@aws-sdk/client-bedrock-agentcore-control 3.1123.0 → 3.1125.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/dist-cjs/index.js CHANGED
@@ -69,7 +69,7 @@ const commonParams = {
69
69
  UseDualStack: { type: "builtInParams", name: "useDualstackEndpoint" },
70
70
  };
71
71
 
72
- var version = "3.1122.0";
72
+ var version = "3.1124.0";
73
73
  var packageInfo = {
74
74
  version: version};
75
75
 
@@ -5038,8 +5038,8 @@ var UpdateCapacityProviderOutput$ = [3, n0, _UCPO,
5038
5038
  ];
5039
5039
  var UpdateConfigurationBundleRequest$ = [3, n0, _UCBR,
5040
5040
  0,
5041
- [_bIu, _cT, _bN, _d, _com, _pVI, _bNr, _cM, _cB, _kKA],
5042
- [[0, 1], [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0], 64 | 0, 0, 0, () => VersionCreatedBySource$, 0], 1
5041
+ [_bIu, _pVI, _cT, _bN, _d, _com, _bNr, _cM, _cB, _kKA],
5042
+ [[0, 1], 64 | 0, [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0], 0, 0, () => VersionCreatedBySource$, 0], 2
5043
5043
  ];
5044
5044
  var UpdateConfigurationBundleResponse$ = [3, n0, _UCBRp,
5045
5045
  0,
@@ -4697,8 +4697,8 @@ export var UpdateCapacityProviderOutput$ = [3, n0, _UCPO,
4697
4697
  ];
4698
4698
  export var UpdateConfigurationBundleRequest$ = [3, n0, _UCBR,
4699
4699
  0,
4700
- [_bIu, _cT, _bN, _d, _com, _pVI, _bNr, _cM, _cB, _kKA],
4701
- [[0, 1], [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0], 64 | 0, 0, 0, () => VersionCreatedBySource$, 0], 1
4700
+ [_bIu, _pVI, _cT, _bN, _d, _com, _bNr, _cM, _cB, _kKA],
4701
+ [[0, 1], 64 | 0, [0, 4], 0, [() => ConfigurationBundleDescription, 0], [() => ComponentConfigurationMap, 0], 0, 0, () => VersionCreatedBySource$, 0], 2
4702
4702
  ];
4703
4703
  export var UpdateConfigurationBundleResponse$ = [3, n0, _UCBRp,
4704
4704
  0,
@@ -24,7 +24,7 @@ declare const CreatePolicyCommand_base: {
24
24
  getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
25
25
  };
26
26
  /**
27
- * <p>Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using the Cedar policy language, you can define fine-grained policies that specify which interactions with Gateway tools are permitted based on input parameters and OAuth claims, ensuring agents operate within defined boundaries and business rules. The policy is validated during creation against the Cedar schema generated from the Gateway's tools' input schemas, which defines the available tools, their parameters, and expected data types. This is an asynchronous operation. Use the <a href="https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html">GetPolicy</a> operation to poll the <code>status</code> field to track completion.</p> <p>If the new policy is a temporal policy, creating it invalidates the policy engine's active temporal sessions. For more information about temporal policy sessions, see <a href="https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy-session-based-temporal.html">session-based temporal policies</a>. The policy engine returns an HTTP 409 <code>ConflictException</code> to in-flight sessions. To resume, you must start a new session with a new session ID.</p>
27
+ * <p>Creates a policy within the AgentCore Policy system. Policies provide real-time, deterministic control over agentic interactions with AgentCore Gateway. Using Cedar or Dogwood, you can define fine-grained policies that specify which interactions with Gateway tools are permitted based on input parameters and OAuth claims, ensuring agents operate within defined boundaries and business rules. The policy is validated during creation against the Cedar schema generated from the Gateway's tools' input schemas, which defines the available tools, their parameters, and expected data types. This is an asynchronous operation. Use the <a href="https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html">GetPolicy</a> operation to poll the <code>status</code> field to track completion.</p> <p>If the new policy is a temporal policy, creating it invalidates the policy engine's active temporal sessions. For more information about temporal policy sessions, see <a href="https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/policy-session-based-temporal.html">session-based temporal policies</a>. The policy engine returns an HTTP 409 <code>ConflictException</code> to in-flight sessions. To resume, you must start a new session with a new session ID.</p>
28
28
  * @example
29
29
  * Use a bare-bones client and the command you need to make an API call.
30
30
  * ```javascript
@@ -24,7 +24,7 @@ declare const GetPolicyGenerationCommand_base: {
24
24
  getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
25
25
  };
26
26
  /**
27
- * <p>Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into Cedar policy statements using AI-powered translation, enabling non-technical users to create policies.</p>
27
+ * <p>Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into Dogwood policy statements using AI-powered translation, enabling non-technical users to create policies.</p>
28
28
  * @example
29
29
  * Use a bare-bones client and the command you need to make an API call.
30
30
  * ```javascript
@@ -24,7 +24,7 @@ declare const ListPolicyGenerationAssetsCommand_base: {
24
24
  getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
25
25
  };
26
26
  /**
27
- * <p>Retrieves a list of generated policy assets from a policy generation request within the AgentCore Policy system. This operation returns the actual Cedar policies and related artifacts produced by the AI-powered policy generation process, allowing users to review and select from multiple generated policy options.</p>
27
+ * <p>Retrieves a list of generated policy assets from a policy generation request within the AgentCore Policy system. This operation returns the actual Dogwood policies and related artifacts produced by the AI-powered policy generation process, allowing users to review and select from multiple generated policy options.</p>
28
28
  * @example
29
29
  * Use a bare-bones client and the command you need to make an API call.
30
30
  * ```javascript
@@ -24,7 +24,7 @@ declare const StartPolicyGenerationCommand_base: {
24
24
  getEndpointParameterInstructions(): import("@smithy/types").EndpointParameterInstructions;
25
25
  };
26
26
  /**
27
- * <p>Initiates the AI-powered generation of Cedar policies from natural language descriptions within the AgentCore Policy system. This feature enables both technical and non-technical users to create policies by describing their authorization requirements in plain English, which is then automatically translated into formal Cedar policy statements. The generation process analyzes the natural language input along with the Gateway's tool context to produce validated policy options. Generated policy assets are automatically deleted after 7 days, so you should review and create policies from the generated assets within this timeframe. Once created, policies are permanent and not subject to this expiration. Generated policies should be reviewed and tested in log-only mode before deploying to production. Use this when you want to describe policy intent naturally rather than learning Cedar syntax, though generated policies may require refinement for complex scenarios.</p>
27
+ * <p>Initiates the AI-powered generation of Dogwood policies from natural language descriptions within the AgentCore Policy system. This feature enables both technical and non-technical users to create policies by describing their authorization requirements in plain English, which is then automatically translated into formal Dogwood policy statements. The generation process analyzes the natural language input along with the Gateway's tool context to produce validated policy options. Generated policy assets are automatically deleted after 7 days, so you should review and create policies from the generated assets within this timeframe. Once created, policies are permanent and not subject to this expiration. Generated policies should be reviewed and tested in log-only mode before deploying to production. Use this when you want to describe policy intent naturally rather than learning Dogwood syntax, though generated policies may require refinement for complex scenarios.</p>
28
28
  * @example
29
29
  * Use a bare-bones client and the command you need to make an API call.
30
30
  * ```javascript
@@ -43,7 +43,7 @@ declare const UpdateConfigurationBundleCommand_base: {
43
43
  * configuration: "DOCUMENT_VALUE", // required
44
44
  * },
45
45
  * },
46
- * parentVersionIds: [ // ConfigurationBundleVersionList
46
+ * parentVersionIds: [ // ConfigurationBundleVersionList // required
47
47
  * "STRING_VALUE",
48
48
  * ],
49
49
  * branchName: "STRING_VALUE",
@@ -4616,7 +4616,7 @@ export interface UpdateConfigurationBundleRequest {
4616
4616
  * <p>A list of parent version identifiers for lineage tracking. Regular commits have a single parent. Merge commits have two parents: the target branch parent and the source branch parent. If the branch already exists, the first parent must be the latest version on that branch.</p>
4617
4617
  * @public
4618
4618
  */
4619
- parentVersionIds?: string[] | undefined;
4619
+ parentVersionIds: string[] | undefined;
4620
4620
  /**
4621
4621
  * <p>The branch name for this version. If not specified, inherits the parent's branch or defaults to <code>mainline</code>.</p>
4622
4622
  * @public
@@ -6520,7 +6520,7 @@ export interface GatewayInterceptorConfiguration {
6520
6520
  */
6521
6521
  export interface GatewayPolicyEngineConfiguration {
6522
6522
  /**
6523
- * <p>The ARN of the policy engine. The policy engine contains Cedar policies that define fine-grained authorization rules specifying who can perform what actions on which resources as agents interact through the gateway.</p>
6523
+ * <p>The ARN of the policy engine. The policy engine contains Cedar or Dogwood policies that define fine-grained authorization rules specifying who can perform what actions on which resources as agents interact through the gateway.</p>
6524
6524
  * @public
6525
6525
  */
6526
6526
  arn: string | undefined;
@@ -271,18 +271,18 @@ export interface CedarPolicy {
271
271
  statement: string | undefined;
272
272
  }
273
273
  /**
274
- * <p>An AgentCore policy statement, which supports plain Cedar policies as well as guardrails definitions.</p>
274
+ * <p>An AgentCore Cedar or Dogwood policy statement, which supports plain Cedar policies, temporal policies, and guardrails definitions.</p>
275
275
  * @public
276
276
  */
277
277
  export interface PolicyStatement {
278
278
  /**
279
- * <p>The body of the AgentCore policy statement. Contains the policy logic, which can be a Cedar policy or a guardrails definition.</p>
279
+ * <p>The body of the AgentCore Cedar or Dogwood policy statement. Contains the policy logic, which can be a Cedar policy, a temporal policy, or a guardrails definition.</p>
280
280
  * @public
281
281
  */
282
282
  statement: string | undefined;
283
283
  }
284
284
  /**
285
- * <p>Represents the information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Cedar policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
285
+ * <p>Represents the information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Dogwood policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
286
286
  * @public
287
287
  */
288
288
  export interface PolicyGenerationDetails {
@@ -317,7 +317,7 @@ export declare namespace PolicyDefinition {
317
317
  $unknown?: never;
318
318
  }
319
319
  /**
320
- * <p>The generated policy asset information within the policy definition structure. This contains information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Cedar policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
320
+ * <p>The generated policy asset information within the policy definition structure. This contains information identifying a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Dogwood policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
321
321
  * @public
322
322
  */
323
323
  interface PolicyGenerationMember {
@@ -327,7 +327,7 @@ export declare namespace PolicyDefinition {
327
327
  $unknown?: never;
328
328
  }
329
329
  /**
330
- * <p>An AgentCore policy statement that defines the access control rules. The statement can be a Cedar policy or a guardrails definition.</p>
330
+ * <p>The Dogwood policy statement that defines the access control rules. This policy definition can include Dogwood policies and supports temporal conditions and information providers such as guardrails.</p>
331
331
  * @public
332
332
  */
333
333
  interface PolicyMember {
@@ -373,7 +373,7 @@ export interface Finding {
373
373
  description?: string | undefined;
374
374
  }
375
375
  /**
376
- * <p>Represents a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Cedar policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
376
+ * <p>Represents a generated policy asset from the AI-powered policy generation process within the AgentCore Policy system. Each asset contains a Dogwood policy statement generated from natural language input, along with associated metadata and analysis findings to help users evaluate and select the most appropriate policy option.</p>
377
377
  * @public
378
378
  */
379
379
  export interface PolicyGenerationAsset {
@@ -388,7 +388,7 @@ export interface PolicyGenerationAsset {
388
388
  */
389
389
  definition?: PolicyDefinition | undefined;
390
390
  /**
391
- * <p>The portion of the original natural language input that this generated policy asset addresses. This helps users understand which part of their policy description was translated into this specific Cedar policy statement, enabling better policy selection and refinement. When a single natural language input describes multiple authorization requirements, the generation process creates separate policy assets for each requirement, with each asset's rawTextFragment showing which requirement it addresses. Use this mapping to verify that all parts of your natural language input were correctly translated into Cedar policies.</p>
391
+ * <p>The portion of the original natural language input that this generated policy asset addresses. This helps users understand which part of their policy description was translated into this specific Dogwood policy statement, enabling better policy selection and refinement. When a single natural language input describes multiple authorization requirements, the generation process creates separate policy assets for each requirement, with each asset's rawTextFragment showing which requirement it addresses. Use this mapping to verify that all parts of your natural language input were correctly translated into Dogwood policies.</p>
392
392
  * @public
393
393
  */
394
394
  rawTextFragment: string | undefined;
@@ -403,7 +403,7 @@ export interface PolicyGenerationAsset {
403
403
  */
404
404
  export interface ListPolicyGenerationAssetsResponse {
405
405
  /**
406
- * <p>An array of generated policy assets including Cedar policies and related artifacts from the AI-powered policy generation process. Each asset represents a different policy option or variation generated from the original natural language input.</p>
406
+ * <p>An array of generated policy assets including Dogwood policies and related artifacts from the AI-powered policy generation process. Each asset represents a different policy option or variation generated from the original natural language input.</p>
407
407
  * @public
408
408
  */
409
409
  policyGenerationAssets?: PolicyGenerationAsset[] | undefined;
@@ -434,7 +434,7 @@ export interface ListPolicyGenerationsRequest {
434
434
  policyEngineId: string | undefined;
435
435
  }
436
436
  /**
437
- * <p>Represents a policy generation request within the AgentCore Policy system. Tracks the AI-powered conversion of natural language descriptions into Cedar policy statements, enabling users to author policies by describing authorization requirements in plain English. The generation process analyzes the natural language input along with the Gateway's tool context and Cedar schema to produce one or more validated policy options. Each generation request tracks the status of the conversion process and maintains findings about the generated policies, including validation results and potential issues. Generated policy assets remain available for one week after successful generation, allowing time to review and create policies from the generated options.</p>
437
+ * <p>Represents a policy generation request within the AgentCore Policy system. Tracks the AI-powered conversion of natural language descriptions into Dogwood policy statements, enabling users to author policies by describing authorization requirements in plain English. The generation process analyzes the natural language input along with the Gateway's tool context and Cedar schema to produce one or more validated policy options. Each generation request tracks the status of the conversion process and maintains findings about the generated policies, including validation results and potential issues. Generated policy assets remain available for one week after successful generation, allowing time to review and create policies from the generated options.</p>
438
438
  * @public
439
439
  */
440
440
  export interface PolicyGeneration {
@@ -600,7 +600,7 @@ export type Content = Content.RawTextMember | Content.$UnknownMember;
600
600
  */
601
601
  export declare namespace Content {
602
602
  /**
603
- * <p>The raw text content containing natural language descriptions of desired policy behavior. This text is processed by AI to generate corresponding Cedar policy statements that match the described intent.</p>
603
+ * <p>The raw text content containing natural language descriptions of desired policy behavior. This text is processed by AI to generate corresponding Dogwood policy statements that match the described intent.</p>
604
604
  * @public
605
605
  */
606
606
  interface RawTextMember {
@@ -638,7 +638,7 @@ export interface StartPolicyGenerationRequest {
638
638
  */
639
639
  resource: Resource | undefined;
640
640
  /**
641
- * <p>The natural language description of the desired policy behavior. This content is processed by AI to generate corresponding Cedar policy statements that match the described intent.</p>
641
+ * <p>The natural language description of the desired policy behavior. This content is processed by AI to generate corresponding Dogwood policy statements that match the described intent.</p>
642
642
  * @public
643
643
  */
644
644
  content: Content | undefined;
@@ -718,7 +718,7 @@ export interface CreatePolicyRequest {
718
718
  */
719
719
  name: string | undefined;
720
720
  /**
721
- * <p>The Cedar policy statement that defines the access control rules. This contains the actual policy logic written in Cedar policy language, specifying effect (permit or forbid), principals, actions, resources, and conditions for agent behavior control.</p>
721
+ * <p>The Cedar or Dogwood policy statement that defines the access control rules. This contains the actual policy logic written in Cedar or Dogwood, specifying effect (permit or forbid), principals, actions, resources, and conditions for agent behavior control.</p>
722
722
  * @public
723
723
  */
724
724
  definition: PolicyDefinition | undefined;
@@ -793,7 +793,7 @@ export interface CreatePolicyResponse {
793
793
  */
794
794
  enforcementMode?: EnforcementMode | undefined;
795
795
  /**
796
- * <p>The Cedar policy statement that was created. This is the validated policy definition that will be used for agent behavior control and access decisions.</p>
796
+ * <p>The Cedar or Dogwood policy statement that was created. This is the validated policy definition that will be used for agent behavior control and access decisions.</p>
797
797
  * @public
798
798
  */
799
799
  definition: PolicyDefinition | undefined;
@@ -943,7 +943,7 @@ export interface GetPolicyResponse {
943
943
  */
944
944
  enforcementMode?: EnforcementMode | undefined;
945
945
  /**
946
- * <p>The Cedar policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
946
+ * <p>The Cedar or Dogwood policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
947
947
  * @public
948
948
  */
949
949
  definition: PolicyDefinition | undefined;
@@ -1044,7 +1044,7 @@ export interface ListPoliciesRequest {
1044
1044
  targetResourceScope?: string | undefined;
1045
1045
  }
1046
1046
  /**
1047
- * <p>Represents a complete policy resource within the AgentCore Policy system. Policies are ARN-able resources that contain Cedar policy statements and associated metadata for controlling agent behavior and access decisions. Each policy belongs to a policy engine and defines fine-grained authorization rules that are evaluated in real-time as agents interact with tools through Gateway. Policies use the Cedar policy language to specify who (principals based on OAuth claims like username, role, or scope) can perform what actions (tool calls) on which resources (Gateways), with optional conditions for attribute-based access control. Multiple policies can apply to a single request, with Cedar's forbid-wins semantics ensuring that security restrictions are never accidentally overridden.</p>
1047
+ * <p>Represents a complete policy resource within the AgentCore Policy system. Policies are ARN-able resources that contain Cedar or Dogwood policy statements and associated metadata for controlling agent behavior and access decisions. Each policy belongs to a policy engine and defines fine-grained authorization rules that are evaluated in real-time as agents interact with tools through Gateway. Policies use Cedar or Dogwood to specify who (principals based on OAuth claims like username, role, or scope) can perform what actions (tool calls) on which resources (Gateways), with optional conditions for attribute-based access control. Multiple policies can apply to a single request, with forbid-wins semantics ensuring that security restrictions are never accidentally overridden.</p>
1048
1048
  * @public
1049
1049
  */
1050
1050
  export interface Policy {
@@ -1089,7 +1089,7 @@ export interface Policy {
1089
1089
  */
1090
1090
  enforcementMode?: EnforcementMode | undefined;
1091
1091
  /**
1092
- * <p>The Cedar policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
1092
+ * <p>The Cedar or Dogwood policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.</p>
1093
1093
  * @public
1094
1094
  */
1095
1095
  definition: PolicyDefinition | undefined;
@@ -1225,7 +1225,7 @@ export interface UpdatePolicyRequest {
1225
1225
  */
1226
1226
  description?: UpdatedDescription | undefined;
1227
1227
  /**
1228
- * <p>The new Cedar policy statement that defines the access control rules. This replaces the existing policy definition with new logic while maintaining the policy's identity.</p>
1228
+ * <p>The new Cedar or Dogwood policy statement that defines the access control rules. This replaces the existing policy definition with new logic while maintaining the policy's identity.</p>
1229
1229
  * @public
1230
1230
  */
1231
1231
  definition?: PolicyDefinition | undefined;
@@ -1285,7 +1285,7 @@ export interface UpdatePolicyResponse {
1285
1285
  */
1286
1286
  enforcementMode?: EnforcementMode | undefined;
1287
1287
  /**
1288
- * <p>The updated Cedar policy statement.</p>
1288
+ * <p>The updated Cedar or Dogwood policy statement.</p>
1289
1289
  * @public
1290
1290
  */
1291
1291
  definition: PolicyDefinition | undefined;
@@ -1375,7 +1375,7 @@ export interface UpdateConfigurationBundleRequest {
1375
1375
  bundleName?: string | undefined;
1376
1376
  description?: string | undefined;
1377
1377
  components?: Record<string, ComponentConfiguration> | undefined;
1378
- parentVersionIds?: string[] | undefined;
1378
+ parentVersionIds: string[] | undefined;
1379
1379
  branchName?: string | undefined;
1380
1380
  commitMessage?: string | undefined;
1381
1381
  createdBy?: VersionCreatedBySource | undefined;
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "@aws-sdk/client-bedrock-agentcore-control",
3
- "version": "3.1123.0",
3
+ "version": "3.1125.0",
4
4
  "description": "AWS SDK for JavaScript Bedrock Agentcore Control Client for Node.js, Browser and React Native",
5
5
  "homepage": "https://github.com/aws/aws-sdk-js-v3/tree/main/clients/client-bedrock-agentcore-control",
6
6
  "license": "Apache-2.0",