@pulumi/aws 7.32.0-alpha.1780014499 → 7.32.0

package/bedrock/agentcoreOnlineEvaluationConfig.js

@@ -0,0 +1,228 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentcoreOnlineEvaluationConfig = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("../utilities"));
+/**
+ * Manages an AWS Bedrock AgentCore Online Evaluation Configuration. Online evaluation configurations continuously monitor agent performance by sampling live traffic from CloudWatch logs and applying evaluators to assess agent quality in production.
+ *
+ * > **Note:** CloudWatch Transaction Serach must be [enabled](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/Enable-TransactionSearch.html) before using this resource.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.iam.Role("example", {
+ *     name: "agentcore-eval-role",
+ *     assumeRolePolicy: JSON.stringify({
+ *         Version: "2012-10-17",
+ *         Statement: [{
+ *             Effect: "Allow",
+ *             Action: "sts:AssumeRole",
+ *             Principal: {
+ *                 Service: "bedrock-agentcore.amazonaws.com",
+ *             },
+ *         }],
+ *     }),
+ * });
+ * const exampleLogGroup = new aws.cloudwatch.LogGroup("example", {name: "/aws/agentcore/my-agent-traces"});
+ * const exampleAgentcoreOnlineEvaluationConfig = new aws.bedrock.AgentcoreOnlineEvaluationConfig("example", {
+ *     onlineEvaluationConfigName: "my_evaluation_config",
+ *     description: "Continuous evaluation of agent performance",
+ *     enableOnCreate: true,
+ *     evaluationExecutionRoleArn: example.arn,
+ *     dataSourceConfig: {
+ *         cloudwatchLogs: {
+ *             logGroupNames: [exampleLogGroup.name],
+ *             serviceNames: ["my_agent_service"],
+ *         },
+ *     },
+ *     evaluators: [
+ *         {
+ *             evaluatorId: "Builtin.Helpfulness",
+ *         },
+ *         {
+ *             evaluatorId: "Builtin.GoalSuccessRate",
+ *         },
+ *     ],
+ *     rule: {
+ *         samplingConfig: {
+ *             samplingPercentage: 10,
+ *         },
+ *     },
+ * });
+ * ```
+ *
+ * ### With Filters and Session Config
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const filtered = new aws.bedrock.AgentcoreOnlineEvaluationConfig("filtered", {
+ *     onlineEvaluationConfigName: "filtered_evaluation",
+ *     enableOnCreate: true,
+ *     evaluationExecutionRoleArn: exampleAwsIamRole.arn,
+ *     dataSourceConfig: {
+ *         cloudwatchLogs: {
+ *             logGroupNames: [example.name],
+ *             serviceNames: ["my_agent_service"],
+ *         },
+ *     },
+ *     evaluators: [{
+ *         evaluatorId: "Builtin.Helpfulness",
+ *     }],
+ *     rule: {
+ *         samplingConfig: {
+ *             samplingPercentage: 50,
+ *         },
+ *         filters: [{
+ *             key: "environment",
+ *             operator: "Equals",
+ *             value: {
+ *                 stringValue: "production",
+ *             },
+ *         }],
+ *         sessionConfig: {
+ *             sessionTimeoutMinutes: 30,
+ *         },
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ### Identity Schema
+ *
+ * #### Required
+ *
+ * - `onlineEvaluationConfigId` (String) ID of the online evaluation config.
+ *
+ * #### Optional
+ *
+ * * `accountId` (String) AWS Account where this resource is managed.
+ * * `region` (String) Region where this resource is managed.
+ *
+ * Using `pulumi import`, import Bedrock AgentCore Online Evaluation Configs using `onlineEvaluationConfigId`. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:bedrock/agentcoreOnlineEvaluationConfig:AgentcoreOnlineEvaluationConfig example my_evaluation_config-aBcDeFgHiJ
+ * ```
+ */
+class AgentcoreOnlineEvaluationConfig extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentcoreOnlineEvaluationConfig resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new AgentcoreOnlineEvaluationConfig(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'aws:bedrock/agentcoreOnlineEvaluationConfig:AgentcoreOnlineEvaluationConfig';
+    /**
+     * Returns true if the given object is an instance of AgentcoreOnlineEvaluationConfig.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === AgentcoreOnlineEvaluationConfig.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["dataSourceConfig"] = state?.dataSourceConfig;
+            resourceInputs["description"] = state?.description;
+            resourceInputs["enableOnCreate"] = state?.enableOnCreate;
+            resourceInputs["evaluationExecutionRoleArn"] = state?.evaluationExecutionRoleArn;
+            resourceInputs["evaluators"] = state?.evaluators;
+            resourceInputs["executionStatus"] = state?.executionStatus;
+            resourceInputs["onlineEvaluationConfigArn"] = state?.onlineEvaluationConfigArn;
+            resourceInputs["onlineEvaluationConfigId"] = state?.onlineEvaluationConfigId;
+            resourceInputs["onlineEvaluationConfigName"] = state?.onlineEvaluationConfigName;
+            resourceInputs["outputConfigs"] = state?.outputConfigs;
+            resourceInputs["region"] = state?.region;
+            resourceInputs["rule"] = state?.rule;
+            resourceInputs["tags"] = state?.tags;
+            resourceInputs["tagsAll"] = state?.tagsAll;
+            resourceInputs["timeouts"] = state?.timeouts;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.dataSourceConfig === undefined && !opts.urn) {
+                throw new Error("Missing required property 'dataSourceConfig'");
+            }
+            if (args?.enableOnCreate === undefined && !opts.urn) {
+                throw new Error("Missing required property 'enableOnCreate'");
+            }
+            if (args?.evaluationExecutionRoleArn === undefined && !opts.urn) {
+                throw new Error("Missing required property 'evaluationExecutionRoleArn'");
+            }
+            if (args?.evaluators === undefined && !opts.urn) {
+                throw new Error("Missing required property 'evaluators'");
+            }
+            if (args?.onlineEvaluationConfigName === undefined && !opts.urn) {
+                throw new Error("Missing required property 'onlineEvaluationConfigName'");
+            }
+            if (args?.rule === undefined && !opts.urn) {
+                throw new Error("Missing required property 'rule'");
+            }
+            resourceInputs["dataSourceConfig"] = args?.dataSourceConfig;
+            resourceInputs["description"] = args?.description;
+            resourceInputs["enableOnCreate"] = args?.enableOnCreate;
+            resourceInputs["evaluationExecutionRoleArn"] = args?.evaluationExecutionRoleArn;
+            resourceInputs["evaluators"] = args?.evaluators;
+            resourceInputs["executionStatus"] = args?.executionStatus;
+            resourceInputs["onlineEvaluationConfigName"] = args?.onlineEvaluationConfigName;
+            resourceInputs["region"] = args?.region;
+            resourceInputs["rule"] = args?.rule;
+            resourceInputs["tags"] = args?.tags;
+            resourceInputs["timeouts"] = args?.timeouts;
+            resourceInputs["onlineEvaluationConfigArn"] = undefined /*out*/;
+            resourceInputs["onlineEvaluationConfigId"] = undefined /*out*/;
+            resourceInputs["outputConfigs"] = undefined /*out*/;
+            resourceInputs["tagsAll"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(AgentcoreOnlineEvaluationConfig.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.AgentcoreOnlineEvaluationConfig = AgentcoreOnlineEvaluationConfig;
+//# sourceMappingURL=agentcoreOnlineEvaluationConfig.js.map

package/bedrock/agentcoreOnlineEvaluationConfig.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcoreOnlineEvaluationConfig.js","sourceRoot":"","sources":["../../bedrock/agentcoreOnlineEvaluationConfig.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAIzC,wDAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6GG;AACH,MAAa,+BAAgC,SAAQ,MAAM,CAAC,cAAc;IACtE;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA4C,EAAE,IAAmC;QAC1I,OAAO,IAAI,+BAA+B,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACtF,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,6EAA6E,CAAC;IAEpH;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,+BAA+B,CAAC,YAAY,CAAC;IAChF,CAAC;IAsED,YAAY,IAAY,EAAE,WAAwF,EAAE,IAAmC;QACnJ,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAA+D,CAAC;YAC9E,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,2BAA2B,CAAC,GAAG,KAAK,EAAE,yBAAyB,CAAC;YAC/E,cAAc,CAAC,0BAA0B,CAAC,GAAG,KAAK,EAAE,wBAAwB,CAAC;YAC7E,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,eAAe,CAAC,GAAG,KAAK,EAAE,aAAa,CAAC;YACvD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAA8D,CAAC;YAC5E,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,IAAI,EAAE,0BAA0B,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;aAC7E;YACD,IAAI,IAAI,EAAE,UAAU,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7C,MAAM,IAAI,KAAK,CAAC,wCAAwC,CAAC,CAAC;aAC7D;YACD,IAAI,IAAI,EAAE,0BAA0B,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC7D,MAAM,IAAI,KAAK,CAAC,wDAAwD,CAAC,CAAC;aAC7E;YACD,IAAI,IAAI,EAAE,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACvC,MAAM,IAAI,KAAK,CAAC,kCAAkC,CAAC,CAAC;aACvD;YACD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,YAAY,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;YAChD,cAAc,CAAC,iBAAiB,CAAC,GAAG,IAAI,EAAE,eAAe,CAAC;YAC1D,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,2BAA2B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChE,cAAc,CAAC,0BAA0B,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC/D,cAAc,CAAC,eAAe,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACpD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,+BAA+B,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACpF,CAAC;;AA1JL,0EA2JC"}

package/bedrock/agentcorePolicyEngine.d.ts

@@ -0,0 +1,204 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * Manages an AWS Bedrock AgentCore Policy Engine. A Policy Engine controls what actions and resources an agent runtime can use.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.bedrock.AgentcorePolicyEngine("example", {name: "example_policy_engine"});
+ * ```
+ *
+ * ### With Description
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.bedrock.AgentcorePolicyEngine("example", {
+ *     name: "example_policy_engine",
+ *     description: "Policy engine for customer service agent",
+ * });
+ * ```
+ *
+ * ### With Custom Encryption
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.kms.Key("example", {
+ *     description: "KMS key for Bedrock AgentCore Policy Engine",
+ *     deletionWindowInDays: 7,
+ * });
+ * const exampleAgentcorePolicyEngine = new aws.bedrock.AgentcorePolicyEngine("example", {
+ *     name: "example_policy_engine",
+ *     description: "Policy engine for customer service agent",
+ *     encryptionKeyArn: example.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ### Identity Schema
+ *
+ * #### Required
+ *
+ * - `policyEngineId` (String) Policy engine ID.
+ *
+ * #### Optional
+ *
+ * * `accountId` (String) AWS account ID for this resource.
+ * * `region` (String) AWS Region for this resource.
+ *
+ * Using `pulumi import`, import a Bedrock AgentCore Policy Engine by policy engine ID. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:bedrock/agentcorePolicyEngine:AgentcorePolicyEngine example policy-engine-id-12345678
+ * ```
+ */
+export declare class AgentcorePolicyEngine extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentcorePolicyEngine resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: AgentcorePolicyEngineState, opts?: pulumi.CustomResourceOptions): AgentcorePolicyEngine;
+    /**
+     * Returns true if the given object is an instance of AgentcorePolicyEngine.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is AgentcorePolicyEngine;
+    /**
+     * Description of the policy engine.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * ARN of the KMS key used to encrypt the policy engine. If not set, AWS uses an AWS managed key.
+     */
+    readonly encryptionKeyArn: pulumi.Output<string | undefined>;
+    /**
+     * Name of the policy engine. Must start with a letter and contain only letters, numbers, and underscores. Maximum length of 48 characters.
+     *
+     * The following arguments are optional:
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * ARN of the Policy Engine.
+     */
+    readonly policyEngineArn: pulumi.Output<string>;
+    /**
+     * Unique identifier of the Policy Engine.
+     */
+    readonly policyEngineId: pulumi.Output<string>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    readonly region: pulumi.Output<string>;
+    /**
+     * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    readonly tags: pulumi.Output<{
+        [key: string]: string;
+    } | undefined>;
+    /**
+     * Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    readonly tagsAll: pulumi.Output<{
+        [key: string]: string;
+    }>;
+    readonly timeouts: pulumi.Output<outputs.bedrock.AgentcorePolicyEngineTimeouts | undefined>;
+    /**
+     * Create a AgentcorePolicyEngine resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args?: AgentcorePolicyEngineArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering AgentcorePolicyEngine resources.
+ */
+export interface AgentcorePolicyEngineState {
+    /**
+     * Description of the policy engine.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * ARN of the KMS key used to encrypt the policy engine. If not set, AWS uses an AWS managed key.
+     */
+    encryptionKeyArn?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the policy engine. Must start with a letter and contain only letters, numbers, and underscores. Maximum length of 48 characters.
+     *
+     * The following arguments are optional:
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * ARN of the Policy Engine.
+     */
+    policyEngineArn?: pulumi.Input<string | undefined>;
+    /**
+     * Unique identifier of the Policy Engine.
+     */
+    policyEngineId?: pulumi.Input<string | undefined>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    region?: pulumi.Input<string | undefined>;
+    /**
+     * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+    /**
+     * Map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    tagsAll?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+    timeouts?: pulumi.Input<inputs.bedrock.AgentcorePolicyEngineTimeouts | undefined>;
+}
+/**
+ * The set of arguments for constructing a AgentcorePolicyEngine resource.
+ */
+export interface AgentcorePolicyEngineArgs {
+    /**
+     * Description of the policy engine.
+     */
+    description?: pulumi.Input<string | undefined>;
+    /**
+     * ARN of the KMS key used to encrypt the policy engine. If not set, AWS uses an AWS managed key.
+     */
+    encryptionKeyArn?: pulumi.Input<string | undefined>;
+    /**
+     * Name of the policy engine. Must start with a letter and contain only letters, numbers, and underscores. Maximum length of 48 characters.
+     *
+     * The following arguments are optional:
+     */
+    name?: pulumi.Input<string | undefined>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    region?: pulumi.Input<string | undefined>;
+    /**
+     * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    } | undefined>;
+    timeouts?: pulumi.Input<inputs.bedrock.AgentcorePolicyEngineTimeouts | undefined>;
+}
+//# sourceMappingURL=agentcorePolicyEngine.d.ts.map

package/bedrock/agentcorePolicyEngine.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcorePolicyEngine.d.ts","sourceRoot":"","sources":["../../bedrock/agentcorePolicyEngine.ts"],"names":[],"mappings":"AAGA,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,MAAM,MAAM,gBAAgB,CAAC;AACzC,OAAO,KAAK,OAAO,MAAM,iBAAiB,CAAC;AAI3C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,qBAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;WACW,GAAG,CAAC,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,KAAK,CAAC,EAAE,0BAA0B,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB,GAAG,qBAAqB;IAO5J;;;OAGG;WACW,UAAU,CAAC,GAAG,EAAE,GAAG,GAAG,GAAG,IAAI,qBAAqB;IAOhE;;OAEG;IACH,SAAwB,WAAW,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,SAAwB,gBAAgB,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC5E;;;;OAIG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACpD;;OAEG;IACH,SAAgC,eAAe,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACvE;;OAEG;IACH,SAAgC,cAAc,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtE;;OAEG;IACH,SAAwB,MAAM,EAAE,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IACtD;;OAEG;IACH,SAAwB,IAAI,EAAE,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IACjF;;OAEG;IACH,SAAgC,OAAO,EAAE,MAAM,CAAC,MAAM,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAA;KAAC,CAAC,CAAC;IAChF,SAAwB,QAAQ,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;IAE3G;;;;;;OAMG;gBACS,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,yBAAyB,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,qBAAqB;CA8BlG;AAED;;GAEG;AACH,MAAM,WAAW,0BAA0B;IACvC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,eAAe,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACnD;;OAEG;IACH,cAAc,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAClD;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IACvE;;OAEG;IACH,OAAO,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IAC1E,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;CACrF;AAED;;GAEG;AACH,MAAM,WAAW,yBAAyB;IACtC;;OAEG;IACH,WAAW,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/C;;OAEG;IACH,gBAAgB,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACpD;;;;OAIG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IACxC;;OAEG;IACH,MAAM,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC1C;;OAEG;IACH,IAAI,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC;QAAC,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,CAAA;KAAC,GAAG,SAAS,CAAC,CAAC;IACvE,QAAQ,CAAC,EAAE,MAAM,CAAC,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,6BAA6B,GAAG,SAAS,CAAC,CAAC;CACrF"}

package/bedrock/agentcorePolicyEngine.js

@@ -0,0 +1,150 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || function (mod) {
+    if (mod && mod.__esModule) return mod;
+    var result = {};
+    if (mod != null) for (var k in mod) if (k !== "default" && Object.prototype.hasOwnProperty.call(mod, k)) __createBinding(result, mod, k);
+    __setModuleDefault(result, mod);
+    return result;
+};
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentcorePolicyEngine = void 0;
+const pulumi = __importStar(require("@pulumi/pulumi"));
+const utilities = __importStar(require("../utilities"));
+/**
+ * Manages an AWS Bedrock AgentCore Policy Engine. A Policy Engine controls what actions and resources an agent runtime can use.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.bedrock.AgentcorePolicyEngine("example", {name: "example_policy_engine"});
+ * ```
+ *
+ * ### With Description
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.bedrock.AgentcorePolicyEngine("example", {
+ *     name: "example_policy_engine",
+ *     description: "Policy engine for customer service agent",
+ * });
+ * ```
+ *
+ * ### With Custom Encryption
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.kms.Key("example", {
+ *     description: "KMS key for Bedrock AgentCore Policy Engine",
+ *     deletionWindowInDays: 7,
+ * });
+ * const exampleAgentcorePolicyEngine = new aws.bedrock.AgentcorePolicyEngine("example", {
+ *     name: "example_policy_engine",
+ *     description: "Policy engine for customer service agent",
+ *     encryptionKeyArn: example.arn,
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * ### Identity Schema
+ *
+ * #### Required
+ *
+ * - `policyEngineId` (String) Policy engine ID.
+ *
+ * #### Optional
+ *
+ * * `accountId` (String) AWS account ID for this resource.
+ * * `region` (String) AWS Region for this resource.
+ *
+ * Using `pulumi import`, import a Bedrock AgentCore Policy Engine by policy engine ID. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:bedrock/agentcorePolicyEngine:AgentcorePolicyEngine example policy-engine-id-12345678
+ * ```
+ */
+class AgentcorePolicyEngine extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentcorePolicyEngine resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new AgentcorePolicyEngine(name, state, { ...opts, id: id });
+    }
+    /** @internal */
+    static __pulumiType = 'aws:bedrock/agentcorePolicyEngine:AgentcorePolicyEngine';
+    /**
+     * Returns true if the given object is an instance of AgentcorePolicyEngine.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === AgentcorePolicyEngine.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["description"] = state?.description;
+            resourceInputs["encryptionKeyArn"] = state?.encryptionKeyArn;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["policyEngineArn"] = state?.policyEngineArn;
+            resourceInputs["policyEngineId"] = state?.policyEngineId;
+            resourceInputs["region"] = state?.region;
+            resourceInputs["tags"] = state?.tags;
+            resourceInputs["tagsAll"] = state?.tagsAll;
+            resourceInputs["timeouts"] = state?.timeouts;
+        }
+        else {
+            const args = argsOrState;
+            resourceInputs["description"] = args?.description;
+            resourceInputs["encryptionKeyArn"] = args?.encryptionKeyArn;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["region"] = args?.region;
+            resourceInputs["tags"] = args?.tags;
+            resourceInputs["timeouts"] = args?.timeouts;
+            resourceInputs["policyEngineArn"] = undefined /*out*/;
+            resourceInputs["policyEngineId"] = undefined /*out*/;
+            resourceInputs["tagsAll"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(AgentcorePolicyEngine.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.AgentcorePolicyEngine = AgentcorePolicyEngine;
+//# sourceMappingURL=agentcorePolicyEngine.js.map

package/bedrock/agentcorePolicyEngine.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcorePolicyEngine.js","sourceRoot":"","sources":["../../bedrock/agentcorePolicyEngine.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;;;;;;;;;;;;;;;;;;;;;;;;AAEjF,uDAAyC;AAIzC,wDAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6DG;AACH,MAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkC,EAAE,IAAmC;QAChI,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAED,gBAAgB;IACT,MAAM,CAAU,YAAY,GAAG,yDAAyD,CAAC;IAEhG;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,qBAAqB,CAAC,YAAY,CAAC;IACtE,CAAC;IA8CD,YAAY,IAAY,EAAE,WAAoE,EAAE,IAAmC;QAC/H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqD,CAAC;YACpE,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAoD,CAAC;YAClE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;;AApGL,sDAqGC"}