pulumi-aws 7.9.1__py3-none-any.whl → 7.10.0__py3-none-any.whl

pulumi_aws/bedrock/agent_agent.py

@@ -49,7 +49,7 @@ class AgentAgentArgs:
         :param pulumi.Input[_builtins.str] description: Description of the agent.
         :param pulumi.Input[Sequence[pulumi.Input['AgentAgentGuardrailConfigurationArgs']]] guardrail_configurations: Details about the guardrail associated with the agent. See `guardrail_configuration` Block for details.
         :param pulumi.Input[_builtins.int] idle_session_ttl_in_seconds: Number of seconds for which Amazon Bedrock keeps information about a user's conversation with the agent. A user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Bedrock deletes any data provided before the timeout.
-        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. The valid range is 40 - 20000 characters.
+        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. If `prepare_agent` is `true` this argument is required. The valid range is 40 - 20000 characters.
         :param pulumi.Input[Sequence[pulumi.Input['AgentAgentMemoryConfigurationArgs']]] memory_configurations: Configurations for the agent's ability to retain the conversational context.
         :param pulumi.Input[_builtins.bool] prepare_agent: Whether to prepare the agent after creation or modification. Defaults to `true`.
         :param pulumi.Input[Sequence[pulumi.Input['AgentAgentPromptOverrideConfigurationArgs']]] prompt_override_configurations: Configurations to override prompt templates in different parts of an agent sequence. For more information, see [Advanced prompts](https://docs.aws.amazon.com/bedrock/latest/userguide/advanced-prompts.html). See `prompt_override_configuration` Block for details.
@@ -189,7 +189,7 @@ class AgentAgentArgs:
     @pulumi.getter
     def instruction(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Instructions that tell the agent what it should do and how it should interact with users. The valid range is 40 - 20000 characters.
+        Instructions that tell the agent what it should do and how it should interact with users. If `prepare_agent` is `true` this argument is required. The valid range is 40 - 20000 characters.
         """
         return pulumi.get(self, "instruction")
 
@@ -318,7 +318,7 @@ class _AgentAgentState:
                The following arguments are optional:
         :param pulumi.Input[Sequence[pulumi.Input['AgentAgentGuardrailConfigurationArgs']]] guardrail_configurations: Details about the guardrail associated with the agent. See `guardrail_configuration` Block for details.
         :param pulumi.Input[_builtins.int] idle_session_ttl_in_seconds: Number of seconds for which Amazon Bedrock keeps information about a user's conversation with the agent. A user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Bedrock deletes any data provided before the timeout.
-        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. The valid range is 40 - 20000 characters.
+        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. If `prepare_agent` is `true` this argument is required. The valid range is 40 - 20000 characters.
         :param pulumi.Input[Sequence[pulumi.Input['AgentAgentMemoryConfigurationArgs']]] memory_configurations: Configurations for the agent's ability to retain the conversational context.
         :param pulumi.Input[_builtins.bool] prepare_agent: Whether to prepare the agent after creation or modification. Defaults to `true`.
         :param pulumi.Input[_builtins.str] prepared_at: Timestamp of when the agent was last prepared.
@@ -509,7 +509,7 @@ class _AgentAgentState:
     @pulumi.getter
     def instruction(self) -> Optional[pulumi.Input[_builtins.str]]:
         """
-        Instructions that tell the agent what it should do and how it should interact with users. The valid range is 40 - 20000 characters.
+        Instructions that tell the agent what it should do and how it should interact with users. If `prepare_agent` is `true` this argument is required. The valid range is 40 - 20000 characters.
         """
         return pulumi.get(self, "instruction")
 
@@ -693,6 +693,7 @@ class AgentAgent(pulumi.CustomResource):
             agent_name="my-agent-name",
             agent_resource_role_arn=example.arn,
             idle_session_ttl_in_seconds=500,
+            instruction="You are a friendly assistant who helps answer questions.",
             foundation_model="anthropic.claude-v2")
         ```
 
@@ -716,7 +717,7 @@ class AgentAgent(pulumi.CustomResource):
                The following arguments are optional:
         :param pulumi.Input[Sequence[pulumi.Input[Union['AgentAgentGuardrailConfigurationArgs', 'AgentAgentGuardrailConfigurationArgsDict']]]] guardrail_configurations: Details about the guardrail associated with the agent. See `guardrail_configuration` Block for details.
         :param pulumi.Input[_builtins.int] idle_session_ttl_in_seconds: Number of seconds for which Amazon Bedrock keeps information about a user's conversation with the agent. A user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Bedrock deletes any data provided before the timeout.
-        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. The valid range is 40 - 20000 characters.
+        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. If `prepare_agent` is `true` this argument is required. The valid range is 40 - 20000 characters.
         :param pulumi.Input[Sequence[pulumi.Input[Union['AgentAgentMemoryConfigurationArgs', 'AgentAgentMemoryConfigurationArgsDict']]]] memory_configurations: Configurations for the agent's ability to retain the conversational context.
         :param pulumi.Input[_builtins.bool] prepare_agent: Whether to prepare the agent after creation or modification. Defaults to `true`.
         :param pulumi.Input[Sequence[pulumi.Input[Union['AgentAgentPromptOverrideConfigurationArgs', 'AgentAgentPromptOverrideConfigurationArgsDict']]]] prompt_override_configurations: Configurations to override prompt templates in different parts of an agent sequence. For more information, see [Advanced prompts](https://docs.aws.amazon.com/bedrock/latest/userguide/advanced-prompts.html). See `prompt_override_configuration` Block for details.
@@ -777,6 +778,7 @@ class AgentAgent(pulumi.CustomResource):
             agent_name="my-agent-name",
             agent_resource_role_arn=example.arn,
             idle_session_ttl_in_seconds=500,
+            instruction="You are a friendly assistant who helps answer questions.",
             foundation_model="anthropic.claude-v2")
         ```
 
@@ -906,7 +908,7 @@ class AgentAgent(pulumi.CustomResource):
                The following arguments are optional:
         :param pulumi.Input[Sequence[pulumi.Input[Union['AgentAgentGuardrailConfigurationArgs', 'AgentAgentGuardrailConfigurationArgsDict']]]] guardrail_configurations: Details about the guardrail associated with the agent. See `guardrail_configuration` Block for details.
         :param pulumi.Input[_builtins.int] idle_session_ttl_in_seconds: Number of seconds for which Amazon Bedrock keeps information about a user's conversation with the agent. A user interaction remains active for the amount of time specified. If no conversation occurs during this time, the session expires and Amazon Bedrock deletes any data provided before the timeout.
-        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. The valid range is 40 - 20000 characters.
+        :param pulumi.Input[_builtins.str] instruction: Instructions that tell the agent what it should do and how it should interact with users. If `prepare_agent` is `true` this argument is required. The valid range is 40 - 20000 characters.
         :param pulumi.Input[Sequence[pulumi.Input[Union['AgentAgentMemoryConfigurationArgs', 'AgentAgentMemoryConfigurationArgsDict']]]] memory_configurations: Configurations for the agent's ability to retain the conversational context.
         :param pulumi.Input[_builtins.bool] prepare_agent: Whether to prepare the agent after creation or modification. Defaults to `true`.
         :param pulumi.Input[_builtins.str] prepared_at: Timestamp of when the agent was last prepared.
@@ -1037,7 +1039,7 @@ class AgentAgent(pulumi.CustomResource):
     @pulumi.getter
     def instruction(self) -> pulumi.Output[_builtins.str]:
         """
-        Instructions that tell the agent what it should do and how it should interact with users. The valid range is 40 - 20000 characters.
+        Instructions that tell the agent what it should do and how it should interact with users. If `prepare_agent` is `true` this argument is required. The valid range is 40 - 20000 characters.
         """
         return pulumi.get(self, "instruction")
 

pulumi_aws/bedrock/agentcore_api_key_credential_provider.py

@@ -22,6 +22,8 @@ __all__ = ['AgentcoreApiKeyCredentialProviderArgs', 'AgentcoreApiKeyCredentialPr
 class AgentcoreApiKeyCredentialProviderArgs:
     def __init__(__self__, *,
                  api_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 api_key_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 api_key_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None):
         """
@@ -29,6 +31,9 @@ class AgentcoreApiKeyCredentialProviderArgs:
         :param pulumi.Input[_builtins.str] api_key: API key value. Cannot be used with `api_key_wo`. This value will be visible in pulumi preview outputs and logs.
                
                **Write-Only API Key (choose one approach):**
+        :param pulumi.Input[_builtins.str] api_key_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Write-only API key value. Cannot be used with `api_key`. Must be used together with `api_key_wo_version`.
+        :param pulumi.Input[_builtins.int] api_key_wo_version: Used together with `api_key_wo` to trigger an update. Increment this value when an update to `api_key_wo` is required.
         :param pulumi.Input[_builtins.str] name: Name of the API Key credential provider. Forces replacement when changed.
                
                The following arguments are optional:
@@ -38,6 +43,10 @@ class AgentcoreApiKeyCredentialProviderArgs:
         """
         if api_key is not None:
             pulumi.set(__self__, "api_key", api_key)
+        if api_key_wo is not None:
+            pulumi.set(__self__, "api_key_wo", api_key_wo)
+        if api_key_wo_version is not None:
+            pulumi.set(__self__, "api_key_wo_version", api_key_wo_version)
         if name is not None:
             pulumi.set(__self__, "name", name)
         if region is not None:
@@ -57,6 +66,31 @@ class AgentcoreApiKeyCredentialProviderArgs:
     def api_key(self, value: Optional[pulumi.Input[_builtins.str]]):
         pulumi.set(self, "api_key", value)
 
+    @_builtins.property
+    @pulumi.getter(name="apiKeyWo")
+    def api_key_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Write-only API key value. Cannot be used with `api_key`. Must be used together with `api_key_wo_version`.
+        """
+        return pulumi.get(self, "api_key_wo")
+
+    @api_key_wo.setter
+    def api_key_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "api_key_wo", value)
+
+    @_builtins.property
+    @pulumi.getter(name="apiKeyWoVersion")
+    def api_key_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        Used together with `api_key_wo` to trigger an update. Increment this value when an update to `api_key_wo` is required.
+        """
+        return pulumi.get(self, "api_key_wo_version")
+
+    @api_key_wo_version.setter
+    def api_key_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "api_key_wo_version", value)
+
     @_builtins.property
     @pulumi.getter
     def name(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -91,6 +125,8 @@ class _AgentcoreApiKeyCredentialProviderState:
     def __init__(__self__, *,
                  api_key: Optional[pulumi.Input[_builtins.str]] = None,
                  api_key_secret_arns: Optional[pulumi.Input[Sequence[pulumi.Input['AgentcoreApiKeyCredentialProviderApiKeySecretArnArgs']]]] = None,
+                 api_key_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 api_key_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  credential_provider_arn: Optional[pulumi.Input[_builtins.str]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None):
@@ -100,6 +136,9 @@ class _AgentcoreApiKeyCredentialProviderState:
                
                **Write-Only API Key (choose one approach):**
         :param pulumi.Input[Sequence[pulumi.Input['AgentcoreApiKeyCredentialProviderApiKeySecretArnArgs']]] api_key_secret_arns: ARN of the AWS Secrets Manager secret containing the API key.
+        :param pulumi.Input[_builtins.str] api_key_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Write-only API key value. Cannot be used with `api_key`. Must be used together with `api_key_wo_version`.
+        :param pulumi.Input[_builtins.int] api_key_wo_version: Used together with `api_key_wo` to trigger an update. Increment this value when an update to `api_key_wo` is required.
         :param pulumi.Input[_builtins.str] credential_provider_arn: ARN of the API Key credential provider.
         :param pulumi.Input[_builtins.str] name: Name of the API Key credential provider. Forces replacement when changed.
                
@@ -112,6 +151,10 @@ class _AgentcoreApiKeyCredentialProviderState:
             pulumi.set(__self__, "api_key", api_key)
         if api_key_secret_arns is not None:
             pulumi.set(__self__, "api_key_secret_arns", api_key_secret_arns)
+        if api_key_wo is not None:
+            pulumi.set(__self__, "api_key_wo", api_key_wo)
+        if api_key_wo_version is not None:
+            pulumi.set(__self__, "api_key_wo_version", api_key_wo_version)
         if credential_provider_arn is not None:
             pulumi.set(__self__, "credential_provider_arn", credential_provider_arn)
         if name is not None:
@@ -145,6 +188,31 @@ class _AgentcoreApiKeyCredentialProviderState:
     def api_key_secret_arns(self, value: Optional[pulumi.Input[Sequence[pulumi.Input['AgentcoreApiKeyCredentialProviderApiKeySecretArnArgs']]]]):
         pulumi.set(self, "api_key_secret_arns", value)
 
+    @_builtins.property
+    @pulumi.getter(name="apiKeyWo")
+    def api_key_wo(self) -> Optional[pulumi.Input[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Write-only API key value. Cannot be used with `api_key`. Must be used together with `api_key_wo_version`.
+        """
+        return pulumi.get(self, "api_key_wo")
+
+    @api_key_wo.setter
+    def api_key_wo(self, value: Optional[pulumi.Input[_builtins.str]]):
+        pulumi.set(self, "api_key_wo", value)
+
+    @_builtins.property
+    @pulumi.getter(name="apiKeyWoVersion")
+    def api_key_wo_version(self) -> Optional[pulumi.Input[_builtins.int]]:
+        """
+        Used together with `api_key_wo` to trigger an update. Increment this value when an update to `api_key_wo` is required.
+        """
+        return pulumi.get(self, "api_key_wo_version")
+
+    @api_key_wo_version.setter
+    def api_key_wo_version(self, value: Optional[pulumi.Input[_builtins.int]]):
+        pulumi.set(self, "api_key_wo_version", value)
+
     @_builtins.property
     @pulumi.getter(name="credentialProviderArn")
     def credential_provider_arn(self) -> Optional[pulumi.Input[_builtins.str]]:
@@ -193,6 +261,8 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  api_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 api_key_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 api_key_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -212,6 +282,16 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
 
         ### Write-Only API Key (Recommended for Production)
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        example = aws.bedrock.AgentcoreApiKeyCredentialProvider("example",
+            name="example-api-key-provider",
+            api_key_wo="your-api-key-here",
+            api_key_wo_version=1)
+        ```
+
         ## Import
 
         Using `pulumi import`, import Bedrock AgentCore API Key Credential Provider using the provider name. For example:
@@ -225,6 +305,9 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
         :param pulumi.Input[_builtins.str] api_key: API key value. Cannot be used with `api_key_wo`. This value will be visible in pulumi preview outputs and logs.
                
                **Write-Only API Key (choose one approach):**
+        :param pulumi.Input[_builtins.str] api_key_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Write-only API key value. Cannot be used with `api_key`. Must be used together with `api_key_wo_version`.
+        :param pulumi.Input[_builtins.int] api_key_wo_version: Used together with `api_key_wo` to trigger an update. Increment this value when an update to `api_key_wo` is required.
         :param pulumi.Input[_builtins.str] name: Name of the API Key credential provider. Forces replacement when changed.
                
                The following arguments are optional:
@@ -254,6 +337,16 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
 
         ### Write-Only API Key (Recommended for Production)
 
+        ```python
+        import pulumi
+        import pulumi_aws as aws
+
+        example = aws.bedrock.AgentcoreApiKeyCredentialProvider("example",
+            name="example-api-key-provider",
+            api_key_wo="your-api-key-here",
+            api_key_wo_version=1)
+        ```
+
         ## Import
 
         Using `pulumi import`, import Bedrock AgentCore API Key Credential Provider using the provider name. For example:
@@ -278,6 +371,8 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
                  resource_name: str,
                  opts: Optional[pulumi.ResourceOptions] = None,
                  api_key: Optional[pulumi.Input[_builtins.str]] = None,
+                 api_key_wo: Optional[pulumi.Input[_builtins.str]] = None,
+                 api_key_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
                  name: Optional[pulumi.Input[_builtins.str]] = None,
                  region: Optional[pulumi.Input[_builtins.str]] = None,
                  __props__=None):
@@ -290,11 +385,13 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
             __props__ = AgentcoreApiKeyCredentialProviderArgs.__new__(AgentcoreApiKeyCredentialProviderArgs)
 
             __props__.__dict__["api_key"] = None if api_key is None else pulumi.Output.secret(api_key)
+            __props__.__dict__["api_key_wo"] = None if api_key_wo is None else pulumi.Output.secret(api_key_wo)
+            __props__.__dict__["api_key_wo_version"] = api_key_wo_version
             __props__.__dict__["name"] = name
             __props__.__dict__["region"] = region
             __props__.__dict__["api_key_secret_arns"] = None
             __props__.__dict__["credential_provider_arn"] = None
-        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["apiKey"])
+        secret_opts = pulumi.ResourceOptions(additional_secret_outputs=["apiKey", "apiKeyWo"])
         opts = pulumi.ResourceOptions.merge(opts, secret_opts)
         super(AgentcoreApiKeyCredentialProvider, __self__).__init__(
             'aws:bedrock/agentcoreApiKeyCredentialProvider:AgentcoreApiKeyCredentialProvider',
@@ -308,6 +405,8 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
             opts: Optional[pulumi.ResourceOptions] = None,
             api_key: Optional[pulumi.Input[_builtins.str]] = None,
             api_key_secret_arns: Optional[pulumi.Input[Sequence[pulumi.Input[Union['AgentcoreApiKeyCredentialProviderApiKeySecretArnArgs', 'AgentcoreApiKeyCredentialProviderApiKeySecretArnArgsDict']]]]] = None,
+            api_key_wo: Optional[pulumi.Input[_builtins.str]] = None,
+            api_key_wo_version: Optional[pulumi.Input[_builtins.int]] = None,
             credential_provider_arn: Optional[pulumi.Input[_builtins.str]] = None,
             name: Optional[pulumi.Input[_builtins.str]] = None,
             region: Optional[pulumi.Input[_builtins.str]] = None) -> 'AgentcoreApiKeyCredentialProvider':
@@ -322,6 +421,9 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
                
                **Write-Only API Key (choose one approach):**
         :param pulumi.Input[Sequence[pulumi.Input[Union['AgentcoreApiKeyCredentialProviderApiKeySecretArnArgs', 'AgentcoreApiKeyCredentialProviderApiKeySecretArnArgsDict']]]] api_key_secret_arns: ARN of the AWS Secrets Manager secret containing the API key.
+        :param pulumi.Input[_builtins.str] api_key_wo: **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+               Write-only API key value. Cannot be used with `api_key`. Must be used together with `api_key_wo_version`.
+        :param pulumi.Input[_builtins.int] api_key_wo_version: Used together with `api_key_wo` to trigger an update. Increment this value when an update to `api_key_wo` is required.
         :param pulumi.Input[_builtins.str] credential_provider_arn: ARN of the API Key credential provider.
         :param pulumi.Input[_builtins.str] name: Name of the API Key credential provider. Forces replacement when changed.
                
@@ -336,6 +438,8 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
 
         __props__.__dict__["api_key"] = api_key
         __props__.__dict__["api_key_secret_arns"] = api_key_secret_arns
+        __props__.__dict__["api_key_wo"] = api_key_wo
+        __props__.__dict__["api_key_wo_version"] = api_key_wo_version
         __props__.__dict__["credential_provider_arn"] = credential_provider_arn
         __props__.__dict__["name"] = name
         __props__.__dict__["region"] = region
@@ -359,6 +463,23 @@ class AgentcoreApiKeyCredentialProvider(pulumi.CustomResource):
         """
         return pulumi.get(self, "api_key_secret_arns")
 
+    @_builtins.property
+    @pulumi.getter(name="apiKeyWo")
+    def api_key_wo(self) -> pulumi.Output[Optional[_builtins.str]]:
+        """
+        **NOTE:** This field is write-only and its value will not be updated in state as part of read operations.
+        Write-only API key value. Cannot be used with `api_key`. Must be used together with `api_key_wo_version`.
+        """
+        return pulumi.get(self, "api_key_wo")
+
+    @_builtins.property
+    @pulumi.getter(name="apiKeyWoVersion")
+    def api_key_wo_version(self) -> pulumi.Output[Optional[_builtins.int]]:
+        """
+        Used together with `api_key_wo` to trigger an update. Increment this value when an update to `api_key_wo` is required.
+        """
+        return pulumi.get(self, "api_key_wo_version")
+
     @_builtins.property
     @pulumi.getter(name="credentialProviderArn")
     def credential_provider_arn(self) -> pulumi.Output[_builtins.str]: