aws:RequestTag/${TagKey}
aws:TagKeys
bedrock-agentcore:CreateAgentRuntime
bedrock-agentcore:GetAgentRuntime
iam:PassRole
Name: harness
Required: Yes
bedrock-agentcore:DeleteAgentRuntime
bedrock-agentcore:GetAgentRuntime
iam:PassRole
Name: harness
Required: Yes
Name: harness
Required: Yes
bedrock-agentcore:InvokeAgentRuntime
Name: harness
Required: Yes
bedrock-agentcore:GetAgentRuntime
bedrock-agentcore:UpdateAgentRuntime
iam:PassRole
aws:ResourceTag/${TagKey}