pulumi-aws 7.9.1__py3-none-any.whl → 7.10.0__py3-none-any.whl

pulumi_aws/__init__.py

@@ -2150,6 +2150,46 @@ _utilities.register(
    "aws:bedrock/agentcoreGatewayTarget:AgentcoreGatewayTarget": "AgentcoreGatewayTarget"
   }
  },
+ {
+  "pkg": "aws",
+  "mod": "bedrock/agentcoreMemory",
+  "fqn": "pulumi_aws.bedrock",
+  "classes": {
+   "aws:bedrock/agentcoreMemory:AgentcoreMemory": "AgentcoreMemory"
+  }
+ },
+ {
+  "pkg": "aws",
+  "mod": "bedrock/agentcoreMemoryStrategy",
+  "fqn": "pulumi_aws.bedrock",
+  "classes": {
+   "aws:bedrock/agentcoreMemoryStrategy:AgentcoreMemoryStrategy": "AgentcoreMemoryStrategy"
+  }
+ },
+ {
+  "pkg": "aws",
+  "mod": "bedrock/agentcoreOauth2CredentialProvider",
+  "fqn": "pulumi_aws.bedrock",
+  "classes": {
+   "aws:bedrock/agentcoreOauth2CredentialProvider:AgentcoreOauth2CredentialProvider": "AgentcoreOauth2CredentialProvider"
+  }
+ },
+ {
+  "pkg": "aws",
+  "mod": "bedrock/agentcoreTokenVaultCmk",
+  "fqn": "pulumi_aws.bedrock",
+  "classes": {
+   "aws:bedrock/agentcoreTokenVaultCmk:AgentcoreTokenVaultCmk": "AgentcoreTokenVaultCmk"
+  }
+ },
+ {
+  "pkg": "aws",
+  "mod": "bedrock/agentcoreWorkloadIdentity",
+  "fqn": "pulumi_aws.bedrock",
+  "classes": {
+   "aws:bedrock/agentcoreWorkloadIdentity:AgentcoreWorkloadIdentity": "AgentcoreWorkloadIdentity"
+  }
+ },
  {
   "pkg": "aws",
   "mod": "bedrock/customModel",

pulumi_aws/_inputs.py

@@ -1196,6 +1196,10 @@ if not MYPY:
         """
         Use this to override the default service endpoint URL
         """
+        networkflowmonitor: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Use this to override the default service endpoint URL
+        """
         networkmanager: NotRequired[pulumi.Input[_builtins.str]]
         """
         Use this to override the default service endpoint URL
@@ -1216,6 +1220,10 @@ if not MYPY:
         """
         Use this to override the default service endpoint URL
         """
+        observabilityadmin: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        Use this to override the default service endpoint URL
+        """
         odb: NotRequired[pulumi.Input[_builtins.str]]
         """
         Use this to override the default service endpoint URL
@@ -1813,11 +1821,13 @@ class ProviderEndpointArgs:
                  neptune: Optional[pulumi.Input[_builtins.str]] = None,
                  neptunegraph: Optional[pulumi.Input[_builtins.str]] = None,
                  networkfirewall: Optional[pulumi.Input[_builtins.str]] = None,
+                 networkflowmonitor: Optional[pulumi.Input[_builtins.str]] = None,
                  networkmanager: Optional[pulumi.Input[_builtins.str]] = None,
                  networkmonitor: Optional[pulumi.Input[_builtins.str]] = None,
                  notifications: Optional[pulumi.Input[_builtins.str]] = None,
                  notificationscontacts: Optional[pulumi.Input[_builtins.str]] = None,
                  oam: Optional[pulumi.Input[_builtins.str]] = None,
+                 observabilityadmin: Optional[pulumi.Input[_builtins.str]] = None,
                  odb: Optional[pulumi.Input[_builtins.str]] = None,
                  opensearch: Optional[pulumi.Input[_builtins.str]] = None,
                  opensearchingestion: Optional[pulumi.Input[_builtins.str]] = None,
@@ -2116,11 +2126,13 @@ class ProviderEndpointArgs:
         :param pulumi.Input[_builtins.str] neptune: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] neptunegraph: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] networkfirewall: Use this to override the default service endpoint URL
+        :param pulumi.Input[_builtins.str] networkflowmonitor: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] networkmanager: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] networkmonitor: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] notifications: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] notificationscontacts: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] oam: Use this to override the default service endpoint URL
+        :param pulumi.Input[_builtins.str] observabilityadmin: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] odb: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] opensearch: Use this to override the default service endpoint URL
         :param pulumi.Input[_builtins.str] opensearchingestion: Use this to override the default service endpoint URL
@@ -2618,6 +2630,8 @@ class ProviderEndpointArgs:
             pulumi.set(__self__, "neptunegraph", neptunegraph)
         if networkfirewall is not None:
             pulumi.set(__self__, "networkfirewall", networkfirewall)
+        if networkflowmonitor is not None:
+            pulumi.set(__self__, "networkflowmonitor", networkflowmonitor)
         if networkmanager is not None:
             pulumi.set(__self__, "networkmanager", networkmanager)
         if networkmonitor is not None:
@@ -2628,6 +2642,8 @@ class ProviderEndpointArgs:
             pulumi.set(__self__, "notificationscontacts", notificationscontacts)
         if oam is not None:
             pulumi.set(__self__, "oam", oam)
+        if observabilityadmin is not None:
+            pulumi.set(__self__, "observabilityadmin", observabilityadmin)
         if odb is not None:
             pulumi.set(__self__, "odb", odb)
         if opensearch is not None:
@@ -5213,6 +5229,18 @@ class ProviderEndpointArgs:
     def networkfirewall(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "networkfirewall", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def networkflowmonitor(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Use this to override the default service endpoint URL
+        """
+        return pulumi.get(self, "networkflowmonitor")
+
+    @networkflowmonitor.setter
+    def networkflowmonitor(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "networkflowmonitor", value)
+
     @_builtins.property
     @pulumi.getter
     def networkmanager(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -5273,6 +5301,18 @@ class ProviderEndpointArgs:
     def oam(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "oam", value)
 
+    @_builtins.property
+    @pulumi.getter
+    def observabilityadmin(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        Use this to override the default service endpoint URL
+        """
+        return pulumi.get(self, "observabilityadmin")
+
+    @observabilityadmin.setter
+    def observabilityadmin(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "observabilityadmin", value)
+
     @_builtins.property
     @pulumi.getter
     def odb(self) -> Optional[pulumi.Input[_builtins.str]]:

pulumi_aws/appstream/_inputs.py

@@ -15,6 +15,8 @@ else:
 from .. import _utilities
 
 __all__ = [
+    'DirectoryConfigCertificateBasedAuthPropertiesArgs',
+    'DirectoryConfigCertificateBasedAuthPropertiesArgsDict',
     'DirectoryConfigServiceAccountCredentialsArgs',
     'DirectoryConfigServiceAccountCredentialsArgsDict',
     'FleetComputeCapacityArgs',
@@ -43,6 +45,58 @@ __all__ = [
 
 MYPY = False
 
+if not MYPY:
+    class DirectoryConfigCertificateBasedAuthPropertiesArgsDict(TypedDict):
+        certificate_authority_arn: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The ARN of the AWS Certificate Manager Private CA resource.
+        """
+        status: NotRequired[pulumi.Input[_builtins.str]]
+        """
+        The status of the certificate-based authentication properties. Valid values - ["DISABLED", "ENABLED", "ENABLED_NO_DIRECTORY_LOGIN_FALLBACK"].
+        """
+elif False:
+    DirectoryConfigCertificateBasedAuthPropertiesArgsDict: TypeAlias = Mapping[str, Any]
+
+@pulumi.input_type
+class DirectoryConfigCertificateBasedAuthPropertiesArgs:
+    def __init__(__self__, *,
+                 certificate_authority_arn: Optional[pulumi.Input[_builtins.str]] = None,
+                 status: Optional[pulumi.Input[_builtins.str]] = None):
+        """
+        :param pulumi.Input[_builtins.str] certificate_authority_arn: The ARN of the AWS Certificate Manager Private CA resource.
+        :param pulumi.Input[_builtins.str] status: The status of the certificate-based authentication properties. Valid values - ["DISABLED", "ENABLED", "ENABLED_NO_DIRECTORY_LOGIN_FALLBACK"].
+        """
+        if certificate_authority_arn is not None:
+            pulumi.set(__self__, "certificate_authority_arn", certificate_authority_arn)
+        if status is not None:
+            pulumi.set(__self__, "status", status)
+
+    @_builtins.property
+    @pulumi.getter(name="certificateAuthorityArn")
+    def certificate_authority_arn(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The ARN of the AWS Certificate Manager Private CA resource.
+        """
+        return pulumi.get(self, "certificate_authority_arn")
+
+    @certificate_authority_arn.setter
+    def certificate_authority_arn(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "certificate_authority_arn", value)
+
+    @_builtins.property
+    @pulumi.getter
+    def status(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        The status of the certificate-based authentication properties. Valid values - ["DISABLED", "ENABLED", "ENABLED_NO_DIRECTORY_LOGIN_FALLBACK"].
+        """
+        return pulumi.get(self, "status")
+
+    @status.setter
+    def status(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "status", value)
+
+
 if not MYPY:
     class DirectoryConfigServiceAccountCredentialsArgsDict(TypedDict):
         account_name: pulumi.Input[_builtins.str]

pulumi_aws/appstream/directory_config.py

@@ -24,17 +24,21 @@ class DirectoryConfigArgs:
                  directory_name: pulumi.Input[_builtins.str],
                  organizational_unit_distinguished_names: pulumi.Input[Sequence[pulumi.Input[_builtins.str]]],
                  service_account_credentials: pulumi.Input['DirectoryConfigServiceAccountCredentialsArgs'],
+                 certificate_based_auth_properties: Optional[pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs']] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None):
         """
         The set of arguments for constructing a DirectoryConfig resource.
         :param pulumi.Input[_builtins.str] directory_name: Fully qualified name of the directory.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] organizational_unit_distinguished_names: Distinguished names of the organizational units for computer accounts.
         :param pulumi.Input['DirectoryConfigServiceAccountCredentialsArgs'] service_account_credentials: Configuration block for the name of the directory and organizational unit (OU) to use to join the directory config to a Microsoft Active Directory domain. See `service_account_credentials` below.
+        :param pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs'] certificate_based_auth_properties: Configuration block for the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. See `certificate_based_auth_properties` below.
         :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
         """
         pulumi.set(__self__, "directory_name", directory_name)
         pulumi.set(__self__, "organizational_unit_distinguished_names", organizational_unit_distinguished_names)
         pulumi.set(__self__, "service_account_credentials", service_account_credentials)
+        if certificate_based_auth_properties is not None:
+            pulumi.set(__self__, "certificate_based_auth_properties", certificate_based_auth_properties)
         if region is not None:
             pulumi.set(__self__, "region", region)
 
@@ -74,6 +78,18 @@ class DirectoryConfigArgs:
     def service_account_credentials(self, value: pulumi.Input['DirectoryConfigServiceAccountCredentialsArgs']):
         pulumi.set(self, "service_account_credentials", value)
 
+    @_builtins.property
+    @pulumi.getter(name="certificateBasedAuthProperties")
+    def certificate_based_auth_properties(self) -> Optional[pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs']]:
+        """
+        Configuration block for the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. See `certificate_based_auth_properties` below.
+        """
+        return pulumi.get(self, "certificate_based_auth_properties")
+
+    @certificate_based_auth_properties.setter
+    def certificate_based_auth_properties(self, value: Optional[pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs']]):
+        pulumi.set(self, "certificate_based_auth_properties", value)
+
     @_builtins.property
     @pulumi.getter
     def region(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -90,6 +106,7 @@ class DirectoryConfigArgs:
 @pulumi.input_type
 class _DirectoryConfigState:
     def __init__(__self__, *,
+                 certificate_based_auth_properties: Optional[pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs']] = None,
                  created_time: Optional[pulumi.Input[_builtins.str]] = None,
                  directory_name: Optional[pulumi.Input[_builtins.str]] = None,
                  organizational_unit_distinguished_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
@@ -97,12 +114,15 @@ class _DirectoryConfigState:
                  service_account_credentials: Optional[pulumi.Input['DirectoryConfigServiceAccountCredentialsArgs']] = None):
         """
         Input properties used for looking up and filtering DirectoryConfig resources.
+        :param pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs'] certificate_based_auth_properties: Configuration block for the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. See `certificate_based_auth_properties` below.
         :param pulumi.Input[_builtins.str] created_time: Date and time, in UTC and extended RFC 3339 format, when the directory config was created.
         :param pulumi.Input[_builtins.str] directory_name: Fully qualified name of the directory.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] organizational_unit_distinguished_names: Distinguished names of the organizational units for computer accounts.
         :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
         :param pulumi.Input['DirectoryConfigServiceAccountCredentialsArgs'] service_account_credentials: Configuration block for the name of the directory and organizational unit (OU) to use to join the directory config to a Microsoft Active Directory domain. See `service_account_credentials` below.
         """
+        if certificate_based_auth_properties is not None:
+            pulumi.set(__self__, "certificate_based_auth_properties", certificate_based_auth_properties)
         if created_time is not None:
             pulumi.set(__self__, "created_time", created_time)
         if directory_name is not None:
@@ -114,6 +134,18 @@ class _DirectoryConfigState:
         if service_account_credentials is not None:
             pulumi.set(__self__, "service_account_credentials", service_account_credentials)
 
+    @_builtins.property
+    @pulumi.getter(name="certificateBasedAuthProperties")
+    def certificate_based_auth_properties(self) -> Optional[pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs']]:
+        """
+        Configuration block for the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. See `certificate_based_auth_properties` below.
+        """
+        return pulumi.get(self, "certificate_based_auth_properties")
+
+    @certificate_based_auth_properties.setter
+    def certificate_based_auth_properties(self, value: Optional[pulumi.Input['DirectoryConfigCertificateBasedAuthPropertiesArgs']]):
+        pulumi.set(self, "certificate_based_auth_properties", value)
+
     @_builtins.property
     @pulumi.getter(name="createdTime")
     def created_time(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -181,6 +213,7 @@ class DirectoryConfig(pulumi.CustomResource):
     def __init__(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 certificate_based_auth_properties: Optional[pulumi.Input[Union['DirectoryConfigCertificateBasedAuthPropertiesArgs', 'DirectoryConfigCertificateBasedAuthPropertiesArgsDict']]] = None,
                  directory_name: Optional[pulumi.Input[_builtins.str]] = None,
                  organizational_unit_distinguished_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
@@ -201,6 +234,10 @@ class DirectoryConfig(pulumi.CustomResource):
             service_account_credentials={
                 "account_name": "NAME OF ACCOUNT",
                 "account_password": "PASSWORD OF ACCOUNT",
+            },
+            certificate_based_auth_properties={
+                "certificate_authority_arn": "ARN OF CERTIFICATE AUTHORITY",
+                "status": "STATUS OF CERTIFICATE BASED AUTHENTICATION",
             })
         ```
 
@@ -214,6 +251,7 @@ class DirectoryConfig(pulumi.CustomResource):
 
         :param str resource_name: The name of the resource.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['DirectoryConfigCertificateBasedAuthPropertiesArgs', 'DirectoryConfigCertificateBasedAuthPropertiesArgsDict']] certificate_based_auth_properties: Configuration block for the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. See `certificate_based_auth_properties` below.
         :param pulumi.Input[_builtins.str] directory_name: Fully qualified name of the directory.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] organizational_unit_distinguished_names: Distinguished names of the organizational units for computer accounts.
         :param pulumi.Input[_builtins.str] region: Region where this resource will be [managed](https://docs.aws.amazon.com/general/latest/gr/rande.html#regional-endpoints). Defaults to the Region set in the provider configuration.
@@ -240,6 +278,10 @@ class DirectoryConfig(pulumi.CustomResource):
             service_account_credentials={
                 "account_name": "NAME OF ACCOUNT",
                 "account_password": "PASSWORD OF ACCOUNT",
+            },
+            certificate_based_auth_properties={
+                "certificate_authority_arn": "ARN OF CERTIFICATE AUTHORITY",
+                "status": "STATUS OF CERTIFICATE BASED AUTHENTICATION",
             })
         ```
 
@@ -266,6 +308,7 @@ class DirectoryConfig(pulumi.CustomResource):
     def _internal_init(__self__,
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
+                 certificate_based_auth_properties: Optional[pulumi.Input[Union['DirectoryConfigCertificateBasedAuthPropertiesArgs', 'DirectoryConfigCertificateBasedAuthPropertiesArgsDict']]] = None,
                  directory_name: Optional[pulumi.Input[_builtins.str]] = None,
                  organizational_unit_distinguished_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
@@ -279,6 +322,7 @@ class DirectoryConfig(pulumi.CustomResource):
                 raise TypeError('__props__ is only valid when passed in combination with a valid opts.id to get an existing resource')
             __props__ = DirectoryConfigArgs.__new__(DirectoryConfigArgs)
 
+            __props__.__dict__["certificate_based_auth_properties"] = certificate_based_auth_properties
             if directory_name is None and not opts.urn:
                 raise TypeError("Missing required property 'directory_name'")
             __props__.__dict__["directory_name"] = directory_name
@@ -300,6 +344,7 @@ class DirectoryConfig(pulumi.CustomResource):
     def get(resource_name: str,
             id: pulumi.Input[str],
             opts: Optional[pulumi.ResourceOptions] = None,
+            certificate_based_auth_properties: Optional[pulumi.Input[Union['DirectoryConfigCertificateBasedAuthPropertiesArgs', 'DirectoryConfigCertificateBasedAuthPropertiesArgsDict']]] = None,
             created_time: Optional[pulumi.Input[_builtins.str]] = None,
             directory_name: Optional[pulumi.Input[_builtins.str]] = None,
             organizational_unit_distinguished_names: Optional[pulumi.Input[Sequence[pulumi.Input[_builtins.str]]]] = None,
@@ -312,6 +357,7 @@ class DirectoryConfig(pulumi.CustomResource):
         :param str resource_name: The unique name of the resulting resource.
         :param pulumi.Input[str] id: The unique provider ID of the resource to lookup.
         :param pulumi.ResourceOptions opts: Options for the resource.
+        :param pulumi.Input[Union['DirectoryConfigCertificateBasedAuthPropertiesArgs', 'DirectoryConfigCertificateBasedAuthPropertiesArgsDict']] certificate_based_auth_properties: Configuration block for the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. See `certificate_based_auth_properties` below.
         :param pulumi.Input[_builtins.str] created_time: Date and time, in UTC and extended RFC 3339 format, when the directory config was created.
         :param pulumi.Input[_builtins.str] directory_name: Fully qualified name of the directory.
         :param pulumi.Input[Sequence[pulumi.Input[_builtins.str]]] organizational_unit_distinguished_names: Distinguished names of the organizational units for computer accounts.
@@ -322,6 +368,7 @@ class DirectoryConfig(pulumi.CustomResource):
 
         __props__ = _DirectoryConfigState.__new__(_DirectoryConfigState)
 
+        __props__.__dict__["certificate_based_auth_properties"] = certificate_based_auth_properties
         __props__.__dict__["created_time"] = created_time
         __props__.__dict__["directory_name"] = directory_name
         __props__.__dict__["organizational_unit_distinguished_names"] = organizational_unit_distinguished_names
@@ -329,6 +376,14 @@ class DirectoryConfig(pulumi.CustomResource):
         __props__.__dict__["service_account_credentials"] = service_account_credentials
         return DirectoryConfig(resource_name, opts=opts, __props__=__props__)
 
+    @_builtins.property
+    @pulumi.getter(name="certificateBasedAuthProperties")
+    def certificate_based_auth_properties(self) -> pulumi.Output[Optional['outputs.DirectoryConfigCertificateBasedAuthProperties']]:
+        """
+        Configuration block for the certificate-based authentication properties used to authenticate SAML 2.0 Identity Provider (IdP) user identities to Active Directory domain-joined streaming instances. See `certificate_based_auth_properties` below.
+        """
+        return pulumi.get(self, "certificate_based_auth_properties")
+
     @_builtins.property
     @pulumi.getter(name="createdTime")
     def created_time(self) -> pulumi.Output[_builtins.str]:

pulumi_aws/appstream/outputs.py

@@ -16,6 +16,7 @@ from .. import _utilities
 from . import outputs
 
 __all__ = [
+    'DirectoryConfigCertificateBasedAuthProperties',
     'DirectoryConfigServiceAccountCredentials',
     'FleetComputeCapacity',
     'FleetDomainJoinInfo',
@@ -34,6 +35,54 @@ __all__ = [
     'GetImageStateChangeReasonResult',
 ]
 
+@pulumi.output_type
+class DirectoryConfigCertificateBasedAuthProperties(dict):
+    @staticmethod
+    def __key_warning(key: str):
+        suggest = None
+        if key == "certificateAuthorityArn":
+            suggest = "certificate_authority_arn"
+
+        if suggest:
+            pulumi.log.warn(f"Key '{key}' not found in DirectoryConfigCertificateBasedAuthProperties. Access the value via the '{suggest}' property getter instead.")
+
+    def __getitem__(self, key: str) -> Any:
+        DirectoryConfigCertificateBasedAuthProperties.__key_warning(key)
+        return super().__getitem__(key)
+
+    def get(self, key: str, default = None) -> Any:
+        DirectoryConfigCertificateBasedAuthProperties.__key_warning(key)
+        return super().get(key, default)
+
+    def __init__(__self__, *,
+                 certificate_authority_arn: Optional[_builtins.str] = None,
+                 status: Optional[_builtins.str] = None):
+        """
+        :param _builtins.str certificate_authority_arn: The ARN of the AWS Certificate Manager Private CA resource.
+        :param _builtins.str status: The status of the certificate-based authentication properties. Valid values - ["DISABLED", "ENABLED", "ENABLED_NO_DIRECTORY_LOGIN_FALLBACK"].
+        """
+        if certificate_authority_arn is not None:
+            pulumi.set(__self__, "certificate_authority_arn", certificate_authority_arn)
+        if status is not None:
+            pulumi.set(__self__, "status", status)
+
+    @_builtins.property
+    @pulumi.getter(name="certificateAuthorityArn")
+    def certificate_authority_arn(self) -> Optional[_builtins.str]:
+        """
+        The ARN of the AWS Certificate Manager Private CA resource.
+        """
+        return pulumi.get(self, "certificate_authority_arn")
+
+    @_builtins.property
+    @pulumi.getter
+    def status(self) -> Optional[_builtins.str]:
+        """
+        The status of the certificate-based authentication properties. Valid values - ["DISABLED", "ENABLED", "ENABLED_NO_DIRECTORY_LOGIN_FALLBACK"].
+        """
+        return pulumi.get(self, "status")
+
+
 @pulumi.output_type
 class DirectoryConfigServiceAccountCredentials(dict):
     @staticmethod

pulumi_aws/bedrock/__init__.py

@@ -22,6 +22,11 @@ from .agentcore_browser import *
 from .agentcore_code_interpreter import *
 from .agentcore_gateway import *
 from .agentcore_gateway_target import *
+from .agentcore_memory import *
+from .agentcore_memory_strategy import *
+from .agentcore_oauth2_credential_provider import *
+from .agentcore_token_vault_cmk import *
+from .agentcore_workload_identity import *
 from .custom_model import *
 from .get_agent_agent_versions import *
 from .get_custom_model import *