v1alpha1

type APIGatewayTargetConfiguration struct {
	// The configuration for defining REST API tool filters and overrides for the
	// gateway target.
	APIGatewayToolConfiguration *APIGatewayToolConfiguration `json:"apiGatewayToolConfiguration,omitempty"`
	RestAPIID                   *string                      `json:"restAPIID,omitempty"`
	// Reference field for RestAPIID
	RestAPIRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"restAPIRef,omitempty"`
	Stage      *string                                  `json:"stage,omitempty"`
}

type APIGatewayToolConfiguration struct {
	ToolFilters   []*APIGatewayToolFilter   `json:"toolFilters,omitempty"`
	ToolOverrides []*APIGatewayToolOverride `json:"toolOverrides,omitempty"`
}

type APIGatewayToolFilter struct {
	FilterPath *string   `json:"filterPath,omitempty"`
	Methods    []*string `json:"methods,omitempty"`
}

type APIGatewayToolOverride struct {
	Description *string `json:"description,omitempty"`
	Method      *string `json:"method,omitempty"`
	Name        *string `json:"name,omitempty"`
	Path        *string `json:"path,omitempty"`
}

type APIKeyCredentialLocation string

type APIKeyCredentialProvider struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              APIKeyCredentialProviderSpec   `json:"spec,omitempty"`
	Status            APIKeyCredentialProviderStatus `json:"status,omitempty"`
}

type APIKeyCredentialProviderItem struct {
	CreatedTime           *metav1.Time `json:"createdTime,omitempty"`
	CredentialProviderARN *string      `json:"credentialProviderARN,omitempty"`
	LastUpdatedTime       *metav1.Time `json:"lastUpdatedTime,omitempty"`
	Name                  *string      `json:"name,omitempty"`
}

type APIKeyCredentialProviderList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []APIKeyCredentialProvider `json:"items"`
}

type APIKeyCredentialProviderSpec struct {

	// The API key to use for authentication. This value is encrypted and stored
	// securely.
	// +kubebuilder:validation:Required
	APIKey *ackv1alpha1.SecretKeyReference `json:"apiKey"`
	// The name of the API key credential provider. The name must be unique within
	// your account.
	//
	// Regex Pattern: `^[a-zA-Z0-9\-_]+$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// A map of tag keys and values to assign to the API key credential provider.
	// Tags enable you to categorize your resources in different ways, for example,
	// by purpose, owner, or environment.
	Tags map[string]*string `json:"tags,omitempty"`
}

type APIKeyCredentialProviderStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The Amazon Resource Name (ARN) of the secret containing the API key.
	// +kubebuilder:validation:Optional
	APIKeySecretARN *Secret `json:"apiKeySecretARN,omitempty"`
}

type APISchemaConfiguration struct {
	InlinePayload *string `json:"inlinePayload,omitempty"`
	// The Amazon S3 configuration for a gateway. This structure defines how the
	// gateway accesses files in Amazon S3.
	S3 *S3Configuration `json:"s3,omitempty"`
}

type ActorTokenContentType string

type AgentManagedRuntimeType string

type AgentRuntime struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              AgentRuntimeSpec   `json:"spec,omitempty"`
	Status            AgentRuntimeStatus `json:"status,omitempty"`
}

type AgentRuntimeArtifact struct {
	// The configuration for the source code that defines how the agent runtime
	// code should be executed, including the code location, runtime environment,
	// and entry point.
	CodeConfiguration *CodeConfiguration `json:"codeConfiguration,omitempty"`
	// Representation of a container configuration.
	ContainerConfiguration *ContainerConfiguration `json:"containerConfiguration,omitempty"`
}

type AgentRuntimeEndpoint struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              AgentRuntimeEndpointSpec   `json:"spec,omitempty"`
	Status            AgentRuntimeEndpointStatus `json:"status,omitempty"`
}

type AgentRuntimeEndpointList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AgentRuntimeEndpoint `json:"items"`
}

type AgentRuntimeEndpointSpec struct {

	// The unique identifier of the AgentCore Runtime to create an endpoint for.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,99}-[a-zA-Z0-9]{10}$`
	// +kubebuilder:validation:Required
	AgentRuntimeID *string `json:"agentRuntimeID"`
	// The version of the AgentCore Runtime to use for the endpoint.
	//
	// Regex Pattern: `^([1-9][0-9]{0,4})$`
	AgentRuntimeVersion *string `json:"agentRuntimeVersion,omitempty"`
	// The description of the AgentCore Runtime endpoint.
	Description *string `json:"description,omitempty"`
	// The name of the AgentCore Runtime endpoint.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,47}$`
	Name *string `json:"name,omitempty"`
	// A map of tag keys and values to assign to the agent runtime endpoint. Tags
	// enable you to categorize your resources in different ways, for example, by
	// purpose, owner, or environment.
	Tags map[string]*string `json:"tags,omitempty"`
}

type AgentRuntimeEndpointStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The Amazon Resource Name (ARN) of the AgentCore Runtime.
	//
	// Regex Pattern: `^arn:(-[^:]+)?:bedrock-agentcore:[a-z0-9-]+:[0-9]{12}:agent/[A-Fa-f0-9]{8}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{4}-[A-Fa-f0-9]{12}:([0-9]{0,4}[1-9][0-9]{0,4})$`
	// +kubebuilder:validation:Optional
	AgentRuntimeARN *string `json:"agentRuntimeARN,omitempty"`
	// The timestamp when the AgentCore Runtime endpoint was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The current status of the AgentCore Runtime endpoint.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
	// The target version of the AgentCore Runtime for the endpoint.
	//
	// Regex Pattern: `^([1-9][0-9]{0,4})$`
	// +kubebuilder:validation:Optional
	TargetVersion *string `json:"targetVersion,omitempty"`
}

type AgentRuntimeEndpointStatus_SDK string

type AgentRuntimeEndpoint_SDK struct {
	AgentRuntimeARN         *string      `json:"agentRuntimeARN,omitempty"`
	AgentRuntimeEndpointARN *string      `json:"agentRuntimeEndpointARN,omitempty"`
	CreatedAt               *metav1.Time `json:"createdAt,omitempty"`
	Description             *string      `json:"description,omitempty"`
	ID                      *string      `json:"id,omitempty"`
	LastUpdatedAt           *metav1.Time `json:"lastUpdatedAt,omitempty"`
	LiveVersion             *string      `json:"liveVersion,omitempty"`
	Name                    *string      `json:"name,omitempty"`
	Status                  *string      `json:"status,omitempty"`
	TargetVersion           *string      `json:"targetVersion,omitempty"`
}

type AgentRuntimeList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []AgentRuntime `json:"items"`
}

type AgentRuntimeSpec struct {

	// The artifact of the AgentCore Runtime.
	// +kubebuilder:validation:Required
	AgentRuntimeArtifact *AgentRuntimeArtifact `json:"agentRuntimeArtifact"`
	// The name of the AgentCore Runtime.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,47}$`
	// +kubebuilder:validation:Required
	AgentRuntimeName *string `json:"agentRuntimeName"`
	// The authorizer configuration for the AgentCore Runtime.
	AuthorizerConfiguration *AuthorizerConfiguration `json:"authorizerConfiguration,omitempty"`
	// The description of the AgentCore Runtime.
	Description *string `json:"description,omitempty"`
	// Environment variables to set in the AgentCore Runtime environment.
	EnvironmentVariables map[string]*string `json:"environmentVariables,omitempty"`
	// The filesystem configurations to mount into the AgentCore Runtime. Use filesystem
	// configurations to provide persistent storage to your AgentCore Runtime sessions.
	FilesystemConfigurations []*FilesystemConfiguration `json:"filesystemConfigurations,omitempty"`
	// The life cycle configuration for the AgentCore Runtime.
	LifecycleConfiguration *LifecycleConfiguration `json:"lifecycleConfiguration,omitempty"`
	// The network configuration for the AgentCore Runtime.
	// +kubebuilder:validation:Required
	NetworkConfiguration  *NetworkConfiguration  `json:"networkConfiguration"`
	ProtocolConfiguration *ProtocolConfiguration `json:"protocolConfiguration,omitempty"`
	// Configuration for HTTP request headers that will be passed through to the
	// runtime.
	RequestHeaderConfiguration *RequestHeaderConfiguration `json:"requestHeaderConfiguration,omitempty"`
	// The IAM role ARN that provides permissions for the AgentCore Runtime.
	//
	// Regex Pattern: `^arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/.+$`
	// +kubebuilder:validation:Required
	RoleARN *string `json:"roleARN"`
	// A map of tag keys and values to assign to the agent runtime. Tags enable
	// you to categorize your resources in different ways, for example, by purpose,
	// owner, or environment.
	Tags map[string]*string `json:"tags,omitempty"`
}

type AgentRuntimeStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The unique identifier of the AgentCore Runtime.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,99}-[a-zA-Z0-9]{10}$`
	// +kubebuilder:validation:Optional
	AgentRuntimeID *string `json:"agentRuntimeID,omitempty"`
	// The version of the AgentCore Runtime.
	//
	// Regex Pattern: `^([1-9][0-9]{0,4})$`
	// +kubebuilder:validation:Optional
	AgentRuntimeVersion *string `json:"agentRuntimeVersion,omitempty"`
	// The timestamp when the AgentCore Runtime was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The current status of the AgentCore Runtime.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
	// The workload identity details for the AgentCore Runtime.
	// +kubebuilder:validation:Optional
	WorkloadIdentityDetails *WorkloadIdentityDetails `json:"workloadIdentityDetails,omitempty"`
}

type AgentRuntimeStatus_SDK string

type AgentRuntime_SDK struct {
	AgentRuntimeARN     *string      `json:"agentRuntimeARN,omitempty"`
	AgentRuntimeID      *string      `json:"agentRuntimeID,omitempty"`
	AgentRuntimeName    *string      `json:"agentRuntimeName,omitempty"`
	AgentRuntimeVersion *string      `json:"agentRuntimeVersion,omitempty"`
	Description         *string      `json:"description,omitempty"`
	LastUpdatedAt       *metav1.Time `json:"lastUpdatedAt,omitempty"`
	Status              *string      `json:"status,omitempty"`
}

type ApprovalConfiguration struct {
	AutoApproval *bool `json:"autoApproval,omitempty"`
}

type AuthorizationData struct {
	// OAuth2-specific authorization data, including the authorization URL and user
	// identifier for the authorization session.
	Oauth2 *OAuth2AuthorizationData `json:"oauth2,omitempty"`
}

type AuthorizerConfiguration struct {
	// Configuration for inbound JWT-based authorization, specifying how incoming
	// requests should be authenticated.
	CustomJWTAuthorizer *CustomJWTAuthorizerConfiguration `json:"customJWTAuthorizer,omitempty"`
}

type AuthorizerType string

type AuthorizingClaimMatchValueType struct {
	ClaimMatchOperator *string `json:"claimMatchOperator,omitempty"`
	// The value or values to match for.
	//
	//    * Include a matchValueString with the EQUALS operator to specify a string
	//    that matches the claim field value.
	//
	//    * Include a matchValueArray to specify an array of string values. You
	//    can use the following operators: Use CONTAINS to yield a match if the
	//    claim field value is in the array. Use CONTAINS_ANY to yield a match if
	//    the claim field value contains any of the strings in the array.
	ClaimMatchValue *ClaimMatchValueType `json:"claimMatchValue,omitempty"`
}

type Browser struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              BrowserSpec   `json:"spec,omitempty"`
	Status            BrowserStatus `json:"status,omitempty"`
}

type BrowserEnterprisePolicy struct {
	// The location of a resource.
	Location *ResourceLocation `json:"location,omitempty"`
	Type     *string           `json:"type,omitempty"`
}

type BrowserEnterprisePolicyType string

type BrowserList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Browser `json:"items"`
}

type BrowserNetworkConfiguration struct {
	NetworkMode *string `json:"networkMode,omitempty"`
	// VpcConfig for the Agent.
	VPCConfig *VPCConfig `json:"vpcConfig,omitempty"`
}

type BrowserNetworkMode string

type BrowserProfile struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              BrowserProfileSpec   `json:"spec,omitempty"`
	Status            BrowserProfileStatus `json:"status,omitempty"`
}

type BrowserProfileList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []BrowserProfile `json:"items"`
}

type BrowserProfileSpec struct {

	// A description of the browser profile. Use this field to describe the purpose
	// or contents of the profile.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	Description *string `json:"description,omitempty"`
	// The name of the browser profile. The name must be unique within your account
	// and can contain alphanumeric characters and underscores.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,47}$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// A map of tag keys and values to assign to the browser profile. Tags enable
	// you to categorize your resources in different ways, for example, by purpose,
	// owner, or environment.
	Tags map[string]*string `json:"tags,omitempty"`
}

type BrowserProfileStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The timestamp when the browser profile was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The unique identifier of the created browser profile.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,47}-[a-zA-Z0-9]{10}$`
	// +kubebuilder:validation:Optional
	ID *string `json:"id,omitempty"`
	// The timestamp when browser session data was last saved to this profile.
	// +kubebuilder:validation:Optional
	LastSavedAt *metav1.Time `json:"lastSavedAt,omitempty"`
	// The identifier of the browser from which data was last saved to this profile.
	//
	// Regex Pattern: `^(aws\.browser\.v1|[a-zA-Z][a-zA-Z0-9_]{0,47}-[a-zA-Z0-9]{10})$`
	// +kubebuilder:validation:Optional
	LastSavedBrowserID *string `json:"lastSavedBrowserID,omitempty"`
	// The identifier of the browser session from which data was last saved to this
	// profile.
	//
	// Regex Pattern: `^[0-9a-zA-Z]{1,40}$`
	// +kubebuilder:validation:Optional
	LastSavedBrowserSessionID *string `json:"lastSavedBrowserSessionID,omitempty"`
	// The timestamp when the browser profile was last updated.
	// +kubebuilder:validation:Optional
	LastUpdatedAt *metav1.Time `json:"lastUpdatedAt,omitempty"`
	// The current status of the browser profile.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
}

type BrowserProfileStatus_SDK string

type BrowserProfileSummary struct {
	CreatedAt                 *metav1.Time `json:"createdAt,omitempty"`
	Description               *string      `json:"description,omitempty"`
	LastSavedAt               *metav1.Time `json:"lastSavedAt,omitempty"`
	LastSavedBrowserID        *string      `json:"lastSavedBrowserID,omitempty"`
	LastSavedBrowserSessionID *string      `json:"lastSavedBrowserSessionID,omitempty"`
	LastUpdatedAt             *metav1.Time `json:"lastUpdatedAt,omitempty"`
	Name                      *string      `json:"name,omitempty"`
	ProfileARN                *string      `json:"profileARN,omitempty"`
	ProfileID                 *string      `json:"profileID,omitempty"`
	// The status of a browser profile.
	Status *string `json:"status,omitempty"`
}

type BrowserSigningConfigInput struct {
	Enabled *bool `json:"enabled,omitempty"`
}

type BrowserSigningConfigOutput struct {
	Enabled *bool `json:"enabled,omitempty"`
}

type BrowserSpec struct {

	// The browser signing configuration that enables cryptographic agent identification
	// using HTTP message signatures for web bot authentication.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	BrowserSigning *BrowserSigningConfigInput `json:"browserSigning,omitempty"`
	// A list of certificates to install in the browser.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	Certificates []*Certificate `json:"certificates,omitempty"`
	// The description of the browser.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	Description *string `json:"description,omitempty"`
	// A list of enterprise policy files for the browser.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	EnterprisePolicies []*BrowserEnterprisePolicy `json:"enterprisePolicies,omitempty"`
	// The Amazon Resource Name (ARN) of the IAM role that provides permissions
	// for the browser to access Amazon Web Services services.
	//
	// Regex Pattern: `^arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/.+$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	ExecutionRoleARN *string                                  `json:"executionRoleARN,omitempty"`
	ExecutionRoleRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"executionRoleRef,omitempty"`
	// The name of the browser. The name must be unique within your account.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,47}$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// The network configuration for the browser. This configuration specifies the
	// network mode for the browser.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	NetworkConfiguration *BrowserNetworkConfiguration `json:"networkConfiguration"`
	// The recording configuration for the browser. When enabled, browser sessions
	// are recorded and stored in the specified Amazon S3 location.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	Recording *RecordingConfig `json:"recording,omitempty"`
	// A map of tag keys and values to assign to the browser. Tags enable you to
	// categorize your resources in different ways, for example, by purpose, owner,
	// or environment.
	Tags map[string]*string `json:"tags,omitempty"`
}

type BrowserStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The timestamp when the browser was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The reason for failure if the browser is in a failed state.
	// +kubebuilder:validation:Optional
	FailureReason *string `json:"failureReason,omitempty"`
	// The unique identifier of the created browser.
	//
	// Regex Pattern: `^(aws\.browser\.v1|[a-zA-Z][a-zA-Z0-9_]{0,47}-[a-zA-Z0-9]{10})$`
	// +kubebuilder:validation:Optional
	ID *string `json:"id,omitempty"`
	// The timestamp when the browser was last updated.
	// +kubebuilder:validation:Optional
	LastUpdatedAt *metav1.Time `json:"lastUpdatedAt,omitempty"`
	// The current status of the browser.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
}

type BrowserStatus_SDK string

type BrowserSummary struct {
	BrowserARN    *string      `json:"browserARN,omitempty"`
	BrowserID     *string      `json:"browserID,omitempty"`
	CreatedAt     *metav1.Time `json:"createdAt,omitempty"`
	Description   *string      `json:"description,omitempty"`
	LastUpdatedAt *metav1.Time `json:"lastUpdatedAt,omitempty"`
	Name          *string      `json:"name,omitempty"`
	Status        *string      `json:"status,omitempty"`
}

type CategoricalScaleDefinition struct {
	Definition *string `json:"definition,omitempty"`
	Label      *string `json:"label,omitempty"`
}

type CedarPolicy struct {
	Statement *string `json:"statement,omitempty"`
}

type Certificate struct {
	// The location from which to retrieve a certificate.
	Location *CertificateLocation `json:"location,omitempty"`
}

type CertificateLocation struct {
	// The Amazon Web Services Secrets Manager location configuration.
	SecretsManager *SecretsManagerLocation `json:"secretsManager,omitempty"`
}

type ClaimMatchOperatorType string

type ClaimMatchValueType struct {
	MatchValueString     *string   `json:"matchValueString,omitempty"`
	MatchValueStringList []*string `json:"matchValueStringList,omitempty"`
}

type ClientAuthenticationMethodType string

type ClusteringFrequency string

type Code struct {
	// The Amazon S3 location for storing data. This structure defines where in
	// Amazon S3 data is stored.
	S3 *S3Location `json:"s3,omitempty"`
}

type CodeConfiguration struct {
	// The source code configuration that specifies the location and details of
	// the code to be executed.
	Code       *Code     `json:"code,omitempty"`
	EntryPoint []*string `json:"entryPoint,omitempty"`
	Runtime    *string   `json:"runtime,omitempty"`
}

type CodeInterpreter struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              CodeInterpreterSpec   `json:"spec,omitempty"`
	Status            CodeInterpreterStatus `json:"status,omitempty"`
}

type CodeInterpreterList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []CodeInterpreter `json:"items"`
}

type CodeInterpreterNetworkConfiguration struct {
	NetworkMode *string `json:"networkMode,omitempty"`
	// VpcConfig for the Agent.
	VPCConfig *VPCConfig `json:"vpcConfig,omitempty"`
}

type CodeInterpreterNetworkMode string

type CodeInterpreterSpec struct {

	// A list of certificates to install in the code interpreter.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	Certificates []*Certificate `json:"certificates,omitempty"`
	// The description of the code interpreter.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	Description *string `json:"description,omitempty"`
	// The Amazon Resource Name (ARN) of the IAM role that provides permissions
	// for the code interpreter to access Amazon Web Services services.
	//
	// Regex Pattern: `^arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/.+$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	ExecutionRoleARN *string                                  `json:"executionRoleARN,omitempty"`
	ExecutionRoleRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"executionRoleRef,omitempty"`
	// The name of the code interpreter. The name must be unique within your account.
	//
	// Regex Pattern: `^[a-zA-Z][a-zA-Z0-9_]{0,47}$`
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// The network configuration for the code interpreter. This configuration specifies
	// the network mode for the code interpreter.
	// +kubebuilder:validation:XValidation:rule="self == oldSelf",message="Value is immutable once set"
	// +kubebuilder:validation:Required
	NetworkConfiguration *CodeInterpreterNetworkConfiguration `json:"networkConfiguration"`
	// A map of tag keys and values to assign to the code interpreter. Tags enable
	// you to categorize your resources in different ways, for example, by purpose,
	// owner, or environment.
	Tags map[string]*string `json:"tags,omitempty"`
}

type CodeInterpreterStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The timestamp when the code interpreter was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The reason for failure if the code interpreter is in a failed state.
	// +kubebuilder:validation:Optional
	FailureReason *string `json:"failureReason,omitempty"`
	// The unique identifier of the created code interpreter.
	//
	// Regex Pattern: `^(aws\.codeinterpreter\.v1|[a-zA-Z][a-zA-Z0-9_]{0,47}-[a-zA-Z0-9]{10})$`
	// +kubebuilder:validation:Optional
	ID *string `json:"id,omitempty"`
	// The timestamp when the code interpreter was last updated.
	// +kubebuilder:validation:Optional
	LastUpdatedAt *metav1.Time `json:"lastUpdatedAt,omitempty"`
	// The current status of the code interpreter.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
}

type CodeInterpreterStatus_SDK string

type CodeInterpreterSummary struct {
	CodeInterpreterARN *string      `json:"codeInterpreterARN,omitempty"`
	CodeInterpreterID  *string      `json:"codeInterpreterID,omitempty"`
	CreatedAt          *metav1.Time `json:"createdAt,omitempty"`
	Description        *string      `json:"description,omitempty"`
	LastUpdatedAt      *metav1.Time `json:"lastUpdatedAt,omitempty"`
	Name               *string      `json:"name,omitempty"`
	Status             *string      `json:"status,omitempty"`
}

type CoinbaseCdpConfigurationOutput struct {
	// Contains information about a secret in Amazon Web Services Secrets Manager.
	APIKeySecretARN *Secret `json:"apiKeySecretARN,omitempty"`
	// Contains information about a secret in Amazon Web Services Secrets Manager.
	WalletSecretARN *Secret `json:"walletSecretARN,omitempty"`
}

type ConfigurationBundleReference struct {
	BundleVersion *string `json:"bundleVersion,omitempty"`
}

type ConfigurationBundleStatus string

type ConfigurationBundleSummary struct {
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
}

type ConfigurationBundleVersionSummary struct {
	VersionCreatedAt *metav1.Time `json:"versionCreatedAt,omitempty"`
}

type ConnectorConfiguration struct {
	Description *string `json:"description,omitempty"`
	Name        *string `json:"name,omitempty"`
}

type ConnectorParameterOverride struct {
	Description *string `json:"description,omitempty"`
	Path        *string `json:"path,omitempty"`
	Visible     *bool   `json:"visible,omitempty"`
}

type ContainerConfiguration struct {
	ContainerURI *string `json:"containerURI,omitempty"`
}

type ContentConfiguration struct {
	Level *string `json:"level,omitempty"`
	Type  *string `json:"type_,omitempty"`
}

type ContentLevel string

type ContentType string

type CredentialProvider struct {
	// An API key credential provider for gateway authentication. This structure
	// contains the configuration for authenticating with the target endpoint using
	// an API key.
	APIKeyCredentialProvider *GatewayAPIKeyCredentialProvider `json:"apiKeyCredentialProvider,omitempty"`
	// An OAuth credential provider for gateway authentication. This structure contains
	// the configuration for authenticating with the target endpoint using OAuth.
	OauthCredentialProvider *OAuthCredentialProvider `json:"oauthCredentialProvider,omitempty"`
}

type CredentialProviderConfiguration struct {
	// A credential provider for gateway authentication. This structure contains
	// the configuration for authenticating with the target endpoint.
	CredentialProvider     *CredentialProvider `json:"credentialProvider,omitempty"`
	CredentialProviderType *string             `json:"credentialProviderType,omitempty"`
}

type CredentialProviderType string

type CredentialProviderVendorType string

type CustomClaimValidationType struct {
	// Defines the value or values to match for and the relationship of the match.
	AuthorizingClaimMatchValue *AuthorizingClaimMatchValueType `json:"authorizingClaimMatchValue,omitempty"`
	InboundTokenClaimName      *string                         `json:"inboundTokenClaimName,omitempty"`
	InboundTokenClaimValueType *string                         `json:"inboundTokenClaimValueType,omitempty"`
}

type CustomConfigurationInput struct {
	// Input for the configuration to override the episodic memory strategy.
	EpisodicOverride *EpisodicOverrideConfigurationInput `json:"episodicOverride,omitempty"`
	// Input configuration for a self-managed memory strategy.
	SelfManagedConfiguration *SelfManagedConfigurationInput `json:"selfManagedConfiguration,omitempty"`
	// Input for semantic override configuration in a memory strategy.
	SemanticOverride *SemanticOverrideConfigurationInput `json:"semanticOverride,omitempty"`
	// Input for summary override configuration in a memory strategy.
	SummaryOverride *SummaryOverrideConfigurationInput `json:"summaryOverride,omitempty"`
	// Input for user preference override configuration in a memory strategy.
	UserPreferenceOverride *UserPreferenceOverrideConfigurationInput `json:"userPreferenceOverride,omitempty"`
}

type CustomConsolidationConfigurationInput struct {
	// Configurations for overriding the consolidation step of the episodic memory
	// strategy.
	EpisodicConsolidationOverride *EpisodicOverrideConsolidationConfigurationInput `json:"episodicConsolidationOverride,omitempty"`
	// Input for semantic override consolidation configuration in a memory strategy.
	SemanticConsolidationOverride *SemanticOverrideConsolidationConfigurationInput `json:"semanticConsolidationOverride,omitempty"`
	// Input for summary override consolidation configuration in a memory strategy.
	SummaryConsolidationOverride *SummaryOverrideConsolidationConfigurationInput `json:"summaryConsolidationOverride,omitempty"`
	// Input for user preference override consolidation configuration in a memory
	// strategy.
	UserPreferenceConsolidationOverride *UserPreferenceOverrideConsolidationConfigurationInput `json:"userPreferenceConsolidationOverride,omitempty"`
}

type CustomExtractionConfigurationInput struct {
	// Configurations for overriding the extraction step of the episodic memory
	// strategy.
	EpisodicExtractionOverride *EpisodicOverrideExtractionConfigurationInput `json:"episodicExtractionOverride,omitempty"`
	// Input for semantic override extraction configuration in a memory strategy.
	SemanticExtractionOverride *SemanticOverrideExtractionConfigurationInput `json:"semanticExtractionOverride,omitempty"`
	// Input for user preference override extraction configuration in a memory strategy.
	UserPreferenceExtractionOverride *UserPreferenceOverrideExtractionConfigurationInput `json:"userPreferenceExtractionOverride,omitempty"`
}

type CustomJWTAuthorizerConfiguration struct {
	AllowedAudience []*string                    `json:"allowedAudience,omitempty"`
	AllowedClients  []*string                    `json:"allowedClients,omitempty"`
	AllowedScopes   []*string                    `json:"allowedScopes,omitempty"`
	CustomClaims    []*CustomClaimValidationType `json:"customClaims,omitempty"`
	DiscoveryURL    *string                      `json:"discoveryURL,omitempty"`
}

type CustomMemoryStrategyInput struct {
	// Input for custom configuration of a memory strategy.
	Configuration      *CustomConfigurationInput `json:"configuration,omitempty"`
	Description        *string                   `json:"description,omitempty"`
	Name               *string                   `json:"name,omitempty"`
	NamespaceTemplates []*string                 `json:"namespaceTemplates,omitempty"`
	Namespaces         []*string                 `json:"namespaces,omitempty"`
}

type CustomReflectionConfigurationInput struct {
	// Configurations for overriding the reflection step of the episodic memory
	// strategy.
	EpisodicReflectionOverride *EpisodicOverrideReflectionConfigurationInput `json:"episodicReflectionOverride,omitempty"`
}

type DatasetSchemaType string

type DatasetStatus string

type DatasetSummary struct {
	CreatedAt   *metav1.Time `json:"createdAt,omitempty"`
	Description *string      `json:"description,omitempty"`
	UpdatedAt   *metav1.Time `json:"updatedAt,omitempty"`
}

type DatasetVersionSummary struct {
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
}

type DeleteMemoryStrategyInput struct {
	MemoryStrategyID *string `json:"memoryStrategyID,omitempty"`
}

type DescriptorType string

type DraftStatus string

type EFSAccessPointConfiguration struct {
	MountPath *string `json:"mountPath,omitempty"`
}

type EndpointIPAddressType string

type EnforcementMode string

type EpisodicConsolidationOverride struct {
	AppendToPrompt *string `json:"appendToPrompt,omitempty"`
	ModelID        *string `json:"modelID,omitempty"`
}

type EpisodicExtractionOverride struct {
	AppendToPrompt *string `json:"appendToPrompt,omitempty"`
	ModelID        *string `json:"modelID,omitempty"`
}

type EpisodicMemoryStrategyInput struct {
	Description        *string   `json:"description,omitempty"`
	Name               *string   `json:"name,omitempty"`
	NamespaceTemplates []*string `json:"namespaceTemplates,omitempty"`
	Namespaces         []*string `json:"namespaces,omitempty"`
	// An episodic reflection configuration input.
	ReflectionConfiguration *EpisodicReflectionConfigurationInput `json:"reflectionConfiguration,omitempty"`
}

type EpisodicOverrideConfigurationInput struct {
	// Configurations for overriding the consolidation step of the episodic memory
	// strategy.
	Consolidation *EpisodicOverrideConsolidationConfigurationInput `json:"consolidation,omitempty"`
	// Configurations for overriding the extraction step of the episodic memory
	// strategy.
	Extraction *EpisodicOverrideExtractionConfigurationInput `json:"extraction,omitempty"`
	// Configurations for overriding the reflection step of the episodic memory
	// strategy.
	Reflection *EpisodicOverrideReflectionConfigurationInput `json:"reflection,omitempty"`
}

type EpisodicOverrideConsolidationConfigurationInput struct {
	AppendToPrompt *string `json:"appendToPrompt,omitempty"`
	ModelID        *string `json:"modelID,omitempty"`
}

type EpisodicOverrideExtractionConfigurationInput struct {
	AppendToPrompt *string `json:"appendToPrompt,omitempty"`
	ModelID        *string `json:"modelID,omitempty"`
}

type EpisodicOverrideReflectionConfigurationInput struct {
	AppendToPrompt     *string   `json:"appendToPrompt,omitempty"`
	ModelID            *string   `json:"modelID,omitempty"`
	NamespaceTemplates []*string `json:"namespaceTemplates,omitempty"`
	Namespaces         []*string `json:"namespaces,omitempty"`
}

type EpisodicReflectionConfiguration struct {
	NamespaceTemplates []*string `json:"namespaceTemplates,omitempty"`
	Namespaces         []*string `json:"namespaces,omitempty"`
}

type EpisodicReflectionConfigurationInput struct {
	NamespaceTemplates []*string `json:"namespaceTemplates,omitempty"`
	Namespaces         []*string `json:"namespaces,omitempty"`
}

type EpisodicReflectionOverride struct {
	AppendToPrompt     *string   `json:"appendToPrompt,omitempty"`
	ModelID            *string   `json:"modelID,omitempty"`
	NamespaceTemplates []*string `json:"namespaceTemplates,omitempty"`
	Namespaces         []*string `json:"namespaces,omitempty"`
}

type EvaluatorLevel string

type EvaluatorStatus string

type EvaluatorSummary struct {
	CreatedAt             *metav1.Time `json:"createdAt,omitempty"`
	KMSKeyARN             *string      `json:"kmsKeyARN,omitempty"`
	LockedForModification *bool        `json:"lockedForModification,omitempty"`
	UpdatedAt             *metav1.Time `json:"updatedAt,omitempty"`
}

type EvaluatorType string

type ExceptionLevel string

type ExtractionType string

type FilesystemConfiguration struct {
	// Configuration for a session storage filesystem mounted into the AgentCore
	// Runtime. Session storage provides persistent storage that is preserved across
	// AgentCore Runtime session invocations.
	SessionStorage *SessionStorageConfiguration `json:"sessionStorage,omitempty"`
}

type Filter struct {
	Key *string `json:"key,omitempty"`
}

type FilterOperator string

type FilterValue struct {
	BooleanValue *bool   `json:"booleanValue,omitempty"`
	StringValue  *string `json:"stringValue,omitempty"`
}

type Finding struct {
	Description *string `json:"description,omitempty"`
}

type FindingType string

type Gateway struct {
	metav1.TypeMeta   `json:",inline"`
	metav1.ObjectMeta `json:"metadata,omitempty"`
	Spec              GatewaySpec   `json:"spec,omitempty"`
	Status            GatewayStatus `json:"status,omitempty"`
}

type GatewayAPIKeyCredentialProvider struct {
	CredentialLocation      *string `json:"credentialLocation,omitempty"`
	CredentialParameterName *string `json:"credentialParameterName,omitempty"`
	CredentialPrefix        *string `json:"credentialPrefix,omitempty"`
	ProviderARN             *string `json:"providerARN,omitempty"`
}

type GatewayInterceptionPoint string

type GatewayInterceptorConfiguration struct {
	// The input configuration of the interceptor.
	InputConfiguration *InterceptorInputConfiguration `json:"inputConfiguration,omitempty"`
	InterceptionPoints []*string                      `json:"interceptionPoints,omitempty"`
	// The interceptor configuration.
	Interceptor *InterceptorConfiguration `json:"interceptor,omitempty"`
}

type GatewayList struct {
	metav1.TypeMeta `json:",inline"`
	metav1.ListMeta `json:"metadata,omitempty"`
	Items           []Gateway `json:"items"`
}

type GatewayPolicyEngineConfiguration struct {
	ARN  *string `json:"arn,omitempty"`
	Mode *string `json:"mode,omitempty"`
}

type GatewayPolicyEngineMode string

type GatewayProtocolConfiguration struct {
	// The configuration for a Model Context Protocol (MCP) gateway. This structure
	// defines how the gateway implements the MCP protocol.
	Mcp *MCPGatewayConfiguration `json:"mcp,omitempty"`
}

type GatewayProtocolType string

type GatewayRuleDetail struct {
	CreatedAt  *metav1.Time `json:"createdAt,omitempty"`
	GatewayARN *string      `json:"gatewayARN,omitempty"`
	UpdatedAt  *metav1.Time `json:"updatedAt,omitempty"`
}

type GatewayRuleStatus string

type GatewaySpec struct {

	// The authorizer configuration for the gateway. Required if authorizerType
	// is CUSTOM_JWT.
	AuthorizerConfiguration *AuthorizerConfiguration `json:"authorizerConfiguration,omitempty"`
	// The type of authorizer to use for the gateway.
	//
	//   - CUSTOM_JWT - Authorize with a bearer token.
	//
	//   - AWS_IAM - Authorize with your Amazon Web Services IAM credentials.
	//
	//   - NONE - No authorization
	//
	// +kubebuilder:validation:Required
	AuthorizerType *string `json:"authorizerType"`
	// The description of the gateway.
	Description *string `json:"description,omitempty"`
	// The level of detail in error messages returned when invoking the gateway.
	//
	//   - If the value is DEBUG, granular exception messages are returned to help
	//     a user debug the gateway.
	//
	//   - If the value is omitted, a generic error message is returned to the
	//     end user.
	ExceptionLevel *string `json:"exceptionLevel,omitempty"`
	// A list of configuration settings for a gateway interceptor. Gateway interceptors
	// allow custom code to be invoked during gateway invocations.
	InterceptorConfigurations []*GatewayInterceptorConfiguration `json:"interceptorConfigurations,omitempty"`
	// The Amazon Resource Name (ARN) of the KMS key used to encrypt data associated
	// with the gateway.
	//
	// Regex Pattern: `^arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}$`
	KMSKeyARN *string                                  `json:"kmsKeyARN,omitempty"`
	KMSKeyRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"kmsKeyRef,omitempty"`
	// The name of the gateway. The name must be unique within your account.
	//
	// Regex Pattern: `^([0-9a-zA-Z][-]?){1,48}$`
	// +kubebuilder:validation:Required
	Name *string `json:"name"`
	// The policy engine configuration for the gateway. A policy engine is a collection
	// of policies that evaluates and authorizes agent tool calls. When associated
	// with a gateway, the policy engine intercepts all agent requests and determines
	// whether to allow or deny each action based on the defined policies.
	PolicyEngineConfiguration *GatewayPolicyEngineConfiguration `json:"policyEngineConfiguration,omitempty"`
	// The configuration settings for the protocol specified in the protocolType
	// parameter.
	ProtocolConfiguration *GatewayProtocolConfiguration `json:"protocolConfiguration,omitempty"`
	// The protocol type for the gateway.
	// +kubebuilder:validation:Required
	ProtocolType *string `json:"protocolType"`
	// The Amazon Resource Name (ARN) of the IAM role that provides permissions
	// for the gateway to access Amazon Web Services services.
	//
	// Regex Pattern: `^arn:aws(-[^:]+)?:iam::([0-9]{12})?:role/.+$`
	RoleARN *string                                  `json:"roleARN,omitempty"`
	RoleRef *ackv1alpha1.AWSResourceReferenceWrapper `json:"roleRef,omitempty"`
	// A map of key-value pairs to associate with the gateway as metadata tags.
	Tags map[string]*string `json:"tags,omitempty"`
}

type GatewayStatus struct {
	// All CRs managed by ACK have a common `Status.ACKResourceMetadata` member
	// that is used to contain resource sync state, account ownership,
	// constructed ARN for the resource
	// +kubebuilder:validation:Optional
	ACKResourceMetadata *ackv1alpha1.ResourceMetadata `json:"ackResourceMetadata"`
	// All CRs managed by ACK have a common `Status.Conditions` member that
	// contains a collection of `ackv1alpha1.Condition` objects that describe
	// the various terminal states of the CR and its backend AWS service API
	// resource
	// +kubebuilder:validation:Optional
	Conditions []*ackv1alpha1.Condition `json:"conditions"`
	// The timestamp when the gateway was created.
	// +kubebuilder:validation:Optional
	CreatedAt *metav1.Time `json:"createdAt,omitempty"`
	// The unique identifier of the created gateway.
	//
	// Regex Pattern: `^([0-9a-z][-]?){1,100}-[0-9a-z]{10}$`
	// +kubebuilder:validation:Optional
	GatewayID *string `json:"gatewayID,omitempty"`
	// The URL endpoint for the created gateway.
	// +kubebuilder:validation:Optional
	GatewayURL *string `json:"gatewayURL,omitempty"`
	// The current status of the gateway.
	// +kubebuilder:validation:Optional
	Status *string `json:"status,omitempty"`
	// The reasons for the current status of the gateway.
	// +kubebuilder:validation:Optional
	StatusReasons []*string `json:"statusReasons,omitempty"`
	// The timestamp when the gateway was last updated.
	// +kubebuilder:validation:Optional
	UpdatedAt *metav1.Time `json:"updatedAt,omitempty"`
	// The workload identity details for the created gateway.
	// +kubebuilder:validation:Optional
	WorkloadIdentityDetails *WorkloadIdentityDetails `json:"workloadIdentityDetails,omitempty"`
}

type GatewayStatus_SDK string

type GatewaySummary struct {
	AuthorizerType *string      `json:"authorizerType,omitempty"`
	CreatedAt      *metav1.Time `json:"createdAt,omitempty"`
	Description    *string      `json:"description,omitempty"`
	GatewayID      *string      `json:"gatewayID,omitempty"`
	Name           *string      `json:"name,omitempty"`
	ProtocolType   *string      `json:"protocolType,omitempty"`
	Status         *string      `json:"status,omitempty"`
	UpdatedAt      *metav1.Time `json:"updatedAt,omitempty"`
}