Method constructor

lib/index.ts:104–910

(scope: Construct, id: string, props: cdk.StackProps)

        // ----------------------------------------------------------------- //
        const gatewayServiceRole = new iam.Role(this, "GatewayServiceRole", {
            roleName: `${stackName}-${region}-gateway-role`,
            description: "Role assumed by the AgentCore Gateway to call web-search",
            assumedBy: new iam.ServicePrincipal("bedrock-agentcore.amazonaws.com", {
                conditions: {
                    StringEquals: { "aws:SourceAccount": account },
                    ArnLike: {
                        "aws:SourceArn": `arn:aws:bedrock-agentcore:${region}:${account}:gateway/*`,
                    },
                },
            }),
        })
        gatewayServiceRole.addToPolicy(
            new iam.PolicyStatement({
                sid: "InvokeGateway",
                actions: ["bedrock-agentcore:InvokeGateway"],
                resources: [`arn:aws:bedrock-agentcore:${region}:${account}:gateway/*`],
            })
        )
        gatewayServiceRole.addToPolicy(
            new iam.PolicyStatement({
                sid: "InvokeWebSearch",
                actions: ["bedrock-agentcore:InvokeWebSearch"],
                resources: [`arn:aws:bedrock-agentcore:${region}:aws:tool/web-search.v1`],
            })
        )

        const gateway = new cdk.CfnResource(this, "WebSearchGateway", {
            type: "AWS::BedrockAgentCore::Gateway",
            properties: {
                Name: `${stackName}-websearch`.replace(/[^a-zA-Z0-9_-]/g, "-"),
                Description: "DevGenius managed web-search gateway",
                ProtocolType: "MCP",
                AuthorizerType: "AWS_IAM",
                RoleArn: gatewayServiceRole.roleArn,
            },
        })
        const gatewayUrl = gateway.getAtt("GatewayUrl").toString()

        const webSearchTarget = new cdk.CfnResource(this, "WebSearchTarget", {
            type: "AWS::BedrockAgentCore::GatewayTarget",
            properties: {
                GatewayIdentifier: gateway.getAtt("GatewayIdentifier").toString(),
                Name: "websearch",
                Description: "Built-in web-search connector",
                CredentialProviderConfigurations: [
                    { CredentialProviderType: "GATEWAY_IAM_ROLE" },
                ],
                TargetConfiguration: {
                    Mcp: {
                        Connector: {
                            Source: { ConnectorId: "web-search" },
                            Configurations: [{ Name: "WebSearch", ParameterValues: {} }],
                        },
                    },
                },
            },
        })
        webSearchTarget.addDependency(gateway)