This is the new *CloudFormation Template Reference Guide*. Please update your bookmarks and links. For help getting started with CloudFormation, see the [AWS CloudFormation User Guide](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/Welcome.html).

# AWS::BedrockAgentCore::BrowserCustom
<a name="aws-resource-bedrockagentcore-browsercustom"></a>

AgentCore Browser tool provides a fast, secure, cloud-based browser runtime to enable AI agents to interact with websites at scale.

For more information about using the custom browser, see [Interact with web applications using Amazon Bedrock AgentCore Browser](https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/browser-tool.html).

See the **Properties** section below for descriptions of both the required and optional properties.

## Syntax
<a name="aws-resource-bedrockagentcore-browsercustom-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-resource-bedrockagentcore-browsercustom-syntax.json"></a>

```
{
  "Type" : "AWS::BedrockAgentCore::BrowserCustom",
  "Properties" : {
      "[BrowserSigning](#cfn-bedrockagentcore-browsercustom-browsersigning)" : BrowserSigning,
      "[Description](#cfn-bedrockagentcore-browsercustom-description)" : String,
      "[ExecutionRoleArn](#cfn-bedrockagentcore-browsercustom-executionrolearn)" : String,
      "[Name](#cfn-bedrockagentcore-browsercustom-name)" : String,
      "[NetworkConfiguration](#cfn-bedrockagentcore-browsercustom-networkconfiguration)" : BrowserNetworkConfiguration,
      "[RecordingConfig](#cfn-bedrockagentcore-browsercustom-recordingconfig)" : RecordingConfig,
      "[Tags](#cfn-bedrockagentcore-browsercustom-tags)" : {Key: Value, ...}
    }
}
```

### YAML
<a name="aws-resource-bedrockagentcore-browsercustom-syntax.yaml"></a>

```
Type: AWS::BedrockAgentCore::BrowserCustom
Properties:
  [BrowserSigning](#cfn-bedrockagentcore-browsercustom-browsersigning): 
    BrowserSigning
  [Description](#cfn-bedrockagentcore-browsercustom-description): String
  [ExecutionRoleArn](#cfn-bedrockagentcore-browsercustom-executionrolearn): String
  [Name](#cfn-bedrockagentcore-browsercustom-name): String
  [NetworkConfiguration](#cfn-bedrockagentcore-browsercustom-networkconfiguration): 
    BrowserNetworkConfiguration
  [RecordingConfig](#cfn-bedrockagentcore-browsercustom-recordingconfig): 
    RecordingConfig
  [Tags](#cfn-bedrockagentcore-browsercustom-tags): 
    Key: Value
```

## Properties
<a name="aws-resource-bedrockagentcore-browsercustom-properties"></a>

`BrowserSigning`  <a name="cfn-bedrockagentcore-browsercustom-browsersigning"></a>
The browser signing configuration that enables cryptographic agent identification using HTTP message signatures for web bot authentication.  
*Required*: No  
*Type*: [BrowserSigning](aws-properties-bedrockagentcore-browsercustom-browsersigning.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Description`  <a name="cfn-bedrockagentcore-browsercustom-description"></a>
The description of the browser.  
*Required*: No  
*Type*: String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`ExecutionRoleArn`  <a name="cfn-bedrockagentcore-browsercustom-executionrolearn"></a>
The Amazon Resource Name (ARN) of the IAM role that provides permissions for the browser to access AWS services.  
*Required*: No  
*Type*: String  
*Pattern*: `^arn:(aws(?:-cn|-us-gov|-iso(?:-[bef])?)?):iam::[0-9]{12}:role/.+$`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Name`  <a name="cfn-bedrockagentcore-browsercustom-name"></a>
The name of the browser. The name must be unique within your account.  
*Required*: Yes  
*Type*: String  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`NetworkConfiguration`  <a name="cfn-bedrockagentcore-browsercustom-networkconfiguration"></a>
The network configuration for the browser. This configuration specifies the network mode for the browser.  
*Required*: Yes  
*Type*: [BrowserNetworkConfiguration](aws-properties-bedrockagentcore-browsercustom-browsernetworkconfiguration.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`RecordingConfig`  <a name="cfn-bedrockagentcore-browsercustom-recordingconfig"></a>
The recording configuration for the browser. When enabled, browser sessions are recorded and stored in the specified Amazon S3 location.  
*Required*: No  
*Type*: [RecordingConfig](aws-properties-bedrockagentcore-browsercustom-recordingconfig.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Tags`  <a name="cfn-bedrockagentcore-browsercustom-tags"></a>
A map of tag keys and values to assign to the browser. Tags enable you to categorize your resources in different ways, for example, by purpose, owner, or environment.  
*Required*: No  
*Type*: Object of String  
*Pattern*: `^[a-zA-Z0-9\s._:/=+@-]*$`  
*Minimum*: `0`  
*Maximum*: `256`  
*Update requires*: [No interruption](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-no-interrupt)

## Return values
<a name="aws-resource-bedrockagentcore-browsercustom-return-values"></a>

### Ref
<a name="aws-resource-bedrockagentcore-browsercustom-return-values-ref"></a>

When you pass the logical ID of this resource to the intrinsic `Ref` function, `Ref` returns the ARN of the custom browser. For example:

 `arn:aws:bedrock-agentcore:us-east-1:123456789012:browser-custom/MyBrowser-a1b2c3d4e5` 

For more information about using the `Ref` function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-ref.html).

### Fn::GetAtt
<a name="aws-resource-bedrockagentcore-browsercustom-return-values-fn--getatt"></a>

The `Fn::GetAtt` intrinsic function returns a value for a specified attribute of this type. The following are the available attributes and sample return values.

For more information about using the `Fn::GetAtt` intrinsic function, see [https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html](https://docs.aws.amazon.com/AWSCloudFormation/latest/TemplateReference/intrinsic-function-reference-getatt.html).

#### 
<a name="aws-resource-bedrockagentcore-browsercustom-return-values-fn--getatt-fn--getatt"></a>

`BrowserArn`  <a name="BrowserArn-fn::getatt"></a>
The ARN for the custom browser.

`BrowserId`  <a name="BrowserId-fn::getatt"></a>
The ID for the custom browser.

`CreatedAt`  <a name="CreatedAt-fn::getatt"></a>
The time at which the custom browser was created.

`FailureReason`  <a name="FailureReason-fn::getatt"></a>
The reason for failure if the browser is in a failed state.

`LastUpdatedAt`  <a name="LastUpdatedAt-fn::getatt"></a>
The time at which the custom browser was last updated.

`Status`  <a name="Status-fn::getatt"></a>
The status of the custom browser.

# AWS::BedrockAgentCore::BrowserCustom BrowserNetworkConfiguration
<a name="aws-properties-bedrockagentcore-browsercustom-browsernetworkconfiguration"></a>

The network configuration for a browser. This structure defines how the browser connects to the network.

## Syntax
<a name="aws-properties-bedrockagentcore-browsercustom-browsernetworkconfiguration-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-bedrockagentcore-browsercustom-browsernetworkconfiguration-syntax.json"></a>

```
{
  "[NetworkMode](#cfn-bedrockagentcore-browsercustom-browsernetworkconfiguration-networkmode)" : String,
  "[VpcConfig](#cfn-bedrockagentcore-browsercustom-browsernetworkconfiguration-vpcconfig)" : VpcConfig
}
```

### YAML
<a name="aws-properties-bedrockagentcore-browsercustom-browsernetworkconfiguration-syntax.yaml"></a>

```
  [NetworkMode](#cfn-bedrockagentcore-browsercustom-browsernetworkconfiguration-networkmode): String
  [VpcConfig](#cfn-bedrockagentcore-browsercustom-browsernetworkconfiguration-vpcconfig): 
    VpcConfig
```

## Properties
<a name="aws-properties-bedrockagentcore-browsercustom-browsernetworkconfiguration-properties"></a>

`NetworkMode`  <a name="cfn-bedrockagentcore-browsercustom-browsernetworkconfiguration-networkmode"></a>
The network mode for the browser. This field specifies how the browser connects to the network.  
*Required*: Yes  
*Type*: String  
*Allowed values*: `PUBLIC | VPC`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`VpcConfig`  <a name="cfn-bedrockagentcore-browsercustom-browsernetworkconfiguration-vpcconfig"></a>
The network mode configuration for the AgentCore Runtime.  
*Required*: No  
*Type*: [VpcConfig](aws-properties-bedrockagentcore-browsercustom-vpcconfig.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::BedrockAgentCore::BrowserCustom BrowserSigning
<a name="aws-properties-bedrockagentcore-browsercustom-browsersigning"></a>

Configuration for enabling browser signing capabilities that allow agents to cryptographically identify themselves to websites using HTTP message signatures.

## Syntax
<a name="aws-properties-bedrockagentcore-browsercustom-browsersigning-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-bedrockagentcore-browsercustom-browsersigning-syntax.json"></a>

```
{
  "[Enabled](#cfn-bedrockagentcore-browsercustom-browsersigning-enabled)" : Boolean
}
```

### YAML
<a name="aws-properties-bedrockagentcore-browsercustom-browsersigning-syntax.yaml"></a>

```
  [Enabled](#cfn-bedrockagentcore-browsercustom-browsersigning-enabled): Boolean
```

## Properties
<a name="aws-properties-bedrockagentcore-browsercustom-browsersigning-properties"></a>

`Enabled`  <a name="cfn-bedrockagentcore-browsercustom-browsersigning-enabled"></a>
Specifies whether browser signing is enabled. When enabled, the browser will cryptographically sign HTTP requests to identify itself as an AI agent to bot control vendors.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::BedrockAgentCore::BrowserCustom RecordingConfig
<a name="aws-properties-bedrockagentcore-browsercustom-recordingconfig"></a>

The recording configuration for a browser. This structure defines how browser sessions are recorded.

## Syntax
<a name="aws-properties-bedrockagentcore-browsercustom-recordingconfig-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-bedrockagentcore-browsercustom-recordingconfig-syntax.json"></a>

```
{
  "[Enabled](#cfn-bedrockagentcore-browsercustom-recordingconfig-enabled)" : Boolean,
  "[S3Location](#cfn-bedrockagentcore-browsercustom-recordingconfig-s3location)" : S3Location
}
```

### YAML
<a name="aws-properties-bedrockagentcore-browsercustom-recordingconfig-syntax.yaml"></a>

```
  [Enabled](#cfn-bedrockagentcore-browsercustom-recordingconfig-enabled): Boolean
  [S3Location](#cfn-bedrockagentcore-browsercustom-recordingconfig-s3location): 
    S3Location
```

## Properties
<a name="aws-properties-bedrockagentcore-browsercustom-recordingconfig-properties"></a>

`Enabled`  <a name="cfn-bedrockagentcore-browsercustom-recordingconfig-enabled"></a>
Indicates whether recording is enabled for the browser. When set to true, browser sessions are recorded.  
*Required*: No  
*Type*: Boolean  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`S3Location`  <a name="cfn-bedrockagentcore-browsercustom-recordingconfig-s3location"></a>
The Amazon S3 location where browser recordings are stored. This location contains the recorded browser sessions.  
*Required*: No  
*Type*: [S3Location](aws-properties-bedrockagentcore-browsercustom-s3location.md)  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::BedrockAgentCore::BrowserCustom S3Location
<a name="aws-properties-bedrockagentcore-browsercustom-s3location"></a>

The Amazon S3 location for storing data. This structure defines where in Amazon S3 data is stored.

## Syntax
<a name="aws-properties-bedrockagentcore-browsercustom-s3location-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-bedrockagentcore-browsercustom-s3location-syntax.json"></a>

```
{
  "[Bucket](#cfn-bedrockagentcore-browsercustom-s3location-bucket)" : String,
  "[Prefix](#cfn-bedrockagentcore-browsercustom-s3location-prefix)" : String
}
```

### YAML
<a name="aws-properties-bedrockagentcore-browsercustom-s3location-syntax.yaml"></a>

```
  [Bucket](#cfn-bedrockagentcore-browsercustom-s3location-bucket): String
  [Prefix](#cfn-bedrockagentcore-browsercustom-s3location-prefix): String
```

## Properties
<a name="aws-properties-bedrockagentcore-browsercustom-s3location-properties"></a>

`Bucket`  <a name="cfn-bedrockagentcore-browsercustom-s3location-bucket"></a>
The name of the Amazon S3 bucket. This bucket contains the stored data.  
*Required*: Yes  
*Type*: String  
*Pattern*: `^[a-z0-9][a-z0-9.-]{1,61}[a-z0-9]$`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Prefix`  <a name="cfn-bedrockagentcore-browsercustom-s3location-prefix"></a>
The prefix for objects in the Amazon S3 bucket. This prefix is added to the object keys to organize the data.  
*Required*: Yes  
*Type*: String  
*Minimum*: `1`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

# AWS::BedrockAgentCore::BrowserCustom VpcConfig
<a name="aws-properties-bedrockagentcore-browsercustom-vpcconfig"></a>

VpcConfig for the Agent.

## Syntax
<a name="aws-properties-bedrockagentcore-browsercustom-vpcconfig-syntax"></a>

To declare this entity in your CloudFormation template, use the following syntax:

### JSON
<a name="aws-properties-bedrockagentcore-browsercustom-vpcconfig-syntax.json"></a>

```
{
  "[SecurityGroups](#cfn-bedrockagentcore-browsercustom-vpcconfig-securitygroups)" : [ String, ... ],
  "[Subnets](#cfn-bedrockagentcore-browsercustom-vpcconfig-subnets)" : [ String, ... ]
}
```

### YAML
<a name="aws-properties-bedrockagentcore-browsercustom-vpcconfig-syntax.yaml"></a>

```
  [SecurityGroups](#cfn-bedrockagentcore-browsercustom-vpcconfig-securitygroups): 
    - String
  [Subnets](#cfn-bedrockagentcore-browsercustom-vpcconfig-subnets): 
    - String
```

## Properties
<a name="aws-properties-bedrockagentcore-browsercustom-vpcconfig-properties"></a>

`SecurityGroups`  <a name="cfn-bedrockagentcore-browsercustom-vpcconfig-securitygroups"></a>
The security groups associated with the VPC configuration.  
*Required*: Yes  
*Type*: Array of String  
*Minimum*: `1`  
*Maximum*: `16`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)

`Subnets`  <a name="cfn-bedrockagentcore-browsercustom-vpcconfig-subnets"></a>
The subnets associated with the VPC configuration.  
*Required*: Yes  
*Type*: Array of String  
*Minimum*: `1`  
*Maximum*: `16`  
*Update requires*: [Replacement](https://docs.aws.amazon.com/AWSCloudFormation/latest/UserGuide/using-cfn-updating-stacks-update-behaviors.html#update-replacement)