@aws-sdk/client-bedrock-agentcore-control 3.1123.0 → 3.1124.0
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/dist-cjs/index.js +3 -3
- package/dist-es/schemas/schemas_0.js +2 -2
- package/dist-types/commands/CreatePolicyCommand.d.ts +1 -1
- package/dist-types/commands/GetPolicyGenerationCommand.d.ts +1 -1
- package/dist-types/commands/ListPolicyGenerationAssetsCommand.d.ts +1 -1
- package/dist-types/commands/StartPolicyGenerationCommand.d.ts +1 -1
- package/dist-types/commands/UpdateConfigurationBundleCommand.d.ts +1 -1
- package/dist-types/models/models_0.d.ts +2 -2
- package/dist-types/models/models_2.d.ts +18 -18
- package/dist-types/ts3.4/models/models_0.d.ts +1 -1
- package/package.json +1 -1
package/dist-cjs/index.js
CHANGED
|
@@ -69,7 +69,7 @@ const commonParams = {
|
|
|
69
69
|
UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
|
|
70
70
|
};
|
|
71
71
|
|
|
72
|
-
var version = "3.
|
|
72
|
+
var version = "3.1123.0";
|
|
73
73
|
var packageInfo = {
|
|
74
74
|
version: version};
|
|
75
75
|
|
|
@@ -5038,8 +5038,8 @@ var UpdateCapacityProviderOutput$ = [3, n0, _UCPO,
|
|
|
5038
5038
|
];
|
|
5039
5039
|
var UpdateConfigurationBundleRequest$ = [3, n0, _UCBR,
|
|
5040
5040
|
0,
|
|
5041
|
-
[_bIu, _cT, _bN, _d, _com,
|
|
5042
|
-
[[0, 1], [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0],
|
|
5041
|
+
[_bIu, _pVI, _cT, _bN, _d, _com, _bNr, _cM, _cB, _kKA],
|
|
5042
|
+
[[0, 1], 64 | 0, [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0], 0, 0, () => VersionCreatedBySource$, 0], 2
|
|
5043
5043
|
];
|
|
5044
5044
|
var UpdateConfigurationBundleResponse$ = [3, n0, _UCBRp,
|
|
5045
5045
|
0,
|
|
@@ -4697,8 +4697,8 @@ export var UpdateCapacityProviderOutput$ = [3, n0, _UCPO,
|
|
|
4697
4697
|
];
|
|
4698
4698
|
export var UpdateConfigurationBundleRequest$ = [3, n0, _UCBR,
|
|
4699
4699
|
0,
|
|
4700
|
-
[_bIu, _cT, _bN, _d, _com,
|
|
4701
|
-
[[0, 1], [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0],
|
|
4700
|
+
[_bIu, _pVI, _cT, _bN, _d, _com, _bNr, _cM, _cB, _kKA],
|
|
4701
|
+
[[0, 1], 64 | 0, [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0], 0, 0, () => VersionCreatedBySource$, 0], 2
|
|
4702
4702
|
];
|
|
4703
4703
|
export var UpdateConfigurationBundleResponse$ = [3, n0, _UCBRp,
|
|
4704
4704
|
0,
|
|
@@ -24,7 +24,7 @@ declare const CreatePolicyCommand_base: {
|
|
|
24
24
|
getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
|
|
25
25
|
};
|
|
26
26
|
/**
|
|
27
|
-
* <p>Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using
|
|
27
|
+
* <p>Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using Cedar or Dogwood, you can define fine-grained policies that specify which interactions with Gateway tools are permitted based on input parameters and OAuth claims, ensuring agents operate within defined boundaries and business rules. The policy is validated during creation against the Cedar schema generated from the Gateway's tools' input schemas, which defines the available tools, their parameters, and expected data types. This is an asynchronous operation. Use the <a href="https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html">GetPolicy</a> operation to poll the <code>status</code> field to track completion.</p> <p>If the new policy is a temporal policy, creating it invalidates the policy engine's active temporal sessions. For more information about temporal policy sessions, see <a href="https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy-session-based-temporal.html">session-based temporal policies</a>. The policy engine returns an HTTP 409 <code>ConflictException</code> to in-flight sessions. To resume, you must start a new session with a new session ID.</p>
|
|
28
28
|
* @example
|
|
29
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
30
|
* ```javascript
|
|
@@ -24,7 +24,7 @@ declare const GetPolicyGenerationCommand_base: {
|
|
|
24
24
|
getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
|
|
25
25
|
};
|
|
26
26
|
/**
|
|
27
|
-
* <p>Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into
|
|
27
|
+
* <p>Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into Dogwood policy statements using AI-powered translation, enabling non-technical users to create policies.</p>
|
|
28
28
|
* @example
|
|
29
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
30
|
* ```javascript
|
|
@@ -24,7 +24,7 @@ declare const ListPolicyGenerationAssetsCommand_base: {
|
|
|
24
24
|
getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
|
|
25
25
|
};
|
|
26
26
|
/**
|
|
27
|
-
* <p>Retrieves a list of generated policy assets from a policy generation request within the AgentCore Policy system. This operation returns the actual
|
|
27
|
+
* <p>Retrieves a list of generated policy assets from a policy generation request within the AgentCore Policy system. This operation returns the actual Dogwood policies and related artifacts produced by the AI-powered policy generation process, allowing users to review and select from multiple generated policy options.</p>
|
|
28
28
|
* @example
|
|
29
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
30
|
* ```javascript
|
|
@@ -24,7 +24,7 @@ declare const StartPolicyGenerationCommand_base: {
|
|
|
24
24
|
getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
|
|
25
25
|
};
|
|
26
26
|
/**
|
|
27
|
-
* <p>Initiates the AI-powered generation of
|
|
27
|
+
* <p>Initiates the AI-powered generation of Dogwood policies from natural language descriptions within the AgentCore Policy system. This feature enables both technical and non-technical users to create policies by describing their authorization requirements in plain English, which is then automatically translated into formal Dogwood policy statements. The generation process analyzes the natural language input along with the Gateway's tool context to produce validated policy options. Generated policy assets are automatically deleted after 7 days, so you should review and create policies from the generated assets within this timeframe. Once created, policies are permanent and not subject to this expiration. Generated policies should be reviewed and tested in log-only mode before deploying to production. Use this when you want to describe policy intent naturally rather than learning Dogwood syntax, though generated policies may require refinement for complex scenarios.</p>
|
|
28
28
|
* @example
|
|
29
29
|
* Use a bare-bones client and the command you need to make an API call.
|
|
30
30
|
* ```javascript
|
|
@@ -43,7 +43,7 @@ declare const UpdateConfigurationBundleCommand_base: {
|
|
|
43
43
|
* configuration: "DOCUMENT_VALUE", // required
|
|
44
44
|
* },
|
|
45
45
|
* },
|
|
46
|
-
* parentVersionIds: [ // ConfigurationBundleVersionList
|
|
46
|
+
* parentVersionIds: [ // ConfigurationBundleVersionList // required
|
|
47
47
|
* "STRING_VALUE",
|
|
48
48
|
* ],
|
|
49
49
|
* branchName: "STRING_VALUE",
|
|
@@ -4616,7 +4616,7 @@ export interface UpdateConfigurationBundleRequest {
|
|
|
4616
4616
|
* <p>A list of parent version identifiers for lineage tracking. Regular commits have a single parent. Merge commits have two parents: the target branch parent and the source branch parent. If the branch already exists, the first parent must be the latest version on that branch.</p>
|
|
4617
4617
|
* @public
|
|
4618
4618
|
*/
|
|
4619
|
-
parentVersionIds
|
|
4619
|
+
parentVersionIds: string[] | undefined;
|
|
4620
4620
|
/**
|
|
4621
4621
|
* <p>The branch name for this version. If not specified, inherits the parent's branch or defaults to <code>mainline</code>.</p>
|
|
4622
4622
|
* @public
|
|
@@ -6520,7 +6520,7 @@ export interface GatewayInterceptorConfiguration {
|
|
|
6520
6520
|
*/
|
|
6521
6521
|
export interface GatewayPolicyEngineConfiguration {
|
|
6522
6522
|
/**
|
|
6523
|
-
* <p>The ARN of the policy engine. The policy engine contains Cedar policies that define fine-grained authorization rules specifying who can perform what actions on which resources as agents interact through the gateway.</p>
|
|
6523
|
+
* <p>The ARN of the policy engine. The policy engine contains Cedar or Dogwood policies that define fine-grained authorization rules specifying who can perform what actions on which resources as agents interact through the gateway.</p>
|
|
6524
6524
|
* @public
|
|
6525
6525
|
*/
|
|
6526
6526
|
arn: string | undefined;
|
|
@@ -271,18 +271,18 @@ export interface CedarPolicy {
|
|
|
271
271
|
statement: string | undefined;
|
|
272
272
|
}
|
|
273
273
|
/**
|
|
274
|
-
* <p>An AgentCore policy statement, which supports plain Cedar policies
|
|
274
|
+
* <p>An AgentCore Cedar or Dogwood policy statement, which supports plain Cedar policies, temporal policies, and guardrails definitions.</p>
|
|
275
275
|
* @public
|
|
276
276
|
*/
|
|
277
277
|
export interface PolicyStatement {
|
|
278
278
|
/**
|
|
279
|
-
* <p>The body of the AgentCore policy statement. Contains the policy logic, which can be a Cedar policy or a guardrails definition.</p>
|
|
279
|
+
* <p>The body of the AgentCore Cedar or Dogwood policy statement. Contains the policy logic, which can be a Cedar policy, a temporal policy, or a guardrails definition.</p>
|
|
280
280
|
* @public
|
|
281
281
|
*/
|
|
282
282
|
statement: string | undefined;
|
|
283
283
|
}
|
|
284
284
|
/**
|
|
285
|
-
* <p>Represents the information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a
|
|
285
|
+
* <p>Represents the information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Dogwood policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
|
|
286
286
|
* @public
|
|
287
287
|
*/
|
|
288
288
|
export interface PolicyGenerationDetails {
|
|
@@ -317,7 +317,7 @@ export declare namespace PolicyDefinition {
|
|
|
317
317
|
$unknown?: never;
|
|
318
318
|
}
|
|
319
319
|
/**
|
|
320
|
-
* <p>The generated policy asset information within the policy definition structure. This contains information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a
|
|
320
|
+
* <p>The generated policy asset information within the policy definition structure. This contains information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Dogwood policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
|
|
321
321
|
* @public
|
|
322
322
|
*/
|
|
323
323
|
interface PolicyGenerationMember {
|
|
@@ -327,7 +327,7 @@ export declare namespace PolicyDefinition {
|
|
|
327
327
|
$unknown?: never;
|
|
328
328
|
}
|
|
329
329
|
/**
|
|
330
|
-
* <p>
|
|
330
|
+
* <p>The Dogwood policy statement that defines the access control rules. This policy definition can include Dogwood policies and supports temporal conditions and information providers such as guardrails.</p>
|
|
331
331
|
* @public
|
|
332
332
|
*/
|
|
333
333
|
interface PolicyMember {
|
|
@@ -373,7 +373,7 @@ export interface Finding {
|
|
|
373
373
|
description?: string | undefined;
|
|
374
374
|
}
|
|
375
375
|
/**
|
|
376
|
-
* <p>Represents a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a
|
|
376
|
+
* <p>Represents a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Dogwood policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
|
|
377
377
|
* @public
|
|
378
378
|
*/
|
|
379
379
|
export interface PolicyGenerationAsset {
|
|
@@ -388,7 +388,7 @@ export interface PolicyGenerationAsset {
|
|
|
388
388
|
*/
|
|
389
389
|
definition?: PolicyDefinition | undefined;
|
|
390
390
|
/**
|
|
391
|
-
* <p>The portion of the original natural language input that this generated policy asset addresses. This helps users understand which part of their policy description was translated into this specific
|
|
391
|
+
* <p>The portion of the original natural language input that this generated policy asset addresses. This helps users understand which part of their policy description was translated into this specific Dogwood policy statement, enabling better policy selection and refinement. When a single natural language input describes multiple authorization requirements, the generation process creates separate policy assets for each requirement, with each asset's rawTextFragment showing which requirement it addresses. Use this mapping to verify that all parts of your natural language input were correctly translated into Dogwood policies.</p>
|
|
392
392
|
* @public
|
|
393
393
|
*/
|
|
394
394
|
rawTextFragment: string | undefined;
|
|
@@ -403,7 +403,7 @@ export interface PolicyGenerationAsset {
|
|
|
403
403
|
*/
|
|
404
404
|
export interface ListPolicyGenerationAssetsResponse {
|
|
405
405
|
/**
|
|
406
|
-
* <p>An array of generated policy assets including
|
|
406
|
+
* <p>An array of generated policy assets including Dogwood policies and related artifacts from the AI-powered policy generation process. Each asset represents a different policy option or variation generated from the original natural language input.</p>
|
|
407
407
|
* @public
|
|
408
408
|
*/
|
|
409
409
|
policyGenerationAssets?: PolicyGenerationAsset[] | undefined;
|
|
@@ -434,7 +434,7 @@ export interface ListPolicyGenerationsRequest {
|
|
|
434
434
|
policyEngineId: string | undefined;
|
|
435
435
|
}
|
|
436
436
|
/**
|
|
437
|
-
* <p>Represents a policy generation request within the AgentCore Policy system. Tracks the AI-powered conversion of natural language descriptions into
|
|
437
|
+
* <p>Represents a policy generation request within the AgentCore Policy system. Tracks the AI-powered conversion of natural language descriptions into Dogwood policy statements, enabling users to author policies by describing authorization requirements in plain English. The generation process analyzes the natural language input along with the Gateway's tool context and Cedar schema to produce one or more validated policy options. Each generation request tracks the status of the conversion process and maintains findings about the generated policies, including validation results and potential issues. Generated policy assets remain available for one week after successful generation, allowing time to review and create policies from the generated options.</p>
|
|
438
438
|
* @public
|
|
439
439
|
*/
|
|
440
440
|
export interface PolicyGeneration {
|
|
@@ -600,7 +600,7 @@ export type Content = Content.RawTextMember | Content.$UnknownMember;
|
|
|
600
600
|
*/
|
|
601
601
|
export declare namespace Content {
|
|
602
602
|
/**
|
|
603
|
-
* <p>The raw text content containing natural language descriptions of desired policy behavior. This text is processed by AI to generate corresponding
|
|
603
|
+
* <p>The raw text content containing natural language descriptions of desired policy behavior. This text is processed by AI to generate corresponding Dogwood policy statements that match the described intent.</p>
|
|
604
604
|
* @public
|
|
605
605
|
*/
|
|
606
606
|
interface RawTextMember {
|
|
@@ -638,7 +638,7 @@ export interface StartPolicyGenerationRequest {
|
|
|
638
638
|
*/
|
|
639
639
|
resource: Resource | undefined;
|
|
640
640
|
/**
|
|
641
|
-
* <p>The natural language description of the desired policy behavior. This content is processed by AI to generate corresponding
|
|
641
|
+
* <p>The natural language description of the desired policy behavior. This content is processed by AI to generate corresponding Dogwood policy statements that match the described intent.</p>
|
|
642
642
|
* @public
|
|
643
643
|
*/
|
|
644
644
|
content: Content | undefined;
|
|
@@ -718,7 +718,7 @@ export interface CreatePolicyRequest {
|
|
|
718
718
|
*/
|
|
719
719
|
name: string | undefined;
|
|
720
720
|
/**
|
|
721
|
-
* <p>The Cedar policy statement that defines the access control rules. This contains the actual policy logic written in Cedar
|
|
721
|
+
* <p>The Cedar or Dogwood policy statement that defines the access control rules. This contains the actual policy logic written in Cedar or Dogwood, specifying effect (permit or forbid), principals, actions, resources, and conditions for agent behavior control.</p>
|
|
722
722
|
* @public
|
|
723
723
|
*/
|
|
724
724
|
definition: PolicyDefinition | undefined;
|
|
@@ -793,7 +793,7 @@ export interface CreatePolicyResponse {
|
|
|
793
793
|
*/
|
|
794
794
|
enforcementMode?: EnforcementMode | undefined;
|
|
795
795
|
/**
|
|
796
|
-
* <p>The Cedar policy statement that was created. This is the validated policy definition that will be used for agent behavior control and access decisions.</p>
|
|
796
|
+
* <p>The Cedar or Dogwood policy statement that was created. This is the validated policy definition that will be used for agent behavior control and access decisions.</p>
|
|
797
797
|
* @public
|
|
798
798
|
*/
|
|
799
799
|
definition: PolicyDefinition | undefined;
|
|
@@ -943,7 +943,7 @@ export interface GetPolicyResponse {
|
|
|
943
943
|
*/
|
|
944
944
|
enforcementMode?: EnforcementMode | undefined;
|
|
945
945
|
/**
|
|
946
|
-
* <p>The Cedar policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
|
|
946
|
+
* <p>The Cedar or Dogwood policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
|
|
947
947
|
* @public
|
|
948
948
|
*/
|
|
949
949
|
definition: PolicyDefinition | undefined;
|
|
@@ -1044,7 +1044,7 @@ export interface ListPoliciesRequest {
|
|
|
1044
1044
|
targetResourceScope?: string | undefined;
|
|
1045
1045
|
}
|
|
1046
1046
|
/**
|
|
1047
|
-
* <p>Represents a complete policy resource within the AgentCore Policy system. Policies are ARN-able resources that contain Cedar policy statements and associated metadata for controlling agent behavior and access decisions. Each policy belongs to a policy engine and defines fine-grained authorization rules that are evaluated in real-time as agents interact with tools through Gateway. Policies use
|
|
1047
|
+
* <p>Represents a complete policy resource within the AgentCore Policy system. Policies are ARN-able resources that contain Cedar or Dogwood policy statements and associated metadata for controlling agent behavior and access decisions. Each policy belongs to a policy engine and defines fine-grained authorization rules that are evaluated in real-time as agents interact with tools through Gateway. Policies use Cedar or Dogwood to specify who (principals based on OAuth claims like username, role, or scope) can perform what actions (tool calls) on which resources (Gateways), with optional conditions for attribute-based access control. Multiple policies can apply to a single request, with forbid-wins semantics ensuring that security restrictions are never accidentally overridden.</p>
|
|
1048
1048
|
* @public
|
|
1049
1049
|
*/
|
|
1050
1050
|
export interface Policy {
|
|
@@ -1089,7 +1089,7 @@ export interface Policy {
|
|
|
1089
1089
|
*/
|
|
1090
1090
|
enforcementMode?: EnforcementMode | undefined;
|
|
1091
1091
|
/**
|
|
1092
|
-
* <p>The Cedar policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
|
|
1092
|
+
* <p>The Cedar or Dogwood policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
|
|
1093
1093
|
* @public
|
|
1094
1094
|
*/
|
|
1095
1095
|
definition: PolicyDefinition | undefined;
|
|
@@ -1225,7 +1225,7 @@ export interface UpdatePolicyRequest {
|
|
|
1225
1225
|
*/
|
|
1226
1226
|
description?: UpdatedDescription | undefined;
|
|
1227
1227
|
/**
|
|
1228
|
-
* <p>The new Cedar policy statement that defines the access control rules. This replaces the existing policy definition with new logic while maintaining the policy's identity.</p>
|
|
1228
|
+
* <p>The new Cedar or Dogwood policy statement that defines the access control rules. This replaces the existing policy definition with new logic while maintaining the policy's identity.</p>
|
|
1229
1229
|
* @public
|
|
1230
1230
|
*/
|
|
1231
1231
|
definition?: PolicyDefinition | undefined;
|
|
@@ -1285,7 +1285,7 @@ export interface UpdatePolicyResponse {
|
|
|
1285
1285
|
*/
|
|
1286
1286
|
enforcementMode?: EnforcementMode | undefined;
|
|
1287
1287
|
/**
|
|
1288
|
-
* <p>The updated Cedar policy statement.</p>
|
|
1288
|
+
* <p>The updated Cedar or Dogwood policy statement.</p>
|
|
1289
1289
|
* @public
|
|
1290
1290
|
*/
|
|
1291
1291
|
definition: PolicyDefinition | undefined;
|
|
@@ -1375,7 +1375,7 @@ export interface UpdateConfigurationBundleRequest {
|
|
|
1375
1375
|
bundleName?: string | undefined;
|
|
1376
1376
|
description?: string | undefined;
|
|
1377
1377
|
components?: Record<string, ComponentConfiguration> | undefined;
|
|
1378
|
-
parentVersionIds
|
|
1378
|
+
parentVersionIds: string[] | undefined;
|
|
1379
1379
|
branchName?: string | undefined;
|
|
1380
1380
|
commitMessage?: string | undefined;
|
|
1381
1381
|
createdBy?: VersionCreatedBySource | undefined;
|
package/package.json
CHANGED
|
@@ -1,6 +1,6 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "@aws-sdk/client-bedrock-agentcore-control",
|
|
3
|
-
"version": "3.
|
|
3
|
+
"version": "3.1124.0",
|
|
4
4
|
"description": "AWS SDK for JavaScript Bedrock Agentcore Control Client for Node.js, Browser and React Native",
|
|
5
5
|
"homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-bedrock-agentcore-control",
|
|
6
6
|
"license": "Apache-2.0",
|