ReadonlyinterceptionInterception points at which this interceptor runs.
Use cases: request validation, response transformation
AWS: GatewayInterceptorConfiguration InterceptionPoints
Validation: Required; non-empty subset of ['REQUEST', 'RESPONSE']
ReadonlylambdaARN of the Lambda function invoked as the interceptor.
Use cases: custom interception logic
AWS: LambdaInterceptorConfiguration Arn
Validation: Required; String
Optional ReadonlypassWhether to pass inbound request headers to the interceptor. Defaults to false since headers may carry sensitive authorization tokens.
Use cases: header-aware interception
AWS: InterceptorInputConfiguration PassRequestHeaders
Validation: Optional; Boolean
An interceptor that references its Lambda function by ARN — the form the L2 renders onto the gateway after the L3 deploys the inline function and passes this shape to MdaaAgentcoreGateway.
Use cases: per-tool/operation/parameter authorization, request/response transformation
AWS: AWS::BedrockAgentCore::Gateway GatewayInterceptorConfiguration
Validation: at most one REQUEST and one RESPONSE interceptor (max 2 total)