This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html). # AWS::BedrockAgentCore::Runtime Contains information about an agent runtime. An agent runtime is the execution environment for a Amazon Bedrock Agent. AgentCore Runtime is a secure, serverless runtime purpose-built for deploying and scaling dynamic AI agents and tools using any open-source framework including LangGraph, CrewAI, and Strands Agents, any protocol, and any model. For more information about using agent runtime in Amazon Bedrock AgentCore, see [Host agent or tools with Amazon Bedrock AgentCore Runtime](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/agents-tools-runtime.html). See the **Properties** section below for descriptions of both the required and optional properties. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "Type" : "AWS::BedrockAgentCore::Runtime", "Properties" : { "[AgentRuntimeArtifact](#cfn-bedrockagentcore-runtime-agentruntimeartifact)" : AgentRuntimeArtifact, "[AgentRuntimeName](#cfn-bedrockagentcore-runtime-agentruntimename)" : String, "[AuthorizerConfiguration](#cfn-bedrockagentcore-runtime-authorizerconfiguration)" : AuthorizerConfiguration, "[Description](#cfn-bedrockagentcore-runtime-description)" : String, "[EnvironmentVariables](#cfn-bedrockagentcore-runtime-environmentvariables)" : {Key: Value, ...}, "[FilesystemConfigurations](#cfn-bedrockagentcore-runtime-filesystemconfigurations)" : [ FilesystemConfiguration, ... ], "[LifecycleConfiguration](#cfn-bedrockagentcore-runtime-lifecycleconfiguration)" : LifecycleConfiguration, "[NetworkConfiguration](#cfn-bedrockagentcore-runtime-networkconfiguration)" : NetworkConfiguration, "[ProtocolConfiguration](#cfn-bedrockagentcore-runtime-protocolconfiguration)" : String, "[RequestHeaderConfiguration](#cfn-bedrockagentcore-runtime-requestheaderconfiguration)" : RequestHeaderConfiguration, "[RoleArn](#cfn-bedrockagentcore-runtime-rolearn)" : String, "[Tags](#cfn-bedrockagentcore-runtime-tags)" : {Key: Value, ...} } } ``` ### YAML ``` Type: AWS::BedrockAgentCore::Runtime Properties: [AgentRuntimeArtifact](#cfn-bedrockagentcore-runtime-agentruntimeartifact): AgentRuntimeArtifact [AgentRuntimeName](#cfn-bedrockagentcore-runtime-agentruntimename): String [AuthorizerConfiguration](#cfn-bedrockagentcore-runtime-authorizerconfiguration): AuthorizerConfiguration [Description](#cfn-bedrockagentcore-runtime-description): String [EnvironmentVariables](#cfn-bedrockagentcore-runtime-environmentvariables): Key: Value [FilesystemConfigurations](#cfn-bedrockagentcore-runtime-filesystemconfigurations): - FilesystemConfiguration [LifecycleConfiguration](#cfn-bedrockagentcore-runtime-lifecycleconfiguration): LifecycleConfiguration [NetworkConfiguration](#cfn-bedrockagentcore-runtime-networkconfiguration): NetworkConfiguration [ProtocolConfiguration](#cfn-bedrockagentcore-runtime-protocolconfiguration): String [RequestHeaderConfiguration](#cfn-bedrockagentcore-runtime-requestheaderconfiguration): RequestHeaderConfiguration [RoleArn](#cfn-bedrockagentcore-runtime-rolearn): String [Tags](#cfn-bedrockagentcore-runtime-tags): Key: Value ``` ## Properties `AgentRuntimeArtifact` The artifact of the AgentCore Runtime. *Required*: Yes *Type*: [AgentRuntimeArtifact](aws-properties-bedrockagentcore-runtime-agentruntimeartifact.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `AgentRuntimeName` The name of the AgentCore Runtime. *Required*: Yes *Type*: String *Pattern*: `[a-zA-Z][a-zA-Z0-9_]{0,47}` *Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement) `AuthorizerConfiguration` The authorizer configuration for the AgentCore Runtime. *Required*: No *Type*: [AuthorizerConfiguration](aws-properties-bedrockagentcore-runtime-authorizerconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `Description` The description of the AgentCore Runtime. *Required*: No *Type*: String *Minimum*: `1` *Maximum*: `1200` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `EnvironmentVariables` Environment variables to set in the AgentCore Runtime environment. *Required*: No *Type*: Object of String *Pattern*: `^[a-zA-Z_][a-zA-Z0-9_]*$` *Maximum*: `2048` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `FilesystemConfigurations` Property description not available. *Required*: No *Type*: Array of [FilesystemConfiguration](aws-properties-bedrockagentcore-runtime-filesystemconfiguration.md) *Minimum*: `0` *Maximum*: `1` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `LifecycleConfiguration` The lifecycle configuration for the AgentCore Runtime. *Required*: No *Type*: [LifecycleConfiguration](aws-properties-bedrockagentcore-runtime-lifecycleconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `NetworkConfiguration` The network configuration for the AgentCore Runtime. *Required*: Yes *Type*: [NetworkConfiguration](aws-properties-bedrockagentcore-runtime-networkconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `ProtocolConfiguration` The protocol configuration for an agent runtime. This structure defines how the agent runtime communicates with clients. *Required*: No *Type*: String *Allowed values*: `MCP | HTTP | A2A | AGUI` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `RequestHeaderConfiguration` Configuration for HTTP request headers that will be passed through to the runtime. *Required*: No *Type*: [RequestHeaderConfiguration](aws-properties-bedrockagentcore-runtime-requestheaderconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `RoleArn` The IAM role ARN that provides permissions for the AgentCore Runtime. *Required*: Yes *Type*: String *Pattern*: `arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/.+` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `Tags` The tags for the agent. *Required*: No *Type*: Object of String *Pattern*: `^[a-zA-Z0-9\s._:/=+@-]*$` *Minimum*: `0` *Maximum*: `256` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) ## Return values ### Ref When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the ARN of the agent runtime. For example: `arn:aws:bedrock-agentcore:us-east-1:123456789012:runtime/MyRuntime-a1b2c3d4e5` For more information about using the `Ref` function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html). ### Fn::GetAtt The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values. For more information about using the `Fn::GetAtt` intrinsic function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html). #### `AgentRuntimeArn` The Amazon Resource Name (ARN) of the AgentCore Runtime. `AgentRuntimeId` The unique identifier of the AgentCore Runtime. `AgentRuntimeVersion` The version of the AgentCore Runtime. `CreatedAt` The timestamp when the AgentCore Runtime was created. `FailureReason` The reason for failure if the AgentCore Runtime is in a failed state. `LastUpdatedAt` The timestamp when the AgentCore Runtime was last updated. `Status` The current status of the AgentCore Runtime. # AWS::BedrockAgentCore::Runtime AgentRuntimeArtifact The artifact of the agent. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[CodeConfiguration](#cfn-bedrockagentcore-runtime-agentruntimeartifact-codeconfiguration)" : CodeConfiguration, "[ContainerConfiguration](#cfn-bedrockagentcore-runtime-agentruntimeartifact-containerconfiguration)" : ContainerConfiguration } ``` ### YAML ``` [CodeConfiguration](#cfn-bedrockagentcore-runtime-agentruntimeartifact-codeconfiguration): CodeConfiguration [ContainerConfiguration](#cfn-bedrockagentcore-runtime-agentruntimeartifact-containerconfiguration): ContainerConfiguration ``` ## Properties `CodeConfiguration` The code configuration for the agent runtime artifact, including the source code location and execution settings. *Required*: No *Type*: [CodeConfiguration](aws-properties-bedrockagentcore-runtime-codeconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `ContainerConfiguration` The container configuration for the agent artifact. *Required*: No *Type*: [ContainerConfiguration](aws-properties-bedrockagentcore-runtime-containerconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime AuthorizerConfiguration Represents inbound authorization configuration options used to authenticate incoming requests. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[CustomJWTAuthorizer](#cfn-bedrockagentcore-runtime-authorizerconfiguration-customjwtauthorizer)" : CustomJWTAuthorizerConfiguration } ``` ### YAML ``` [CustomJWTAuthorizer](#cfn-bedrockagentcore-runtime-authorizerconfiguration-customjwtauthorizer): CustomJWTAuthorizerConfiguration ``` ## Properties `CustomJWTAuthorizer` The inbound JWT-based authorization, specifying how incoming requests should be authenticated. *Required*: No *Type*: [CustomJWTAuthorizerConfiguration](aws-properties-bedrockagentcore-runtime-customjwtauthorizerconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime AuthorizingClaimMatchValueType Defines the value or values to match for and the relationship of the match. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[ClaimMatchOperator](#cfn-bedrockagentcore-runtime-authorizingclaimmatchvaluetype-claimmatchoperator)" : String, "[ClaimMatchValue](#cfn-bedrockagentcore-runtime-authorizingclaimmatchvaluetype-claimmatchvalue)" : ClaimMatchValueType } ``` ### YAML ``` [ClaimMatchOperator](#cfn-bedrockagentcore-runtime-authorizingclaimmatchvaluetype-claimmatchoperator): String [ClaimMatchValue](#cfn-bedrockagentcore-runtime-authorizingclaimmatchvaluetype-claimmatchvalue): ClaimMatchValueType ``` ## Properties `ClaimMatchOperator` Defines the relationship between the claim field value and the value or values you're matching for. *Required*: Yes *Type*: String *Allowed values*: `EQUALS | CONTAINS | CONTAINS_ANY` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `ClaimMatchValue` The value or values to match for. *Required*: Yes *Type*: [ClaimMatchValueType](aws-properties-bedrockagentcore-runtime-claimmatchvaluetype.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime ClaimMatchValueType The value or values to match for. + Include a `matchValueString` with the `EQUALS` operator to specify a string that matches the claim field value. + Include a `matchValueArray` to specify an array of string values. You can use the following operators: + Use `CONTAINS` to yield a match if the claim field value is in the array. + Use `CONTAINS_ANY` to yield a match if the claim field value contains any of the strings in the array. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[MatchValueString](#cfn-bedrockagentcore-runtime-claimmatchvaluetype-matchvaluestring)" : String, "[MatchValueStringList](#cfn-bedrockagentcore-runtime-claimmatchvaluetype-matchvaluestringlist)" : [ String, ... ] } ``` ### YAML ``` [MatchValueString](#cfn-bedrockagentcore-runtime-claimmatchvaluetype-matchvaluestring): String [MatchValueStringList](#cfn-bedrockagentcore-runtime-claimmatchvaluetype-matchvaluestringlist): - String ``` ## Properties `MatchValueString` The string value to match for. *Required*: No *Type*: String *Pattern*: `[A-Za-z0-9_.-]+` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `MatchValueStringList` An array of strings to check for a match. *Required*: No *Type*: Array of String *Minimum*: `1` *Maximum*: `255` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime Code The source code configuration that specifies the location and details of the code to be executed. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[S3](#cfn-bedrockagentcore-runtime-code-s3)" : S3Location } ``` ### YAML ``` [S3](#cfn-bedrockagentcore-runtime-code-s3): S3Location ``` ## Properties `S3` The Amazon Amazon S3 object that contains the source code for the agent runtime. *Required*: No *Type*: [S3Location](aws-properties-bedrockagentcore-runtime-s3location.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime CodeConfiguration The configuration for the source code that defines how the agent runtime code should be executed, including the code location, runtime environment, and entry point. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[Code](#cfn-bedrockagentcore-runtime-codeconfiguration-code)" : Code, "[EntryPoint](#cfn-bedrockagentcore-runtime-codeconfiguration-entrypoint)" : [ String, ... ], "[Runtime](#cfn-bedrockagentcore-runtime-codeconfiguration-runtime)" : String } ``` ### YAML ``` [Code](#cfn-bedrockagentcore-runtime-codeconfiguration-code): Code [EntryPoint](#cfn-bedrockagentcore-runtime-codeconfiguration-entrypoint): - String [Runtime](#cfn-bedrockagentcore-runtime-codeconfiguration-runtime): String ``` ## Properties `Code` The source code location and configuration details. *Required*: Yes *Type*: [Code](aws-properties-bedrockagentcore-runtime-code.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `EntryPoint` The entry point for the code execution, specifying the function or method that should be invoked when the code runs. *Required*: Yes *Type*: Array of String *Minimum*: `1` *Maximum*: `2` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `Runtime` The runtime environment for executing the code (for example, Python 3.9 or Node.js 18). *Required*: Yes *Type*: String *Allowed values*: `PYTHON_3_10 | PYTHON_3_11 | PYTHON_3_12 | PYTHON_3_13 | PYTHON_3_14` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime ContainerConfiguration Representation of a container configuration. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[ContainerUri](#cfn-bedrockagentcore-runtime-containerconfiguration-containeruri)" : String } ``` ### YAML ``` [ContainerUri](#cfn-bedrockagentcore-runtime-containerconfiguration-containeruri): String ``` ## Properties `ContainerUri` The ECR URI of the container. *Required*: Yes *Type*: String *Pattern*: `^\d{12}\.dkr\.ecr\.([a-z0-9-]+)\.amazonaws\.com/((?:[a-z0-9]+(?:[._-][a-z0-9]+)*/)*[a-z0-9]+(?:[._-][a-z0-9]+)*)([:@]\S+)$` *Minimum*: `1` *Maximum*: `1024` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime CustomClaimValidationType Defines the name of a custom claim field and rules for finding matches to authenticate its value. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[AuthorizingClaimMatchValue](#cfn-bedrockagentcore-runtime-customclaimvalidationtype-authorizingclaimmatchvalue)" : AuthorizingClaimMatchValueType, "[InboundTokenClaimName](#cfn-bedrockagentcore-runtime-customclaimvalidationtype-inboundtokenclaimname)" : String, "[InboundTokenClaimValueType](#cfn-bedrockagentcore-runtime-customclaimvalidationtype-inboundtokenclaimvaluetype)" : String } ``` ### YAML ``` [AuthorizingClaimMatchValue](#cfn-bedrockagentcore-runtime-customclaimvalidationtype-authorizingclaimmatchvalue): AuthorizingClaimMatchValueType [InboundTokenClaimName](#cfn-bedrockagentcore-runtime-customclaimvalidationtype-inboundtokenclaimname): String [InboundTokenClaimValueType](#cfn-bedrockagentcore-runtime-customclaimvalidationtype-inboundtokenclaimvaluetype): String ``` ## Properties `AuthorizingClaimMatchValue` Defines the value or values to match for and the relationship of the match. *Required*: Yes *Type*: [AuthorizingClaimMatchValueType](aws-properties-bedrockagentcore-runtime-authorizingclaimmatchvaluetype.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `InboundTokenClaimName` The name of the custom claim field to check. *Required*: Yes *Type*: String *Pattern*: `[A-Za-z0-9_.-:]+` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `InboundTokenClaimValueType` The data type of the claim value to check for. + Use `STRING` if you want to find an exact match to a string you define. + Use `STRING_ARRAY` if you want to fnd a match to at least one value in an array you define. *Required*: Yes *Type*: String *Allowed values*: `STRING | STRING_ARRAY` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime CustomJWTAuthorizerConfiguration Configuration for inbound JWT-based authorization, specifying how incoming requests should be authenticated. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[AllowedAudience](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedaudience)" : [ String, ... ], "[AllowedClients](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedclients)" : [ String, ... ], "[AllowedScopes](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedscopes)" : [ String, ... ], "[CustomClaims](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-customclaims)" : [ CustomClaimValidationType, ... ], "[DiscoveryUrl](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-discoveryurl)" : String } ``` ### YAML ``` [AllowedAudience](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedaudience): - String [AllowedClients](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedclients): - String [AllowedScopes](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-allowedscopes): - String [CustomClaims](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-customclaims): - CustomClaimValidationType [DiscoveryUrl](#cfn-bedrockagentcore-runtime-customjwtauthorizerconfiguration-discoveryurl): String ``` ## Properties `AllowedAudience` Represents individual audience values that are validated in the incoming JWT token validation process. *Required*: No *Type*: Array of String *Minimum*: `1` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `AllowedClients` Represents individual client IDs that are validated in the incoming JWT token validation process. *Required*: No *Type*: Array of String *Minimum*: `1` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `AllowedScopes` An array of scopes that are allowed to access the token. *Required*: No *Type*: Array of String *Minimum*: `1` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `CustomClaims` An array of objects that define a custom claim validation name, value, and operation *Required*: No *Type*: Array of [CustomClaimValidationType](aws-properties-bedrockagentcore-runtime-customclaimvalidationtype.md) *Minimum*: `1` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `DiscoveryUrl` This URL is used to fetch OpenID Connect configuration or authorization server metadata for validating incoming tokens. *Required*: Yes *Type*: String *Pattern*: `^.+/\.well-known/openid-configuration$` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime FilesystemConfiguration The `FilesystemConfiguration` property type specifies Property description not available. for an [AWS::BedrockAgentCore::Runtime](aws-resource-bedrockagentcore-runtime.md). ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[SessionStorage](#cfn-bedrockagentcore-runtime-filesystemconfiguration-sessionstorage)" : SessionStorageConfiguration } ``` ### YAML ``` [SessionStorage](#cfn-bedrockagentcore-runtime-filesystemconfiguration-sessionstorage): SessionStorageConfiguration ``` ## Properties `SessionStorage` Property description not available. *Required*: No *Type*: [SessionStorageConfiguration](aws-properties-bedrockagentcore-runtime-sessionstorageconfiguration.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime LifecycleConfiguration The lifecycle configuration for the AgentCore Runtime. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[IdleRuntimeSessionTimeout](#cfn-bedrockagentcore-runtime-lifecycleconfiguration-idleruntimesessiontimeout)" : Integer, "[MaxLifetime](#cfn-bedrockagentcore-runtime-lifecycleconfiguration-maxlifetime)" : Integer } ``` ### YAML ``` [IdleRuntimeSessionTimeout](#cfn-bedrockagentcore-runtime-lifecycleconfiguration-idleruntimesessiontimeout): Integer [MaxLifetime](#cfn-bedrockagentcore-runtime-lifecycleconfiguration-maxlifetime): Integer ``` ## Properties `IdleRuntimeSessionTimeout` The idle session timeout for the AgentCore Runtime. *Required*: No *Type*: Integer *Minimum*: `60` *Maximum*: `28800` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `MaxLifetime` The maximum lifetime for the AgentCore Runtime. *Required*: No *Type*: Integer *Minimum*: `60` *Maximum*: `28800` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime NetworkConfiguration SecurityConfig for the Agent. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[NetworkMode](#cfn-bedrockagentcore-runtime-networkconfiguration-networkmode)" : String, "[NetworkModeConfig](#cfn-bedrockagentcore-runtime-networkconfiguration-networkmodeconfig)" : VpcConfig } ``` ### YAML ``` [NetworkMode](#cfn-bedrockagentcore-runtime-networkconfiguration-networkmode): String [NetworkModeConfig](#cfn-bedrockagentcore-runtime-networkconfiguration-networkmodeconfig): VpcConfig ``` ## Properties `NetworkMode` The network mode for the AgentCore Runtime. *Required*: Yes *Type*: String *Allowed values*: `PUBLIC | VPC` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `NetworkModeConfig` The network mode configuration for the AgentCore Runtime. *Required*: No *Type*: [VpcConfig](aws-properties-bedrockagentcore-runtime-vpcconfig.md) *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime RequestHeaderConfiguration Configuration for HTTP request headers that will be passed through to the runtime. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[RequestHeaderAllowlist](#cfn-bedrockagentcore-runtime-requestheaderconfiguration-requestheaderallowlist)" : [ String, ... ] } ``` ### YAML ``` [RequestHeaderAllowlist](#cfn-bedrockagentcore-runtime-requestheaderconfiguration-requestheaderallowlist): - String ``` ## Properties `RequestHeaderAllowlist` A list of HTTP headers that are allowed to be passed through to the runtime. *Required*: No *Type*: Array of String *Minimum*: `1` *Maximum*: `20` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime S3Location The Amazon S3 location for storing data. This structure defines where in Amazon S3 data is stored. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[Bucket](#cfn-bedrockagentcore-runtime-s3location-bucket)" : String, "[Prefix](#cfn-bedrockagentcore-runtime-s3location-prefix)" : String, "[VersionId](#cfn-bedrockagentcore-runtime-s3location-versionid)" : String } ``` ### YAML ``` [Bucket](#cfn-bedrockagentcore-runtime-s3location-bucket): String [Prefix](#cfn-bedrockagentcore-runtime-s3location-prefix): String [VersionId](#cfn-bedrockagentcore-runtime-s3location-versionid): String ``` ## Properties `Bucket` The name of the Amazon S3 bucket. *Required*: Yes *Type*: String *Pattern*: `^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `Prefix` The prefix for objects in the Amazon S3 bucket. *Required*: Yes *Type*: String *Minimum*: `1` *Maximum*: `1024` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `VersionId` The version ID of the Amazon Amazon S3 object. If not specified, the latest version of the object is used. *Required*: No *Type*: String *Minimum*: `3` *Maximum*: `1024` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime SessionStorageConfiguration The `SessionStorageConfiguration` property type specifies Property description not available. for an [AWS::BedrockAgentCore::Runtime](aws-resource-bedrockagentcore-runtime.md). ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[MountPath](#cfn-bedrockagentcore-runtime-sessionstorageconfiguration-mountpath)" : String } ``` ### YAML ``` [MountPath](#cfn-bedrockagentcore-runtime-sessionstorageconfiguration-mountpath): String ``` ## Properties `MountPath` Property description not available. *Required*: Yes *Type*: String *Pattern*: `^/mnt/[a-zA-Z0-9._-]+/?$` *Minimum*: `6` *Maximum*: `200` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime VpcConfig VpcConfig for the Agent. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[SecurityGroups](#cfn-bedrockagentcore-runtime-vpcconfig-securitygroups)" : [ String, ... ], "[Subnets](#cfn-bedrockagentcore-runtime-vpcconfig-subnets)" : [ String, ... ] } ``` ### YAML ``` [SecurityGroups](#cfn-bedrockagentcore-runtime-vpcconfig-securitygroups): - String [Subnets](#cfn-bedrockagentcore-runtime-vpcconfig-subnets): - String ``` ## Properties `SecurityGroups` The security groups associated with the VPC configuration. *Required*: Yes *Type*: Array of String *Minimum*: `1` *Maximum*: `16` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) `Subnets` The subnets associated with the VPC configuration. *Required*: Yes *Type*: Array of String *Minimum*: `1` *Maximum*: `16` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt) # AWS::BedrockAgentCore::Runtime WorkloadIdentityDetails The workload identity details for the AgentCore Runtime. ## Syntax To declare this entity in your CloudFormation template, use the following syntax: ### JSON ``` { "[WorkloadIdentityArn](#cfn-bedrockagentcore-runtime-workloadidentitydetails-workloadidentityarn)" : String } ``` ### YAML ``` [WorkloadIdentityArn](#cfn-bedrockagentcore-runtime-workloadidentitydetails-workloadidentityarn): String ``` ## Properties `WorkloadIdentityArn` The Amazon Resource Name (ARN) of the workload identity. *Required*: Yes *Type*: String *Minimum*: `1` *Maximum*: `1024` *Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)