AWS API Changes

2026/10/13 - Amazon AppIntegrations Service - 3 updated api methods

Changes This release adds the Connect JWT authentication type and the AudienceOverride field to AuthConfig, letting A2A server applications authenticate with JWTs issued by Amazon Connect.

CreateApplication (updated)

Link ¶
Changes (request)

{'AuthConfig': {'AudienceOverride': 'string', 'AuthType': {'CONNECT_JWT'}}}

Creates and persists an Application resource.

See also: AWS API Documentation

Request Syntax

client.create_application(
    Name='string',
    Namespace='string',
    Description='string',
    ApplicationSourceConfig={
        'ExternalUrlConfig': {
            'AccessUrl': 'string',
            'ApprovedOrigins': [
                'string',
            ]
        }
    },
    Subscriptions=[
        {
            'Event': 'string',
            'Description': 'string'
        },
    ],
    Publications=[
        {
            'Event': 'string',
            'Schema': 'string',
            'Description': 'string'
        },
    ],
    ClientToken='string',
    Tags={
        'string': 'string'
    },
    Permissions=[
        'string',
    ],
    IsService=True|False,
    InitializationTimeout=123,
    ApplicationConfig={
        'ContactHandling': {
            'Scope': 'CROSS_CONTACTS'|'PER_CONTACT'
        }
    },
    IframeConfig={
        'Allow': [
            'string',
        ],
        'Sandbox': [
            'string',
        ]
    },
    ApplicationType='STANDARD'|'SERVICE'|'MCP_SERVER'|'A2A_SERVER',
    AuthConfig={
        'AuthType': 'API_KEY'|'CONNECT_JWT',
        'CredentialProviderIdentifier': 'string',
        'AudienceOverride': 'string'
    }
)

type Name:

string

param Name:

[REQUIRED]

The name of the application.

type Namespace:

string

param Namespace:

[REQUIRED]

The namespace of the application.

type Description:

string

param Description:

The description of the application.

type ApplicationSourceConfig:

dict

param ApplicationSourceConfig:

[REQUIRED]

The configuration for where the application should be loaded from.

ExternalUrlConfig (dict) --

The external URL source for the application.
- AccessUrl (string) -- [REQUIRED]
  
  The URL to access the application.
- ApprovedOrigins (list) --
  
  Additional URLs to allow list if different than the access URL.
  - (string) --

type Subscriptions:

list

param Subscriptions:

The events that the application subscribes.

(dict) --

The configuration of an event that the application subscribes.
- Event (string) -- [REQUIRED]
  
  The name of the subscription.
- Description (string) --
  
  The description of the subscription.

type Publications:

list

param Publications:

The events that the application publishes.

(dict) --

The configuration of an event that the application publishes.
- Event (string) -- [REQUIRED]
  
  The name of the publication.
- Schema (string) -- [REQUIRED]
  
  The JSON schema of the publication event.
- Description (string) --
  
  The description of the publication.

type ClientToken:

string

param ClientToken:

A unique, case-sensitive identifier that you provide to ensure the idempotency of the request. If not provided, the Amazon Web Services SDK populates this field. For more information about idempotency, see Making retries safe with idempotent APIs.

This field is autopopulated if not provided.

type Tags:

dict

param Tags:

The tags used to organize, track, or control access for this resource. For example, { "tags": {"key1":"value1", "key2":"value2"} }.

(string) --
- (string) --

type Permissions:

list

param Permissions:

The configuration of events or requests that the application has access to.

(string) --

The permission of an event or request that the application has access to.

type IsService:

boolean

param IsService:

Indicates whether the application is a service.

type InitializationTimeout:

integer

param InitializationTimeout:

The maximum time in milliseconds allowed to establish a connection with the workspace.

type ApplicationConfig:

dict

param ApplicationConfig:

The configuration settings for the application.

ContactHandling (dict) --

The contact handling configuration for the application.
- Scope (string) --
  
  Indicates whether the application refreshes for each contact or refreshes only with each new browser session.

type IframeConfig:

dict

param IframeConfig:

The iframe configuration for the application.

Allow (list) --

The list of features that are allowed in the iframe.
- (string) --
  
  A permission for the iframe.
Sandbox (list) --

The list of sandbox attributes for the iframe.
- (string) --
  
  A permission for the iframe.

type ApplicationType:

string

param ApplicationType:

The type of application.

type AuthConfig:

dict

param AuthConfig:

The authentication settings that Connect Customer uses when calling the external application.

AuthType (string) --

The type of authentication that Connect Customer uses to call the external application endpoint. You must specify an authentication type for A2A_SERVER applications. Valid values:
- API_KEY: Connect Customer sends an API key that is stored in the Secrets Manager secret that you specify in CredentialProviderIdentifier.
- CONNECT_JWT: Connect Customer issues a short-lived, signed JSON Web Token (JWT). This authentication type doesn't require a stored credential.
CredentialProviderIdentifier (string) --

The ARN of the Secrets Manager secret that stores the credentials. The secret must be accessible to Connect Customer.

You must specify this ARN when AuthType is API_KEY. Don't specify it when AuthType is CONNECT_JWT.
AudienceOverride (string) --

The value that Connect Customer uses as the audience ( aud) claim of the JSON Web Token (JWT) that it issues. You can specify this parameter only when AuthType is CONNECT_JWT. If you don't specify it, the audience is the AccessUrl of the application. The value can't contain connect.amazonaws.com.

rtype:

dict

returns:

Response Syntax

{
    'Arn': 'string',
    'Id': 'string'
}

Response Structure

(dict) --
- Arn (string) --
  
  The Amazon Resource Name (ARN) of the Application.
- Id (string) --
  
  A unique identifier for the Application.

GetApplication (updated)

Link ¶
Changes (response)

{'AuthConfig': {'AudienceOverride': 'string', 'AuthType': {'CONNECT_JWT'}}}

Get an Application resource.

See also: AWS API Documentation

Request Syntax

client.get_application(
    Arn='string'
)

type Arn:

string

param Arn:

[REQUIRED]

The Amazon Resource Name (ARN) of the Application.

rtype:

dict

returns:

Response Syntax

{
    'Arn': 'string',
    'Id': 'string',
    'Name': 'string',
    'Namespace': 'string',
    'Description': 'string',
    'ApplicationSourceConfig': {
        'ExternalUrlConfig': {
            'AccessUrl': 'string',
            'ApprovedOrigins': [
                'string',
            ]
        }
    },
    'Subscriptions': [
        {
            'Event': 'string',
            'Description': 'string'
        },
    ],
    'Publications': [
        {
            'Event': 'string',
            'Schema': 'string',
            'Description': 'string'
        },
    ],
    'CreatedTime': datetime(2015, 1, 1),
    'LastModifiedTime': datetime(2015, 1, 1),
    'Tags': {
        'string': 'string'
    },
    'Permissions': [
        'string',
    ],
    'IsService': True|False,
    'InitializationTimeout': 123,
    'ApplicationConfig': {
        'ContactHandling': {
            'Scope': 'CROSS_CONTACTS'|'PER_CONTACT'
        }
    },
    'IframeConfig': {
        'Allow': [
            'string',
        ],
        'Sandbox': [
            'string',
        ]
    },
    'ApplicationType': 'STANDARD'|'SERVICE'|'MCP_SERVER'|'A2A_SERVER',
    'AuthConfig': {
        'AuthType': 'API_KEY'|'CONNECT_JWT',
        'CredentialProviderIdentifier': 'string',
        'AudienceOverride': 'string'
    }
}

Response Structure

(dict) --
- Arn (string) --
  
  The Amazon Resource Name (ARN) of the Application.
- Id (string) --
  
  A unique identifier for the Application.
- Name (string) --
  
  The name of the application.
- Namespace (string) --
  
  The namespace of the application.
- Description (string) --
  
  The description of the application.
- ApplicationSourceConfig (dict) --
  
  The configuration for where the application should be loaded from.
  - ExternalUrlConfig (dict) --
    
    The external URL source for the application.
    - AccessUrl (string) --
      
      The URL to access the application.
    - ApprovedOrigins (list) --
      
      Additional URLs to allow list if different than the access URL.
      - (string) --
- Subscriptions (list) --
  
  The events that the application subscribes.
  - (dict) --
    
    The configuration of an event that the application subscribes.
    - Event (string) --
      
      The name of the subscription.
    - Description (string) --
      
      The description of the subscription.
- Publications (list) --
  
  The events that the application publishes.
  - (dict) --
    
    The configuration of an event that the application publishes.
    - Event (string) --
      
      The name of the publication.
    - Schema (string) --
      
      The JSON schema of the publication event.
    - Description (string) --
      
      The description of the publication.
- CreatedTime (datetime) --
  
  The created time of the Application.
- LastModifiedTime (datetime) --
  
  The last modified time of the Application.
- Tags (dict) --
  
  The tags used to organize, track, or control access for this resource. For example, { "tags": {"key1":"value1", "key2":"value2"} }.
  - (string) --
    - (string) --
- Permissions (list) --
  
  The configuration of events or requests that the application has access to.
  - (string) --
    
    The permission of an event or request that the application has access to.
- IsService (boolean) --
  
  Indicates whether the application is a service.
- InitializationTimeout (integer) --
  
  The maximum time in milliseconds allowed to establish a connection with the workspace.
- ApplicationConfig (dict) --
  
  The configuration settings for the application.
  - ContactHandling (dict) --
    
    The contact handling configuration for the application.
    - Scope (string) --
      
      Indicates whether the application refreshes for each contact or refreshes only with each new browser session.
- IframeConfig (dict) --
  
  The iframe configuration for the application.
  - Allow (list) --
    
    The list of features that are allowed in the iframe.
    - (string) --
      
      A permission for the iframe.
  - Sandbox (list) --
    
    The list of sandbox attributes for the iframe.
    - (string) --
      
      A permission for the iframe.
- ApplicationType (string) --
  
  The type of application.
- AuthConfig (dict) --
  
  The authentication settings that Connect Customer uses when calling the external application.
  - AuthType (string) --
    
    The type of authentication that Connect Customer uses to call the external application endpoint. You must specify an authentication type for A2A_SERVER applications. Valid values:
    - API_KEY: Connect Customer sends an API key that is stored in the Secrets Manager secret that you specify in CredentialProviderIdentifier.
    - CONNECT_JWT: Connect Customer issues a short-lived, signed JSON Web Token (JWT). This authentication type doesn't require a stored credential.
  - CredentialProviderIdentifier (string) --
    
    The ARN of the Secrets Manager secret that stores the credentials. The secret must be accessible to Connect Customer.
    
    You must specify this ARN when AuthType is API_KEY. Don't specify it when AuthType is CONNECT_JWT.
  - AudienceOverride (string) --
    
    The value that Connect Customer uses as the audience ( aud) claim of the JSON Web Token (JWT) that it issues. You can specify this parameter only when AuthType is CONNECT_JWT. If you don't specify it, the audience is the AccessUrl of the application. The value can't contain connect.amazonaws.com.

UpdateApplication (updated)

Link ¶
Changes (request)

{'AuthConfig': {'AudienceOverride': 'string', 'AuthType': {'CONNECT_JWT'}}}

Updates and persists an Application resource.

See also: AWS API Documentation

Request Syntax

client.update_application(
    Arn='string',
    Name='string',
    Description='string',
    ApplicationSourceConfig={
        'ExternalUrlConfig': {
            'AccessUrl': 'string',
            'ApprovedOrigins': [
                'string',
            ]
        }
    },
    Subscriptions=[
        {
            'Event': 'string',
            'Description': 'string'
        },
    ],
    Publications=[
        {
            'Event': 'string',
            'Schema': 'string',
            'Description': 'string'
        },
    ],
    Permissions=[
        'string',
    ],
    IsService=True|False,
    InitializationTimeout=123,
    ApplicationConfig={
        'ContactHandling': {
            'Scope': 'CROSS_CONTACTS'|'PER_CONTACT'
        }
    },
    IframeConfig={
        'Allow': [
            'string',
        ],
        'Sandbox': [
            'string',
        ]
    },
    ApplicationType='STANDARD'|'SERVICE'|'MCP_SERVER'|'A2A_SERVER',
    AuthConfig={
        'AuthType': 'API_KEY'|'CONNECT_JWT',
        'CredentialProviderIdentifier': 'string',
        'AudienceOverride': 'string'
    }
)

type Arn:

string

param Arn:

[REQUIRED]

The Amazon Resource Name (ARN) of the Application.

type Name:

string

param Name:

The name of the application.

type Description:

string

param Description:

The description of the application.

type ApplicationSourceConfig:

dict

param ApplicationSourceConfig:

The configuration for where the application should be loaded from.

ExternalUrlConfig (dict) --

The external URL source for the application.
- AccessUrl (string) -- [REQUIRED]
  
  The URL to access the application.
- ApprovedOrigins (list) --
  
  Additional URLs to allow list if different than the access URL.
  - (string) --

type Subscriptions:

list

param Subscriptions:

The events that the application subscribes.

(dict) --

The configuration of an event that the application subscribes.
- Event (string) -- [REQUIRED]
  
  The name of the subscription.
- Description (string) --
  
  The description of the subscription.

type Publications:

list

param Publications:

The events that the application publishes.

(dict) --

The configuration of an event that the application publishes.
- Event (string) -- [REQUIRED]
  
  The name of the publication.
- Schema (string) -- [REQUIRED]
  
  The JSON schema of the publication event.
- Description (string) --
  
  The description of the publication.

type Permissions:

list

param Permissions:

The configuration of events or requests that the application has access to.

(string) --

The permission of an event or request that the application has access to.

type IsService:

boolean

param IsService:

Indicates whether the application is a service.

type InitializationTimeout:

integer

param InitializationTimeout:

The maximum time in milliseconds allowed to establish a connection with the workspace.

type ApplicationConfig:

dict

param ApplicationConfig:

The configuration settings for the application.

ContactHandling (dict) --

The contact handling configuration for the application.
- Scope (string) --
  
  Indicates whether the application refreshes for each contact or refreshes only with each new browser session.

type IframeConfig:

dict

param IframeConfig:

The iframe configuration for the application.

Allow (list) --

The list of features that are allowed in the iframe.
- (string) --
  
  A permission for the iframe.
Sandbox (list) --

The list of sandbox attributes for the iframe.
- (string) --
  
  A permission for the iframe.

type ApplicationType:

string

param ApplicationType:

The type of application.

type AuthConfig:

dict

param AuthConfig:

The authentication settings that Connect Customer uses when calling the external application.

AuthType (string) --

The type of authentication that Connect Customer uses to call the external application endpoint. You must specify an authentication type for A2A_SERVER applications. Valid values:
- API_KEY: Connect Customer sends an API key that is stored in the Secrets Manager secret that you specify in CredentialProviderIdentifier.
- CONNECT_JWT: Connect Customer issues a short-lived, signed JSON Web Token (JWT). This authentication type doesn't require a stored credential.
CredentialProviderIdentifier (string) --

The ARN of the Secrets Manager secret that stores the credentials. The secret must be accessible to Connect Customer.

You must specify this ARN when AuthType is API_KEY. Don't specify it when AuthType is CONNECT_JWT.
AudienceOverride (string) --

The value that Connect Customer uses as the audience ( aud) claim of the JSON Web Token (JWT) that it issues. You can specify this parameter only when AuthType is CONNECT_JWT. If you don't specify it, the audience is the AccessUrl of the application. The value can't contain connect.amazonaws.com.

rtype:

dict

returns:

Response Syntax

{}

Response Structure

(dict) --