{ "url": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html", "name": "Amazon Bedrock Agentcore", "prefix": "bedrock-agentcore", "timestamp": "1781568006", "actions": [ { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/", "name": "AllowVendedLogDeliveryForResource", "description": "Grants permission to configure vended telemetry for a resource", "access": "Permissions management", "resources": [ { "name": "memory", "is_required": true }, { "name": "payment-manager", "is_required": false } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html", "name": "AuthorizeAction", "description": "Grants permission to evaluate Cedar policies for authorization requests", "access": "Permissions management", "resources": [ { "name": "gateway", "is_required": true }, { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html", "name": "BatchCreateMemoryRecords", "description": "Grants permission to create one or more memory records", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:namespace" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html", "name": "BatchDeleteMemoryRecords", "description": "Grants permission to delete one or more memory records", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html", "name": "BatchUpdateMemoryRecords", "description": "Grants permission to update one or more memory records", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:namespace" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html", "name": "CompleteResourceTokenAuth", "description": "Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource", "access": "Read", "resources": [ { "name": "oauth2credentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true }, { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [ "bedrock-agentcore:InboundJwtClaim/iss", "bedrock-agentcore:InboundJwtClaim/sub", "bedrock-agentcore:InboundJwtClaim/aud", "bedrock-agentcore:InboundJwtClaim/scope", "bedrock-agentcore:InboundJwtClaim/client_id", "bedrock-agentcore:userid" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html", "name": "ConnectBrowserAutomationStream", "description": "Grants permission to connect to a browser automation stream", "access": "Read", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html", "name": "ConnectBrowserLiveViewStream", "description": "Grants permission to connect to a browser live view stream", "access": "Read", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateABTest.html", "name": "CreateABTest", "description": "Grants permission to create an A/B test", "access": "Write", "resources": [], "conditions": [], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html", "name": "CreateAgentRuntime", "description": "Grants permission to create a new agent runtime", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:subnets", "bedrock-agentcore:securityGroups", "bedrock-agentcore:RuntimeAuthorizerType" ], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html", "name": "CreateAgentRuntimeEndpoint", "description": "Grants permission to create a new agent runtime endpoint", "access": "Write", "resources": [ { "name": "runtime", "is_required": true } ], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html", "name": "CreateApiKeyCredentialProvider", "description": "Grants permission to create a new API Key Credential Provider", "access": "Write", "resources": [ { "name": "apikeycredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html", "name": "CreateBrowser", "description": "Grants permission to create a new custom browser", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:subnets", "bedrock-agentcore:securityGroups" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html", "name": "CreateBrowserProfile", "description": "Grants permission to create a new browser profile", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html", "name": "CreateCodeInterpreter", "description": "Grants permission to create a new custom code interpreter", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:subnets", "bedrock-agentcore:securityGroups" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateConfigurationBundle.html", "name": "CreateConfigurationBundle", "description": "Grants permission to create a new configuration bundle", "access": "Write", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html", "name": "CreateEvaluator", "description": "Grants permission to create a new evaluator", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html", "name": "CreateEvent", "description": "Grants permission to create an Event", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:sessionId", "bedrock-agentcore:actorId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html", "name": "CreateGateway", "description": "Grants permission to create a new gateway", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayRule.html", "name": "CreateGatewayRule", "description": "Grants permission to create a new rule in an existing gateway", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html", "name": "CreateGatewayTarget", "description": "Grants permission to create a new target in an existing gateway", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateHarness.html", "name": "CreateHarness", "description": "Grants permission to create a new harness", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [ "bedrock-agentcore:CreateAgentRuntime", "bedrock-agentcore:GetAgentRuntime", "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html", "name": "CreateMemory", "description": "Grants permission to create a Memory resource", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:KmsKeyArn" ], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html", "name": "CreateOauth2CredentialProvider", "description": "Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol", "access": "Write", "resources": [ { "name": "oauth2credentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html", "name": "CreateOnlineEvaluationConfig", "description": "Grants permission to create a new online evaluation configuration", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentConnector.html", "name": "CreatePaymentConnector", "description": "Grants permission to create a new payment connector under a payment manager", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentCredentialProvider.html", "name": "CreatePaymentCredentialProvider", "description": "Grants permission to create a new Payment Credential Provider", "access": "Write", "resources": [ { "name": "paymentcredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentInstrument.html", "name": "CreatePaymentInstrument", "description": "Grants permission to create a new payment instrument", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentManager.html", "name": "CreatePaymentManager", "description": "Grants permission to create a new payment manager", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentSession.html", "name": "CreatePaymentSession", "description": "Grants permission to create a new payment session", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html", "name": "CreatePolicy", "description": "Grants permission to create a new policy within a policy engine", "access": "Write", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html", "name": "CreatePolicyEngine", "description": "Grants permission to create a new policy engine", "access": "Write", "resources": [], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistry.html", "name": "CreateRegistry", "description": "Grants permission to create a new registry", "access": "Write", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistryRecord.html", "name": "CreateRegistryRecord", "description": "Grants permission to create a new registry record", "access": "Write", "resources": [ { "name": "registry", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html", "name": "CreateWorkloadIdentity", "description": "Grants permission to create a new Workload Identity", "access": "Write", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteABTest.html", "name": "DeleteABTest", "description": "Grants permission to delete an A/B test", "access": "Write", "resources": [ { "name": "ab-test", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html", "name": "DeleteAgentRuntime", "description": "Grants permission to delete an agent runtime", "access": "Write", "resources": [ { "name": "runtime", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html", "name": "DeleteAgentRuntimeEndpoint", "description": "Grants permission to delete an agent runtime endpoint", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html", "name": "DeleteApiKeyCredentialProvider", "description": "Grants permission to delete a registered API Key Credential Provider", "access": "Write", "resources": [ { "name": "apikeycredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteBatchEvaluation.html", "name": "DeleteBatchEvaluation", "description": "Grants permission to delete a batch evaluation", "access": "Write", "resources": [ { "name": "batch-evaluate", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html", "name": "DeleteBrowser", "description": "Grants permission to delete a custom browser", "access": "Write", "resources": [ { "name": "browser-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html", "name": "DeleteBrowserProfile", "description": "Grants permission to delete a browser profile", "access": "Write", "resources": [ { "name": "browser-profile", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html", "name": "DeleteCodeInterpreter", "description": "Grants permission to delete a custom code interpreter", "access": "Write", "resources": [ { "name": "code-interpreter-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteConfigurationBundle.html", "name": "DeleteConfigurationBundle", "description": "Grants permission to delete a configuration bundle", "access": "Write", "resources": [ { "name": "configuration-bundle", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html", "name": "DeleteEvaluator", "description": "Grants permission to delete an evaluator", "access": "Write", "resources": [ { "name": "evaluator", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html", "name": "DeleteEvent", "description": "Grants permission to delete an Event", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:sessionId", "bedrock-agentcore:actorId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html", "name": "DeleteGateway", "description": "Grants permission to delete an existing gateway", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayRule.html", "name": "DeleteGatewayRule", "description": "Grants permission to delete an existing gateway rule", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html", "name": "DeleteGatewayTarget", "description": "Grants permission to delete an existing gateway target", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteHarness.html", "name": "DeleteHarness", "description": "Grants permission to delete a harness", "access": "Write", "resources": [ { "name": "harness", "is_required": true } ], "conditions": [], "dependents": [ "bedrock-agentcore:DeleteAgentRuntime", "bedrock-agentcore:GetAgentRuntime", "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html", "name": "DeleteMemory", "description": "Grants permission to delete a Memory resource", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html", "name": "DeleteMemoryRecord", "description": "Grants permission to delete a Memory Record", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html", "name": "DeleteOauth2CredentialProvider", "description": "Grants permission to delete a registered OAuth2 Credential Provider", "access": "Write", "resources": [ { "name": "oauth2credentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html", "name": "DeleteOnlineEvaluationConfig", "description": "Grants permission to delete an online evaluation configuration", "access": "Write", "resources": [ { "name": "online-evaluation-config", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentConnector.html", "name": "DeletePaymentConnector", "description": "Grants permission to delete a payment connector", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentCredentialProvider.html", "name": "DeletePaymentCredentialProvider", "description": "Grants permission to delete a registered Payment Credential Provider", "access": "Write", "resources": [ { "name": "paymentcredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentInstrument.html", "name": "DeletePaymentInstrument", "description": "Grants permission to delete a payment instrument", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentManager.html", "name": "DeletePaymentManager", "description": "Grants permission to delete a payment manager", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentSession.html", "name": "DeletePaymentSession", "description": "Grants permission to delete a payment session", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html", "name": "DeletePolicy", "description": "Grants permission to delete a policy", "access": "Write", "resources": [ { "name": "policy", "is_required": true }, { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html", "name": "DeletePolicyEngine", "description": "Grants permission to delete a policy engine", "access": "Write", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteRecommendation.html", "name": "DeleteRecommendation", "description": "Grants permission to delete a recommendation", "access": "Write", "resources": [ { "name": "recommendation", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistry.html", "name": "DeleteRegistry", "description": "Grants permission to delete an existing registry", "access": "Write", "resources": [ { "name": "registry", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistryRecord.html", "name": "DeleteRegistryRecord", "description": "Grants permission to delete an existing registry record", "access": "Write", "resources": [ { "name": "registry-record", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html", "name": "DeleteResourcePolicy", "description": "Grants permission to delete the resource-based policy for a Bedrock resource", "access": "Write", "resources": [ { "name": "gateway", "is_required": false }, { "name": "runtime", "is_required": false }, { "name": "runtime-endpoint", "is_required": false } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html", "name": "DeleteWorkloadIdentity", "description": "Grants permission to delete a registered Workload Identity", "access": "Write", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html", "name": "Evaluate", "description": "Grants permission to run an evaluation using an evaluator", "access": "Write", "resources": [ { "name": "evaluator", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetABTest.html", "name": "GetABTest", "description": "Grants permission to get details of an A/B test", "access": "Read", "resources": [ { "name": "ab-test", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html", "name": "GetAgentCard", "description": "Grants permission to retrieve an agent card for A2A", "access": "Read", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html", "name": "GetAgentRuntime", "description": "Grants permission to get details of an agent runtime", "access": "Read", "resources": [ { "name": "runtime", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html", "name": "GetAgentRuntimeEndpoint", "description": "Grants permission to get details of an agent runtime endpoint", "access": "Read", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html", "name": "GetApiKeyCredentialProvider", "description": "Grants permission to fetch a registered API Key Credential Provider by its name", "access": "Read", "resources": [ { "name": "apikeycredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBatchEvaluation.html", "name": "GetBatchEvaluation", "description": "Grants permission to get details of a batch evaluation", "access": "Read", "resources": [ { "name": "batch-evaluate", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html", "name": "GetBrowser", "description": "Grants permission to get details of a browser", "access": "Read", "resources": [ { "name": "browser-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html", "name": "GetBrowserProfile", "description": "Grants permission to get details of a browser profile", "access": "Read", "resources": [ { "name": "browser-profile", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html", "name": "GetBrowserSession", "description": "Grants permission to get details of a browser session", "access": "Read", "resources": [ { "name": "browser", "is_required": true }, { "name": "browser-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html", "name": "GetCodeInterpreter", "description": "Grants permission to get details of a code interpreter", "access": "Read", "resources": [ { "name": "code-interpreter-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html", "name": "GetCodeInterpreterSession", "description": "Grants permission to get details of a code interpreter session", "access": "Read", "resources": [ { "name": "code-interpreter", "is_required": true }, { "name": "code-interpreter-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundle.html", "name": "GetConfigurationBundle", "description": "Grants permission to get details of a configuration bundle", "access": "Read", "resources": [ { "name": "configuration-bundle", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundleVersion.html", "name": "GetConfigurationBundleVersion", "description": "Grants permission to get a specific version of a configuration bundle", "access": "Read", "resources": [ { "name": "configuration-bundle", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html", "name": "GetEvaluator", "description": "Grants permission to get details of an evaluator", "access": "Read", "resources": [ { "name": "evaluator", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html", "name": "GetEvent", "description": "Grants permission to fetch an Event", "access": "Read", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:sessionId", "bedrock-agentcore:actorId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html", "name": "GetGateway", "description": "Grants permission to retrieve an existing gateway", "access": "Read", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayRule.html", "name": "GetGatewayRule", "description": "Grants permission to retrieve an existing gateway rule", "access": "Read", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html", "name": "GetGatewayTarget", "description": "Grants permission to retrieve an existing gateway target", "access": "Read", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetHarness.html", "name": "GetHarness", "description": "Grants permission to get details of a harness", "access": "Read", "resources": [ { "name": "harness", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html", "name": "GetMemory", "description": "Grants permission to fetch details for a Memory resource", "access": "Read", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html", "name": "GetMemoryRecord", "description": "Grants permission to fetch a Memory Record", "access": "Read", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html", "name": "GetOauth2CredentialProvider", "description": "Grants permission to fetch a registered OAuth2 Credential Provider by its name", "access": "Read", "resources": [ { "name": "oauth2credentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html", "name": "GetOnlineEvaluationConfig", "description": "Grants permission to get details of an online evaluation configuration", "access": "Read", "resources": [ { "name": "online-evaluation-config", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentConnector.html", "name": "GetPaymentConnector", "description": "Grants permission to retrieve details of a payment connector", "access": "Read", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentCredentialProvider.html", "name": "GetPaymentCredentialProvider", "description": "Grants permission to fetch a registered Payment Credential Provider by its name", "access": "Read", "resources": [ { "name": "paymentcredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrument.html", "name": "GetPaymentInstrument", "description": "Grants permission to retrieve details of a payment instrument", "access": "Read", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrumentBalance.html", "name": "GetPaymentInstrumentBalance", "description": "Grants permission to retrieve the balance of a payment instrument", "access": "Read", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentManager.html", "name": "GetPaymentManager", "description": "Grants permission to retrieve details of a payment manager", "access": "Read", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentSession.html", "name": "GetPaymentSession", "description": "Grants permission to retrieve details of a payment session", "access": "Read", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html", "name": "GetPolicy", "description": "Grants permission to retrieve a policy", "access": "Read", "resources": [ { "name": "policy", "is_required": true }, { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html", "name": "GetPolicyEngine", "description": "Grants permission to retrieve a policy engine", "access": "Read", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngineSummary.html", "name": "GetPolicyEngineSummary", "description": "Grants permission to retrieve a summary of a policy engine", "access": "Read", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html", "name": "GetPolicyGeneration", "description": "Grants permission to retrieve status and results of a policy generation request", "access": "Read", "resources": [ { "name": "policy-engine", "is_required": true }, { "name": "policy-generation", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGenerationSummary.html", "name": "GetPolicyGenerationSummary", "description": "Grants permission to retrieve a summary of a policy generation request", "access": "Read", "resources": [ { "name": "policy-engine", "is_required": true }, { "name": "policy-generation", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicySummary.html", "name": "GetPolicySummary", "description": "Grants permission to retrieve a summary of a policy", "access": "Read", "resources": [ { "name": "policy", "is_required": true }, { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetRecommendation.html", "name": "GetRecommendation", "description": "Grants permission to get details of a recommendation", "access": "Read", "resources": [ { "name": "recommendation", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistry.html", "name": "GetRegistry", "description": "Grants permission to retrieve an existing registry", "access": "Read", "resources": [ { "name": "registry", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistryRecord.html", "name": "GetRegistryRecord", "description": "Grants permission to retrieve an existing registry record", "access": "Read", "resources": [ { "name": "registry-record", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html", "name": "GetResourceApiKey", "description": "Grants permission to retrieve an API Key associated with an Api Key Credential Provider", "access": "Read", "resources": [ { "name": "apikeycredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true }, { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html", "name": "GetResourceOauth2Token", "description": "Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource", "access": "Read", "resources": [ { "name": "oauth2credentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true }, { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePaymentToken.html", "name": "GetResourcePaymentToken", "description": "Grants permission to retrieve a payment authentication token associated with a Payment Credential Provider", "access": "Read", "resources": [ { "name": "paymentcredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true }, { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html", "name": "GetResourcePolicy", "description": "Grants permission to retrieve the resource-based policy for a Bedrock resource", "access": "Read", "resources": [ { "name": "gateway", "is_required": false }, { "name": "runtime", "is_required": false }, { "name": "runtime-endpoint", "is_required": false } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html", "name": "GetTokenVault", "description": "Grants permission to fetch the current configuration of the TokenVault, including encryption settings", "access": "Read", "resources": [ { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html", "name": "GetWorkloadAccessToken", "description": "Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user", "access": "Write", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html", "name": "GetWorkloadAccessTokenForJWT", "description": "Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token", "access": "Write", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [ "bedrock-agentcore:InboundJwtClaim/iss", "bedrock-agentcore:InboundJwtClaim/sub", "bedrock-agentcore:InboundJwtClaim/aud", "bedrock-agentcore:InboundJwtClaim/scope", "bedrock-agentcore:InboundJwtClaim/client_id" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html", "name": "GetWorkloadAccessTokenForUserId", "description": "Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id", "access": "Write", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [ "bedrock-agentcore:userid" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html", "name": "GetWorkloadIdentity", "description": "Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs", "access": "Read", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html", "name": "InvokeAgentRuntime", "description": "Grants permission to invoke an agent runtime endpoint", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html", "name": "InvokeAgentRuntimeCommand", "description": "Grants permission to invoke commands on an agent runtime endpoint", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommandShell.html", "name": "InvokeAgentRuntimeCommandShell", "description": "Grants permission to invoke a command shell on an agent runtime endpoint over a web socket stream", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html", "name": "InvokeAgentRuntimeForUser", "description": "Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html", "name": "InvokeAgentRuntimeWithWebSocketStream", "description": "Grants permission to invoke an agent runtime endpoint with WebSocket stream", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html", "name": "InvokeAgentRuntimeWithWebSocketStreamForUser", "description": "Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html", "name": "InvokeCodeInterpreter", "description": "Grants permission to invoke a code interpreter session", "access": "Write", "resources": [ { "name": "code-interpreter", "is_required": true }, { "name": "code-interpreter-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html", "name": "InvokeGateway", "description": "Grants permission to invoke a gateway", "access": "Permissions management", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeHarness.html", "name": "InvokeHarness", "description": "Grants permission to invoke a harness", "access": "Write", "resources": [ { "name": "harness", "is_required": true } ], "conditions": [], "dependents": [ "bedrock-agentcore:InvokeAgentRuntime" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html", "name": "InvokeRegistryMcp", "description": "Grants permission to invoke an MCP operation against an existing registry", "access": "Read", "resources": [ { "name": "registry", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListABTests.html", "name": "ListABTests", "description": "Grants permission to list A/B tests", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html", "name": "ListActors", "description": "Grants permission to list Actors", "access": "List", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html", "name": "ListAgentRuntimeEndpoints", "description": "Grants permission to list agent runtime endpoints", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html", "name": "ListAgentRuntimeVersions", "description": "Grants permission to list agent runtime versions", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html", "name": "ListAgentRuntimes", "description": "Grants permission to list agent runtimes", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html", "name": "ListApiKeyCredentialProviders", "description": "Grants permission to list all API Key Credential Providers in the Token Vault", "access": "Read", "resources": [ { "name": "apikeycredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBatchEvaluations.html", "name": "ListBatchEvaluations", "description": "Grants permission to list batch evaluations", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html", "name": "ListBrowserProfiles", "description": "Grants permission to list browser profiles", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html", "name": "ListBrowserSessions", "description": "Grants permission to list browser sessions", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html", "name": "ListBrowsers", "description": "Grants permission to list browsers", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html", "name": "ListCodeInterpreterSessions", "description": "Grants permission to list code interpreter sessions", "access": "List", "resources": [ { "name": "code-interpreter", "is_required": true }, { "name": "code-interpreter-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html", "name": "ListCodeInterpreters", "description": "Grants permission to list code interpreters", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundleVersions.html", "name": "ListConfigurationBundleVersions", "description": "Grants permission to list versions of a configuration bundle", "access": "List", "resources": [ { "name": "configuration-bundle", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundles.html", "name": "ListConfigurationBundles", "description": "Grants permission to list configuration bundles", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html", "name": "ListEvaluators", "description": "Grants permission to list evaluators", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html", "name": "ListEvents", "description": "Grants permission to list events", "access": "List", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:sessionId", "bedrock-agentcore:actorId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayRules.html", "name": "ListGatewayRules", "description": "Grants permission to list existing gateway rules", "access": "List", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html", "name": "ListGatewayTargets", "description": "Grants permission to list existing gateway targets", "access": "List", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html", "name": "ListGateways", "description": "Grants permission to list existing gateways", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnesses.html", "name": "ListHarnesses", "description": "Grants permission to list harnesses", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html", "name": "ListMemories", "description": "Grants permission to list memory resources", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html", "name": "ListMemoryExtractionJobs", "description": "Grants permission to list extraction jobs for this memory", "access": "List", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html", "name": "ListMemoryRecords", "description": "Grants permission to list memory records", "access": "List", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:namespace", "bedrock-agentcore:strategyId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html", "name": "ListOauth2CredentialProviders", "description": "Grants permission to list all OAuth2 Credential Providers in the Token Vault", "access": "Read", "resources": [ { "name": "oauth2credentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html", "name": "ListOnlineEvaluationConfigs", "description": "Grants permission to list online evaluation configurations", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentConnectors.html", "name": "ListPaymentConnectors", "description": "Grants permission to list payment connectors under a payment manager", "access": "List", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentCredentialProviders.html", "name": "ListPaymentCredentialProviders", "description": "Grants permission to list all Payment Credential Providers in the Token Vault", "access": "List", "resources": [ { "name": "paymentcredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentInstruments.html", "name": "ListPaymentInstruments", "description": "Grants permission to list payment instruments", "access": "List", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentManagers.html", "name": "ListPaymentManagers", "description": "Grants permission to list payment managers", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentSessions.html", "name": "ListPaymentSessions", "description": "Grants permission to list payment sessions", "access": "List", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html", "name": "ListPolicies", "description": "Grants permission to list policies within a policy engine", "access": "List", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngineSummaries.html", "name": "ListPolicyEngineSummaries", "description": "Grants permission to list policy engine summaries", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html", "name": "ListPolicyEngines", "description": "Grants permission to list policy engines", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html", "name": "ListPolicyGenerationAssets", "description": "Grants permission to list generated policy assets from a generation request", "access": "List", "resources": [ { "name": "policy-engine", "is_required": true }, { "name": "policy-generation", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationSummaries.html", "name": "ListPolicyGenerationSummaries", "description": "Grants permission to list policy generation summaries", "access": "List", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html", "name": "ListPolicyGenerations", "description": "Grants permission to list policy generation requests", "access": "List", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicySummaries.html", "name": "ListPolicySummaries", "description": "Grants permission to list policy summaries within a policy engine", "access": "List", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListRecommendations.html", "name": "ListRecommendations", "description": "Grants permission to list recommendations", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistries.html", "name": "ListRegistries", "description": "Grants permission to list existing registries", "access": "List", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistryRecords.html", "name": "ListRegistryRecords", "description": "Grants permission to list existing registry records in a registry", "access": "List", "resources": [ { "name": "registry", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html", "name": "ListSessions", "description": "Grants permission to list sessions", "access": "List", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:actorId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html", "name": "ListTagsForResource", "description": "Grants permission to list tags for a Bedrock-AgentCore resource", "access": "List", "resources": [ { "name": "apikeycredentialprovider", "is_required": false }, { "name": "browser-custom", "is_required": false }, { "name": "browser-profile", "is_required": false }, { "name": "code-interpreter-custom", "is_required": false }, { "name": "evaluator", "is_required": false }, { "name": "gateway", "is_required": false }, { "name": "harness", "is_required": false }, { "name": "memory", "is_required": false }, { "name": "oauth2credentialprovider", "is_required": false }, { "name": "online-evaluation-config", "is_required": false }, { "name": "payment-manager", "is_required": false }, { "name": "paymentcredentialprovider", "is_required": false }, { "name": "policy-engine", "is_required": false }, { "name": "runtime", "is_required": false }, { "name": "runtime-endpoint", "is_required": false }, { "name": "token-vault", "is_required": false }, { "name": "workload-identity", "is_required": false }, { "name": "workload-identity-directory", "is_required": false } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html", "name": "ListWorkloadIdentities", "description": "Grants permission to list all Workload Identities in the caller's AWS account", "access": "Read", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html", "name": "ManageAdminPolicy", "description": "Grants permission to create or modify wildcard policies that apply to gateway resources", "access": "Permissions management", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html", "name": "ManageResourceScopedPolicy", "description": "Grants permission to create or modify policies that apply to specific gateway resources", "access": "Permissions management", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html", "name": "PartiallyAuthorizeActions", "description": "Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call", "access": "Permissions management", "resources": [ { "name": "gateway", "is_required": true }, { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ProcessPayment.html", "name": "ProcessPayment", "description": "Grants permission to process a payment transaction", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html", "name": "PutResourcePolicy", "description": "Grants permission to create or update the resource-based policy for a Bedrock resource", "access": "Write", "resources": [ { "name": "gateway", "is_required": false }, { "name": "runtime", "is_required": false }, { "name": "runtime-endpoint", "is_required": false } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html", "name": "RetrieveMemoryRecords", "description": "Grants permission to retrieve memory records through sematic query", "access": "List", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:namespace", "bedrock-agentcore:strategyId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html", "name": "SaveBrowserSessionProfile", "description": "Grants permission to save a browser session profile", "access": "Write", "resources": [ { "name": "browser", "is_required": true }, { "name": "browser-custom", "is_required": true }, { "name": "browser-profile", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SearchRegistryRecords.html", "name": "SearchRegistryRecords", "description": "Grants permission to search for registry records", "access": "Read", "resources": [ { "name": "registry", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html", "name": "SetTokenVaultCMK", "description": "Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault", "access": "Write", "resources": [ { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBatchEvaluation.html", "name": "StartBatchEvaluation", "description": "Grants permission to start a batch evaluation", "access": "Write", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html", "name": "StartBrowserSession", "description": "Grants permission to start a new browser session", "access": "Write", "resources": [ { "name": "browser", "is_required": true }, { "name": "browser-custom", "is_required": true }, { "name": "browser-profile", "is_required": false } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html", "name": "StartCodeInterpreterSession", "description": "Grants permission to start a new code interpreter session", "access": "Write", "resources": [ { "name": "code-interpreter", "is_required": true }, { "name": "code-interpreter-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html", "name": "StartMemoryExtractionJob", "description": "Grants permission to start memory extraction job", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [ "bedrock-agentcore:strategyId", "bedrock-agentcore:sessionId", "bedrock-agentcore:actorId" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html", "name": "StartPolicyGeneration", "description": "Grants permission to start an AI-powered policy generation request", "access": "Write", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartRecommendation.html", "name": "StartRecommendation", "description": "Grants permission to start a recommendation", "access": "Write", "resources": [], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBatchEvaluation.html", "name": "StopBatchEvaluation", "description": "Grants permission to stop a batch evaluation", "access": "Write", "resources": [ { "name": "batch-evaluate", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html", "name": "StopBrowserSession", "description": "Grants permission to stop a browser session", "access": "Write", "resources": [ { "name": "browser", "is_required": true }, { "name": "browser-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html", "name": "StopCodeInterpreterSession", "description": "Grants permission to stop a code interpreter session", "access": "Write", "resources": [ { "name": "code-interpreter", "is_required": true }, { "name": "code-interpreter-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html", "name": "StopRuntimeSession", "description": "Grants permission to stop a runtime session", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SubmitRegistryRecordForApproval.html", "name": "SubmitRegistryRecordForApproval", "description": "Grants permission to submit a registry record for approval", "access": "Write", "resources": [ { "name": "registry-record", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html", "name": "SynchronizeGatewayTargets", "description": "Grants permission to enable search on gateways", "access": "Permissions management", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html", "name": "TagResource", "description": "Grants permission to Tag a Bedrock-AgentCore resource", "access": "Tagging", "resources": [ { "name": "apikeycredentialprovider", "is_required": false }, { "name": "browser-custom", "is_required": false }, { "name": "browser-profile", "is_required": false }, { "name": "code-interpreter-custom", "is_required": false }, { "name": "evaluator", "is_required": false }, { "name": "gateway", "is_required": false }, { "name": "harness", "is_required": false }, { "name": "memory", "is_required": false }, { "name": "oauth2credentialprovider", "is_required": false }, { "name": "online-evaluation-config", "is_required": false }, { "name": "payment-manager", "is_required": false }, { "name": "paymentcredentialprovider", "is_required": false }, { "name": "policy-engine", "is_required": false }, { "name": "runtime", "is_required": false }, { "name": "runtime-endpoint", "is_required": false }, { "name": "token-vault", "is_required": false }, { "name": "workload-identity", "is_required": false }, { "name": "workload-identity-directory", "is_required": false } ], "conditions": [ "aws:TagKeys", "aws:RequestTag/${TagKey}" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html", "name": "UntagResource", "description": "Grants permission to Untag a Bedrock-AgentCore resource", "access": "Tagging", "resources": [ { "name": "apikeycredentialprovider", "is_required": false }, { "name": "browser-custom", "is_required": false }, { "name": "browser-profile", "is_required": false }, { "name": "code-interpreter-custom", "is_required": false }, { "name": "evaluator", "is_required": false }, { "name": "gateway", "is_required": false }, { "name": "harness", "is_required": false }, { "name": "memory", "is_required": false }, { "name": "oauth2credentialprovider", "is_required": false }, { "name": "online-evaluation-config", "is_required": false }, { "name": "payment-manager", "is_required": false }, { "name": "paymentcredentialprovider", "is_required": false }, { "name": "policy-engine", "is_required": false }, { "name": "runtime", "is_required": false }, { "name": "runtime-endpoint", "is_required": false }, { "name": "token-vault", "is_required": false }, { "name": "workload-identity", "is_required": false }, { "name": "workload-identity-directory", "is_required": false } ], "conditions": [ "aws:TagKeys" ], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateABTest.html", "name": "UpdateABTest", "description": "Grants permission to update an A/B test", "access": "Write", "resources": [ { "name": "ab-test", "is_required": true } ], "conditions": [], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html", "name": "UpdateAgentRuntime", "description": "Grants permission to update an agent runtime", "access": "Write", "resources": [ { "name": "runtime", "is_required": true } ], "conditions": [ "bedrock-agentcore:subnets", "bedrock-agentcore:securityGroups", "bedrock-agentcore:RuntimeAuthorizerType" ], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html", "name": "UpdateAgentRuntimeEndpoint", "description": "Grants permission to update an agent runtime endpoint", "access": "Write", "resources": [ { "name": "runtime", "is_required": true }, { "name": "runtime-endpoint", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html", "name": "UpdateApiKeyCredentialProvider", "description": "Grants permission to update an existing API Key Credential Provider", "access": "Write", "resources": [ { "name": "apikeycredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html", "name": "UpdateBrowserStream", "description": "Grants permission to update the status of browser session stream", "access": "Write", "resources": [ { "name": "browser", "is_required": true }, { "name": "browser-custom", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateConfigurationBundle.html", "name": "UpdateConfigurationBundle", "description": "Grants permission to update a configuration bundle", "access": "Write", "resources": [ { "name": "configuration-bundle", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html", "name": "UpdateEvaluator", "description": "Grants permission to update an evaluator", "access": "Write", "resources": [ { "name": "evaluator", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html", "name": "UpdateGateway", "description": "Grants permission to update an existing gateway", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayRule.html", "name": "UpdateGatewayRule", "description": "Grants permission to update an existing gateway rule", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html", "name": "UpdateGatewayTarget", "description": "Grants permission to update an existing gateway target", "access": "Write", "resources": [ { "name": "gateway", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateHarness.html", "name": "UpdateHarness", "description": "Grants permission to update a harness", "access": "Write", "resources": [ { "name": "harness", "is_required": true } ], "conditions": [], "dependents": [ "bedrock-agentcore:GetAgentRuntime", "bedrock-agentcore:UpdateAgentRuntime", "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html", "name": "UpdateMemory", "description": "Grants permission to update a Memory resource", "access": "Write", "resources": [ { "name": "memory", "is_required": true } ], "conditions": [], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html", "name": "UpdateOauth2CredentialProvider", "description": "Grants permission to update an existing OAuth2 Credential Provider", "access": "Write", "resources": [ { "name": "oauth2credentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html", "name": "UpdateOnlineEvaluationConfig", "description": "Grants permission to update an online evaluation configuration", "access": "Write", "resources": [ { "name": "online-evaluation-config", "is_required": true } ], "conditions": [], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentConnector.html", "name": "UpdatePaymentConnector", "description": "Grants permission to update an existing payment connector", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentCredentialProvider.html", "name": "UpdatePaymentCredentialProvider", "description": "Grants permission to update an existing Payment Credential Provider", "access": "Write", "resources": [ { "name": "paymentcredentialprovider", "is_required": true }, { "name": "token-vault", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentManager.html", "name": "UpdatePaymentManager", "description": "Grants permission to update an existing payment manager", "access": "Write", "resources": [ { "name": "payment-manager", "is_required": true } ], "conditions": [], "dependents": [ "iam:PassRole" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html", "name": "UpdatePolicy", "description": "Grants permission to update an existing policy", "access": "Write", "resources": [ { "name": "policy", "is_required": true }, { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html", "name": "UpdatePolicyEngine", "description": "Grants permission to update a policy engine", "access": "Write", "resources": [ { "name": "policy-engine", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistry.html", "name": "UpdateRegistry", "description": "Grants permission to update an existing registry", "access": "Write", "resources": [ { "name": "registry", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecord.html", "name": "UpdateRegistryRecord", "description": "Grants permission to update an existing registry record", "access": "Write", "resources": [ { "name": "registry-record", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecordStatus.html", "name": "UpdateRegistryRecordStatus", "description": "Grants permission to update the status of a registry record", "access": "Write", "resources": [ { "name": "registry-record", "is_required": true } ], "conditions": [], "dependents": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html", "name": "UpdateWorkloadIdentity", "description": "Grants permission to update the metadata of an existing Workload Identity", "access": "Write", "resources": [ { "name": "workload-identity", "is_required": true }, { "name": "workload-identity-directory", "is_required": true } ], "conditions": [], "dependents": [] } ], "resources": [ { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/evaluator.html", "name": "evaluator", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/onlineEvaluationConfig.html", "name": "online-evaluation-config", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/memory.html", "name": "memory", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/gateway.html", "name": "gateway", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/workloadIdentity.html", "name": "workload-identity", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/oauth2credentialprovider.html", "name": "oauth2credentialprovider", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/apikeycredentialprovider.html", "name": "apikeycredentialprovider", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/runtime.html", "name": "runtime", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/runtimeEndpoint.html", "name": "runtime-endpoint", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/codeInterpreter.html", "name": "code-interpreter-custom", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/codeInterpreter.html", "name": "code-interpreter", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/browser.html", "name": "browser-custom", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/browser.html", "name": "browser", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/browserProfile.html", "name": "browser-profile", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/${BrowserProfileId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/workloadIdentityDirectory.html", "name": "workload-identity-directory", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/tokenVault.html", "name": "token-vault", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/policyEngine.html", "name": "policy-engine", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/policy.html", "name": "policy", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/policyGeneration.html", "name": "policy-generation", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/registry.html", "name": "registry", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/registryRecord.html", "name": "registry-record", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/harness.html", "name": "harness", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/${HarnessId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/batchEvaluation.html", "name": "batch-evaluate", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/${BatchEvaluationId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/abTest.html", "name": "ab-test", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/${ABTestId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/recommendation.html", "name": "recommendation", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:recommendation/${RecommendationId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/configurationBundle.html", "name": "configuration-bundle", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/${ConfigurationBundleId}", "conditions": [] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/paymentManager.html", "name": "payment-manager", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/${PaymentManagerId}", "conditions": [ "aws:ResourceTag/${TagKey}" ] }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/paymentcredentialprovider.html", "name": "paymentcredentialprovider", "arn": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/paymentcredentialprovider/${Name}", "conditions": [ "aws:ResourceTag/${TagKey}" ] } ], "conditions": [ { "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available", "name": "aws:RequestTag/${TagKey}", "description": "Filters access by creating requests based on the allowed set of values for each of the mandatory tags", "type": "String" }, { "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available", "name": "aws:ResourceTag/${TagKey}", "description": "Filters access by having actions based on the tag value associated with the resource", "type": "String" }, { "url": "https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available", "name": "aws:TagKeys", "description": "Filters access by creating requests based on the presence of mandatory tags in the request", "type": "ArrayOfString" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-gatewayAuthorizerType", "name": "bedrock-agentcore:GatewayAuthorizerType", "description": "Filters access by the authorizerType attribute on a Gateway", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-aud", "name": "bedrock-agentcore:InboundJwtClaim/aud", "description": "Filters access by the audience claim (aud) in the JWT passed in the request", "type": "ArrayOfString" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-client_id", "name": "bedrock-agentcore:InboundJwtClaim/client_id", "description": "Filters access by the client_id claim in the JWT passed in the request", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-iss", "name": "bedrock-agentcore:InboundJwtClaim/iss", "description": "Filters access by the issuer (iss) claim present in the JWT passed in the request", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-scope", "name": "bedrock-agentcore:InboundJwtClaim/scope", "description": "Filters access by the scope claim in the JWT passed in the request", "type": "ArrayOfString" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-sub", "name": "bedrock-agentcore:InboundJwtClaim/sub", "description": "Filters access by the subject claim (sub) in the JWT passed in the request", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-kmsKeyArn", "name": "bedrock-agentcore:KmsKeyArn", "description": "Filters access by KMS Key arn provided", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/runtime-authorizer-type-condition-key.html", "name": "bedrock-agentcore:RuntimeAuthorizerType", "description": "Filters access by the authorizer type configured for the AgentCore runtime", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-actorId", "name": "bedrock-agentcore:actorId", "description": "Filters access by Actor Id", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-namespace", "name": "bedrock-agentcore:namespace", "description": "Filters access by namespace", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/security-vpc-condition.html", "name": "bedrock-agentcore:securityGroups", "description": "Filters access by the ID of security groups configured for the AgentCore runtime", "type": "ArrayOfString" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-sessionId", "name": "bedrock-agentcore:sessionId", "description": "Filters access by Session Id", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-strategyId", "name": "bedrock-agentcore:strategyId", "description": "Filters access by Memory Strategy Id", "type": "String" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/devguide/security-vpc-condition.html", "name": "bedrock-agentcore:subnets", "description": "Filters access by the ID of subnets configured for the AgentCore runtime", "type": "ArrayOfString" }, { "url": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-userid", "name": "bedrock-agentcore:userid", "description": "Filters access by the static user ID value passed in the request", "type": "String" } ] }