{
  "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_agent-registry.html",
  "name": "AWS Agent Registry",
  "prefix": "agent-registry",
  "timestamp": "1788696006",
  "actions": [
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_CreateRegistry.html",
      "name": "CreateRegistry",
      "description": "Grants permission to create a new registry",
      "access": "Write",
      "resources": [],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_CreateRegistryRecord.html",
      "name": "CreateRegistryRecord",
      "description": "Grants permission to create a new registry record",
      "access": "Write",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_DeleteRegistry.html",
      "name": "DeleteRegistry",
      "description": "Grants permission to delete an existing registry",
      "access": "Write",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_DeleteRegistryRecord.html",
      "name": "DeleteRegistryRecord",
      "description": "Grants permission to delete an existing registry record",
      "access": "Write",
      "resources": [
        {
          "name": "registry-record",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/registry-cross-account-sharing.html",
      "name": "DeleteResourcePolicy",
      "description": "Grants permission to delete the resource-based policy from a specified resource",
      "access": "Write",
      "resources": [
        {
          "name": "registry",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry/latest/APIReference/API_BatchGetDiscoverableRegistryRecord.html",
      "name": "GetDiscoverableRegistryRecord",
      "description": "Grants permission to retrieve an individual approved registry record. This is a permission-only action used for fine-grained access control with BatchGetApprovedRegistryRecord",
      "access": "Read",
      "resources": [
        {
          "name": "registry-record",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_GetRegistry.html",
      "name": "GetRegistry",
      "description": "Grants permission to retrieve an existing registry",
      "access": "Read",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_GetRegistryRecord.html",
      "name": "GetRegistryRecord",
      "description": "Grants permission to retrieve an existing registry record",
      "access": "Read",
      "resources": [
        {
          "name": "registry-record",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/registry-cross-account-sharing.html",
      "name": "GetResourcePolicy",
      "description": "Grants permission to retrieve the resource-based policy for a specified resource",
      "access": "Read",
      "resources": [
        {
          "name": "registry",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/registry-mcp-endpoint.html",
      "name": "InvokeRegistryMcp",
      "description": "Grants permission to invoke an MCP operation against an existing registry",
      "access": "Read",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry/latest/APIReference/API_ListDiscoverableRegistryRecords.html",
      "name": "ListDiscoverableRegistryRecords",
      "description": "Grants permission to list approved registry records in a registry",
      "access": "List",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_ListRegistries.html",
      "name": "ListRegistries",
      "description": "Grants permission to list existing registries",
      "access": "List",
      "resources": [],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_ListRegistryRecords.html",
      "name": "ListRegistryRecords",
      "description": "Grants permission to list existing registry records in a registry",
      "access": "List",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_ListTagsForResource.html",
      "name": "ListTagsForResource",
      "description": "Grants permission to list tags for an Agent Registry resource",
      "access": "List",
      "resources": [
        {
          "name": "registry",
          "is_required": false
        },
        {
          "name": "registry-record",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/registry-cross-account-sharing.html",
      "name": "PutResourcePolicy",
      "description": "Grants permission to set a resource-based policy for a specified resource",
      "access": "Write",
      "resources": [
        {
          "name": "registry",
          "is_required": false
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry/latest/APIReference/API_SearchDiscoverableRegistryRecords.html",
      "name": "SearchDiscoverableRegistryRecords",
      "description": "Grants permission to search for registry records",
      "access": "Read",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_SubmitRegistryRecordForApproval.html",
      "name": "SubmitRegistryRecordForApproval",
      "description": "Grants permission to submit a registry record for approval",
      "access": "Write",
      "resources": [
        {
          "name": "registry-record",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_TagResource.html",
      "name": "TagResource",
      "description": "Grants permission to tag an Agent Registry resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "registry",
          "is_required": false
        },
        {
          "name": "registry-record",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:RequestTag/${TagKey}",
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_UntagResource.html",
      "name": "UntagResource",
      "description": "Grants permission to untag an Agent Registry resource",
      "access": "Tagging",
      "resources": [
        {
          "name": "registry",
          "is_required": false
        },
        {
          "name": "registry-record",
          "is_required": false
        }
      ],
      "conditions": [
        "aws:TagKeys"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_UpdateRegistry.html",
      "name": "UpdateRegistry",
      "description": "Grants permission to update an existing registry",
      "access": "Write",
      "resources": [
        {
          "name": "registry",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_UpdateRegistryRecord.html",
      "name": "UpdateRegistryRecord",
      "description": "Grants permission to update an existing registry record",
      "access": "Write",
      "resources": [
        {
          "name": "registry-record",
          "is_required": true
        }
      ],
      "conditions": []
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry-control/latest/APIReference/API_UpdateRegistryRecordStatus.html",
      "name": "UpdateRegistryRecordStatus",
      "description": "Grants permission to update the status of a registry record",
      "access": "Write",
      "resources": [
        {
          "name": "registry-record",
          "is_required": true
        }
      ],
      "conditions": []
    }
  ],
  "resources": [
    {
      "url": "https://docs.aws.amazon.com/agent-registry/latest/APIReference/registry.html",
      "name": "registry",
      "arn": "arn:${Partition}:agent-registry:${Region}:${Account}:registry/${RegistryId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry/latest/APIReference/registryRecord.html",
      "name": "registry-record",
      "arn": "arn:${Partition}:agent-registry:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}",
      "conditions": [
        "aws:ResourceTag/${TagKey}"
      ]
    }
  ],
  "conditions": [
    {
      "url": "https://docs.aws.amazon.com/agent-registry/latest/APIReference/",
      "name": "agent-registry:RecordCreatorAccount",
      "description": "Filters access by the AWS account ID of the principal that created the registry record",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/agent-registry/latest/APIReference/",
      "name": "agent-registry:RecordSourceAccount",
      "description": "Filters access by the AWS account ID of the source resource associated with a registry record",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
      "name": "aws:RequestTag/${TagKey}",
      "description": "Filters access by creating requests based on the allowed set of values for each of the mandatory tags",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
      "name": "aws:ResourceTag/${TagKey}",
      "description": "Filters access by having actions based on the tag value associated with the resource",
      "type": "String"
    },
    {
      "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available",
      "name": "aws:TagKeys",
      "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
      "type": "ArrayOfString"
    }
  ]
}