@aws-sdk/client-bedrock-agentcore-control 3.1056.0 → 3.1057.0

package/dist-types/commands/UpdateApiKeyCredentialProviderCommand.d.ts

@@ -40,7 +40,12 @@ declare const UpdateApiKeyCredentialProviderCommand_base: {
  * const client = new BedrockAgentCoreControlClient(config);
  * const input = { // UpdateApiKeyCredentialProviderRequest
  *   name: "STRING_VALUE", // required
- *   apiKey: "STRING_VALUE", // required
+ *   apiKey: "STRING_VALUE",
+ *   apiKeySecretConfig: { // SecretReference
+ *     secretId: "STRING_VALUE", // required
+ *     jsonKey: "STRING_VALUE", // required
+ *   },
+ *   apiKeySecretSource: "MANAGED" || "EXTERNAL",
  * };
  * const command = new UpdateApiKeyCredentialProviderCommand(input);
  * const response = await client.send(command);
@@ -48,6 +53,8 @@ declare const UpdateApiKeyCredentialProviderCommand_base: {
  * //   apiKeySecretArn: { // Secret
  * //     secretArn: "STRING_VALUE", // required
  * //   },
+ * //   apiKeySecretJsonKey: "STRING_VALUE",
+ * //   apiKeySecretSource: "MANAGED" || "EXTERNAL",
  * //   name: "STRING_VALUE", // required
  * //   credentialProviderArn: "STRING_VALUE", // required
  * //   createdTime: new Date("TIMESTAMP"), // required

package/dist-types/commands/UpdateOauth2CredentialProviderCommand.d.ts

@@ -59,6 +59,21 @@ declare const UpdateOauth2CredentialProviderCommand_base: {
  *       },
  *       clientId: "STRING_VALUE",
  *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: { // SecretReference
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
+ *       onBehalfOfTokenExchangeConfig: { // OnBehalfOfTokenExchangeConfigType
+ *         grantType: "TOKEN_EXCHANGE" || "JWT_AUTHORIZATION_GRANT", // required
+ *         tokenExchangeGrantTypeConfig: { // TokenExchangeGrantTypeConfigType
+ *           actorTokenContent: "NONE" || "M2M" || "AWS_IAM_ID_TOKEN_JWT", // required
+ *           actorTokenScopes: [ // ScopesListType
+ *             "STRING_VALUE",
+ *           ],
+ *         },
+ *       },
+ *       clientAuthenticationMethod: "CLIENT_SECRET_BASIC" || "CLIENT_SECRET_POST" || "AWS_IAM_ID_TOKEN_JWT",
  *       privateEndpoint: { // PrivateEndpoint Union: only one key present
  *         selfManagedLatticeResource: { // SelfManagedLatticeResource Union: only one key present
  *           resourceConfigurationIdentifier: "STRING_VALUE",
@@ -102,49 +117,67 @@ declare const UpdateOauth2CredentialProviderCommand_base: {
  *           },
  *         },
  *       ],
- *       onBehalfOfTokenExchangeConfig: { // OnBehalfOfTokenExchangeConfigType
- *         grantType: "TOKEN_EXCHANGE" || "JWT_AUTHORIZATION_GRANT", // required
- *         tokenExchangeGrantTypeConfig: { // TokenExchangeGrantTypeConfigType
- *           actorTokenContent: "NONE" || "M2M" || "AWS_IAM_ID_TOKEN_JWT", // required
- *           actorTokenScopes: [ // ScopesListType
- *             "STRING_VALUE",
- *           ],
- *         },
- *       },
- *       clientAuthenticationMethod: "CLIENT_SECRET_BASIC" || "CLIENT_SECRET_POST" || "AWS_IAM_ID_TOKEN_JWT",
  *     },
  *     googleOauth2ProviderConfig: { // GoogleOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: {
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *     },
  *     githubOauth2ProviderConfig: { // GithubOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: {
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *     },
  *     slackOauth2ProviderConfig: { // SlackOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: {
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *     },
  *     salesforceOauth2ProviderConfig: { // SalesforceOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: {
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *     },
  *     microsoftOauth2ProviderConfig: { // MicrosoftOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: "<SecretReference>",
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *       tenantId: "STRING_VALUE",
  *     },
  *     atlassianOauth2ProviderConfig: { // AtlassianOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: "<SecretReference>",
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *     },
  *     linkedinOauth2ProviderConfig: { // LinkedinOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: "<SecretReference>",
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *     },
  *     includedOauth2ProviderConfig: { // IncludedOauth2ProviderConfigInput
  *       clientId: "STRING_VALUE", // required
- *       clientSecret: "STRING_VALUE", // required
+ *       clientSecret: "STRING_VALUE",
+ *       clientSecretConfig: "<SecretReference>",
+ *       clientSecretSource: "MANAGED" || "EXTERNAL",
  *       issuer: "STRING_VALUE",
  *       authorizationEndpoint: "STRING_VALUE",
  *       tokenEndpoint: "STRING_VALUE",
@@ -157,6 +190,8 @@ declare const UpdateOauth2CredentialProviderCommand_base: {
  * //   clientSecretArn: { // Secret
  * //     secretArn: "STRING_VALUE", // required
  * //   },
+ * //   clientSecretJsonKey: "STRING_VALUE",
+ * //   clientSecretSource: "MANAGED" || "EXTERNAL",
  * //   name: "STRING_VALUE", // required
  * //   credentialProviderVendor: "GoogleOauth2" || "GithubOauth2" || "SlackOauth2" || "SalesforceOauth2" || "MicrosoftOauth2" || "CustomOauth2" || "AtlassianOauth2" || "LinkedinOauth2" || "XOauth2" || "OktaOauth2" || "OneLoginOauth2" || "PingOneOauth2" || "FacebookOauth2" || "YandexOauth2" || "RedditOauth2" || "ZoomOauth2" || "TwitchOauth2" || "SpotifyOauth2" || "DropboxOauth2" || "NotionOauth2" || "HubspotOauth2" || "CyberArkOauth2" || "FusionAuthOauth2" || "Auth0Oauth2" || "CognitoOauth2", // required
  * //   credentialProviderArn: "STRING_VALUE", // required

package/dist-types/commands/UpdatePaymentCredentialProviderCommand.d.ts

@@ -44,13 +44,33 @@ declare const UpdatePaymentCredentialProviderCommand_base: {
  *   providerConfigurationInput: { // PaymentProviderConfigurationInput Union: only one key present
  *     coinbaseCdpConfiguration: { // CoinbaseCdpConfigurationInput
  *       apiKeyId: "STRING_VALUE", // required
- *       apiKeySecret: "STRING_VALUE", // required
- *       walletSecret: "STRING_VALUE", // required
+ *       apiKeySecret: "STRING_VALUE",
+ *       apiKeySecretSource: "MANAGED" || "EXTERNAL",
+ *       apiKeySecretConfig: { // SecretReference
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
+ *       walletSecret: "STRING_VALUE",
+ *       walletSecretSource: "MANAGED" || "EXTERNAL",
+ *       walletSecretConfig: {
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
  *     },
  *     stripePrivyConfiguration: { // StripePrivyConfigurationInput
  *       appId: "STRING_VALUE", // required
- *       appSecret: "STRING_VALUE", // required
- *       authorizationPrivateKey: "STRING_VALUE", // required
+ *       appSecret: "STRING_VALUE",
+ *       appSecretSource: "MANAGED" || "EXTERNAL",
+ *       appSecretConfig: {
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
+ *       authorizationPrivateKey: "STRING_VALUE",
+ *       authorizationPrivateKeySource: "MANAGED" || "EXTERNAL",
+ *       authorizationPrivateKeyConfig: {
+ *         secretId: "STRING_VALUE", // required
+ *         jsonKey: "STRING_VALUE", // required
+ *       },
  *       authorizationId: "STRING_VALUE", // required
  *     },
  *   },
@@ -67,18 +87,26 @@ declare const UpdatePaymentCredentialProviderCommand_base: {
  * //       apiKeySecretArn: { // Secret
  * //         secretArn: "STRING_VALUE", // required
  * //       },
+ * //       apiKeySecretJsonKey: "STRING_VALUE",
+ * //       apiKeySecretSource: "MANAGED" || "EXTERNAL",
  * //       walletSecretArn: {
  * //         secretArn: "STRING_VALUE", // required
  * //       },
+ * //       walletSecretJsonKey: "STRING_VALUE",
+ * //       walletSecretSource: "MANAGED" || "EXTERNAL",
  * //     },
  * //     stripePrivyConfiguration: { // StripePrivyConfigurationOutput
  * //       appId: "STRING_VALUE", // required
  * //       appSecretArn: {
  * //         secretArn: "STRING_VALUE", // required
  * //       },
+ * //       appSecretJsonKey: "STRING_VALUE",
+ * //       appSecretSource: "MANAGED" || "EXTERNAL",
  * //       authorizationPrivateKeyArn: {
  * //         secretArn: "STRING_VALUE", // required
  * //       },
+ * //       authorizationPrivateKeyJsonKey: "STRING_VALUE",
+ * //       authorizationPrivateKeySource: "MANAGED" || "EXTERNAL",
  * //       authorizationId: "STRING_VALUE", // required
  * //     },
  * //   },

package/dist-types/models/enums.d.ts

@@ -184,6 +184,18 @@ export declare const AgentRuntimeStatus: {
  * @public
  */
 export type AgentRuntimeStatus = (typeof AgentRuntimeStatus)[keyof typeof AgentRuntimeStatus];
+/**
+ * @public
+ * @enum
+ */
+export declare const SecretSourceType: {
+    readonly EXTERNAL: "EXTERNAL";
+    readonly MANAGED: "MANAGED";
+};
+/**
+ * @public
+ */
+export type SecretSourceType = (typeof SecretSourceType)[keyof typeof SecretSourceType];
 /**
  * @public
  * @enum

package/dist-types/models/models_0.d.ts

@@ -1,5 +1,5 @@
 import type { DocumentType as __DocumentType } from "@smithy/types";
-import type { AgentManagedRuntimeType, AgentRuntimeEndpointStatus, AgentRuntimeStatus, ApiKeyCredentialLocation, AuthorizerType, BrowserEnterprisePolicyType, BrowserNetworkMode, BrowserProfileStatus, BrowserStatus, ClaimMatchOperatorType, CodeInterpreterNetworkMode, CodeInterpreterStatus, ConfigurationBundleStatus, CredentialProviderType, DatasetSchemaType, DatasetStatus, DraftStatus, EndpointIpAddressType, EvaluatorLevel, EvaluatorStatus, EvaluatorType, ExceptionLevel, GatewayInterceptionPoint, GatewayPolicyEngineMode, GatewayProtocolType, GatewayRuleStatus, GatewayStatus, HarnessBedrockApiFormat, HarnessOpenAiApiFormat, HarnessStatus, HarnessToolType, HarnessTruncationStrategy, InboundTokenClaimValueType, IncludedData, KeyType, ListingMode, MetadataValueType, NetworkMode, OAuthGrantType, PrincipalMatchOperator, ResourceType, RestApiMethod, SearchType, ServerProtocol, TargetStatus } from "./enums";
+import type { AgentManagedRuntimeType, AgentRuntimeEndpointStatus, AgentRuntimeStatus, ApiKeyCredentialLocation, AuthorizerType, BrowserEnterprisePolicyType, BrowserNetworkMode, BrowserProfileStatus, BrowserStatus, ClaimMatchOperatorType, CodeInterpreterNetworkMode, CodeInterpreterStatus, ConfigurationBundleStatus, CredentialProviderType, DatasetSchemaType, DatasetStatus, DraftStatus, EndpointIpAddressType, EvaluatorLevel, EvaluatorStatus, EvaluatorType, ExceptionLevel, GatewayInterceptionPoint, GatewayPolicyEngineMode, GatewayProtocolType, GatewayRuleStatus, GatewayStatus, HarnessBedrockApiFormat, HarnessOpenAiApiFormat, HarnessStatus, HarnessToolType, HarnessTruncationStrategy, InboundTokenClaimValueType, IncludedData, KeyType, ListingMode, NetworkMode, OAuthGrantType, PrincipalMatchOperator, ResourceType, RestApiMethod, SearchType, SecretSourceType, ServerProtocol, TargetStatus } from "./enums";
 /**
  * <p>The agent card definition for an A2A descriptor. Contains the schema version and inline content for the agent card.</p>
  * @public
@@ -1932,6 +1932,22 @@ export interface AgentSkillsDescriptor {
      */
     skillDefinition?: SkillDefinition | undefined;
 }
+/**
+ * <p>Contains a reference to a secret stored in AWS Secrets Manager.</p>
+ * @public
+ */
+export interface SecretReference {
+    /**
+     * <p>The ID of the AWS Secrets Manager secret that stores the secret value.</p>
+     * @public
+     */
+    secretId: string | undefined;
+    /**
+     * <p>The JSON key used to extract the secret value from the AWS Secrets Manager secret.</p>
+     * @public
+     */
+    jsonKey: string | undefined;
+}
 /**
  * @public
  */
@@ -1945,7 +1961,17 @@ export interface CreateApiKeyCredentialProviderRequest {
      * <p>The API key to use for authentication. This value is encrypted and stored securely.</p>
      * @public
      */
-    apiKey: string | undefined;
+    apiKey?: string | undefined;
+    /**
+     * <p>A reference to the AWS Secrets Manager secret that stores the API key. This includes the secret ID and the JSON key used to extract the API key value from the secret. Required when <code>apiKeySecretSource</code> is set to <code>EXTERNAL</code>.</p>
+     * @public
+     */
+    apiKeySecretConfig?: SecretReference | undefined;
+    /**
+     * <p>The source type of the API key secret. Use <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if you manage the secret yourself in AWS Secrets Manager.</p>
+     * @public
+     */
+    apiKeySecretSource?: SecretSourceType | undefined;
     /**
      * <p>A map of tag keys and values to assign to the API key credential provider. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.</p>
      * @public
@@ -1972,6 +1998,16 @@ export interface CreateApiKeyCredentialProviderResponse {
      * @public
      */
     apiKeySecretArn: Secret | undefined;
+    /**
+     * <p>The JSON key used to extract the API key value from the AWS Secrets Manager secret.</p>
+     * @public
+     */
+    apiKeySecretJsonKey?: string | undefined;
+    /**
+     * <p>The source type of the API key secret. Either <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if managed by the user in AWS Secrets Manager.</p>
+     * @public
+     */
+    apiKeySecretSource?: SecretSourceType | undefined;
     /**
      * <p>The name of the created API key credential provider.</p>
      * @public
@@ -2017,6 +2053,16 @@ export interface GetApiKeyCredentialProviderResponse {
      * @public
      */
     apiKeySecretArn: Secret | undefined;
+    /**
+     * <p>The JSON key used to extract the API key value from the AWS Secrets Manager secret.</p>
+     * @public
+     */
+    apiKeySecretJsonKey?: string | undefined;
+    /**
+     * <p>The source type of the API key secret. Either <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if managed by the user in AWS Secrets Manager.</p>
+     * @public
+     */
+    apiKeySecretSource?: SecretSourceType | undefined;
     /**
      * <p>The name of the API key credential provider.</p>
      * @public
@@ -2107,7 +2153,17 @@ export interface UpdateApiKeyCredentialProviderRequest {
      * <p>The new API key to use for authentication. This value replaces the existing API key and is encrypted and stored securely.</p>
      * @public
      */
-    apiKey: string | undefined;
+    apiKey?: string | undefined;
+    /**
+     * <p>A reference to the AWS Secrets Manager secret that stores the API key. This includes the secret ID and the JSON key used to extract the API key value from the secret. Required when <code>apiKeySecretSource</code> is set to <code>EXTERNAL</code>.</p>
+     * @public
+     */
+    apiKeySecretConfig?: SecretReference | undefined;
+    /**
+     * <p>The source type of the API key secret. Use <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if you manage the secret yourself in AWS Secrets Manager.</p>
+     * @public
+     */
+    apiKeySecretSource?: SecretSourceType | undefined;
 }
 /**
  * @public
@@ -2118,6 +2174,16 @@ export interface UpdateApiKeyCredentialProviderResponse {
      * @public
      */
     apiKeySecretArn: Secret | undefined;
+    /**
+     * <p>The JSON key used to extract the API key value from the AWS Secrets Manager secret.</p>
+     * @public
+     */
+    apiKeySecretJsonKey?: string | undefined;
+    /**
+     * <p>The source type of the API key secret. Either <code>MANAGED</code> if the secret is managed by the service, or <code>EXTERNAL</code> if managed by the user in AWS Secrets Manager.</p>
+     * @public
+     */
+    apiKeySecretSource?: SecretSourceType | undefined;
     /**
      * <p>The name of the API key credential provider.</p>
      * @public
@@ -8194,19 +8260,3 @@ export interface ListTagsForResourceResponse {
      */
     tags?: Record<string, string> | undefined;
 }
-/**
- * <p>A metadata key indexed for filtering.</p>
- * @public
- */
-export interface IndexedKey {
-    /**
-     * <p>The metadata key name to index.</p>
-     * @public
-     */
-    key: string | undefined;
-    /**
-     * <p>The data type of the indexed key.</p>
-     * @public
-     */
-    type: MetadataValueType | undefined;
-}