View a markdown version of this page

Update API key - Amazon Bedrock AgentCore

Update API key

You can update an existing API key to replace the key value when your external service provider rotates credentials. Updating the API key ensures your agents continue to have access to the external service with the current authentication information.

To update an API key

  1. Open the AgentCore Identity console.

  2. In the Outbound Auth section, select the API key you want to update.

  3. Choose Edit.

  4. In the Update API key dialog, for API key selection method, choose one of the following options:

    1. Provide API key – Enter the API key value directly.

      1. For API key, enter the updated key value provided by your external service. AgentCore Identity securely stores this new value and makes it available to your agent at runtime.

    2. Provide API key via Secrets Manager – Reference a secret stored in AWS Secrets Manager instead of entering the value directly.

      1. For Secrets Manager, enter or select the ARN of the Secrets Manager secret that contains your API key.

      2. For JSON key, enter the JSON key in your Secrets Manager secret that contains the API key value.

  5. Choose Update.

The updated API key configuration takes effect immediately. Your agents will use the new API key for all subsequent requests to the external service.