Skip to main content

@swamp/aws/bedrockagentcore

v2026.04.04.1

AWS BEDROCKAGENTCORE infrastructure models

Labels

awsbedrockagentcorecloudinfrastructure

Contents

Install

$ swamp extension pull @swamp/aws/bedrockagentcore

Release Notes

  • Added: oauth2credential_provider

@swamp/aws/bedrockagentcore/api-key-credential-providerv2026.04.03.3api_key_credential_provider.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe name of the API key credential provider
ApiKey?stringThe API key to use for authentication
ApiKeySecretArn?objectThe ARN of the API key secret in AWS Secrets Manager
Tags?arrayTags to assign to the API key credential provider
createCreate a BedrockAgentCore ApiKeyCredentialProvider
getGet a BedrockAgentCore ApiKeyCredentialProvider
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore ApiKeyCredentialProvider
updateUpdate a BedrockAgentCore ApiKeyCredentialProvider
deleteDelete a BedrockAgentCore ApiKeyCredentialProvider
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore ApiKeyCredentialProvider
syncSync BedrockAgentCore ApiKeyCredentialProvider state from AWS

Resources

state(infinite)— BedrockAgentCore ApiKeyCredentialProvider resource state
@swamp/aws/bedrockagentcore/browser-customv2026.04.03.3browser_custom.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe name of the browser.
Description?stringThe description of the browser.
NetworkConfigurationobjectNetwork configuration for browser.
RecordingConfig?objectRecording configuration for browser.
BrowserSigning?objectBrowser signing configuration.
ExecutionRoleArn?stringThe Amazon Resource Name (ARN) of the IAM role that the browser uses to access resources.
Tags?recordA map of tag keys and values
createCreate a BedrockAgentCore BrowserCustom
getGet a BedrockAgentCore BrowserCustom
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore BrowserCustom
updateUpdate a BedrockAgentCore BrowserCustom
deleteDelete a BedrockAgentCore BrowserCustom
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore BrowserCustom
syncSync BedrockAgentCore BrowserCustom state from AWS

Resources

state(infinite)— BedrockAgentCore BrowserCustom resource state
@swamp/aws/bedrockagentcore/browser-profilev2026.04.03.2browser_profile.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe name of the browser profile.
Description?stringThe description of the browser profile.
Tags?recordA map of tag keys and values.
createCreate a BedrockAgentCore BrowserProfile
getGet a BedrockAgentCore BrowserProfile
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore BrowserProfile
updateUpdate a BedrockAgentCore BrowserProfile
deleteDelete a BedrockAgentCore BrowserProfile
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore BrowserProfile
syncSync BedrockAgentCore BrowserProfile state from AWS

Resources

state(infinite)— BedrockAgentCore BrowserProfile resource state
@swamp/aws/bedrockagentcore/code-interpreter-customv2026.04.03.3code_interpreter_custom.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe name of the code interpreter.
Description?stringThe description of the code interpreter.
ExecutionRoleArn?stringThe ARN of the IAM role that the code interpreter uses to access resources.
NetworkConfigurationobjectNetwork configuration for code interpreter.
Tags?recordA map of tag keys and values
createCreate a BedrockAgentCore CodeInterpreterCustom
getGet a BedrockAgentCore CodeInterpreterCustom
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore CodeInterpreterCustom
updateUpdate a BedrockAgentCore CodeInterpreterCustom
deleteDelete a BedrockAgentCore CodeInterpreterCustom
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore CodeInterpreterCustom
syncSync BedrockAgentCore CodeInterpreterCustom state from AWS

Resources

state(infinite)— BedrockAgentCore CodeInterpreterCustom resource state
@swamp/aws/bedrockagentcore/evaluatorv2026.04.03.3evaluator.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
EvaluatorNamestringThe name of the evaluator. Must be unique within your account.
Description?stringThe description of the evaluator.
EvaluatorConfigobjectThe configuration for the evaluator.
LevelenumThe evaluation level that determines the scope of evaluation.
Tags?arrayA list of tags to assign to the evaluator.
createCreate a BedrockAgentCore Evaluator
getGet a BedrockAgentCore Evaluator
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Evaluator
updateUpdate a BedrockAgentCore Evaluator
deleteDelete a BedrockAgentCore Evaluator
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Evaluator
syncSync BedrockAgentCore Evaluator state from AWS

Resources

state(infinite)— BedrockAgentCore Evaluator resource state
@swamp/aws/bedrockagentcore/gatewayv2026.04.03.3gateway.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
AuthorizerConfiguration?object
AuthorizerTypeenum
Description?string
ExceptionLevel?enum
InterceptorConfigurations?array
PolicyEngineConfiguration?objectThe configuration for a policy engine associated with a gateway. A policy engine is a collection of policies that evaluates and authorizes agent tool calls. When associated with a gateway, the policy engine intercepts all agent requests and determines whether to allow or deny each action based on the defined policies.
KmsKeyArn?string
Namestring
ProtocolConfiguration?object
ProtocolTypeenum
RoleArnstring
Tags?record
WorkloadIdentityDetails?object
createCreate a BedrockAgentCore Gateway
getGet a BedrockAgentCore Gateway
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Gateway
updateUpdate a BedrockAgentCore Gateway
deleteDelete a BedrockAgentCore Gateway
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Gateway
syncSync BedrockAgentCore Gateway state from AWS

Resources

state(infinite)— BedrockAgentCore Gateway resource state
@swamp/aws/bedrockagentcore/gateway-targetv2026.04.03.2gateway_target.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
CredentialProviderConfigurations?array
Description?string
GatewayIdentifier?string
MetadataConfiguration?object
Namestring
createCreate a BedrockAgentCore GatewayTarget
getGet a BedrockAgentCore GatewayTarget
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore GatewayTarget
updateUpdate a BedrockAgentCore GatewayTarget
deleteDelete a BedrockAgentCore GatewayTarget
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore GatewayTarget
syncSync BedrockAgentCore GatewayTarget state from AWS

Resources

state(infinite)— BedrockAgentCore GatewayTarget resource state
@swamp/aws/bedrockagentcore/memoryv2026.04.03.3memory.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringName of the Memory resource
Description?stringDescription of the Memory resource
EncryptionKeyArn?stringARN format
MemoryExecutionRoleArn?stringARN format
EventExpiryDurationnumberDuration in days until memory events expire
MemoryStrategies?arrayList of memory strategies attached to this memory
StreamDeliveryResources?object
Tags?recordA map of tag keys and values
createCreate a BedrockAgentCore Memory
getGet a BedrockAgentCore Memory
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Memory
updateUpdate a BedrockAgentCore Memory
deleteDelete a BedrockAgentCore Memory
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Memory
syncSync BedrockAgentCore Memory state from AWS

Resources

state(infinite)— BedrockAgentCore Memory resource state
@swamp/aws/bedrockagentcore/oauth2credential-providerv2026.04.04.1oauth2credential_provider.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe name of the OAuth2 credential provider
CredentialProviderVendorenumThe vendor of the OAuth2 credential provider
Oauth2ProviderConfigInput?objectThe configuration settings for the OAuth2 provider
ClientSecretArn?objectThe ARN of the client secret in AWS Secrets Manager
Oauth2ProviderConfigOutput?objectThe output configuration for the OAuth2 provider
Tags?arrayTags to assign to the OAuth2 credential provider
createCreate a BedrockAgentCore OAuth2CredentialProvider
getGet a BedrockAgentCore OAuth2CredentialProvider
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore OAuth2CredentialProvider
updateUpdate a BedrockAgentCore OAuth2CredentialProvider
deleteDelete a BedrockAgentCore OAuth2CredentialProvider
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore OAuth2CredentialProvider
syncSync BedrockAgentCore OAuth2CredentialProvider state from AWS

Resources

state(infinite)— BedrockAgentCore OAuth2CredentialProvider resource state
@swamp/aws/bedrockagentcore/online-evaluation-configv2026.04.03.3online_evaluation_config.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
OnlineEvaluationConfigNamestringThe name of the online evaluation configuration. Must be unique within your account.
Description?stringThe description of the online evaluation configuration.
DataSourceConfigobjectThe data source configuration that specifies CloudWatch log groups and service names to monitor.
EvaluationExecutionRoleArnstringThe Amazon Resource Name (ARN) of the IAM role that grants permissions for evaluation.
EvaluatorsarrayThe list of evaluators to apply during online evaluation.
RuleobjectThe evaluation rule that defines sampling configuration, filters, and session detection settings.
ExecutionStatus?enumThe execution status indicating whether the online evaluation is currently running.
OutputConfig?objectThe configuration that specifies where evaluation results should be written.
Tags?arrayA list of tags to assign to the online evaluation configuration.
createCreate a BedrockAgentCore OnlineEvaluationConfig
getGet a BedrockAgentCore OnlineEvaluationConfig
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore OnlineEvaluationConfig
updateUpdate a BedrockAgentCore OnlineEvaluationConfig
deleteDelete a BedrockAgentCore OnlineEvaluationConfig
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore OnlineEvaluationConfig
syncSync BedrockAgentCore OnlineEvaluationConfig state from AWS

Resources

state(infinite)— BedrockAgentCore OnlineEvaluationConfig resource state
@swamp/aws/bedrockagentcore/policyv2026.04.03.2policy.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
PolicyEngineIdstringThe identifier of the policy engine which contains this policy.
NamestringThe customer-assigned immutable name for the policy. Must be unique within the policy engine.
DefinitionobjectThe definition structure for policies. Encapsulates different policy formats.
Description?stringA human-readable description of the policy's purpose and functionality.
ValidationMode?enumThe validation mode for the policy. Determines how Cedar analyzer validation results are handled.
createCreate a BedrockAgentCore Policy
getGet a BedrockAgentCore Policy
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Policy
updateUpdate a BedrockAgentCore Policy
deleteDelete a BedrockAgentCore Policy
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Policy
syncSync BedrockAgentCore Policy state from AWS

Resources

state(infinite)— BedrockAgentCore Policy resource state
@swamp/aws/bedrockagentcore/policy-enginev2026.04.03.2policy_engine.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
NamestringThe customer-assigned immutable name for the policy engine
Description?stringA human-readable description of the policy engine's purpose and scope
EncryptionKeyArn?stringThe ARN of the KMS key used to encrypt the policy engine data
Tags?arrayA list of tags to assign to the policy engine.
createCreate a BedrockAgentCore PolicyEngine
getGet a BedrockAgentCore PolicyEngine
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore PolicyEngine
updateUpdate a BedrockAgentCore PolicyEngine
deleteDelete a BedrockAgentCore PolicyEngine
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore PolicyEngine
syncSync BedrockAgentCore PolicyEngine state from AWS

Resources

state(infinite)— BedrockAgentCore PolicyEngine resource state
@swamp/aws/bedrockagentcore/runtimev2026.04.03.3runtime.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
AgentRuntimeNamestringName for a resource
Description?stringDescription of the resource
AgentRuntimeArtifactobjectThe artifact of the agent
RoleArnstringAmazon Resource Name (ARN) of an IAM role
NetworkConfigurationobjectNetwork access configuration for the Agent
ProtocolConfiguration?enumProtocol configuration for the agent runtime
EnvironmentVariables?recordEnvironment variables for the agent runtime
AuthorizerConfiguration?objectAuthorizer configuration for the agent runtime
LifecycleConfiguration?objectLifecycle configuration for managing runtime sessions
RequestHeaderConfiguration?objectConfiguration for HTTP request headers
FilesystemConfigurations?arrayFilesystem configurations for the agent runtime
WorkloadIdentityDetails?objectWorkload identity details for the agent
Tags?recordA map of tag keys and values
createCreate a BedrockAgentCore Runtime
getGet a BedrockAgentCore Runtime
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Runtime
updateUpdate a BedrockAgentCore Runtime
deleteDelete a BedrockAgentCore Runtime
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore Runtime
syncSync BedrockAgentCore Runtime state from AWS

Resources

state(infinite)— BedrockAgentCore Runtime resource state
@swamp/aws/bedrockagentcore/runtime-endpointv2026.04.03.2runtime_endpoint.ts

Global Arguments

ArgumentTypeDescription
namestringInstance name for this resource (used as the unique identifier in the factory pattern)
AgentRuntimeIdstringThe ID of the parent Agent Runtime (required for creation)
NamestringThe name of the Agent Runtime Endpoint
AgentRuntimeVersion?stringThe version of the AgentCore Runtime to use for the endpoint.
Description?stringThe description of the AgentCore Runtime endpoint.
Tags?recordA map of tag keys and values
createCreate a BedrockAgentCore RuntimeEndpoint
getGet a BedrockAgentCore RuntimeEndpoint
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore RuntimeEndpoint
updateUpdate a BedrockAgentCore RuntimeEndpoint
deleteDelete a BedrockAgentCore RuntimeEndpoint
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore RuntimeEndpoint
syncSync BedrockAgentCore RuntimeEndpoint state from AWS

Resources

state(infinite)— BedrockAgentCore RuntimeEndpoint resource state
@swamp/aws/bedrockagentcore/workload-identityv2026.04.03.2workload_identity.ts

Global Arguments

ArgumentTypeDescription
NamestringThe name of the workload identity. The name must be unique within your account.
AllowedResourceOauth2ReturnUrls?arrayThe list of allowed OAuth2 return URLs for resources associated with this workload identity.
Tags?arrayAn array of key-value pairs to apply to this resource.
createCreate a BedrockAgentCore WorkloadIdentity
getGet a BedrockAgentCore WorkloadIdentity
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore WorkloadIdentity
updateUpdate a BedrockAgentCore WorkloadIdentity
deleteDelete a BedrockAgentCore WorkloadIdentity
ArgumentTypeDescription
identifierstringThe primary identifier of the BedrockAgentCore WorkloadIdentity
syncSync BedrockAgentCore WorkloadIdentity state from AWS

Resources

state(infinite)— BedrockAgentCore WorkloadIdentity resource state