pub enum ResolveBindingResponse {
Show 18 variants
S3 {
binding: RemoteS3StorageBinding,
client_config: RemoteAwsClientConfig,
expires_at: String,
},
Blob {
binding: RemoteBlobStorageBinding,
client_config: RemoteAzureClientConfig,
expires_at: String,
},
Gcs {
binding: RemoteGcsStorageBinding,
client_config: RemoteGcpClientConfig,
expires_at: String,
},
Sqs {
binding: RemoteSqsQueueBinding,
client_config: RemoteAwsClientConfig,
expires_at: String,
},
Pubsub {
binding: RemotePubsubQueueBinding,
client_config: RemoteGcpClientConfig,
expires_at: String,
},
Servicebus {
binding: RemoteServiceBusQueueBinding,
client_config: RemoteAzureClientConfig,
expires_at: String,
},
Dynamodb {
binding: RemoteDynamodbKvBinding,
client_config: RemoteAwsClientConfig,
expires_at: String,
},
Firestore {
binding: RemoteFirestoreKvBinding,
client_config: RemoteGcpClientConfig,
expires_at: String,
},
Tablestorage {
binding: RemoteTableStorageKvBinding,
client_config: RemoteAzureClientConfig,
expires_at: String,
},
Kms {
binding: RemoteAwsKmsKeyBinding,
client_config: RemoteAwsClientConfig,
expires_at: String,
},
CloudKms {
binding: RemoteGcpCloudKmsKeyBinding,
client_config: RemoteGcpClientConfig,
expires_at: String,
},
KeyVaultKey {
binding: RemoteAzureKeyVaultKeyBinding,
client_config: RemoteAzureClientConfig,
expires_at: String,
},
Bedrock {
binding: RemoteAwsBedrockAiBinding,
client_config: RemoteAwsClientConfig,
expires_at: String,
resource_id: String,
},
Vertex {
binding: RemoteGcpVertexAiBinding,
client_config: RemoteGcpClientConfig,
expires_at: String,
resource_id: String,
},
Foundry {
binding: RemoteAzureFoundryAiBinding,
client_config: RemoteAzureClientConfig,
expires_at: String,
resource_id: String,
},
SandboxAws {
binding: RemoteAwsSandboxBinding,
client_config: RemoteAwsClientConfig,
expires_at: String,
},
SandboxAzure {
binding: RemoteAzureSandboxBinding,
client_config: RemoteAzureClientConfig,
expires_at: String,
},
SandboxGcpAgentPlatform {
binding: RemoteGcpSandboxBinding,
client_config: RemoteGcpClientConfig,
expires_at: String,
},
}Expand description
One approved remote Storage binding paired with credentials for the same provider. The discriminant makes cross-provider combinations impossible.
JSON schema
{
"description": "One approved remote Storage binding paired with credentials for the same\nprovider. The discriminant makes cross-provider combinations impossible.",
"oneOf": [
{
"description": "AWS S3 and an AWS session.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteS3StorageBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAwsClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"s3"
]
}
}
},
{
"description": "Azure Blob Storage and a storage-audience access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteBlobStorageBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAzureClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"blob"
]
}
}
},
{
"description": "Google Cloud Storage and a Remote Bindings identity access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteGcsStorageBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteGcpClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"gcs"
]
}
}
},
{
"description": "Send-only Sqs queue and a short-lived credential lease.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteSqsQueueBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAwsClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"sqs"
]
}
}
},
{
"description": "Send-only Pubsub queue and a short-lived credential lease.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemotePubsubQueueBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteGcpClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"pubsub"
]
}
}
},
{
"description": "Send-only Servicebus queue and a short-lived credential lease.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteServiceBusQueueBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAzureClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"servicebus"
]
}
}
},
{
"description": "AWS DynamoDB KV table and an AWS session.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteDynamodbKvBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAwsClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"dynamodb"
]
}
}
},
{
"description": "GCP Firestore KV collection and an access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteFirestoreKvBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteGcpClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"firestore"
]
}
}
},
{
"description": "Azure Table Storage KV table and a storage-audience access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteTableStorageKvBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAzureClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"tablestorage"
]
}
}
},
{
"description": "AWS KMS key and an AWS session.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteAwsKmsKeyBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAwsClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"kms"
]
}
}
},
{
"description": "GCP Cloud KMS key and an access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteGcpCloudKmsKeyBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteGcpClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"cloud-kms"
]
}
}
},
{
"description": "Azure Key Vault key and a vault-audience access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteAzureKeyVaultKeyBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAzureClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"key-vault-key"
]
}
}
},
{
"description": "AWS Bedrock and an AWS session.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"resourceId",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteAwsBedrockAiBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAwsClientConfig"
},
"expiresAt": {
"type": "string"
},
"resourceId": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"bedrock"
]
}
}
},
{
"description": "GCP Vertex AI and an access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"resourceId",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteGcpVertexAiBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteGcpClientConfig"
},
"expiresAt": {
"type": "string"
},
"resourceId": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"vertex"
]
}
}
},
{
"description": "Azure AI Foundry and a Cognitive Services access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"resourceId",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteAzureFoundryAiBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAzureClientConfig"
},
"expiresAt": {
"type": "string"
},
"resourceId": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"foundry"
]
}
}
},
{
"description": "AWS Lambda MicroVM sandbox and an AWS session.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteAwsSandboxBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAwsClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"sandbox-aws"
]
}
}
},
{
"description": "Azure Container Apps sandbox group and an Azure data-plane token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteAzureSandboxBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteAzureClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"sandbox-azure"
]
}
}
},
{
"description": "GCP Agent Platform reasoning engine and a GCP access token.",
"type": "object",
"required": [
"binding",
"clientConfig",
"expiresAt",
"service"
],
"properties": {
"binding": {
"$ref": "#/components/schemas/RemoteGcpSandboxBinding"
},
"clientConfig": {
"$ref": "#/components/schemas/RemoteGcpClientConfig"
},
"expiresAt": {
"type": "string"
},
"service": {
"type": "string",
"enum": [
"sandbox-gcp-agent-platform"
]
}
}
}
]
}Variants§
S3
AWS S3 and an AWS session.
Blob
Azure Blob Storage and a storage-audience access token.
Gcs
Google Cloud Storage and a Remote Bindings identity access token.
Sqs
Send-only Sqs queue and a short-lived credential lease.
Pubsub
Send-only Pubsub queue and a short-lived credential lease.
Servicebus
Send-only Servicebus queue and a short-lived credential lease.
Dynamodb
AWS DynamoDB KV table and an AWS session.
Firestore
GCP Firestore KV collection and an access token.
Tablestorage
Azure Table Storage KV table and a storage-audience access token.
Kms
AWS KMS key and an AWS session.
CloudKms
GCP Cloud KMS key and an access token.
KeyVaultKey
Azure Key Vault key and a vault-audience access token.
Bedrock
AWS Bedrock and an AWS session.
Vertex
GCP Vertex AI and an access token.
Foundry
Azure AI Foundry and a Cognitive Services access token.
SandboxAws
AWS Lambda MicroVM sandbox and an AWS session.
SandboxAzure
Azure Container Apps sandbox group and an Azure data-plane token.
SandboxGcpAgentPlatform
GCP Agent Platform reasoning engine and a GCP access token.