Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. bedrockagentcore
  6. Runtime

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.74.1
published on Monday, Aug 3, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

aws-native.bedrockagentcore.Runtime

aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.74.1
published on Monday, Aug 3, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws-native

    Resource Type definition for AWS::BedrockAgentCore::Runtime

    Create Runtime Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Runtime(name: string, args: RuntimeArgs, opts?: CustomResourceOptions);
    @overload
def Runtime(resource_name: str,
            args: RuntimeArgs,
            opts: Optional[ResourceOptions] = None)

@overload
def Runtime(resource_name: str,
            opts: Optional[ResourceOptions] = None,
            agent_runtime_artifact: Optional[RuntimeAgentRuntimeArtifactArgs] = None,
            agent_runtime_name: Optional[str] = None,
            network_configuration: Optional[RuntimeNetworkConfigurationArgs] = None,
            role_arn: Optional[str] = None,
            authorizer_configuration: Optional[RuntimeAuthorizerConfigurationArgs] = None,
            description: Optional[str] = None,
            environment_variables: Optional[Mapping[str, str]] = None,
            filesystem_configurations: Optional[Sequence[RuntimeFilesystemConfigurationArgs]] = None,
            lifecycle_configuration: Optional[RuntimeLifecycleConfigurationArgs] = None,
            protocol_configuration: Optional[RuntimeProtocolConfiguration] = None,
            request_header_configuration: Optional[RuntimeRequestHeaderConfigurationArgs] = None,
            tags: Optional[Mapping[str, str]] = None)
    func NewRuntime(ctx *Context, name string, args RuntimeArgs, opts ...ResourceOption) (*Runtime, error)
    public Runtime(string name, RuntimeArgs args, CustomResourceOptions? opts = null)
    public Runtime(String name, RuntimeArgs args)
public Runtime(String name, RuntimeArgs args, CustomResourceOptions options)

    type: aws-native:bedrockagentcore:Runtime
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "aws-native_bedrockagentcore_runtime" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args RuntimeArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args RuntimeArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args RuntimeArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args RuntimeArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args RuntimeArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Runtime Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Runtime resource accepts the following input properties:

    AgentRuntimeArtifact Pulumi.AwsNative.BedrockAgentCore.Inputs.RuntimeAgentRuntimeArtifact
    The artifact of the agent
    AgentRuntimeName string
    Name for a resource
    NetworkConfiguration Pulumi.AwsNative.BedrockAgentCore.Inputs.RuntimeNetworkConfiguration
    Network access configuration for the Agent
    RoleArn string
    Amazon Resource Name (ARN) of an IAM role
    AuthorizerConfiguration Pulumi.AwsNative.BedrockAgentCore.Inputs.RuntimeAuthorizerConfiguration
    Authorizer configuration for the agent runtime
    Description string
    Description of the resource
    EnvironmentVariables Dictionary<string, string>
    Environment variables for the agent runtime
    FilesystemConfigurations List<Pulumi.AwsNative.BedrockAgentCore.Inputs.RuntimeFilesystemConfiguration>
    Filesystem configurations for the agent runtime
    LifecycleConfiguration Pulumi.AwsNative.BedrockAgentCore.Inputs.RuntimeLifecycleConfiguration
    Lifecycle configuration for managing runtime sessions
    ProtocolConfiguration Pulumi.AwsNative.BedrockAgentCore.RuntimeProtocolConfiguration
    Protocol configuration for the agent runtime
    RequestHeaderConfiguration Pulumi.AwsNative.BedrockAgentCore.Inputs.RuntimeRequestHeaderConfiguration
    Configuration for HTTP request headers
    Tags Dictionary<string, string>
    The tags for the agent.
    AgentRuntimeArtifact RuntimeAgentRuntimeArtifactArgs
    The artifact of the agent
    AgentRuntimeName string
    Name for a resource
    NetworkConfiguration RuntimeNetworkConfigurationArgs
    Network access configuration for the Agent
    RoleArn string
    Amazon Resource Name (ARN) of an IAM role
    AuthorizerConfiguration RuntimeAuthorizerConfigurationArgs
    Authorizer configuration for the agent runtime
    Description string
    Description of the resource
    EnvironmentVariables map[string]string
    Environment variables for the agent runtime
    FilesystemConfigurations []RuntimeFilesystemConfigurationArgs
    Filesystem configurations for the agent runtime
    LifecycleConfiguration RuntimeLifecycleConfigurationArgs
    Lifecycle configuration for managing runtime sessions
    ProtocolConfiguration RuntimeProtocolConfiguration
    Protocol configuration for the agent runtime
    RequestHeaderConfiguration RuntimeRequestHeaderConfigurationArgs
    Configuration for HTTP request headers
    Tags map[string]string
    The tags for the agent.
    agent_runtime_artifact object
    The artifact of the agent
    agent_runtime_name string
    Name for a resource
    network_configuration object
    Network access configuration for the Agent
    role_arn string
    Amazon Resource Name (ARN) of an IAM role
    authorizer_configuration object
    Authorizer configuration for the agent runtime
    description string
    Description of the resource
    environment_variables map(string)
    Environment variables for the agent runtime
    filesystem_configurations list(object)
    Filesystem configurations for the agent runtime
    lifecycle_configuration object
    Lifecycle configuration for managing runtime sessions
    protocol_configuration "MCP" | "HTTP" | "A2A" | "AGUI"
    Protocol configuration for the agent runtime
    request_header_configuration object
    Configuration for HTTP request headers
    tags map(string)
    The tags for the agent.
    agentRuntimeArtifact RuntimeAgentRuntimeArtifact
    The artifact of the agent
    agentRuntimeName String
    Name for a resource
    networkConfiguration RuntimeNetworkConfiguration
    Network access configuration for the Agent
    roleArn String
    Amazon Resource Name (ARN) of an IAM role
    authorizerConfiguration RuntimeAuthorizerConfiguration
    Authorizer configuration for the agent runtime
    description String
    Description of the resource
    environmentVariables Map<String,String>
    Environment variables for the agent runtime
    filesystemConfigurations List<RuntimeFilesystemConfiguration>
    Filesystem configurations for the agent runtime
    lifecycleConfiguration RuntimeLifecycleConfiguration
    Lifecycle configuration for managing runtime sessions
    protocolConfiguration RuntimeProtocolConfiguration
    Protocol configuration for the agent runtime
    requestHeaderConfiguration RuntimeRequestHeaderConfiguration
    Configuration for HTTP request headers
    tags Map<String,String>
    The tags for the agent.
    agentRuntimeArtifact RuntimeAgentRuntimeArtifact
    The artifact of the agent
    agentRuntimeName string
    Name for a resource
    networkConfiguration RuntimeNetworkConfiguration
    Network access configuration for the Agent
    roleArn string
    Amazon Resource Name (ARN) of an IAM role
    authorizerConfiguration RuntimeAuthorizerConfiguration
    Authorizer configuration for the agent runtime
    description string
    Description of the resource
    environmentVariables {[key: string]: string}
    Environment variables for the agent runtime
    filesystemConfigurations RuntimeFilesystemConfiguration[]
    Filesystem configurations for the agent runtime
    lifecycleConfiguration RuntimeLifecycleConfiguration
    Lifecycle configuration for managing runtime sessions
    protocolConfiguration RuntimeProtocolConfiguration
    Protocol configuration for the agent runtime
    requestHeaderConfiguration RuntimeRequestHeaderConfiguration
    Configuration for HTTP request headers
    tags {[key: string]: string}
    The tags for the agent.
    agent_runtime_artifact RuntimeAgentRuntimeArtifactArgs
    The artifact of the agent
    agent_runtime_name str
    Name for a resource
    network_configuration RuntimeNetworkConfigurationArgs
    Network access configuration for the Agent
    role_arn str
    Amazon Resource Name (ARN) of an IAM role
    authorizer_configuration RuntimeAuthorizerConfigurationArgs
    Authorizer configuration for the agent runtime
    description str
    Description of the resource
    environment_variables Mapping[str, str]
    Environment variables for the agent runtime
    filesystem_configurations Sequence[RuntimeFilesystemConfigurationArgs]
    Filesystem configurations for the agent runtime
    lifecycle_configuration RuntimeLifecycleConfigurationArgs
    Lifecycle configuration for managing runtime sessions
    protocol_configuration RuntimeProtocolConfiguration
    Protocol configuration for the agent runtime
    request_header_configuration RuntimeRequestHeaderConfigurationArgs
    Configuration for HTTP request headers
    tags Mapping[str, str]
    The tags for the agent.
    agentRuntimeArtifact Property Map
    The artifact of the agent
    agentRuntimeName String
    Name for a resource
    networkConfiguration Property Map
    Network access configuration for the Agent
    roleArn String
    Amazon Resource Name (ARN) of an IAM role
    authorizerConfiguration Property Map
    Authorizer configuration for the agent runtime
    description String
    Description of the resource
    environmentVariables Map<String>
    Environment variables for the agent runtime
    filesystemConfigurations List<Property Map>
    Filesystem configurations for the agent runtime
    lifecycleConfiguration Property Map
    Lifecycle configuration for managing runtime sessions
    protocolConfiguration "MCP" | "HTTP" | "A2A" | "AGUI"
    Protocol configuration for the agent runtime
    requestHeaderConfiguration Property Map
    Configuration for HTTP request headers
    tags Map<String>
    The tags for the agent.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Runtime resource produces the following output properties:

    AgentRuntimeArn string
    The Amazon Resource Name(ARN) that uniquely identifies the Agent
    AgentRuntimeId string
    Identifier for a resource
    AgentRuntimeVersion string
    Version of the Agent
    CreatedAt string
    Timestamp when the Agent was created
    FailureReason string
    The reason for failure if the agent is in a failed state.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastUpdatedAt string
    When resource was last updated
    Status Pulumi.AwsNative.BedrockAgentCore.RuntimeAgentStatus
    Current status of the agent
    WorkloadIdentityDetails Pulumi.AwsNative.BedrockAgentCore.Outputs.RuntimeWorkloadIdentityDetails
    Workload identity details for the agent
    AgentRuntimeArn string
    The Amazon Resource Name(ARN) that uniquely identifies the Agent
    AgentRuntimeId string
    Identifier for a resource
    AgentRuntimeVersion string
    Version of the Agent
    CreatedAt string
    Timestamp when the Agent was created
    FailureReason string
    The reason for failure if the agent is in a failed state.
    Id string
    The provider-assigned unique ID for this managed resource.
    LastUpdatedAt string
    When resource was last updated
    Status RuntimeAgentStatus
    Current status of the agent
    WorkloadIdentityDetails RuntimeWorkloadIdentityDetails
    Workload identity details for the agent
    agent_runtime_arn string
    The Amazon Resource Name(ARN) that uniquely identifies the Agent
    agent_runtime_id string
    Identifier for a resource
    agent_runtime_version string
    Version of the Agent
    created_at string
    Timestamp when the Agent was created
    failure_reason string
    The reason for failure if the agent is in a failed state.
    id string
    The provider-assigned unique ID for this managed resource.
    last_updated_at string
    When resource was last updated
    status "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "READY" | "DELETING"
    Current status of the agent
    workload_identity_details object
    Workload identity details for the agent
    agentRuntimeArn String
    The Amazon Resource Name(ARN) that uniquely identifies the Agent
    agentRuntimeId String
    Identifier for a resource
    agentRuntimeVersion String
    Version of the Agent
    createdAt String
    Timestamp when the Agent was created
    failureReason String
    The reason for failure if the agent is in a failed state.
    id String
    The provider-assigned unique ID for this managed resource.
    lastUpdatedAt String
    When resource was last updated
    status RuntimeAgentStatus
    Current status of the agent
    workloadIdentityDetails RuntimeWorkloadIdentityDetails
    Workload identity details for the agent
    agentRuntimeArn string
    The Amazon Resource Name(ARN) that uniquely identifies the Agent
    agentRuntimeId string
    Identifier for a resource
    agentRuntimeVersion string
    Version of the Agent
    createdAt string
    Timestamp when the Agent was created
    failureReason string
    The reason for failure if the agent is in a failed state.
    id string
    The provider-assigned unique ID for this managed resource.
    lastUpdatedAt string
    When resource was last updated
    status RuntimeAgentStatus
    Current status of the agent
    workloadIdentityDetails RuntimeWorkloadIdentityDetails
    Workload identity details for the agent
    agent_runtime_arn str
    The Amazon Resource Name(ARN) that uniquely identifies the Agent
    agent_runtime_id str
    Identifier for a resource
    agent_runtime_version str
    Version of the Agent
    created_at str
    Timestamp when the Agent was created
    failure_reason str
    The reason for failure if the agent is in a failed state.
    id str
    The provider-assigned unique ID for this managed resource.
    last_updated_at str
    When resource was last updated
    status RuntimeAgentStatus
    Current status of the agent
    workload_identity_details RuntimeWorkloadIdentityDetails
    Workload identity details for the agent
    agentRuntimeArn String
    The Amazon Resource Name(ARN) that uniquely identifies the Agent
    agentRuntimeId String
    Identifier for a resource
    agentRuntimeVersion String
    Version of the Agent
    createdAt String
    Timestamp when the Agent was created
    failureReason String
    The reason for failure if the agent is in a failed state.
    id String
    The provider-assigned unique ID for this managed resource.
    lastUpdatedAt String
    When resource was last updated
    status "CREATING" | "CREATE_FAILED" | "UPDATING" | "UPDATE_FAILED" | "READY" | "DELETING"
    Current status of the agent
    workloadIdentityDetails Property Map
    Workload identity details for the agent

    Supporting Types

    RuntimeAgentManagedRuntimeType, RuntimeAgentManagedRuntimeTypeArgs

    Python310
    PYTHON_3_10
    Python311
    PYTHON_3_11
    Python312
    PYTHON_3_12
    Python313
    PYTHON_3_13
    Python314
    PYTHON_3_14
    Node22
    NODE_22
    RuntimeAgentManagedRuntimeTypePython310
    PYTHON_3_10
    RuntimeAgentManagedRuntimeTypePython311
    PYTHON_3_11
    RuntimeAgentManagedRuntimeTypePython312
    PYTHON_3_12
    RuntimeAgentManagedRuntimeTypePython313
    PYTHON_3_13
    RuntimeAgentManagedRuntimeTypePython314
    PYTHON_3_14
    RuntimeAgentManagedRuntimeTypeNode22
    NODE_22
    "PYTHON_3_10"
    PYTHON_3_10
    "PYTHON_3_11"
    PYTHON_3_11
    "PYTHON_3_12"
    PYTHON_3_12
    "PYTHON_3_13"
    PYTHON_3_13
    "PYTHON_3_14"
    PYTHON_3_14
    "NODE_22"
    NODE_22
    Python310
    PYTHON_3_10
    Python311
    PYTHON_3_11
    Python312
    PYTHON_3_12
    Python313
    PYTHON_3_13
    Python314
    PYTHON_3_14
    Node22
    NODE_22
    Python310
    PYTHON_3_10
    Python311
    PYTHON_3_11
    Python312
    PYTHON_3_12
    Python313
    PYTHON_3_13
    Python314
    PYTHON_3_14
    Node22
    NODE_22
    PYTHON310
    PYTHON_3_10
    PYTHON311
    PYTHON_3_11
    PYTHON312
    PYTHON_3_12
    PYTHON313
    PYTHON_3_13
    PYTHON314
    PYTHON_3_14
    NODE22
    NODE_22
    "PYTHON_3_10"
    PYTHON_3_10
    "PYTHON_3_11"
    PYTHON_3_11
    "PYTHON_3_12"
    PYTHON_3_12
    "PYTHON_3_13"
    PYTHON_3_13
    "PYTHON_3_14"
    PYTHON_3_14
    "NODE_22"
    NODE_22

    RuntimeAgentRuntimeArtifact, RuntimeAgentRuntimeArtifactArgs

    code_configuration object
    container_configuration object
    Representation of a container configuration.
    codeConfiguration Property Map
    containerConfiguration Property Map
    Representation of a container configuration.

    RuntimeAgentStatus, RuntimeAgentStatusArgs

    Creating
    CREATING
    CreateFailed
    CREATE_FAILED
    Updating
    UPDATING
    UpdateFailed
    UPDATE_FAILED
    Ready
    READY
    Deleting
    DELETING
    RuntimeAgentStatusCreating
    CREATING
    RuntimeAgentStatusCreateFailed
    CREATE_FAILED
    RuntimeAgentStatusUpdating
    UPDATING
    RuntimeAgentStatusUpdateFailed
    UPDATE_FAILED
    RuntimeAgentStatusReady
    READY
    RuntimeAgentStatusDeleting
    DELETING
    "CREATING"
    CREATING
    "CREATE_FAILED"
    CREATE_FAILED
    "UPDATING"
    UPDATING
    "UPDATE_FAILED"
    UPDATE_FAILED
    "READY"
    READY
    "DELETING"
    DELETING
    Creating
    CREATING
    CreateFailed
    CREATE_FAILED
    Updating
    UPDATING
    UpdateFailed
    UPDATE_FAILED
    Ready
    READY
    Deleting
    DELETING
    Creating
    CREATING
    CreateFailed
    CREATE_FAILED
    Updating
    UPDATING
    UpdateFailed
    UPDATE_FAILED
    Ready
    READY
    Deleting
    DELETING
    CREATING
    CREATING
    CREATE_FAILED
    CREATE_FAILED
    UPDATING
    UPDATING
    UPDATE_FAILED
    UPDATE_FAILED
    READY
    READY
    DELETING
    DELETING
    "CREATING"
    CREATING
    "CREATE_FAILED"
    CREATE_FAILED
    "UPDATING"
    UPDATING
    "UPDATE_FAILED"
    UPDATE_FAILED
    "READY"
    READY
    "DELETING"
    DELETING

    RuntimeAllowedWorkloadConfiguration, RuntimeAllowedWorkloadConfigurationArgs

    Allow-list of upstream workloads permitted to reach this resource via the workload identity chain. When set, the data plane enforces that the introspected workload chain's caller matches one of the configured hosting environments or workload identities; absent means no chain enforcement.

    RuntimeAuthorizerConfiguration, RuntimeAuthorizerConfigurationArgs

    Configuration for the authorizer
    CustomJwtAuthorizer Pulumi.AwsNative.BedrockAgentCore.Inputs.RuntimeCustomJwtAuthorizerConfiguration
    Represents inbound authorization configuration options used to authenticate incoming requests.
    CustomJwtAuthorizer RuntimeCustomJwtAuthorizerConfiguration
    Represents inbound authorization configuration options used to authenticate incoming requests.
    custom_jwt_authorizer object
    Represents inbound authorization configuration options used to authenticate incoming requests.
    customJwtAuthorizer RuntimeCustomJwtAuthorizerConfiguration
    Represents inbound authorization configuration options used to authenticate incoming requests.
    customJwtAuthorizer RuntimeCustomJwtAuthorizerConfiguration
    Represents inbound authorization configuration options used to authenticate incoming requests.
    custom_jwt_authorizer RuntimeCustomJwtAuthorizerConfiguration
    Represents inbound authorization configuration options used to authenticate incoming requests.
    customJwtAuthorizer Property Map
    Represents inbound authorization configuration options used to authenticate incoming requests.

    RuntimeAuthorizingClaimMatchValueType, RuntimeAuthorizingClaimMatchValueTypeArgs

    The value or values in the custom claim to match and relationship of match

    RuntimeClaimMatchOperator, RuntimeClaimMatchOperatorArgs

    EqualsValue
    EQUALS
    Contains
    CONTAINS
    ContainsAny
    CONTAINS_ANY
    RuntimeClaimMatchOperatorEquals
    EQUALS
    RuntimeClaimMatchOperatorContains
    CONTAINS
    RuntimeClaimMatchOperatorContainsAny
    CONTAINS_ANY
    "EQUALS"
    EQUALS
    "CONTAINS"
    CONTAINS
    "CONTAINS_ANY"
    CONTAINS_ANY
    Equals
    EQUALS
    Contains
    CONTAINS
    ContainsAny
    CONTAINS_ANY
    Equals
    EQUALS
    Contains
    CONTAINS
    ContainsAny
    CONTAINS_ANY
    EQUALS
    EQUALS
    CONTAINS
    CONTAINS
    CONTAINS_ANY
    CONTAINS_ANY
    "EQUALS"
    EQUALS
    "CONTAINS"
    CONTAINS
    "CONTAINS_ANY"
    CONTAINS_ANY

    RuntimeClaimMatchValueType, RuntimeClaimMatchValueTypeArgs

    The value or values in the custom claim to match for

    RuntimeCode, RuntimeCodeArgs

    Object represents source code from zip file

    RuntimeCodeConfiguration, RuntimeCodeConfigurationArgs

    Representation of a code configuration

    RuntimeContainerConfiguration, RuntimeContainerConfigurationArgs

    ContainerUri string
    The container Uri.
    ContainerUri string
    The container Uri.
    container_uri string
    The container Uri.
    containerUri String
    The container Uri.
    containerUri string
    The container Uri.
    container_uri str
    The container Uri.
    containerUri String
    The container Uri.

    RuntimeCustomClaimValidationType, RuntimeCustomClaimValidationTypeArgs

    Required custom claim

    RuntimeCustomJwtAuthorizerConfiguration, RuntimeCustomJwtAuthorizerConfigurationArgs

    Configuration for custom JWT authorizer
    DiscoveryUrl string
    The configuration authorization.
    AllowedAudience []string
    Represents inbound authorization configuration options used to authenticate incoming requests.
    AllowedClients []string
    Represents individual client IDs that are validated in the incoming JWT token validation process.
    AllowedScopes []string
    AllowedWorkloadConfiguration RuntimeAllowedWorkloadConfiguration
    CustomClaims []RuntimeCustomClaimValidationType
    PrivateEndpoint RuntimePrivateEndpoint
    PrivateEndpointOverrides []RuntimePrivateEndpointOverride
    discovery_url string
    The configuration authorization.
    allowed_audience list(string)
    Represents inbound authorization configuration options used to authenticate incoming requests.
    allowed_clients list(string)
    Represents individual client IDs that are validated in the incoming JWT token validation process.
    allowed_scopes list(string)
    allowed_workload_configuration object
    custom_claims list(object)
    private_endpoint object
    private_endpoint_overrides list(object)
    discoveryUrl String
    The configuration authorization.
    allowedAudience List<String>
    Represents inbound authorization configuration options used to authenticate incoming requests.
    allowedClients List<String>
    Represents individual client IDs that are validated in the incoming JWT token validation process.
    allowedScopes List<String>
    allowedWorkloadConfiguration RuntimeAllowedWorkloadConfiguration
    customClaims List<RuntimeCustomClaimValidationType>
    privateEndpoint RuntimePrivateEndpoint
    privateEndpointOverrides List<RuntimePrivateEndpointOverride>
    discoveryUrl string
    The configuration authorization.
    allowedAudience string[]
    Represents inbound authorization configuration options used to authenticate incoming requests.
    allowedClients string[]
    Represents individual client IDs that are validated in the incoming JWT token validation process.
    allowedScopes string[]
    allowedWorkloadConfiguration RuntimeAllowedWorkloadConfiguration
    customClaims RuntimeCustomClaimValidationType[]
    privateEndpoint RuntimePrivateEndpoint
    privateEndpointOverrides RuntimePrivateEndpointOverride[]
    discovery_url str
    The configuration authorization.
    allowed_audience Sequence[str]
    Represents inbound authorization configuration options used to authenticate incoming requests.
    allowed_clients Sequence[str]
    Represents individual client IDs that are validated in the incoming JWT token validation process.
    allowed_scopes Sequence[str]
    allowed_workload_configuration RuntimeAllowedWorkloadConfiguration
    custom_claims Sequence[RuntimeCustomClaimValidationType]
    private_endpoint RuntimePrivateEndpoint
    private_endpoint_overrides Sequence[RuntimePrivateEndpointOverride]
    discoveryUrl String
    The configuration authorization.
    allowedAudience List<String>
    Represents inbound authorization configuration options used to authenticate incoming requests.
    allowedClients List<String>
    Represents individual client IDs that are validated in the incoming JWT token validation process.
    allowedScopes List<String>
    allowedWorkloadConfiguration Property Map
    customClaims List<Property Map>
    privateEndpoint Property Map
    privateEndpointOverrides List<Property Map>

    RuntimeEfsAccessPointConfiguration, RuntimeEfsAccessPointConfigurationArgs

    Configuration for EFS access point filesystem

    RuntimeFilesystemConfiguration, RuntimeFilesystemConfigurationArgs

    Filesystem configuration for the runtime

    RuntimeHostingEnvironment, RuntimeHostingEnvironmentArgs

    An upstream workload identified by the ARN of its hosting environment (for example a Gateway or Runtime ARN)
    Arn string
    The ARN of the bedrock-agentcore hosting environment
    Arn string
    The ARN of the bedrock-agentcore hosting environment
    arn string
    The ARN of the bedrock-agentcore hosting environment
    arn String
    The ARN of the bedrock-agentcore hosting environment
    arn string
    The ARN of the bedrock-agentcore hosting environment
    arn str
    The ARN of the bedrock-agentcore hosting environment
    arn String
    The ARN of the bedrock-agentcore hosting environment

    RuntimeInboundTokenClaimValueType, RuntimeInboundTokenClaimValueTypeArgs

    String
    STRING
    StringArray
    STRING_ARRAY
    RuntimeInboundTokenClaimValueTypeString
    STRING
    RuntimeInboundTokenClaimValueTypeStringArray
    STRING_ARRAY
    "STRING"
    STRING
    "STRING_ARRAY"
    STRING_ARRAY
    String
    STRING
    StringArray
    STRING_ARRAY
    String
    STRING
    StringArray
    STRING_ARRAY
    STRING
    STRING
    STRING_ARRAY
    STRING_ARRAY
    "STRING"
    STRING
    "STRING_ARRAY"
    STRING_ARRAY

    RuntimeLifecycleConfiguration, RuntimeLifecycleConfigurationArgs

    Configuration for managing the lifecycle of runtime sessions and resources
    IdleRuntimeSessionTimeout int
    Timeout in seconds for idle runtime sessions
    MaxLifetime int
    Maximum lifetime in seconds for runtime sessions
    IdleRuntimeSessionTimeout int
    Timeout in seconds for idle runtime sessions
    MaxLifetime int
    Maximum lifetime in seconds for runtime sessions
    idle_runtime_session_timeout number
    Timeout in seconds for idle runtime sessions
    max_lifetime number
    Maximum lifetime in seconds for runtime sessions
    idleRuntimeSessionTimeout Integer
    Timeout in seconds for idle runtime sessions
    maxLifetime Integer
    Maximum lifetime in seconds for runtime sessions
    idleRuntimeSessionTimeout number
    Timeout in seconds for idle runtime sessions
    maxLifetime number
    Maximum lifetime in seconds for runtime sessions
    idle_runtime_session_timeout int
    Timeout in seconds for idle runtime sessions
    max_lifetime int
    Maximum lifetime in seconds for runtime sessions
    idleRuntimeSessionTimeout Number
    Timeout in seconds for idle runtime sessions
    maxLifetime Number
    Maximum lifetime in seconds for runtime sessions

    RuntimeManagedVpcResource, RuntimeManagedVpcResourceArgs

    Managed VPC resource configuration
    EndpointIpAddressType Pulumi.AwsNative.BedrockAgentCore.RuntimeManagedVpcResourceEndpointIpAddressType
    The IP address type for the endpoint
    SubnetIds List<string>
    The subnet IDs
    VpcIdentifier string
    The VPC identifier
    RoutingDomain string
    An intermediate domain to use as the resource configuration endpoint instead of the actual target domain
    SecurityGroupIds List<string>
    The security group IDs
    Tags Dictionary<string, string>
    Tags to apply to the managed VPC Lattice resource gateway
    EndpointIpAddressType RuntimeManagedVpcResourceEndpointIpAddressType
    The IP address type for the endpoint
    SubnetIds []string
    The subnet IDs
    VpcIdentifier string
    The VPC identifier
    RoutingDomain string
    An intermediate domain to use as the resource configuration endpoint instead of the actual target domain
    SecurityGroupIds []string
    The security group IDs
    Tags map[string]string
    Tags to apply to the managed VPC Lattice resource gateway
    endpoint_ip_address_type "IPV4" | "IPV6"
    The IP address type for the endpoint
    subnet_ids list(string)
    The subnet IDs
    vpc_identifier string
    The VPC identifier
    routing_domain string
    An intermediate domain to use as the resource configuration endpoint instead of the actual target domain
    security_group_ids list(string)
    The security group IDs
    tags map(string)
    Tags to apply to the managed VPC Lattice resource gateway
    endpointIpAddressType RuntimeManagedVpcResourceEndpointIpAddressType
    The IP address type for the endpoint
    subnetIds List<String>
    The subnet IDs
    vpcIdentifier String
    The VPC identifier
    routingDomain String
    An intermediate domain to use as the resource configuration endpoint instead of the actual target domain
    securityGroupIds List<String>
    The security group IDs
    tags Map<String,String>
    Tags to apply to the managed VPC Lattice resource gateway
    endpointIpAddressType RuntimeManagedVpcResourceEndpointIpAddressType
    The IP address type for the endpoint
    subnetIds string[]
    The subnet IDs
    vpcIdentifier string
    The VPC identifier
    routingDomain string
    An intermediate domain to use as the resource configuration endpoint instead of the actual target domain
    securityGroupIds string[]
    The security group IDs
    tags {[key: string]: string}
    Tags to apply to the managed VPC Lattice resource gateway
    endpoint_ip_address_type RuntimeManagedVpcResourceEndpointIpAddressType
    The IP address type for the endpoint
    subnet_ids Sequence[str]
    The subnet IDs
    vpc_identifier str
    The VPC identifier
    routing_domain str
    An intermediate domain to use as the resource configuration endpoint instead of the actual target domain
    security_group_ids Sequence[str]
    The security group IDs
    tags Mapping[str, str]
    Tags to apply to the managed VPC Lattice resource gateway
    endpointIpAddressType "IPV4" | "IPV6"
    The IP address type for the endpoint
    subnetIds List<String>
    The subnet IDs
    vpcIdentifier String
    The VPC identifier
    routingDomain String
    An intermediate domain to use as the resource configuration endpoint instead of the actual target domain
    securityGroupIds List<String>
    The security group IDs
    tags Map<String>
    Tags to apply to the managed VPC Lattice resource gateway

    RuntimeManagedVpcResourceEndpointIpAddressType, RuntimeManagedVpcResourceEndpointIpAddressTypeArgs

    Ipv4
    IPV4
    Ipv6
    IPV6
    RuntimeManagedVpcResourceEndpointIpAddressTypeIpv4
    IPV4
    RuntimeManagedVpcResourceEndpointIpAddressTypeIpv6
    IPV6
    "IPV4"
    IPV4
    "IPV6"
    IPV6
    Ipv4
    IPV4
    Ipv6
    IPV6
    Ipv4
    IPV4
    Ipv6
    IPV6
    IPV4
    IPV4
    IPV6
    IPV6
    "IPV4"
    IPV4
    "IPV6"
    IPV6

    RuntimeNetworkConfiguration, RuntimeNetworkConfigurationArgs

    RuntimeNetworkMode, RuntimeNetworkModeArgs

    Public
    PUBLIC
    Vpc
    VPC
    RuntimeNetworkModePublic
    PUBLIC
    RuntimeNetworkModeVpc
    VPC
    "PUBLIC"
    PUBLIC
    "VPC"
    VPC
    Public
    PUBLIC
    Vpc
    VPC
    Public
    PUBLIC
    Vpc
    VPC
    PUBLIC
    PUBLIC
    VPC
    VPC
    "PUBLIC"
    PUBLIC
    "VPC"
    VPC

    RuntimePrivateEndpoint, RuntimePrivateEndpointArgs

    Private endpoint configuration. Exactly one of SelfManagedLatticeResource or ManagedVpcResource must be specified.

    RuntimePrivateEndpointOverride, RuntimePrivateEndpointOverrideArgs

    Override mapping of a domain to a private endpoint
    Domain string
    The domain to override
    PrivateEndpoint RuntimePrivateEndpoint
    domain string
    The domain to override
    private_endpoint object
    domain String
    The domain to override
    privateEndpoint RuntimePrivateEndpoint
    domain string
    The domain to override
    privateEndpoint RuntimePrivateEndpoint
    domain String
    The domain to override
    privateEndpoint Property Map

    RuntimeProtocolConfiguration, RuntimeProtocolConfigurationArgs

    Mcp
    MCP
    Http
    HTTP
    A2a
    A2A
    Agui
    AGUI
    RuntimeProtocolConfigurationMcp
    MCP
    RuntimeProtocolConfigurationHttp
    HTTP
    RuntimeProtocolConfigurationA2a
    A2A
    RuntimeProtocolConfigurationAgui
    AGUI
    "MCP"
    MCP
    "HTTP"
    HTTP
    "A2A"
    A2A
    "AGUI"
    AGUI
    Mcp
    MCP
    Http
    HTTP
    A2a
    A2A
    Agui
    AGUI
    Mcp
    MCP
    Http
    HTTP
    A2a
    A2A
    Agui
    AGUI
    MCP
    MCP
    HTTP
    HTTP
    A2A
    A2A
    AGUI
    AGUI
    "MCP"
    MCP
    "HTTP"
    HTTP
    "A2A"
    A2A
    "AGUI"
    AGUI

    RuntimeRequestHeaderConfiguration, RuntimeRequestHeaderConfigurationArgs

    Configuration for HTTP request headers

    RuntimeS3FilesAccessPointConfiguration, RuntimeS3FilesAccessPointConfigurationArgs

    Configuration for S3 Files access point filesystem

    RuntimeS3Location, RuntimeS3LocationArgs

    S3 Location Configuration
    Bucket string
    S3 bucket name
    Prefix string
    S3 object key prefix
    VersionId string
    S3 object version ID
    Bucket string
    S3 bucket name
    Prefix string
    S3 object key prefix
    VersionId string
    S3 object version ID
    bucket string
    S3 bucket name
    prefix string
    S3 object key prefix
    version_id string
    S3 object version ID
    bucket String
    S3 bucket name
    prefix String
    S3 object key prefix
    versionId String
    S3 object version ID
    bucket string
    S3 bucket name
    prefix string
    S3 object key prefix
    versionId string
    S3 object version ID
    bucket str
    S3 bucket name
    prefix str
    S3 object key prefix
    version_id str
    S3 object version ID
    bucket String
    S3 bucket name
    prefix String
    S3 object key prefix
    versionId String
    S3 object version ID

    RuntimeSelfManagedLatticeResource, RuntimeSelfManagedLatticeResourceArgs

    Self-managed VPC Lattice resource configuration
    ResourceConfigurationIdentifier string
    The identifier of the VPC Lattice resource configuration
    ResourceConfigurationIdentifier string
    The identifier of the VPC Lattice resource configuration
    resource_configuration_identifier string
    The identifier of the VPC Lattice resource configuration
    resourceConfigurationIdentifier String
    The identifier of the VPC Lattice resource configuration
    resourceConfigurationIdentifier string
    The identifier of the VPC Lattice resource configuration
    resource_configuration_identifier str
    The identifier of the VPC Lattice resource configuration
    resourceConfigurationIdentifier String
    The identifier of the VPC Lattice resource configuration

    RuntimeSessionStorageConfiguration, RuntimeSessionStorageConfigurationArgs

    Configuration for session storage
    MountPath string
    MountPath string
    mount_path string
    mountPath String
    mountPath string
    mountPath String

    RuntimeVpcConfig, RuntimeVpcConfigArgs

    Network mode configuration for VPC
    SecurityGroups List<string>
    Subnets List<string>
    SecurityGroups []string
    Subnets []string
    security_groups list(string)
    subnets list(string)
    securityGroups List<String>
    subnets List<String>
    securityGroups string[]
    subnets string[]
    security_groups Sequence[str]
    subnets Sequence[str]
    securityGroups List<String>
    subnets List<String>

    RuntimeWorkloadIdentityDetails, RuntimeWorkloadIdentityDetailsArgs

    Configuration for workload identity
    WorkloadIdentityArn string
    The Amazon Resource Name (ARN) for the workload identity.
    WorkloadIdentityArn string
    The Amazon Resource Name (ARN) for the workload identity.
    workload_identity_arn string
    The Amazon Resource Name (ARN) for the workload identity.
    workloadIdentityArn String
    The Amazon Resource Name (ARN) for the workload identity.
    workloadIdentityArn string
    The Amazon Resource Name (ARN) for the workload identity.
    workload_identity_arn str
    The Amazon Resource Name (ARN) for the workload identity.
    workloadIdentityArn String
    The Amazon Resource Name (ARN) for the workload identity.

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.74.1
    published on Monday, Aug 3, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws-native

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial