feat(bedrockagentcore): graduate to stable 🚀#37876
Conversation
|
PRs without a linked issue will receive lower priority for review and merging. Please update the description to follow the PR template and include a line like |
|
|
||||||||||||||
|
|
||||||||||||||
… trust policies Add aws:SourceAccount and aws:SourceArn conditions to the trust policies for Runtime, Memory, Browser, and CodeInterpreter auto-created service roles. This prevents cross-service confused deputy attacks by scoping role assumption to the specific resource in the account. Follows the pattern already established in Gateway and OnlineEvaluationConfig.
c3cf06b to
a68cc40
Compare
…te integ snapshots Add validation to reject tag keys starting with 'aws:' (case-insensitive) across all resources that accept tags. This prefix is reserved by AWS and cannot be used by customers. Affected resources: Runtime, RuntimeEndpoint, Memory, Browser, CodeInterpreter, Gateway, PolicyEngine, and Identity credential providers. Updated integ test snapshots for confused deputy trust policy changes.
The service appends a random suffix to resource names, so the original name cannot be extracted from the ARN. Accessing policyName or policyEngineName on imported resources now throws with a clear message.
We are excited to graduate the
@aws-cdk/aws-bedrock-agentcore-alphamodule to STABLE.It now lives on as
aws-cdk-lib/aws-bedrockagentcore.Migration Guide
BREAKING CHANGES
Renames
IGateway.nameIGateway.gatewayNameIGatewayTarget.nameIGatewayTarget.gatewayTargetNameBrowserCustom.nameBrowserCustom.browserCustomNameCodeInterpreterCustom.nameCodeInterpreterCustom.codeInterpreterCustomNameIMemoryStrategy.nameIMemoryStrategy.strategyNameMemoryStrategyCommonProps.nameMemoryStrategyCommonProps.strategyNameApiKeyCredentialProviderProps(gateway config)ApiKeyCredentialProviderOptionsApiKeyCredentialProviderResourceProps(constructor)ApiKeyCredentialProviderPropsEvaluatorReferenceEvaluatorSelectorEvaluatorReferenceBindResultEvaluatorSelectorBindResultDependency change
OverrideConfig.model: IBedrockInvokable(from@aws-cdk/aws-bedrock-alpha)OverrideConfig.model: IModel(fromaws-cdk-lib/aws-bedrock)metric()signatureRemoved
dimensions: DimensionsMappositional parameter. Resource dimension is now baked into the implementation. Additional dimensions can be passed viaprops.dimensionsMap.Before:
metric(metricName: string, dimensions: DimensionsMap, props?: MetricOptions): MetricAfter:
metric(metricName: string, props?: MetricOptions): Metric