@pulumi/aws 7.9.0-alpha.1760704543 → 7.9.0-alpha.1761090036

package/bedrock/agentcoreCodeInterpreter.js

@@ -0,0 +1,125 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentcoreCodeInterpreter = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages an AWS Bedrock AgentCore Code Interpreter. Code Interpreter provides a secure environment for AI agents to execute Python code, enabling data analysis, calculations, and file processing capabilities.
+ *
+ * ## Example Usage
+ *
+ * ### Basic Usage
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.bedrock.AgentcoreCodeInterpreter("example", {
+ *     name: "example-code-interpreter",
+ *     description: "Code interpreter for data analysis",
+ *     networkConfiguration: {
+ *         networkMode: "PUBLIC",
+ *     },
+ * });
+ * ```
+ *
+ * ### Code Interpreter with Execution Role
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const assumeRole = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         effect: "Allow",
+ *         actions: ["sts:AssumeRole"],
+ *         principals: [{
+ *             type: "Service",
+ *             identifiers: ["bedrock-agentcore.amazonaws.com"],
+ *         }],
+ *     }],
+ * });
+ * const example = new aws.iam.Role("example", {
+ *     name: "bedrock-agentcore-code-interpreter-role",
+ *     assumeRolePolicy: assumeRole.then(assumeRole => assumeRole.json),
+ * });
+ * const exampleAgentcoreCodeInterpreter = new aws.bedrock.AgentcoreCodeInterpreter("example", {
+ *     name: "example-code-interpreter",
+ *     description: "Code interpreter with custom execution role",
+ *     executionRoleArn: example.arn,
+ *     networkConfiguration: {
+ *         networkMode: "SANDBOX",
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Using `pulumi import`, import Bedrock AgentCore Code Interpreter using the code interpreter ID. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:bedrock/agentcoreCodeInterpreter:AgentcoreCodeInterpreter example CODEINTERPRETER1234567890
+ * ```
+ */
+class AgentcoreCodeInterpreter extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentcoreCodeInterpreter resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new AgentcoreCodeInterpreter(name, state, { ...opts, id: id });
+    }
+    /**
+     * Returns true if the given object is an instance of AgentcoreCodeInterpreter.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === AgentcoreCodeInterpreter.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["codeInterpreterArn"] = state?.codeInterpreterArn;
+            resourceInputs["codeInterpreterId"] = state?.codeInterpreterId;
+            resourceInputs["description"] = state?.description;
+            resourceInputs["executionRoleArn"] = state?.executionRoleArn;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["networkConfiguration"] = state?.networkConfiguration;
+            resourceInputs["region"] = state?.region;
+            resourceInputs["tags"] = state?.tags;
+            resourceInputs["tagsAll"] = state?.tagsAll;
+            resourceInputs["timeouts"] = state?.timeouts;
+        }
+        else {
+            const args = argsOrState;
+            resourceInputs["description"] = args?.description;
+            resourceInputs["executionRoleArn"] = args?.executionRoleArn;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["networkConfiguration"] = args?.networkConfiguration;
+            resourceInputs["region"] = args?.region;
+            resourceInputs["tags"] = args?.tags;
+            resourceInputs["timeouts"] = args?.timeouts;
+            resourceInputs["codeInterpreterArn"] = undefined /*out*/;
+            resourceInputs["codeInterpreterId"] = undefined /*out*/;
+            resourceInputs["tagsAll"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(AgentcoreCodeInterpreter.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.AgentcoreCodeInterpreter = AgentcoreCodeInterpreter;
+/** @internal */
+AgentcoreCodeInterpreter.__pulumiType = 'aws:bedrock/agentcoreCodeInterpreter:AgentcoreCodeInterpreter';
+//# sourceMappingURL=agentcoreCodeInterpreter.js.map

package/bedrock/agentcoreCodeInterpreter.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcoreCodeInterpreter.js","sourceRoot":"","sources":["../../bedrock/agentcoreCodeInterpreter.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAyDG;AACH,MAAa,wBAAyB,SAAQ,MAAM,CAAC,cAAc;IAC/D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAqC,EAAE,IAAmC;QACnI,OAAO,IAAI,wBAAwB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC/E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,wBAAwB,CAAC,YAAY,CAAC;IACzE,CAAC;IAkDD,YAAY,IAAY,EAAE,WAA0E,EAAE,IAAmC;QACrI,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAwD,CAAC;YACvE,cAAc,CAAC,oBAAoB,CAAC,GAAG,KAAK,EAAE,kBAAkB,CAAC;YACjE,cAAc,CAAC,mBAAmB,CAAC,GAAG,KAAK,EAAE,iBAAiB,CAAC;YAC/D,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;SAChD;aAAM;YACH,MAAM,IAAI,GAAG,WAAuD,CAAC;YACrE,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,oBAAoB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACzD,cAAc,CAAC,mBAAmB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACxD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjD;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,wBAAwB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC7E,CAAC;;AA1GL,4DA2GC;AA7FG,gBAAgB;AACO,qCAAY,GAAG,+DAA+D,CAAC"}

package/bedrock/agentcoreGateway.d.ts

@@ -0,0 +1,317 @@
+import * as pulumi from "@pulumi/pulumi";
+import * as inputs from "../types/input";
+import * as outputs from "../types/output";
+/**
+ * Manages an AWS Bedrock AgentCore Gateway. With Gateway, developers can convert APIs, Lambda functions, and existing services into Model Context Protocol (MCP)-compatible tools.
+ *
+ * ## Example Usage
+ *
+ * ### Gateway with JWT Authorization
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const assumeRole = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         effect: "Allow",
+ *         actions: ["sts:AssumeRole"],
+ *         principals: [{
+ *             type: "Service",
+ *             identifiers: ["bedrock-agentcore.amazonaws.com"],
+ *         }],
+ *     }],
+ * });
+ * const example = new aws.iam.Role("example", {
+ *     name: "bedrock-agentcore-gateway-role",
+ *     assumeRolePolicy: assumeRole.then(assumeRole => assumeRole.json),
+ * });
+ * const exampleAgentcoreGateway = new aws.bedrock.AgentcoreGateway("example", {
+ *     name: "example-gateway",
+ *     roleArn: example.arn,
+ *     authorizerType: "CUSTOM_JWT",
+ *     authorizerConfiguration: {
+ *         customJwtAuthorizer: {
+ *             discoveryUrl: "https://accounts.google.com/.well-known/openid-configuration",
+ *             allowedAudiences: [
+ *                 "test1",
+ *                 "test2",
+ *             ],
+ *         },
+ *     },
+ *     protocolType: "MCP",
+ * });
+ * ```
+ *
+ * ### Gateway with advanced JWT Authorization and MCP Configuration
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.bedrock.AgentcoreGateway("example", {
+ *     name: "mcp-gateway",
+ *     description: "Gateway for MCP communication",
+ *     roleArn: exampleAwsIamRole.arn,
+ *     authorizerType: "CUSTOM_JWT",
+ *     authorizerConfiguration: {
+ *         customJwtAuthorizer: {
+ *             discoveryUrl: "https://auth.example.com/.well-known/openid-configuration",
+ *             allowedAudiences: [
+ *                 "app-client",
+ *                 "web-client",
+ *             ],
+ *             allowedClients: [
+ *                 "client-123",
+ *                 "client-456",
+ *             ],
+ *         },
+ *     },
+ *     protocolType: "MCP",
+ *     protocolConfiguration: {
+ *         mcp: {
+ *             instructions: "Gateway for handling MCP requests",
+ *             searchType: "HYBRID",
+ *             supportedVersions: [
+ *                 "2025-03-26",
+ *                 "2025-06-18",
+ *             ],
+ *         },
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Using `pulumi import`, import Bedrock AgentCore Gateway using the gateway ID. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:bedrock/agentcoreGateway:AgentcoreGateway example GATEWAY1234567890
+ * ```
+ */
+export declare class AgentcoreGateway extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentcoreGateway resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name: string, id: pulumi.Input<pulumi.ID>, state?: AgentcoreGatewayState, opts?: pulumi.CustomResourceOptions): AgentcoreGateway;
+    /**
+     * Returns true if the given object is an instance of AgentcoreGateway.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj: any): obj is AgentcoreGateway;
+    /**
+     * Configuration for request authorization. See `authorizerConfiguration` below.
+     */
+    readonly authorizerConfiguration: pulumi.Output<outputs.bedrock.AgentcoreGatewayAuthorizerConfiguration | undefined>;
+    /**
+     * Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
+     */
+    readonly authorizerType: pulumi.Output<string>;
+    /**
+     * Description of the gateway.
+     */
+    readonly description: pulumi.Output<string | undefined>;
+    /**
+     * Exception level for the gateway. Valid values: `INFO`, `WARN`, `ERROR`.
+     */
+    readonly exceptionLevel: pulumi.Output<string | undefined>;
+    /**
+     * ARN of the Gateway.
+     */
+    readonly gatewayArn: pulumi.Output<string>;
+    /**
+     * Unique identifier of the Gateway.
+     */
+    readonly gatewayId: pulumi.Output<string>;
+    /**
+     * URL endpoint for the gateway.
+     */
+    readonly gatewayUrl: pulumi.Output<string>;
+    /**
+     * ARN of the KMS key used to encrypt the gateway data.
+     */
+    readonly kmsKeyArn: pulumi.Output<string | undefined>;
+    /**
+     * Name of the gateway.
+     */
+    readonly name: pulumi.Output<string>;
+    /**
+     * Protocol-specific configuration for the gateway. See `protocolConfiguration` below.
+     */
+    readonly protocolConfiguration: pulumi.Output<outputs.bedrock.AgentcoreGatewayProtocolConfiguration | undefined>;
+    /**
+     * Protocol type for the gateway. Valid values: `MCP`.
+     */
+    readonly protocolType: pulumi.Output<string>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    readonly region: pulumi.Output<string>;
+    /**
+     * ARN of the IAM role that the gateway assumes to access AWS services.
+     *
+     * The following arguments are optional:
+     */
+    readonly roleArn: pulumi.Output<string>;
+    /**
+     * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    readonly tags: pulumi.Output<{
+        [key: string]: string;
+    } | undefined>;
+    /**
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    readonly tagsAll: pulumi.Output<{
+        [key: string]: string;
+    }>;
+    readonly timeouts: pulumi.Output<outputs.bedrock.AgentcoreGatewayTimeouts | undefined>;
+    /**
+     * Workload identity details for the gateway. See `workloadIdentityDetails` below.
+     */
+    readonly workloadIdentityDetails: pulumi.Output<outputs.bedrock.AgentcoreGatewayWorkloadIdentityDetail[]>;
+    /**
+     * Create a AgentcoreGateway resource with the given unique name, arguments, and options.
+     *
+     * @param name The _unique_ name of the resource.
+     * @param args The arguments to use to populate this resource's properties.
+     * @param opts A bag of options that control this resource's behavior.
+     */
+    constructor(name: string, args: AgentcoreGatewayArgs, opts?: pulumi.CustomResourceOptions);
+}
+/**
+ * Input properties used for looking up and filtering AgentcoreGateway resources.
+ */
+export interface AgentcoreGatewayState {
+    /**
+     * Configuration for request authorization. See `authorizerConfiguration` below.
+     */
+    authorizerConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreGatewayAuthorizerConfiguration>;
+    /**
+     * Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
+     */
+    authorizerType?: pulumi.Input<string>;
+    /**
+     * Description of the gateway.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Exception level for the gateway. Valid values: `INFO`, `WARN`, `ERROR`.
+     */
+    exceptionLevel?: pulumi.Input<string>;
+    /**
+     * ARN of the Gateway.
+     */
+    gatewayArn?: pulumi.Input<string>;
+    /**
+     * Unique identifier of the Gateway.
+     */
+    gatewayId?: pulumi.Input<string>;
+    /**
+     * URL endpoint for the gateway.
+     */
+    gatewayUrl?: pulumi.Input<string>;
+    /**
+     * ARN of the KMS key used to encrypt the gateway data.
+     */
+    kmsKeyArn?: pulumi.Input<string>;
+    /**
+     * Name of the gateway.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Protocol-specific configuration for the gateway. See `protocolConfiguration` below.
+     */
+    protocolConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreGatewayProtocolConfiguration>;
+    /**
+     * Protocol type for the gateway. Valid values: `MCP`.
+     */
+    protocolType?: pulumi.Input<string>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    region?: pulumi.Input<string>;
+    /**
+     * ARN of the IAM role that the gateway assumes to access AWS services.
+     *
+     * The following arguments are optional:
+     */
+    roleArn?: pulumi.Input<string>;
+    /**
+     * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    /**
+     * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
+     */
+    tagsAll?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    timeouts?: pulumi.Input<inputs.bedrock.AgentcoreGatewayTimeouts>;
+    /**
+     * Workload identity details for the gateway. See `workloadIdentityDetails` below.
+     */
+    workloadIdentityDetails?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreGatewayWorkloadIdentityDetail>[]>;
+}
+/**
+ * The set of arguments for constructing a AgentcoreGateway resource.
+ */
+export interface AgentcoreGatewayArgs {
+    /**
+     * Configuration for request authorization. See `authorizerConfiguration` below.
+     */
+    authorizerConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreGatewayAuthorizerConfiguration>;
+    /**
+     * Type of authorizer to use. Valid values: `CUSTOM_JWT`, `AWS_IAM`.
+     */
+    authorizerType: pulumi.Input<string>;
+    /**
+     * Description of the gateway.
+     */
+    description?: pulumi.Input<string>;
+    /**
+     * Exception level for the gateway. Valid values: `INFO`, `WARN`, `ERROR`.
+     */
+    exceptionLevel?: pulumi.Input<string>;
+    /**
+     * ARN of the KMS key used to encrypt the gateway data.
+     */
+    kmsKeyArn?: pulumi.Input<string>;
+    /**
+     * Name of the gateway.
+     */
+    name?: pulumi.Input<string>;
+    /**
+     * Protocol-specific configuration for the gateway. See `protocolConfiguration` below.
+     */
+    protocolConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreGatewayProtocolConfiguration>;
+    /**
+     * Protocol type for the gateway. Valid values: `MCP`.
+     */
+    protocolType: pulumi.Input<string>;
+    /**
+     * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
+     */
+    region?: pulumi.Input<string>;
+    /**
+     * ARN of the IAM role that the gateway assumes to access AWS services.
+     *
+     * The following arguments are optional:
+     */
+    roleArn: pulumi.Input<string>;
+    /**
+     * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
+     */
+    tags?: pulumi.Input<{
+        [key: string]: pulumi.Input<string>;
+    }>;
+    timeouts?: pulumi.Input<inputs.bedrock.AgentcoreGatewayTimeouts>;
+}

package/bedrock/agentcoreGateway.js

@@ -0,0 +1,178 @@
+"use strict";
+// *** WARNING: this file was generated by pulumi-language-nodejs. ***
+// *** Do not edit by hand unless you're certain you know what you are doing! ***
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.AgentcoreGateway = void 0;
+const pulumi = require("@pulumi/pulumi");
+const utilities = require("../utilities");
+/**
+ * Manages an AWS Bedrock AgentCore Gateway. With Gateway, developers can convert APIs, Lambda functions, and existing services into Model Context Protocol (MCP)-compatible tools.
+ *
+ * ## Example Usage
+ *
+ * ### Gateway with JWT Authorization
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const assumeRole = aws.iam.getPolicyDocument({
+ *     statements: [{
+ *         effect: "Allow",
+ *         actions: ["sts:AssumeRole"],
+ *         principals: [{
+ *             type: "Service",
+ *             identifiers: ["bedrock-agentcore.amazonaws.com"],
+ *         }],
+ *     }],
+ * });
+ * const example = new aws.iam.Role("example", {
+ *     name: "bedrock-agentcore-gateway-role",
+ *     assumeRolePolicy: assumeRole.then(assumeRole => assumeRole.json),
+ * });
+ * const exampleAgentcoreGateway = new aws.bedrock.AgentcoreGateway("example", {
+ *     name: "example-gateway",
+ *     roleArn: example.arn,
+ *     authorizerType: "CUSTOM_JWT",
+ *     authorizerConfiguration: {
+ *         customJwtAuthorizer: {
+ *             discoveryUrl: "https://accounts.google.com/.well-known/openid-configuration",
+ *             allowedAudiences: [
+ *                 "test1",
+ *                 "test2",
+ *             ],
+ *         },
+ *     },
+ *     protocolType: "MCP",
+ * });
+ * ```
+ *
+ * ### Gateway with advanced JWT Authorization and MCP Configuration
+ *
+ * ```typescript
+ * import * as pulumi from "@pulumi/pulumi";
+ * import * as aws from "@pulumi/aws";
+ *
+ * const example = new aws.bedrock.AgentcoreGateway("example", {
+ *     name: "mcp-gateway",
+ *     description: "Gateway for MCP communication",
+ *     roleArn: exampleAwsIamRole.arn,
+ *     authorizerType: "CUSTOM_JWT",
+ *     authorizerConfiguration: {
+ *         customJwtAuthorizer: {
+ *             discoveryUrl: "https://auth.example.com/.well-known/openid-configuration",
+ *             allowedAudiences: [
+ *                 "app-client",
+ *                 "web-client",
+ *             ],
+ *             allowedClients: [
+ *                 "client-123",
+ *                 "client-456",
+ *             ],
+ *         },
+ *     },
+ *     protocolType: "MCP",
+ *     protocolConfiguration: {
+ *         mcp: {
+ *             instructions: "Gateway for handling MCP requests",
+ *             searchType: "HYBRID",
+ *             supportedVersions: [
+ *                 "2025-03-26",
+ *                 "2025-06-18",
+ *             ],
+ *         },
+ *     },
+ * });
+ * ```
+ *
+ * ## Import
+ *
+ * Using `pulumi import`, import Bedrock AgentCore Gateway using the gateway ID. For example:
+ *
+ * ```sh
+ * $ pulumi import aws:bedrock/agentcoreGateway:AgentcoreGateway example GATEWAY1234567890
+ * ```
+ */
+class AgentcoreGateway extends pulumi.CustomResource {
+    /**
+     * Get an existing AgentcoreGateway resource's state with the given name, ID, and optional extra
+     * properties used to qualify the lookup.
+     *
+     * @param name The _unique_ name of the resulting resource.
+     * @param id The _unique_ provider ID of the resource to lookup.
+     * @param state Any extra arguments used during the lookup.
+     * @param opts Optional settings to control the behavior of the CustomResource.
+     */
+    static get(name, id, state, opts) {
+        return new AgentcoreGateway(name, state, { ...opts, id: id });
+    }
+    /**
+     * Returns true if the given object is an instance of AgentcoreGateway.  This is designed to work even
+     * when multiple copies of the Pulumi SDK have been loaded into the same process.
+     */
+    static isInstance(obj) {
+        if (obj === undefined || obj === null) {
+            return false;
+        }
+        return obj['__pulumiType'] === AgentcoreGateway.__pulumiType;
+    }
+    constructor(name, argsOrState, opts) {
+        let resourceInputs = {};
+        opts = opts || {};
+        if (opts.id) {
+            const state = argsOrState;
+            resourceInputs["authorizerConfiguration"] = state?.authorizerConfiguration;
+            resourceInputs["authorizerType"] = state?.authorizerType;
+            resourceInputs["description"] = state?.description;
+            resourceInputs["exceptionLevel"] = state?.exceptionLevel;
+            resourceInputs["gatewayArn"] = state?.gatewayArn;
+            resourceInputs["gatewayId"] = state?.gatewayId;
+            resourceInputs["gatewayUrl"] = state?.gatewayUrl;
+            resourceInputs["kmsKeyArn"] = state?.kmsKeyArn;
+            resourceInputs["name"] = state?.name;
+            resourceInputs["protocolConfiguration"] = state?.protocolConfiguration;
+            resourceInputs["protocolType"] = state?.protocolType;
+            resourceInputs["region"] = state?.region;
+            resourceInputs["roleArn"] = state?.roleArn;
+            resourceInputs["tags"] = state?.tags;
+            resourceInputs["tagsAll"] = state?.tagsAll;
+            resourceInputs["timeouts"] = state?.timeouts;
+            resourceInputs["workloadIdentityDetails"] = state?.workloadIdentityDetails;
+        }
+        else {
+            const args = argsOrState;
+            if (args?.authorizerType === undefined && !opts.urn) {
+                throw new Error("Missing required property 'authorizerType'");
+            }
+            if (args?.protocolType === undefined && !opts.urn) {
+                throw new Error("Missing required property 'protocolType'");
+            }
+            if (args?.roleArn === undefined && !opts.urn) {
+                throw new Error("Missing required property 'roleArn'");
+            }
+            resourceInputs["authorizerConfiguration"] = args?.authorizerConfiguration;
+            resourceInputs["authorizerType"] = args?.authorizerType;
+            resourceInputs["description"] = args?.description;
+            resourceInputs["exceptionLevel"] = args?.exceptionLevel;
+            resourceInputs["kmsKeyArn"] = args?.kmsKeyArn;
+            resourceInputs["name"] = args?.name;
+            resourceInputs["protocolConfiguration"] = args?.protocolConfiguration;
+            resourceInputs["protocolType"] = args?.protocolType;
+            resourceInputs["region"] = args?.region;
+            resourceInputs["roleArn"] = args?.roleArn;
+            resourceInputs["tags"] = args?.tags;
+            resourceInputs["timeouts"] = args?.timeouts;
+            resourceInputs["gatewayArn"] = undefined /*out*/;
+            resourceInputs["gatewayId"] = undefined /*out*/;
+            resourceInputs["gatewayUrl"] = undefined /*out*/;
+            resourceInputs["tagsAll"] = undefined /*out*/;
+            resourceInputs["workloadIdentityDetails"] = undefined /*out*/;
+        }
+        opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
+        super(AgentcoreGateway.__pulumiType, name, resourceInputs, opts);
+    }
+}
+exports.AgentcoreGateway = AgentcoreGateway;
+/** @internal */
+AgentcoreGateway.__pulumiType = 'aws:bedrock/agentcoreGateway:AgentcoreGateway';
+//# sourceMappingURL=agentcoreGateway.js.map

package/bedrock/agentcoreGateway.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"agentcoreGateway.js","sourceRoot":"","sources":["../../bedrock/agentcoreGateway.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAuFG;AACH,MAAa,gBAAiB,SAAQ,MAAM,CAAC,cAAc;IACvD;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAA6B,EAAE,IAAmC;QAC3H,OAAO,IAAI,gBAAgB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IACvE,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,gBAAgB,CAAC,YAAY,CAAC;IACjE,CAAC;IA8ED,YAAY,IAAY,EAAE,WAA0D,EAAE,IAAmC;QACrH,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAgD,CAAC;YAC/D,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,YAAY,CAAC,GAAG,KAAK,EAAE,UAAU,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,KAAK,EAAE,SAAS,CAAC;YAC/C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,cAAc,CAAC,GAAG,KAAK,EAAE,YAAY,CAAC;YACrD,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;SAC9E;aAAM;YACH,MAAM,IAAI,GAAG,WAA+C,CAAC;YAC7D,IAAI,IAAI,EAAE,cAAc,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACjD,MAAM,IAAI,KAAK,CAAC,4CAA4C,CAAC,CAAC;aACjE;YACD,IAAI,IAAI,EAAE,YAAY,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC/C,MAAM,IAAI,KAAK,CAAC,0CAA0C,CAAC,CAAC;aAC/D;YACD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,gBAAgB,CAAC,GAAG,IAAI,EAAE,cAAc,CAAC;YACxD,cAAc,CAAC,WAAW,CAAC,GAAG,IAAI,EAAE,SAAS,CAAC;YAC9C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,cAAc,CAAC,GAAG,IAAI,EAAE,YAAY,CAAC;YACpD,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,WAAW,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAChD,cAAc,CAAC,YAAY,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACjD,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,gBAAgB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IACrE,CAAC;;AA7JL,4CA8JC;AAhJG,gBAAgB;AACO,6BAAY,GAAG,+CAA+C,CAAC"}