        readonly connector?: CfnGatewayTargetPropsMixin.InferenceConnectorTargetConfigurationProperty | cdk.IResolvable;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferencetargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferencetargetconfiguration-provider
+         */
+        readonly provider?: CfnGatewayTargetPropsMixin.InferenceProviderTargetConfigurationProperty | cdk.IResolvable;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceconnectortargetconfiguration.html
+     */
+    interface InferenceConnectorTargetConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceconnectortargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferenceconnectortargetconfiguration-source
+         */
+        readonly source?: CfnGatewayTargetPropsMixin.InferenceConnectorSourceProperty | cdk.IResolvable;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceconnectorsource.html
+     */
+    interface InferenceConnectorSourceProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceconnectorsource.html#cfn-bedrockagentcore-gatewaytarget-inferenceconnectorsource-connectorid
+         */
+        readonly connectorId?: string;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceprovidertargetconfiguration.html
+     */
+    interface InferenceProviderTargetConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceprovidertargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferenceprovidertargetconfiguration-endpoint
+         */
+        readonly endpoint?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceprovidertargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferenceprovidertargetconfiguration-modelmapping
+         */
+        readonly modelMapping?: cdk.IResolvable | CfnGatewayTargetPropsMixin.ModelMappingProperty;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceprovidertargetconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferenceprovidertargetconfiguration-operations
+         */
+        readonly operations?: Array<CfnGatewayTargetPropsMixin.InferenceOperationConfigurationProperty | cdk.IResolvable> | cdk.IResolvable;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-modelmapping.html
+     */
+    interface ModelMappingProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-modelmapping.html#cfn-bedrockagentcore-gatewaytarget-modelmapping-providerprefix
+         */
+        readonly providerPrefix?: cdk.IResolvable | CfnGatewayTargetPropsMixin.ProviderPrefixProperty;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-providerprefix.html
+     */
+    interface ProviderPrefixProperty {
+        /**
+         * @default - "."
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-providerprefix.html#cfn-bedrockagentcore-gatewaytarget-providerprefix-separator
+         */
+        readonly separator?: string;
+        /**
+         * @default - false
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-providerprefix.html#cfn-bedrockagentcore-gatewaytarget-providerprefix-strip
+         */
+        readonly strip?: boolean | cdk.IResolvable;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceoperationconfiguration.html
+     */
+    interface InferenceOperationConfigurationProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceoperationconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferenceoperationconfiguration-models
+         */
+        readonly models?: Array<cdk.IResolvable | CfnGatewayTargetPropsMixin.ModelEntryProperty> | cdk.IResolvable;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceoperationconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferenceoperationconfiguration-path
+         */
+        readonly path?: string;
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-inferenceoperationconfiguration.html#cfn-bedrockagentcore-gatewaytarget-inferenceoperationconfiguration-providerpath
+         */
+        readonly providerPath?: string;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-modelentry.html
+     */
+    interface ModelEntryProperty {
+        /**
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-gatewaytarget-modelentry.html#cfn-bedrockagentcore-gatewaytarget-modelentry-model
+         */
+        readonly model?: string;
+    }
     /**
      * @struct
      * @stability external
@@ -6597,6 +6811,14 @@ export declare namespace CfnRuntimePropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedscopes
          */
         readonly allowedScopes?: Array<string>;
+        /**
+         * Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.
+         *
+         * When set, the data plane enforces that the introspected workload chain's caller matches one of the configured hosting environments or workload identities; absent means no chain enforcement.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedworkloadconfiguration
+         */
+        readonly allowedWorkloadConfiguration?: CfnRuntimePropsMixin.AllowedWorkloadConfigurationProperty | cdk.IResolvable;
         /**
          * List of required custom claims.
          *
@@ -6609,6 +6831,20 @@ export declare namespace CfnRuntimePropsMixin {
          * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-discoveryurl
          */
         readonly discoveryUrl?: string;
+        /**
+         * Private endpoint configuration.
+         *
+         * Exactly one of SelfManagedLatticeResource or ManagedVpcResource must be specified.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-privateendpoint
+         */
+        readonly privateEndpoint?: cdk.IResolvable | CfnRuntimePropsMixin.PrivateEndpointProperty;
+        /**
+         * List of private endpoint overrides.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.html#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-privateendpointoverrides
+         */
+        readonly privateEndpointOverrides?: Array<cdk.IResolvable | CfnRuntimePropsMixin.PrivateEndpointOverrideProperty> | cdk.IResolvable;
     }
     /**
      * Required custom claim.
@@ -6679,6 +6915,146 @@ export declare namespace CfnRuntimePropsMixin {
          */
         readonly matchValueStringList?: Array<string>;
     }
+    /**
+     * Allow-list of upstream workloads permitted to reach this resource via the workload identity chain.
+     *
+     * When set, the data plane enforces that the introspected workload chain's caller matches one of the configured hosting environments or workload identities; absent means no chain enforcement.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-allowedworkloadconfiguration.html
+     */
+    interface AllowedWorkloadConfigurationProperty {
+        /**
+         * List of allow-listed hosting environments.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-allowedworkloadconfiguration.html#cfn-bedrockagentcore-runtime-allowedworkloadconfiguration-hostingenvironments
+         */
+        readonly hostingEnvironments?: Array<CfnRuntimePropsMixin.HostingEnvironmentProperty | cdk.IResolvable> | cdk.IResolvable;
+        /**
+         * List of allow-listed workload identity names.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-allowedworkloadconfiguration.html#cfn-bedrockagentcore-runtime-allowedworkloadconfiguration-workloadidentities
+         */
+        readonly workloadIdentities?: Array<string>;
+    }
+    /**
+     * An upstream workload identified by the ARN of its hosting environment (for example a Gateway or Runtime ARN).
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-hostingenvironment.html
+     */
+    interface HostingEnvironmentProperty {
+        /**
+         * The ARN of the bedrock-agentcore hosting environment.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-hostingenvironment.html#cfn-bedrockagentcore-runtime-hostingenvironment-arn
+         */
+        readonly arn?: string;
+    }
+    /**
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-privateendpoint.html
+     */
+    interface PrivateEndpointProperty {
+        /**
+         * Managed VPC resource configuration.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-privateendpoint.html#cfn-bedrockagentcore-runtime-privateendpoint-managedvpcresource
+         */
+        readonly managedVpcResource?: cdk.IResolvable | CfnRuntimePropsMixin.ManagedVpcResourceProperty;
+        /**
+         * Self-managed VPC Lattice resource configuration.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-privateendpoint.html#cfn-bedrockagentcore-runtime-privateendpoint-selfmanagedlatticeresource
+         */
+        readonly selfManagedLatticeResource?: cdk.IResolvable | CfnRuntimePropsMixin.SelfManagedLatticeResourceProperty;
+    }
+    /**
+     * Self-managed VPC Lattice resource configuration.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-selfmanagedlatticeresource.html
+     */
+    interface SelfManagedLatticeResourceProperty {
+        /**
+         * The identifier of the VPC Lattice resource configuration.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-selfmanagedlatticeresource.html#cfn-bedrockagentcore-runtime-selfmanagedlatticeresource-resourceconfigurationidentifier
+         */
+        readonly resourceConfigurationIdentifier?: string;
+    }
+    /**
+     * Managed VPC resource configuration.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-managedvpcresource.html
+     */
+    interface ManagedVpcResourceProperty {
+        /**
+         * The IP address type for the endpoint.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-managedvpcresource.html#cfn-bedrockagentcore-runtime-managedvpcresource-endpointipaddresstype
+         */
+        readonly endpointIpAddressType?: string;
+        /**
+         * An intermediate domain to use as the resource configuration endpoint instead of the actual target domain.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-managedvpcresource.html#cfn-bedrockagentcore-runtime-managedvpcresource-routingdomain
+         */
+        readonly routingDomain?: string;
+        /**
+         * The security group IDs.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-managedvpcresource.html#cfn-bedrockagentcore-runtime-managedvpcresource-securitygroupids
+         */
+        readonly securityGroupIds?: Array<string>;
+        /**
+         * The subnet IDs.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-managedvpcresource.html#cfn-bedrockagentcore-runtime-managedvpcresource-subnetids
+         */
+        readonly subnetIds?: Array<string>;
+        /**
+         * Tags to apply to the managed VPC Lattice resource gateway.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-managedvpcresource.html#cfn-bedrockagentcore-runtime-managedvpcresource-tags
+         */
+        readonly tags?: Record<string, string>;
+        /**
+         * The VPC identifier.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-managedvpcresource.html#cfn-bedrockagentcore-runtime-managedvpcresource-vpcidentifier
+         */
+        readonly vpcIdentifier?: string;
+    }
+    /**
+     * Override mapping of a domain to a private endpoint.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-privateendpointoverride.html
+     */
+    interface PrivateEndpointOverrideProperty {
+        /**
+         * The domain to override.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-privateendpointoverride.html#cfn-bedrockagentcore-runtime-privateendpointoverride-domain
+         */
+        readonly domain?: string;
+        /**
+         * Private endpoint configuration.
+         *
+         * Exactly one of SelfManagedLatticeResource or ManagedVpcResource must be specified.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-runtime-privateendpointoverride.html#cfn-bedrockagentcore-runtime-privateendpointoverride-privateendpoint
+         */
+        readonly privateEndpoint?: cdk.IResolvable | CfnRuntimePropsMixin.PrivateEndpointProperty;
+    }
     /**
      * Configuration for managing the lifecycle of runtime sessions and resources.
      *
@@ -6971,6 +7347,66 @@ export interface CfnRuntimeEndpointMixinProps {
      */
     readonly tags?: Record<string, string>;
 }
+/**
+ * Resource Type definition for AWS::BedrockAgentCore::TokenVault.
+ *
+ * @cloudformationResource AWS::BedrockAgentCore::TokenVault
+ * @mixin true
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-tokenvault.html
+ */
+export declare class CfnTokenVaultPropsMixin extends cdk.Mixin implements constructs.IMixin {
+    protected static readonly CFN_PROPERTY_KEYS: Array<string>;
+    protected readonly props: CfnTokenVaultMixinProps;
+    protected readonly strategy: cdk.IMergeStrategy;
+    /**
+     * Create a mixin to apply properties to `AWS::BedrockAgentCore::TokenVault`.
+     *
+     * @param props L1 properties to apply
+     * @param options Mixin options
+     */
+    constructor(props: CfnTokenVaultMixinProps, options?: mixins.CfnPropertyMixinOptions);
+    /**
+     * Check if this mixin supports the given construct
+     */
+    supports(construct: constructs.IConstruct): construct is service.CfnTokenVault;
+    /**
+     * Apply the mixin properties to the construct
+     */
+    applyTo(construct: constructs.IConstruct): void;
+}
+export declare namespace CfnTokenVaultPropsMixin {
+    /**
+     * Contains the KMS configuration for a resource.
+     *
+     * @struct
+     * @stability external
+     * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-tokenvault-kmsconfiguration.html
+     */
+    interface KmsConfigurationProperty {
+        /**
+         * The type of KMS key (CustomerManagedKey or ServiceManagedKey).
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-tokenvault-kmsconfiguration.html#cfn-bedrockagentcore-tokenvault-kmsconfiguration-keytype
+         */
+        readonly keyType?: string;
+        /**
+         * The Amazon Resource Name (ARN) of the KMS key.
+         *
+         * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-properties-bedrockagentcore-tokenvault-kmsconfiguration.html#cfn-bedrockagentcore-tokenvault-kmsconfiguration-kmskeyarn
+         */
+        readonly kmsKeyArn?: string;
+    }
+}
+/**
+ * Properties for CfnTokenVaultPropsMixin
+ *
+ * @struct
+ * @stability external
+ * @see http://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/aws-resource-bedrockagentcore-tokenvault.html
+ */
+export interface CfnTokenVaultMixinProps {
+}
 /**
  * Creates a workload identity for Amazon Bedrock AgentCore.
  *