@pulumi/aws 7.9.0-alpha.1760704543 → 7.9.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (140) hide show
  1. package/amp/index.d.ts +3 -0
  2. package/amp/index.js +6 -1
  3. package/amp/index.js.map +1 -1
  4. package/amp/resourcePolicy.d.ts +214 -0
  5. package/amp/resourcePolicy.js +182 -0
  6. package/amp/resourcePolicy.js.map +1 -0
  7. package/bedrock/agentcoreAgentRuntime.d.ts +356 -0
  8. package/bedrock/agentcoreAgentRuntime.js +198 -0
  9. package/bedrock/agentcoreAgentRuntime.js.map +1 -0
  10. package/bedrock/agentcoreAgentRuntimeEndpoint.d.ts +173 -0
  11. package/bedrock/agentcoreAgentRuntimeEndpoint.js +96 -0
  12. package/bedrock/agentcoreAgentRuntimeEndpoint.js.map +1 -0
  13. package/bedrock/agentcoreApiKeyCredentialProvider.d.ts +133 -0
  14. package/bedrock/agentcoreApiKeyCredentialProvider.js +84 -0
  15. package/bedrock/agentcoreApiKeyCredentialProvider.js.map +1 -0
  16. package/bedrock/agentcoreBrowser.d.ts +231 -0
  17. package/bedrock/agentcoreBrowser.js +135 -0
  18. package/bedrock/agentcoreBrowser.js.map +1 -0
  19. package/bedrock/agentcoreCodeInterpreter.d.ts +211 -0
  20. package/bedrock/agentcoreCodeInterpreter.js +125 -0
  21. package/bedrock/agentcoreCodeInterpreter.js.map +1 -0
  22. package/bedrock/agentcoreGateway.d.ts +317 -0
  23. package/bedrock/agentcoreGateway.js +178 -0
  24. package/bedrock/agentcoreGateway.js.map +1 -0
  25. package/bedrock/agentcoreGatewayTarget.d.ts +294 -0
  26. package/bedrock/agentcoreGatewayTarget.js +233 -0
  27. package/bedrock/agentcoreGatewayTarget.js.map +1 -0
  28. package/bedrock/index.d.ts +21 -0
  29. package/bedrock/index.js +36 -1
  30. package/bedrock/index.js.map +1 -1
  31. package/cloudwatch/metricAlarm.d.ts +39 -7
  32. package/cloudwatch/metricAlarm.js +36 -4
  33. package/cloudwatch/metricAlarm.js.map +1 -1
  34. package/codebuild/project.d.ts +15 -0
  35. package/codebuild/project.js +2 -0
  36. package/codebuild/project.js.map +1 -1
  37. package/datazone/environment.d.ts +10 -6
  38. package/datazone/environment.js +1 -3
  39. package/datazone/environment.js.map +1 -1
  40. package/dms/endpoint.d.ts +3 -3
  41. package/ec2/getVpnConnection.d.ts +173 -0
  42. package/ec2/getVpnConnection.js +92 -0
  43. package/ec2/getVpnConnection.js.map +1 -0
  44. package/ec2/index.d.ts +3 -0
  45. package/ec2/index.js +6 -3
  46. package/ec2/index.js.map +1 -1
  47. package/ec2/route.d.ts +0 -8
  48. package/ec2/route.js +0 -8
  49. package/ec2/route.js.map +1 -1
  50. package/ec2/routeTable.d.ts +6 -6
  51. package/ec2/routeTable.js +0 -6
  52. package/ec2/routeTable.js.map +1 -1
  53. package/ec2transitgateway/getDirectConnectGatewayAttachment.d.ts +4 -0
  54. package/ec2transitgateway/getDirectConnectGatewayAttachment.js +4 -0
  55. package/ec2transitgateway/getDirectConnectGatewayAttachment.js.map +1 -1
  56. package/ec2transitgateway/getVpcAttachment.d.ts +4 -0
  57. package/ec2transitgateway/getVpcAttachment.js +4 -0
  58. package/ec2transitgateway/getVpcAttachment.js.map +1 -1
  59. package/ec2transitgateway/routeTableAssociation.d.ts +57 -0
  60. package/ec2transitgateway/routeTableAssociation.js +57 -0
  61. package/ec2transitgateway/routeTableAssociation.js.map +1 -1
  62. package/ec2transitgateway/routeTablePropagation.d.ts +57 -0
  63. package/ec2transitgateway/routeTablePropagation.js +57 -0
  64. package/ec2transitgateway/routeTablePropagation.js.map +1 -1
  65. package/emrserverless/application.d.ts +12 -0
  66. package/emrserverless/application.js +2 -0
  67. package/emrserverless/application.js.map +1 -1
  68. package/index.d.ts +2 -1
  69. package/index.js +3 -1
  70. package/index.js.map +1 -1
  71. package/lakeformation/permissions.d.ts +14 -10
  72. package/lakeformation/permissions.js +14 -10
  73. package/lakeformation/permissions.js.map +1 -1
  74. package/odb/cloudAutonomousVmCluster.d.ts +6 -6
  75. package/odb/cloudAutonomousVmCluster.js +6 -6
  76. package/odb/cloudExadataInfrastructure.d.ts +2 -2
  77. package/odb/cloudVmCluster.d.ts +6 -6
  78. package/odb/cloudVmCluster.js +6 -6
  79. package/odb/getCloudAutonomousVmClusters.d.ts +68 -0
  80. package/odb/getCloudAutonomousVmClusters.js +56 -0
  81. package/odb/getCloudAutonomousVmClusters.js.map +1 -0
  82. package/odb/getCloudExadataInfrastructures.d.ts +68 -0
  83. package/odb/getCloudExadataInfrastructures.js +56 -0
  84. package/odb/getCloudExadataInfrastructures.js.map +1 -0
  85. package/odb/getCloudVmClusters.d.ts +68 -0
  86. package/odb/getCloudVmClusters.js +56 -0
  87. package/odb/getCloudVmClusters.js.map +1 -0
  88. package/odb/getDbSystemShapes.d.ts +1 -1
  89. package/odb/getNetworkPeeringConnection.d.ts +3 -3
  90. package/odb/getNetworkPeeringConnections.d.ts +77 -0
  91. package/odb/getNetworkPeeringConnections.js +58 -0
  92. package/odb/getNetworkPeeringConnections.js.map +1 -0
  93. package/odb/getNetworks.d.ts +64 -0
  94. package/odb/getNetworks.js +52 -0
  95. package/odb/getNetworks.js.map +1 -0
  96. package/odb/index.d.ts +15 -0
  97. package/odb/index.js +16 -1
  98. package/odb/index.js.map +1 -1
  99. package/package.json +2 -2
  100. package/quicksight/accountSubscription.d.ts +37 -1
  101. package/quicksight/accountSubscription.js +7 -1
  102. package/quicksight/accountSubscription.js.map +1 -1
  103. package/rds/getGlobalCluster.d.ts +123 -0
  104. package/rds/getGlobalCluster.js +56 -0
  105. package/rds/getGlobalCluster.js.map +1 -0
  106. package/rds/index.d.ts +3 -0
  107. package/rds/index.js +5 -2
  108. package/rds/index.js.map +1 -1
  109. package/servicediscovery/service.d.ts +4 -4
  110. package/servicediscovery/service.js +1 -1
  111. package/ssm/defaultPatchBaseline.d.ts +3 -0
  112. package/ssm/defaultPatchBaseline.js.map +1 -1
  113. package/ssmcontacts/contact.d.ts +9 -3
  114. package/ssmcontacts/contact.js +9 -3
  115. package/ssmcontacts/contact.js.map +1 -1
  116. package/transfer/hostKey.d.ts +151 -0
  117. package/transfer/hostKey.js +83 -0
  118. package/transfer/hostKey.js.map +1 -0
  119. package/transfer/index.d.ts +9 -0
  120. package/transfer/index.js +16 -1
  121. package/transfer/index.js.map +1 -1
  122. package/transfer/webApp.d.ts +239 -0
  123. package/transfer/webApp.js +157 -0
  124. package/transfer/webApp.js.map +1 -0
  125. package/transfer/webAppCustomization.d.ts +97 -0
  126. package/transfer/webAppCustomization.js +73 -0
  127. package/transfer/webAppCustomization.js.map +1 -0
  128. package/types/input.d.ts +997 -2
  129. package/types/input.js.map +1 -1
  130. package/types/output.d.ts +1342 -160
  131. package/types/output.js.map +1 -1
  132. package/vpclattice/resourceGateway.d.ts +12 -0
  133. package/vpclattice/resourceGateway.js +2 -0
  134. package/vpclattice/resourceGateway.js.map +1 -1
  135. package/vpn/getConnection.d.ts +175 -0
  136. package/vpn/getConnection.js +96 -0
  137. package/vpn/getConnection.js.map +1 -0
  138. package/vpn/index.d.ts +3 -0
  139. package/vpn/index.js +10 -0
  140. package/vpn/index.js.map +1 -0
@@ -0,0 +1,356 @@
1
+ import * as pulumi from "@pulumi/pulumi";
2
+ import * as inputs from "../types/input";
3
+ import * as outputs from "../types/output";
4
+ /**
5
+ * Manages an AWS Bedrock AgentCore Agent Runtime. Agent Runtime provides a containerized execution environment for AI agents.
6
+ *
7
+ * ## Example Usage
8
+ *
9
+ * ### Basic Usage
10
+ *
11
+ * ```typescript
12
+ * import * as pulumi from "@pulumi/pulumi";
13
+ * import * as aws from "@pulumi/aws";
14
+ *
15
+ * const assumeRole = aws.iam.getPolicyDocument({
16
+ * statements: [{
17
+ * effect: "Allow",
18
+ * actions: ["sts:AssumeRole"],
19
+ * principals: [{
20
+ * type: "Service",
21
+ * identifiers: ["bedrock-agentcore.amazonaws.com"],
22
+ * }],
23
+ * }],
24
+ * });
25
+ * const ecrPermissions = aws.iam.getPolicyDocument({
26
+ * statements: [
27
+ * {
28
+ * actions: ["ecr:GetAuthorizationToken"],
29
+ * effect: "Allow",
30
+ * resources: ["*"],
31
+ * },
32
+ * {
33
+ * actions: [
34
+ * "ecr:BatchGetImage",
35
+ * "ecr:GetDownloadUrlForLayer",
36
+ * ],
37
+ * effect: "Allow",
38
+ * resources: [exampleAwsEcrRepository.arn],
39
+ * },
40
+ * ],
41
+ * });
42
+ * const example = new aws.iam.Role("example", {
43
+ * name: "bedrock-agentcore-runtime-role",
44
+ * assumeRolePolicy: assumeRole.then(assumeRole => assumeRole.json),
45
+ * });
46
+ * const exampleRolePolicy = new aws.iam.RolePolicy("example", {
47
+ * role: example.id,
48
+ * policy: ecrPermissions.then(ecrPermissions => ecrPermissions.json),
49
+ * });
50
+ * const exampleAgentcoreAgentRuntime = new aws.bedrock.AgentcoreAgentRuntime("example", {
51
+ * agentRuntimeName: "example-agent-runtime",
52
+ * roleArn: example.arn,
53
+ * agentRuntimeArtifact: {
54
+ * containerConfiguration: {
55
+ * containerUri: `${exampleAwsEcrRepository.repositoryUrl}:latest`,
56
+ * },
57
+ * },
58
+ * networkConfiguration: {
59
+ * networkMode: "PUBLIC",
60
+ * },
61
+ * });
62
+ * ```
63
+ *
64
+ * ### MCP Server With Custom JWT Authorizer
65
+ *
66
+ * ```typescript
67
+ * import * as pulumi from "@pulumi/pulumi";
68
+ * import * as aws from "@pulumi/aws";
69
+ *
70
+ * const example = new aws.bedrock.AgentcoreAgentRuntime("example", {
71
+ * agentRuntimeName: "example-agent-runtime",
72
+ * description: "Agent runtime with JWT authorization",
73
+ * roleArn: exampleAwsIamRole.arn,
74
+ * agentRuntimeArtifact: {
75
+ * containerConfiguration: {
76
+ * containerUri: `${exampleAwsEcrRepository.repositoryUrl}:v1.0`,
77
+ * },
78
+ * },
79
+ * environmentVariables: {
80
+ * LOG_LEVEL: "INFO",
81
+ * ENV: "production",
82
+ * },
83
+ * authorizerConfiguration: {
84
+ * customJwtAuthorizer: {
85
+ * discoveryUrl: "https://accounts.google.com/.well-known/openid-configuration",
86
+ * allowedAudiences: [
87
+ * "my-app",
88
+ * "mobile-app",
89
+ * ],
90
+ * allowedClients: [
91
+ * "client-123",
92
+ * "client-456",
93
+ * ],
94
+ * },
95
+ * },
96
+ * networkConfiguration: {
97
+ * networkMode: "PUBLIC",
98
+ * },
99
+ * protocolConfiguration: {
100
+ * serverProtocol: "MCP",
101
+ * },
102
+ * });
103
+ * ```
104
+ *
105
+ * ## Import
106
+ *
107
+ * Using `pulumi import`, import Bedrock AgentCore Agent Runtime using `agent_runtime_id`. For example:
108
+ *
109
+ * ```sh
110
+ * $ pulumi import aws:bedrock/agentcoreAgentRuntime:AgentcoreAgentRuntime example agent-runtime-12345
111
+ * ```
112
+ */
113
+ export declare class AgentcoreAgentRuntime extends pulumi.CustomResource {
114
+ /**
115
+ * Get an existing AgentcoreAgentRuntime resource's state with the given name, ID, and optional extra
116
+ * properties used to qualify the lookup.
117
+ *
118
+ * @param name The _unique_ name of the resulting resource.
119
+ * @param id The _unique_ provider ID of the resource to lookup.
120
+ * @param state Any extra arguments used during the lookup.
121
+ * @param opts Optional settings to control the behavior of the CustomResource.
122
+ */
123
+ static get(name: string, id: pulumi.Input<pulumi.ID>, state?: AgentcoreAgentRuntimeState, opts?: pulumi.CustomResourceOptions): AgentcoreAgentRuntime;
124
+ /**
125
+ * Returns true if the given object is an instance of AgentcoreAgentRuntime. This is designed to work even
126
+ * when multiple copies of the Pulumi SDK have been loaded into the same process.
127
+ */
128
+ static isInstance(obj: any): obj is AgentcoreAgentRuntime;
129
+ /**
130
+ * ARN of the Agent Runtime.
131
+ */
132
+ readonly agentRuntimeArn: pulumi.Output<string>;
133
+ /**
134
+ * Container artifact configuration. See `agentRuntimeArtifact` below.
135
+ */
136
+ readonly agentRuntimeArtifact: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeAgentRuntimeArtifact | undefined>;
137
+ /**
138
+ * Unique identifier of the Agent Runtime.
139
+ */
140
+ readonly agentRuntimeId: pulumi.Output<string>;
141
+ /**
142
+ * Name of the agent runtime.
143
+ */
144
+ readonly agentRuntimeName: pulumi.Output<string>;
145
+ /**
146
+ * Version of the Agent Runtime.
147
+ */
148
+ readonly agentRuntimeVersion: pulumi.Output<string>;
149
+ /**
150
+ * Authorization configuration for authenticating incoming requests. See `authorizerConfiguration` below.
151
+ */
152
+ readonly authorizerConfiguration: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeAuthorizerConfiguration | undefined>;
153
+ /**
154
+ * Description of the agent runtime.
155
+ */
156
+ readonly description: pulumi.Output<string | undefined>;
157
+ /**
158
+ * Map of environment variables to pass to the container.
159
+ */
160
+ readonly environmentVariables: pulumi.Output<{
161
+ [key: string]: string;
162
+ } | undefined>;
163
+ /**
164
+ * Runtime session and resource lifecycle configuration for the agent runtime. See `lifecycleConfiguration` below.
165
+ */
166
+ readonly lifecycleConfigurations: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeLifecycleConfiguration[]>;
167
+ /**
168
+ * Network configuration for the agent runtime. See `networkConfiguration` below.
169
+ *
170
+ * The following arguments are optional:
171
+ */
172
+ readonly networkConfiguration: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeNetworkConfiguration | undefined>;
173
+ /**
174
+ * Protocol configuration for the agent runtime. See `protocolConfiguration` below.
175
+ */
176
+ readonly protocolConfiguration: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeProtocolConfiguration | undefined>;
177
+ /**
178
+ * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
179
+ */
180
+ readonly region: pulumi.Output<string>;
181
+ /**
182
+ * Configuration for HTTP request headers that will be passed through to the runtime. See `requestHeaderConfiguration` below.
183
+ */
184
+ readonly requestHeaderConfiguration: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeRequestHeaderConfiguration | undefined>;
185
+ /**
186
+ * ARN of the IAM role that the agent runtime assumes to access AWS services.
187
+ */
188
+ readonly roleArn: pulumi.Output<string>;
189
+ /**
190
+ * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
191
+ */
192
+ readonly tags: pulumi.Output<{
193
+ [key: string]: string;
194
+ } | undefined>;
195
+ /**
196
+ * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
197
+ */
198
+ readonly tagsAll: pulumi.Output<{
199
+ [key: string]: string;
200
+ }>;
201
+ readonly timeouts: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeTimeouts | undefined>;
202
+ /**
203
+ * Workload identity details for the agent runtime. See `workloadIdentityDetails` below.
204
+ */
205
+ readonly workloadIdentityDetails: pulumi.Output<outputs.bedrock.AgentcoreAgentRuntimeWorkloadIdentityDetail[]>;
206
+ /**
207
+ * Create a AgentcoreAgentRuntime resource with the given unique name, arguments, and options.
208
+ *
209
+ * @param name The _unique_ name of the resource.
210
+ * @param args The arguments to use to populate this resource's properties.
211
+ * @param opts A bag of options that control this resource's behavior.
212
+ */
213
+ constructor(name: string, args: AgentcoreAgentRuntimeArgs, opts?: pulumi.CustomResourceOptions);
214
+ }
215
+ /**
216
+ * Input properties used for looking up and filtering AgentcoreAgentRuntime resources.
217
+ */
218
+ export interface AgentcoreAgentRuntimeState {
219
+ /**
220
+ * ARN of the Agent Runtime.
221
+ */
222
+ agentRuntimeArn?: pulumi.Input<string>;
223
+ /**
224
+ * Container artifact configuration. See `agentRuntimeArtifact` below.
225
+ */
226
+ agentRuntimeArtifact?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeAgentRuntimeArtifact>;
227
+ /**
228
+ * Unique identifier of the Agent Runtime.
229
+ */
230
+ agentRuntimeId?: pulumi.Input<string>;
231
+ /**
232
+ * Name of the agent runtime.
233
+ */
234
+ agentRuntimeName?: pulumi.Input<string>;
235
+ /**
236
+ * Version of the Agent Runtime.
237
+ */
238
+ agentRuntimeVersion?: pulumi.Input<string>;
239
+ /**
240
+ * Authorization configuration for authenticating incoming requests. See `authorizerConfiguration` below.
241
+ */
242
+ authorizerConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeAuthorizerConfiguration>;
243
+ /**
244
+ * Description of the agent runtime.
245
+ */
246
+ description?: pulumi.Input<string>;
247
+ /**
248
+ * Map of environment variables to pass to the container.
249
+ */
250
+ environmentVariables?: pulumi.Input<{
251
+ [key: string]: pulumi.Input<string>;
252
+ }>;
253
+ /**
254
+ * Runtime session and resource lifecycle configuration for the agent runtime. See `lifecycleConfiguration` below.
255
+ */
256
+ lifecycleConfigurations?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeLifecycleConfiguration>[]>;
257
+ /**
258
+ * Network configuration for the agent runtime. See `networkConfiguration` below.
259
+ *
260
+ * The following arguments are optional:
261
+ */
262
+ networkConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeNetworkConfiguration>;
263
+ /**
264
+ * Protocol configuration for the agent runtime. See `protocolConfiguration` below.
265
+ */
266
+ protocolConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeProtocolConfiguration>;
267
+ /**
268
+ * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
269
+ */
270
+ region?: pulumi.Input<string>;
271
+ /**
272
+ * Configuration for HTTP request headers that will be passed through to the runtime. See `requestHeaderConfiguration` below.
273
+ */
274
+ requestHeaderConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeRequestHeaderConfiguration>;
275
+ /**
276
+ * ARN of the IAM role that the agent runtime assumes to access AWS services.
277
+ */
278
+ roleArn?: pulumi.Input<string>;
279
+ /**
280
+ * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
281
+ */
282
+ tags?: pulumi.Input<{
283
+ [key: string]: pulumi.Input<string>;
284
+ }>;
285
+ /**
286
+ * A map of tags assigned to the resource, including those inherited from the provider `defaultTags` configuration block.
287
+ */
288
+ tagsAll?: pulumi.Input<{
289
+ [key: string]: pulumi.Input<string>;
290
+ }>;
291
+ timeouts?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeTimeouts>;
292
+ /**
293
+ * Workload identity details for the agent runtime. See `workloadIdentityDetails` below.
294
+ */
295
+ workloadIdentityDetails?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeWorkloadIdentityDetail>[]>;
296
+ }
297
+ /**
298
+ * The set of arguments for constructing a AgentcoreAgentRuntime resource.
299
+ */
300
+ export interface AgentcoreAgentRuntimeArgs {
301
+ /**
302
+ * Container artifact configuration. See `agentRuntimeArtifact` below.
303
+ */
304
+ agentRuntimeArtifact?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeAgentRuntimeArtifact>;
305
+ /**
306
+ * Name of the agent runtime.
307
+ */
308
+ agentRuntimeName: pulumi.Input<string>;
309
+ /**
310
+ * Authorization configuration for authenticating incoming requests. See `authorizerConfiguration` below.
311
+ */
312
+ authorizerConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeAuthorizerConfiguration>;
313
+ /**
314
+ * Description of the agent runtime.
315
+ */
316
+ description?: pulumi.Input<string>;
317
+ /**
318
+ * Map of environment variables to pass to the container.
319
+ */
320
+ environmentVariables?: pulumi.Input<{
321
+ [key: string]: pulumi.Input<string>;
322
+ }>;
323
+ /**
324
+ * Runtime session and resource lifecycle configuration for the agent runtime. See `lifecycleConfiguration` below.
325
+ */
326
+ lifecycleConfigurations?: pulumi.Input<pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeLifecycleConfiguration>[]>;
327
+ /**
328
+ * Network configuration for the agent runtime. See `networkConfiguration` below.
329
+ *
330
+ * The following arguments are optional:
331
+ */
332
+ networkConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeNetworkConfiguration>;
333
+ /**
334
+ * Protocol configuration for the agent runtime. See `protocolConfiguration` below.
335
+ */
336
+ protocolConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeProtocolConfiguration>;
337
+ /**
338
+ * Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
339
+ */
340
+ region?: pulumi.Input<string>;
341
+ /**
342
+ * Configuration for HTTP request headers that will be passed through to the runtime. See `requestHeaderConfiguration` below.
343
+ */
344
+ requestHeaderConfiguration?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeRequestHeaderConfiguration>;
345
+ /**
346
+ * ARN of the IAM role that the agent runtime assumes to access AWS services.
347
+ */
348
+ roleArn: pulumi.Input<string>;
349
+ /**
350
+ * Key-value map of resource tags. If configured with a provider `defaultTags` configuration block present, tags with matching keys will overwrite those defined at the provider-level.
351
+ */
352
+ tags?: pulumi.Input<{
353
+ [key: string]: pulumi.Input<string>;
354
+ }>;
355
+ timeouts?: pulumi.Input<inputs.bedrock.AgentcoreAgentRuntimeTimeouts>;
356
+ }
@@ -0,0 +1,198 @@
1
+ "use strict";
2
+ // *** WARNING: this file was generated by pulumi-language-nodejs. ***
3
+ // *** Do not edit by hand unless you're certain you know what you are doing! ***
4
+ Object.defineProperty(exports, "__esModule", { value: true });
5
+ exports.AgentcoreAgentRuntime = void 0;
6
+ const pulumi = require("@pulumi/pulumi");
7
+ const utilities = require("../utilities");
8
+ /**
9
+ * Manages an AWS Bedrock AgentCore Agent Runtime. Agent Runtime provides a containerized execution environment for AI agents.
10
+ *
11
+ * ## Example Usage
12
+ *
13
+ * ### Basic Usage
14
+ *
15
+ * ```typescript
16
+ * import * as pulumi from "@pulumi/pulumi";
17
+ * import * as aws from "@pulumi/aws";
18
+ *
19
+ * const assumeRole = aws.iam.getPolicyDocument({
20
+ * statements: [{
21
+ * effect: "Allow",
22
+ * actions: ["sts:AssumeRole"],
23
+ * principals: [{
24
+ * type: "Service",
25
+ * identifiers: ["bedrock-agentcore.amazonaws.com"],
26
+ * }],
27
+ * }],
28
+ * });
29
+ * const ecrPermissions = aws.iam.getPolicyDocument({
30
+ * statements: [
31
+ * {
32
+ * actions: ["ecr:GetAuthorizationToken"],
33
+ * effect: "Allow",
34
+ * resources: ["*"],
35
+ * },
36
+ * {
37
+ * actions: [
38
+ * "ecr:BatchGetImage",
39
+ * "ecr:GetDownloadUrlForLayer",
40
+ * ],
41
+ * effect: "Allow",
42
+ * resources: [exampleAwsEcrRepository.arn],
43
+ * },
44
+ * ],
45
+ * });
46
+ * const example = new aws.iam.Role("example", {
47
+ * name: "bedrock-agentcore-runtime-role",
48
+ * assumeRolePolicy: assumeRole.then(assumeRole => assumeRole.json),
49
+ * });
50
+ * const exampleRolePolicy = new aws.iam.RolePolicy("example", {
51
+ * role: example.id,
52
+ * policy: ecrPermissions.then(ecrPermissions => ecrPermissions.json),
53
+ * });
54
+ * const exampleAgentcoreAgentRuntime = new aws.bedrock.AgentcoreAgentRuntime("example", {
55
+ * agentRuntimeName: "example-agent-runtime",
56
+ * roleArn: example.arn,
57
+ * agentRuntimeArtifact: {
58
+ * containerConfiguration: {
59
+ * containerUri: `${exampleAwsEcrRepository.repositoryUrl}:latest`,
60
+ * },
61
+ * },
62
+ * networkConfiguration: {
63
+ * networkMode: "PUBLIC",
64
+ * },
65
+ * });
66
+ * ```
67
+ *
68
+ * ### MCP Server With Custom JWT Authorizer
69
+ *
70
+ * ```typescript
71
+ * import * as pulumi from "@pulumi/pulumi";
72
+ * import * as aws from "@pulumi/aws";
73
+ *
74
+ * const example = new aws.bedrock.AgentcoreAgentRuntime("example", {
75
+ * agentRuntimeName: "example-agent-runtime",
76
+ * description: "Agent runtime with JWT authorization",
77
+ * roleArn: exampleAwsIamRole.arn,
78
+ * agentRuntimeArtifact: {
79
+ * containerConfiguration: {
80
+ * containerUri: `${exampleAwsEcrRepository.repositoryUrl}:v1.0`,
81
+ * },
82
+ * },
83
+ * environmentVariables: {
84
+ * LOG_LEVEL: "INFO",
85
+ * ENV: "production",
86
+ * },
87
+ * authorizerConfiguration: {
88
+ * customJwtAuthorizer: {
89
+ * discoveryUrl: "https://accounts.google.com/.well-known/openid-configuration",
90
+ * allowedAudiences: [
91
+ * "my-app",
92
+ * "mobile-app",
93
+ * ],
94
+ * allowedClients: [
95
+ * "client-123",
96
+ * "client-456",
97
+ * ],
98
+ * },
99
+ * },
100
+ * networkConfiguration: {
101
+ * networkMode: "PUBLIC",
102
+ * },
103
+ * protocolConfiguration: {
104
+ * serverProtocol: "MCP",
105
+ * },
106
+ * });
107
+ * ```
108
+ *
109
+ * ## Import
110
+ *
111
+ * Using `pulumi import`, import Bedrock AgentCore Agent Runtime using `agent_runtime_id`. For example:
112
+ *
113
+ * ```sh
114
+ * $ pulumi import aws:bedrock/agentcoreAgentRuntime:AgentcoreAgentRuntime example agent-runtime-12345
115
+ * ```
116
+ */
117
+ class AgentcoreAgentRuntime extends pulumi.CustomResource {
118
+ /**
119
+ * Get an existing AgentcoreAgentRuntime resource's state with the given name, ID, and optional extra
120
+ * properties used to qualify the lookup.
121
+ *
122
+ * @param name The _unique_ name of the resulting resource.
123
+ * @param id The _unique_ provider ID of the resource to lookup.
124
+ * @param state Any extra arguments used during the lookup.
125
+ * @param opts Optional settings to control the behavior of the CustomResource.
126
+ */
127
+ static get(name, id, state, opts) {
128
+ return new AgentcoreAgentRuntime(name, state, { ...opts, id: id });
129
+ }
130
+ /**
131
+ * Returns true if the given object is an instance of AgentcoreAgentRuntime. This is designed to work even
132
+ * when multiple copies of the Pulumi SDK have been loaded into the same process.
133
+ */
134
+ static isInstance(obj) {
135
+ if (obj === undefined || obj === null) {
136
+ return false;
137
+ }
138
+ return obj['__pulumiType'] === AgentcoreAgentRuntime.__pulumiType;
139
+ }
140
+ constructor(name, argsOrState, opts) {
141
+ let resourceInputs = {};
142
+ opts = opts || {};
143
+ if (opts.id) {
144
+ const state = argsOrState;
145
+ resourceInputs["agentRuntimeArn"] = state?.agentRuntimeArn;
146
+ resourceInputs["agentRuntimeArtifact"] = state?.agentRuntimeArtifact;
147
+ resourceInputs["agentRuntimeId"] = state?.agentRuntimeId;
148
+ resourceInputs["agentRuntimeName"] = state?.agentRuntimeName;
149
+ resourceInputs["agentRuntimeVersion"] = state?.agentRuntimeVersion;
150
+ resourceInputs["authorizerConfiguration"] = state?.authorizerConfiguration;
151
+ resourceInputs["description"] = state?.description;
152
+ resourceInputs["environmentVariables"] = state?.environmentVariables;
153
+ resourceInputs["lifecycleConfigurations"] = state?.lifecycleConfigurations;
154
+ resourceInputs["networkConfiguration"] = state?.networkConfiguration;
155
+ resourceInputs["protocolConfiguration"] = state?.protocolConfiguration;
156
+ resourceInputs["region"] = state?.region;
157
+ resourceInputs["requestHeaderConfiguration"] = state?.requestHeaderConfiguration;
158
+ resourceInputs["roleArn"] = state?.roleArn;
159
+ resourceInputs["tags"] = state?.tags;
160
+ resourceInputs["tagsAll"] = state?.tagsAll;
161
+ resourceInputs["timeouts"] = state?.timeouts;
162
+ resourceInputs["workloadIdentityDetails"] = state?.workloadIdentityDetails;
163
+ }
164
+ else {
165
+ const args = argsOrState;
166
+ if (args?.agentRuntimeName === undefined && !opts.urn) {
167
+ throw new Error("Missing required property 'agentRuntimeName'");
168
+ }
169
+ if (args?.roleArn === undefined && !opts.urn) {
170
+ throw new Error("Missing required property 'roleArn'");
171
+ }
172
+ resourceInputs["agentRuntimeArtifact"] = args?.agentRuntimeArtifact;
173
+ resourceInputs["agentRuntimeName"] = args?.agentRuntimeName;
174
+ resourceInputs["authorizerConfiguration"] = args?.authorizerConfiguration;
175
+ resourceInputs["description"] = args?.description;
176
+ resourceInputs["environmentVariables"] = args?.environmentVariables;
177
+ resourceInputs["lifecycleConfigurations"] = args?.lifecycleConfigurations;
178
+ resourceInputs["networkConfiguration"] = args?.networkConfiguration;
179
+ resourceInputs["protocolConfiguration"] = args?.protocolConfiguration;
180
+ resourceInputs["region"] = args?.region;
181
+ resourceInputs["requestHeaderConfiguration"] = args?.requestHeaderConfiguration;
182
+ resourceInputs["roleArn"] = args?.roleArn;
183
+ resourceInputs["tags"] = args?.tags;
184
+ resourceInputs["timeouts"] = args?.timeouts;
185
+ resourceInputs["agentRuntimeArn"] = undefined /*out*/;
186
+ resourceInputs["agentRuntimeId"] = undefined /*out*/;
187
+ resourceInputs["agentRuntimeVersion"] = undefined /*out*/;
188
+ resourceInputs["tagsAll"] = undefined /*out*/;
189
+ resourceInputs["workloadIdentityDetails"] = undefined /*out*/;
190
+ }
191
+ opts = pulumi.mergeOptions(utilities.resourceOptsDefaults(), opts);
192
+ super(AgentcoreAgentRuntime.__pulumiType, name, resourceInputs, opts);
193
+ }
194
+ }
195
+ exports.AgentcoreAgentRuntime = AgentcoreAgentRuntime;
196
+ /** @internal */
197
+ AgentcoreAgentRuntime.__pulumiType = 'aws:bedrock/agentcoreAgentRuntime:AgentcoreAgentRuntime';
198
+ //# sourceMappingURL=agentcoreAgentRuntime.js.map
@@ -0,0 +1 @@
1
+ {"version":3,"file":"agentcoreAgentRuntime.js","sourceRoot":"","sources":["../../bedrock/agentcoreAgentRuntime.ts"],"names":[],"mappings":";AAAA,sEAAsE;AACtE,iFAAiF;;;AAEjF,yCAAyC;AAIzC,0CAA0C;AAE1C;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4GG;AACH,MAAa,qBAAsB,SAAQ,MAAM,CAAC,cAAc;IAC5D;;;;;;;;OAQG;IACI,MAAM,CAAC,GAAG,CAAC,IAAY,EAAE,EAA2B,EAAE,KAAkC,EAAE,IAAmC;QAChI,OAAO,IAAI,qBAAqB,CAAC,IAAI,EAAO,KAAK,EAAE,EAAE,GAAG,IAAI,EAAE,EAAE,EAAE,EAAE,EAAE,CAAC,CAAC;IAC5E,CAAC;IAKD;;;OAGG;IACI,MAAM,CAAC,UAAU,CAAC,GAAQ;QAC7B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,IAAI,EAAE;YACnC,OAAO,KAAK,CAAC;SAChB;QACD,OAAO,GAAG,CAAC,cAAc,CAAC,KAAK,qBAAqB,CAAC,YAAY,CAAC;IACtE,CAAC;IAkFD,YAAY,IAAY,EAAE,WAAoE,EAAE,IAAmC;QAC/H,IAAI,cAAc,GAAkB,EAAE,CAAC;QACvC,IAAI,GAAG,IAAI,IAAI,EAAE,CAAC;QAClB,IAAI,IAAI,CAAC,EAAE,EAAE;YACT,MAAM,KAAK,GAAG,WAAqD,CAAC;YACpE,cAAc,CAAC,iBAAiB,CAAC,GAAG,KAAK,EAAE,eAAe,CAAC;YAC3D,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,gBAAgB,CAAC,GAAG,KAAK,EAAE,cAAc,CAAC;YACzD,cAAc,CAAC,kBAAkB,CAAC,GAAG,KAAK,EAAE,gBAAgB,CAAC;YAC7D,cAAc,CAAC,qBAAqB,CAAC,GAAG,KAAK,EAAE,mBAAmB,CAAC;YACnE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,aAAa,CAAC,GAAG,KAAK,EAAE,WAAW,CAAC;YACnD,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;YAC3E,cAAc,CAAC,sBAAsB,CAAC,GAAG,KAAK,EAAE,oBAAoB,CAAC;YACrE,cAAc,CAAC,uBAAuB,CAAC,GAAG,KAAK,EAAE,qBAAqB,CAAC;YACvE,cAAc,CAAC,QAAQ,CAAC,GAAG,KAAK,EAAE,MAAM,CAAC;YACzC,cAAc,CAAC,4BAA4B,CAAC,GAAG,KAAK,EAAE,0BAA0B,CAAC;YACjF,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,MAAM,CAAC,GAAG,KAAK,EAAE,IAAI,CAAC;YACrC,cAAc,CAAC,SAAS,CAAC,GAAG,KAAK,EAAE,OAAO,CAAC;YAC3C,cAAc,CAAC,UAAU,CAAC,GAAG,KAAK,EAAE,QAAQ,CAAC;YAC7C,cAAc,CAAC,yBAAyB,CAAC,GAAG,KAAK,EAAE,uBAAuB,CAAC;SAC9E;aAAM;YACH,MAAM,IAAI,GAAG,WAAoD,CAAC;YAClE,IAAI,IAAI,EAAE,gBAAgB,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBACnD,MAAM,IAAI,KAAK,CAAC,8CAA8C,CAAC,CAAC;aACnE;YACD,IAAI,IAAI,EAAE,OAAO,KAAK,SAAS,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE;gBAC1C,MAAM,IAAI,KAAK,CAAC,qCAAqC,CAAC,CAAC;aAC1D;YACD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,kBAAkB,CAAC,GAAG,IAAI,EAAE,gBAAgB,CAAC;YAC5D,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,aAAa,CAAC,GAAG,IAAI,EAAE,WAAW,CAAC;YAClD,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,yBAAyB,CAAC,GAAG,IAAI,EAAE,uBAAuB,CAAC;YAC1E,cAAc,CAAC,sBAAsB,CAAC,GAAG,IAAI,EAAE,oBAAoB,CAAC;YACpE,cAAc,CAAC,uBAAuB,CAAC,GAAG,IAAI,EAAE,qBAAqB,CAAC;YACtE,cAAc,CAAC,QAAQ,CAAC,GAAG,IAAI,EAAE,MAAM,CAAC;YACxC,cAAc,CAAC,4BAA4B,CAAC,GAAG,IAAI,EAAE,0BAA0B,CAAC;YAChF,cAAc,CAAC,SAAS,CAAC,GAAG,IAAI,EAAE,OAAO,CAAC;YAC1C,cAAc,CAAC,MAAM,CAAC,GAAG,IAAI,EAAE,IAAI,CAAC;YACpC,cAAc,CAAC,UAAU,CAAC,GAAG,IAAI,EAAE,QAAQ,CAAC;YAC5C,cAAc,CAAC,iBAAiB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACtD,cAAc,CAAC,gBAAgB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YACrD,cAAc,CAAC,qBAAqB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC1D,cAAc,CAAC,SAAS,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;YAC9C,cAAc,CAAC,yBAAyB,CAAC,GAAG,SAAS,CAAC,OAAO,CAAC;SACjE;QACD,IAAI,GAAG,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,oBAAoB,EAAE,EAAE,IAAI,CAAC,CAAC;QACnE,KAAK,CAAC,qBAAqB,CAAC,YAAY,EAAE,IAAI,EAAE,cAAc,EAAE,IAAI,CAAC,CAAC;IAC1E,CAAC;;AAhKL,sDAiKC;AAnJG,gBAAgB;AACO,kCAAY,GAAG,yDAAyD,CAAC"}