pulumi-aws 7.11.1__py3-none-any.whl → 7.12.0__py3-none-any.whl

pulumi_aws/bedrock/agentcore_gateway_target.py

@@ -31,7 +31,7 @@ class AgentcoreGatewayTargetArgs:
         """
         The set of arguments for constructing a AgentcoreGatewayTarget resource.
         :param pulumi.Input[_builtins.str] gateway_identifier: Identifier of the gateway that this target belongs to.
-        :param pulumi.Input['AgentcoreGatewayTargetCredentialProviderConfigurationArgs'] credential_provider_configuration: Configuration for authenticating requests to the target. See `credential_provider_configuration` below.
+        :param pulumi.Input['AgentcoreGatewayTargetCredentialProviderConfigurationArgs'] credential_provider_configuration: Configuration for authenticating requests to the target. Required when using `lambda`, `open_api_schema` and `smithy_model` in `mcp` block. If using `mcp_server` in `mcp` block with no authorization, it should not be specified. See `credential_provider_configuration` below.
         :param pulumi.Input[_builtins.str] description: Description of the gateway target.
         :param pulumi.Input[_builtins.str] name: Name of the gateway target.
         :param pulumi.Input[_builtins.str] region: AWS region where the resource will be created. If not provided, the region from the provider configuration will be used.
@@ -69,7 +69,7 @@ class AgentcoreGatewayTargetArgs:
     @pulumi.getter(name="credentialProviderConfiguration")
     def credential_provider_configuration(self) -> Optional[pulumi.Input['AgentcoreGatewayTargetCredentialProviderConfigurationArgs']]:
         """
-        Configuration for authenticating requests to the target. See `credential_provider_configuration` below.
+        Configuration for authenticating requests to the target. Required when using `lambda`, `open_api_schema` and `smithy_model` in `mcp` block. If using `mcp_server` in `mcp` block with no authorization, it should not be specified. See `credential_provider_configuration` below.
         """
         return pulumi.get(self, "credential_provider_configuration")
 
@@ -150,7 +150,7 @@ class _AgentcoreGatewayTargetState:
                  timeouts: Optional[pulumi.Input['AgentcoreGatewayTargetTimeoutsArgs']] = None):
         """
         Input properties used for looking up and filtering AgentcoreGatewayTarget resources.
-        :param pulumi.Input['AgentcoreGatewayTargetCredentialProviderConfigurationArgs'] credential_provider_configuration: Configuration for authenticating requests to the target. See `credential_provider_configuration` below.
+        :param pulumi.Input['AgentcoreGatewayTargetCredentialProviderConfigurationArgs'] credential_provider_configuration: Configuration for authenticating requests to the target. Required when using `lambda`, `open_api_schema` and `smithy_model` in `mcp` block. If using `mcp_server` in `mcp` block with no authorization, it should not be specified. See `credential_provider_configuration` below.
         :param pulumi.Input[_builtins.str] description: Description of the gateway target.
         :param pulumi.Input[_builtins.str] gateway_identifier: Identifier of the gateway that this target belongs to.
         :param pulumi.Input[_builtins.str] name: Name of the gateway target.
@@ -181,7 +181,7 @@ class _AgentcoreGatewayTargetState:
     @pulumi.getter(name="credentialProviderConfiguration")
     def credential_provider_configuration(self) -> Optional[pulumi.Input['AgentcoreGatewayTargetCredentialProviderConfigurationArgs']]:
         """
-        Configuration for authenticating requests to the target. See `credential_provider_configuration` below.
+        Configuration for authenticating requests to the target. Required when using `lambda`, `open_api_schema` and `smithy_model` in `mcp` block. If using `mcp_server` in `mcp` block with no authorization, it should not be specified. See `credential_provider_configuration` below.
         """
         return pulumi.get(self, "credential_provider_configuration")
 
@@ -294,6 +294,111 @@ class AgentcoreGatewayTarget(pulumi.CustomResource):
 
         ### Lambda Target with Gateway IAM Role
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        gateway_assume = aws.iam.get_policy_document(statements=[{
+            "effect": "Allow",
+            "actions": ["sts:AssumeRole"],
+            "principals": [{
+                "type": "Service",
+                "identifiers": ["bedrock-agentcore.amazonaws.com"],
+            }],
+        }])
+        gateway_role = aws.iam.Role("gateway_role",
+            name="bedrock-gateway-role",
+            assume_role_policy=gateway_assume.json)
+        lambda_assume = aws.iam.get_policy_document(statements=[{
+            "effect": "Allow",
+            "actions": ["sts:AssumeRole"],
+            "principals": [{
+                "type": "Service",
+                "identifiers": ["lambda.amazonaws.com"],
+            }],
+        }])
+        lambda_role = aws.iam.Role("lambda_role",
+            name="example-lambda-role",
+            assume_role_policy=lambda_assume.json)
+        example = aws.lambda_.Function("example",
+            code=pulumi.FileArchive("example.zip"),
+            name="example-function",
+            role=lambda_role.arn,
+            handler="index.handler",
+            runtime=aws.lambda_.Runtime.NODE_JS20D_X)
+        example_agentcore_gateway = aws.bedrock.AgentcoreGateway("example",
+            name="example-gateway",
+            role_arn=gateway_role.arn,
+            authorizer_configuration={
+                "custom_jwt_authorizer": {
+                    "discovery_url": "https://accounts.google.com/.well-known/openid-configuration",
+                },
+            })
+        example_agentcore_gateway_target = aws.bedrock.AgentcoreGatewayTarget("example",
+            name="example-target",
+            gateway_identifier=example_agentcore_gateway.gateway_id,
+            description="Lambda function target for processing requests",
+            credential_provider_configuration={
+                "gateway_iam_role": {},
+            },
+            target_configuration={
+                "mcp": {
+                    "lambda_": {
+                        "lambda_arn": example.arn,
+                        "tool_schema": {
+                            "inline_payloads": [{
+                                "name": "process_request",
+                                "description": "Process incoming requests",
+                                "input_schema": {
+                                    "type": "object",
+                                    "description": "Request processing schema",
+                                    "properties": [
+                                        {
+                                            "name": "message",
+                                            "type": "string",
+                                            "description": "Message to process",
+                                            "required": True,
+                                        },
+                                        {
+                                            "name": "options",
+                                            "type": "object",
+                                            "properties": [
+                                                {
+                                                    "name": "priority",
+                                                    "type": "string",
+                                                },
+                                                {
+                                                    "name": "tags",
+                                                    "type": "array",
+                                                    "items": [{
+                                                        "type": "string",
+                                                    }],
+                                                },
+                                            ],
+                                        },
+                                    ],
+                                },
+                                "output_schema": {
+                                    "type": "object",
+                                    "properties": [
+                                        {
+                                            "name": "status",
+                                            "type": "string",
+                                            "required": True,
+                                        },
+                                        {
+                                            "name": "result",
+                                            "type": "string",
+                                        },
+                                    ],
+                                },
+                            }],
+                        },
+                    },
+                },
+            })
+        ```
+
         ### Target with API Key Authentication
 
         ```python
@@ -454,7 +559,7 @@ class AgentcoreGatewayTarget(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['AgentcoreGatewayTargetCredentialProviderConfigurationArgs', 'AgentcoreGatewayTargetCredentialProviderConfigurationArgsDict']] credential_provider_configuration: Configuration for authenticating requests to the target. See `credential_provider_configuration` below.
+        :param pulumi.Input[Union['AgentcoreGatewayTargetCredentialProviderConfigurationArgs', 'AgentcoreGatewayTargetCredentialProviderConfigurationArgsDict']] credential_provider_configuration: Configuration for authenticating requests to the target. Required when using `lambda`, `open_api_schema` and `smithy_model` in `mcp` block. If using `mcp_server` in `mcp` block with no authorization, it should not be specified. See `credential_provider_configuration` below.
         :param pulumi.Input[_builtins.str] description: Description of the gateway target.
         :param pulumi.Input[_builtins.str] gateway_identifier: Identifier of the gateway that this target belongs to.
         :param pulumi.Input[_builtins.str] name: Name of the gateway target.
@@ -476,6 +581,111 @@ class AgentcoreGatewayTarget(pulumi.CustomResource):
 
         ### Lambda Target with Gateway IAM Role
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        gateway_assume = aws.iam.get_policy_document(statements=[{
+            "effect": "Allow",
+            "actions": ["sts:AssumeRole"],
+            "principals": [{
+                "type": "Service",
+                "identifiers": ["bedrock-agentcore.amazonaws.com"],
+            }],
+        }])
+        gateway_role = aws.iam.Role("gateway_role",
+            name="bedrock-gateway-role",
+            assume_role_policy=gateway_assume.json)
+        lambda_assume = aws.iam.get_policy_document(statements=[{
+            "effect": "Allow",
+            "actions": ["sts:AssumeRole"],
+            "principals": [{
+                "type": "Service",
+                "identifiers": ["lambda.amazonaws.com"],
+            }],
+        }])
+        lambda_role = aws.iam.Role("lambda_role",
+            name="example-lambda-role",
+            assume_role_policy=lambda_assume.json)
+        example = aws.lambda_.Function("example",
+            code=pulumi.FileArchive("example.zip"),
+            name="example-function",
+            role=lambda_role.arn,
+            handler="index.handler",
+            runtime=aws.lambda_.Runtime.NODE_JS20D_X)
+        example_agentcore_gateway = aws.bedrock.AgentcoreGateway("example",
+            name="example-gateway",
+            role_arn=gateway_role.arn,
+            authorizer_configuration={
+                "custom_jwt_authorizer": {
+                    "discovery_url": "https://accounts.google.com/.well-known/openid-configuration",
+                },
+            })
+        example_agentcore_gateway_target = aws.bedrock.AgentcoreGatewayTarget("example",
+            name="example-target",
+            gateway_identifier=example_agentcore_gateway.gateway_id,
+            description="Lambda function target for processing requests",
+            credential_provider_configuration={
+                "gateway_iam_role": {},
+            },
+            target_configuration={
+                "mcp": {
+                    "lambda_": {
+                        "lambda_arn": example.arn,
+                        "tool_schema": {
+                            "inline_payloads": [{
+                                "name": "process_request",
+                                "description": "Process incoming requests",
+                                "input_schema": {
+                                    "type": "object",
+                                    "description": "Request processing schema",
+                                    "properties": [
+                                        {
+                                            "name": "message",
+                                            "type": "string",
+                                            "description": "Message to process",
+                                            "required": True,
+                                        },
+                                        {
+                                            "name": "options",
+                                            "type": "object",
+                                            "properties": [
+                                                {
+                                                    "name": "priority",
+                                                    "type": "string",
+                                                },
+                                                {
+                                                    "name": "tags",
+                                                    "type": "array",
+                                                    "items": [{
+                                                        "type": "string",
+                                                    }],
+                                                },
+                                            ],
+                                        },
+                                    ],
+                                },
+                                "output_schema": {
+                                    "type": "object",
+                                    "properties": [
+                                        {
+                                            "name": "status",
+                                            "type": "string",
+                                            "required": True,
+                                        },
+                                        {
+                                            "name": "result",
+                                            "type": "string",
+                                        },
+                                    ],
+                                },
+                            }],
+                        },
+                    },
+                },
+            })
+        ```
+
         ### Target with API Key Authentication
 
         ```python
@@ -700,7 +910,7 @@ class AgentcoreGatewayTarget(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
-        :param pulumi.Input[Union['AgentcoreGatewayTargetCredentialProviderConfigurationArgs', 'AgentcoreGatewayTargetCredentialProviderConfigurationArgsDict']] credential_provider_configuration: Configuration for authenticating requests to the target. See `credential_provider_configuration` below.
+        :param pulumi.Input[Union['AgentcoreGatewayTargetCredentialProviderConfigurationArgs', 'AgentcoreGatewayTargetCredentialProviderConfigurationArgsDict']] credential_provider_configuration: Configuration for authenticating requests to the target. Required when using `lambda`, `open_api_schema` and `smithy_model` in `mcp` block. If using `mcp_server` in `mcp` block with no authorization, it should not be specified. See `credential_provider_configuration` below.
         :param pulumi.Input[_builtins.str] description: Description of the gateway target.
         :param pulumi.Input[_builtins.str] gateway_identifier: Identifier of the gateway that this target belongs to.
         :param pulumi.Input[_builtins.str] name: Name of the gateway target.
@@ -728,7 +938,7 @@ class AgentcoreGatewayTarget(pulumi.CustomResource):
     @pulumi.getter(name="credentialProviderConfiguration")
     def credential_provider_configuration(self) -> pulumi.Output[Optional['outputs.AgentcoreGatewayTargetCredentialProviderConfiguration']]:
         """
-        Configuration for authenticating requests to the target. See `credential_provider_configuration` below.
+        Configuration for authenticating requests to the target. Required when using `lambda`, `open_api_schema` and `smithy_model` in `mcp` block. If using `mcp_server` in `mcp` block with no authorization, it should not be specified. See `credential_provider_configuration` below.
         """
         return pulumi.get(self, "credential_provider_configuration")
 

pulumi_aws/bedrock/agentcore_memory.py

@@ -31,7 +31,7 @@ class AgentcoreMemoryArgs:
                  timeouts: Optional[pulumi.Input['AgentcoreMemoryTimeoutsArgs']] = None):
         """
         The set of arguments for constructing a AgentcoreMemory resource.
-        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of minutes after which memory events expire. Must be a positive integer.
+        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of days after which memory events expire. Must be a positive integer in the range of 7 to 365.
                
                The following arguments are optional:
         :param pulumi.Input[_builtins.str] description: Description of the memory.
@@ -61,7 +61,7 @@ class AgentcoreMemoryArgs:
     @pulumi.getter(name="eventExpiryDuration")
     def event_expiry_duration(self) -> pulumi.Input[_builtins.int]:
         """
-        Number of minutes after which memory events expire. Must be a positive integer.
+        Number of days after which memory events expire. Must be a positive integer in the range of 7 to 365.
 
         The following arguments are optional:
         """
@@ -171,7 +171,7 @@ class _AgentcoreMemoryState:
         :param pulumi.Input[_builtins.str] arn: ARN of the Memory.
         :param pulumi.Input[_builtins.str] description: Description of the memory.
         :param pulumi.Input[_builtins.str] encryption_key_arn: ARN of the KMS key used to encrypt the memory. If not provided, AWS managed encryption is used.
-        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of minutes after which memory events expire. Must be a positive integer.
+        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of days after which memory events expire. Must be a positive integer in the range of 7 to 365.
                
                The following arguments are optional:
         :param pulumi.Input[_builtins.str] memory_execution_role_arn: ARN of the IAM role that the memory service assumes to perform operations. Required when using custom memory strategies with model processing.
@@ -241,7 +241,7 @@ class _AgentcoreMemoryState:
     @pulumi.getter(name="eventExpiryDuration")
     def event_expiry_duration(self) -> Optional[pulumi.Input[_builtins.int]]:
         """
-        Number of minutes after which memory events expire. Must be a positive integer.
+        Number of days after which memory events expire. Must be a positive integer in the range of 7 to 365.
 
         The following arguments are optional:
         """
@@ -362,12 +362,26 @@ class AgentcoreMemory(pulumi.CustomResource):
             role=example.name,
             policy_arn="arn:aws:iam::aws:policy/AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy")
         example_agentcore_memory = aws.bedrock.AgentcoreMemory("example",
-            name="example-memory",
+            name="example_memory",
             event_expiry_duration=30)
         ```
 
         ### Memory with Custom Encryption and Role
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        example = aws.kms.Key("example", description="KMS key for Bedrock AgentCore Memory")
+        example_agentcore_memory = aws.bedrock.AgentcoreMemory("example",
+            name="example_memory",
+            description="Memory for customer service agent",
+            event_expiry_duration=60,
+            encryption_key_arn=example.arn,
+            memory_execution_role_arn=example_aws_iam_role["arn"],
+            client_token="unique-client-token")
+        ```
+
         ## Import
 
         Using `pulumi import`, import Bedrock AgentCore Memory using the memory ID. For example:
@@ -380,7 +394,7 @@ class AgentcoreMemory(pulumi.CustomResource):
         :param pulumi.ResourceOptions opts: Options for the resource.
         :param pulumi.Input[_builtins.str] description: Description of the memory.
         :param pulumi.Input[_builtins.str] encryption_key_arn: ARN of the KMS key used to encrypt the memory. If not provided, AWS managed encryption is used.
-        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of minutes after which memory events expire. Must be a positive integer.
+        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of days after which memory events expire. Must be a positive integer in the range of 7 to 365.
                
                The following arguments are optional:
         :param pulumi.Input[_builtins.str] memory_execution_role_arn: ARN of the IAM role that the memory service assumes to perform operations. Required when using custom memory strategies with model processing.
@@ -420,12 +434,26 @@ class AgentcoreMemory(pulumi.CustomResource):
             role=example.name,
             policy_arn="arn:aws:iam::aws:policy/AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy")
         example_agentcore_memory = aws.bedrock.AgentcoreMemory("example",
-            name="example-memory",
+            name="example_memory",
             event_expiry_duration=30)
         ```
 
         ### Memory with Custom Encryption and Role
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        example = aws.kms.Key("example", description="KMS key for Bedrock AgentCore Memory")
+        example_agentcore_memory = aws.bedrock.AgentcoreMemory("example",
+            name="example_memory",
+            description="Memory for customer service agent",
+            event_expiry_duration=60,
+            encryption_key_arn=example.arn,
+            memory_execution_role_arn=example_aws_iam_role["arn"],
+            client_token="unique-client-token")
+        ```
+
         ## Import
 
         Using `pulumi import`, import Bedrock AgentCore Memory using the memory ID. For example:
@@ -508,7 +536,7 @@ class AgentcoreMemory(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] arn: ARN of the Memory.
         :param pulumi.Input[_builtins.str] description: Description of the memory.
         :param pulumi.Input[_builtins.str] encryption_key_arn: ARN of the KMS key used to encrypt the memory. If not provided, AWS managed encryption is used.
-        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of minutes after which memory events expire. Must be a positive integer.
+        :param pulumi.Input[_builtins.int] event_expiry_duration: Number of days after which memory events expire. Must be a positive integer in the range of 7 to 365.
                
                The following arguments are optional:
         :param pulumi.Input[_builtins.str] memory_execution_role_arn: ARN of the IAM role that the memory service assumes to perform operations. Required when using custom memory strategies with model processing.
@@ -561,7 +589,7 @@ class AgentcoreMemory(pulumi.CustomResource):
     @pulumi.getter(name="eventExpiryDuration")
     def event_expiry_duration(self) -> pulumi.Output[_builtins.int]:
         """
-        Number of minutes after which memory events expire. Must be a positive integer.
+        Number of days after which memory events expire. Must be a positive integer in the range of 7 to 365.
 
         The following arguments are optional:
         """

pulumi_aws/bedrock/agentcore_oauth2_credential_provider.py

@@ -234,6 +234,25 @@ class AgentcoreOauth2CredentialProvider(pulumi.CustomResource):
 
         ### Custom OAuth Provider with Discovery URL
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        auth0 = aws.bedrock.AgentcoreOauth2CredentialProvider("auth0",
+            name="auth0-oauth-provider",
+            credential_provider_vendor="CustomOauth2",
+            custom_oauth2_provider_config=[{
+                "custom": [{
+                    "clientIdWo": "auth0-client-id",
+                    "clientSecretWo": "auth0-client-secret",
+                    "clientCredentialsWoVersion": 1,
+                    "oauthDiscovery": [{
+                        "discoveryUrl": "https://dev-company.auth0.com/.well-known/openid-configuration",
+                    }],
+                }],
+            }])
+        ```
+
         ### Custom OAuth Provider with Authorization Server Metadata
 
         ```python
@@ -308,6 +327,25 @@ class AgentcoreOauth2CredentialProvider(pulumi.CustomResource):
 
         ### Custom OAuth Provider with Discovery URL
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        auth0 = aws.bedrock.AgentcoreOauth2CredentialProvider("auth0",
+            name="auth0-oauth-provider",
+            credential_provider_vendor="CustomOauth2",
+            custom_oauth2_provider_config=[{
+                "custom": [{
+                    "clientIdWo": "auth0-client-id",
+                    "clientSecretWo": "auth0-client-secret",
+                    "clientCredentialsWoVersion": 1,
+                    "oauthDiscovery": [{
+                        "discoveryUrl": "https://dev-company.auth0.com/.well-known/openid-configuration",
+                    }],
+                }],
+            }])
+        ```
+
         ### Custom OAuth Provider with Authorization Server Metadata
 
         ```python

pulumi_aws/bedrock/outputs.py

@@ -192,7 +192,7 @@ __all__ = [
     'AgentcoreAgentRuntimeWorkloadIdentityDetail',
     'AgentcoreApiKeyCredentialProviderApiKeySecretArn',
     'AgentcoreBrowserNetworkConfiguration',
-    'AgentcoreBrowserNetworkConfigurationNetworkModeConfig',
+    'AgentcoreBrowserNetworkConfigurationVpcConfig',
     'AgentcoreBrowserRecording',
     'AgentcoreBrowserRecordingS3Location',
     'AgentcoreBrowserTimeouts',
@@ -231,6 +231,7 @@ __all__ = [
     'AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyItemsProperty',
     'AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaInlinePayloadOutputSchemaPropertyProperty',
     'AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaS3',
+    'AgentcoreGatewayTargetTargetConfigurationMcpMcpServer',
     'AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchema',
     'AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaInlinePayload',
     'AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaS3',
@@ -7774,8 +7775,8 @@ class AgentcoreBrowserNetworkConfiguration(dict):
         suggest = None
         if key == "networkMode":
             suggest = "network_mode"
-        elif key == "networkModeConfig":
-            suggest = "network_mode_config"
+        elif key == "vpcConfig":
+            suggest = "vpc_config"
 
         if suggest:
             pulumi.log.warn(f"Key '{key}' not found in AgentcoreBrowserNetworkConfiguration. Access the value via the '{suggest}' property getter instead.")
@@ -7790,30 +7791,34 @@ class AgentcoreBrowserNetworkConfiguration(dict):
 
     def __init__(__self__, *,
                  network_mode: _builtins.str,
-                 network_mode_config: Optional['outputs.AgentcoreBrowserNetworkConfigurationNetworkModeConfig'] = None):
+                 vpc_config: Optional['outputs.AgentcoreBrowserNetworkConfigurationVpcConfig'] = None):
         """
-        :param _builtins.str network_mode: Network mode for the browser. Valid values: `PUBLIC`, `SANDBOX`.
+        :param _builtins.str network_mode: Network mode for the browser. Valid values: `PUBLIC`, `VPC`.
+        :param 'AgentcoreBrowserNetworkConfigurationVpcConfigArgs' vpc_config: VPC configuration when `network_mode` is `VPC`. See `vpc_config` below.
         """
         pulumi.set(__self__, "network_mode", network_mode)
-        if network_mode_config is not None:
-            pulumi.set(__self__, "network_mode_config", network_mode_config)
+        if vpc_config is not None:
+            pulumi.set(__self__, "vpc_config", vpc_config)
 
     @_builtins.property
     @pulumi.getter(name="networkMode")
     def network_mode(self) -> _builtins.str:
         """
-        Network mode for the browser. Valid values: `PUBLIC`, `SANDBOX`.
+        Network mode for the browser. Valid values: `PUBLIC`, `VPC`.
         """
         return pulumi.get(self, "network_mode")
 
     @_builtins.property
-    @pulumi.getter(name="networkModeConfig")
-    def network_mode_config(self) -> Optional['outputs.AgentcoreBrowserNetworkConfigurationNetworkModeConfig']:
-        return pulumi.get(self, "network_mode_config")
+    @pulumi.getter(name="vpcConfig")
+    def vpc_config(self) -> Optional['outputs.AgentcoreBrowserNetworkConfigurationVpcConfig']:
+        """
+        VPC configuration when `network_mode` is `VPC`. See `vpc_config` below.
+        """
+        return pulumi.get(self, "vpc_config")
 
 
 @pulumi.output_type
-class AgentcoreBrowserNetworkConfigurationNetworkModeConfig(dict):
+class AgentcoreBrowserNetworkConfigurationVpcConfig(dict):
     @staticmethod
     def __key_warning(key: str):
         suggest = None
@@ -7821,30 +7826,40 @@ class AgentcoreBrowserNetworkConfigurationNetworkModeConfig(dict):
             suggest = "security_groups"
 
         if suggest:
-            pulumi.log.warn(f"Key '{key}' not found in AgentcoreBrowserNetworkConfigurationNetworkModeConfig. Access the value via the '{suggest}' property getter instead.")
+            pulumi.log.warn(f"Key '{key}' not found in AgentcoreBrowserNetworkConfigurationVpcConfig. Access the value via the '{suggest}' property getter instead.")
 
     def __getitem__(self, key: str) -> Any:
-        AgentcoreBrowserNetworkConfigurationNetworkModeConfig.__key_warning(key)
+        AgentcoreBrowserNetworkConfigurationVpcConfig.__key_warning(key)
         return super().__getitem__(key)
 
     def get(self, key: str, default = None) -> Any:
-        AgentcoreBrowserNetworkConfigurationNetworkModeConfig.__key_warning(key)
+        AgentcoreBrowserNetworkConfigurationVpcConfig.__key_warning(key)
         return super().get(key, default)
 
     def __init__(__self__, *,
                  security_groups: Sequence[_builtins.str],
                  subnets: Sequence[_builtins.str]):
+        """
+        :param Sequence[_builtins.str] security_groups: Set of security group IDs for the VPC configuration.
+        :param Sequence[_builtins.str] subnets: Set of subnet IDs for the VPC configuration.
+        """
         pulumi.set(__self__, "security_groups", security_groups)
         pulumi.set(__self__, "subnets", subnets)
 
     @_builtins.property
     @pulumi.getter(name="securityGroups")
     def security_groups(self) -> Sequence[_builtins.str]:
+        """
+        Set of security group IDs for the VPC configuration.
+        """
         return pulumi.get(self, "security_groups")
 
     @_builtins.property
     @pulumi.getter
     def subnets(self) -> Sequence[_builtins.str]:
+        """
+        Set of subnet IDs for the VPC configuration.
+        """
         return pulumi.get(self, "subnets")
 
 
@@ -8227,7 +8242,7 @@ class AgentcoreGatewayProtocolConfigurationMcp(dict):
                  supported_versions: Optional[Sequence[_builtins.str]] = None):
         """
         :param _builtins.str instructions: Instructions for the MCP protocol configuration.
-        :param _builtins.str search_type: Search type for MCP. Valid values: `SEMANTIC`, `HYBRID`.
+        :param _builtins.str search_type: Search type for MCP. Valid values: `SEMANTIC`.
         :param Sequence[_builtins.str] supported_versions: Set of supported MCP protocol versions.
         """
         if instructions is not None:
@@ -8249,7 +8264,7 @@ class AgentcoreGatewayProtocolConfigurationMcp(dict):
     @pulumi.getter(name="searchType")
     def search_type(self) -> Optional[_builtins.str]:
         """
-        Search type for MCP. Valid values: `SEMANTIC`, `HYBRID`.
+        Search type for MCP. Valid values: `SEMANTIC`.
         """
         return pulumi.get(self, "search_type")
 
@@ -8493,6 +8508,8 @@ class AgentcoreGatewayTargetTargetConfigurationMcp(dict):
         suggest = None
         if key == "lambda":
             suggest = "lambda_"
+        elif key == "mcpServer":
+            suggest = "mcp_server"
         elif key == "openApiSchema":
             suggest = "open_api_schema"
         elif key == "smithyModel":
@@ -8511,15 +8528,19 @@ class AgentcoreGatewayTargetTargetConfigurationMcp(dict):
 
     def __init__(__self__, *,
                  lambda_: Optional['outputs.AgentcoreGatewayTargetTargetConfigurationMcpLambda'] = None,
+                 mcp_server: Optional['outputs.AgentcoreGatewayTargetTargetConfigurationMcpMcpServer'] = None,
                  open_api_schema: Optional['outputs.AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchema'] = None,
                  smithy_model: Optional['outputs.AgentcoreGatewayTargetTargetConfigurationMcpSmithyModel'] = None):
         """
         :param 'AgentcoreGatewayTargetTargetConfigurationMcpLambdaArgs' lambda_: Lambda function target configuration. See `lambda` below.
+        :param 'AgentcoreGatewayTargetTargetConfigurationMcpMcpServerArgs' mcp_server: MCP server target configuration. See `mcp_server` below.
         :param 'AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchemaArgs' open_api_schema: OpenAPI schema-based target configuration. See `api_schema_configuration` below.
         :param 'AgentcoreGatewayTargetTargetConfigurationMcpSmithyModelArgs' smithy_model: Smithy model-based target configuration. See `api_schema_configuration` below.
         """
         if lambda_ is not None:
             pulumi.set(__self__, "lambda_", lambda_)
+        if mcp_server is not None:
+            pulumi.set(__self__, "mcp_server", mcp_server)
         if open_api_schema is not None:
             pulumi.set(__self__, "open_api_schema", open_api_schema)
         if smithy_model is not None:
@@ -8533,6 +8554,14 @@ class AgentcoreGatewayTargetTargetConfigurationMcp(dict):
         """
         return pulumi.get(self, "lambda_")
 
+    @_builtins.property
+    @pulumi.getter(name="mcpServer")
+    def mcp_server(self) -> Optional['outputs.AgentcoreGatewayTargetTargetConfigurationMcpMcpServer']:
+        """
+        MCP server target configuration. See `mcp_server` below.
+        """
+        return pulumi.get(self, "mcp_server")
+
     @_builtins.property
     @pulumi.getter(name="openApiSchema")
     def open_api_schema(self) -> Optional['outputs.AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchema']:
@@ -10089,6 +10118,24 @@ class AgentcoreGatewayTargetTargetConfigurationMcpLambdaToolSchemaS3(dict):
         return pulumi.get(self, "uri")
 
 
+@pulumi.output_type
+class AgentcoreGatewayTargetTargetConfigurationMcpMcpServer(dict):
+    def __init__(__self__, *,
+                 endpoint: _builtins.str):
+        """
+        :param _builtins.str endpoint: Endpoint for the MCP server target configuration.
+        """
+        pulumi.set(__self__, "endpoint", endpoint)
+
+    @_builtins.property
+    @pulumi.getter
+    def endpoint(self) -> _builtins.str:
+        """
+        Endpoint for the MCP server target configuration.
+        """
+        return pulumi.get(self, "endpoint")
+
+
 @pulumi.output_type
 class AgentcoreGatewayTargetTargetConfigurationMcpOpenApiSchema(dict):
     @staticmethod