Amazon Bedrock Agentcore (bedrock-agentcore)

2026-06-18

10 new actions, 2 new resources | 4 updated actions, 4 updated resources

Additions

    Actions
  • CreateHarnessEndpoint
    • Description:  Grants permission to create a new harness endpoint
    • Access:  Write
    • Resources: 

      Name: harness

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

    • Dependents: 

      bedrock-agentcore:CreateAgentRuntimeEndpoint

  • DeleteHarnessEndpoint
    • Description:  Grants permission to delete a harness endpoint
    • Access:  Write
    • Resources: 

      Name: harness

      Required: Yes

      Name: harness-endpoint

      Required: Yes

    • Dependents: 

      bedrock-agentcore:DeleteAgentRuntimeEndpoint

  • GatewayAssociateWebACL
    • Description:  Grants permission to associate an AWS WAF Web ACL with an AgentCore Gateway
    • Access:  Write
    • Resources: 

      Name: gateway

      Required: Yes

  • GatewayDisassociateWebACL
    • Description:  Grants permission to remove the AWS WAF Web ACL association from an AgentCore Gateway
    • Access:  Write
    • Resources: 

      Name: gateway

      Required: Yes

  • GatewayGetWebACLForResource
    • Description:  Grants permission to retrieve the AWS WAF Web ACL ARN currently associated with an AgentCore Gateway
    • Access:  Read
    • Resources: 

      Name: gateway

      Required: Yes

  • GatewayListResourcesForWebACL
    • Description:  Grants permission to list AgentCore Gateways associated with an AWS WAF Web ACL
    • Access:  List
  • GetHarnessEndpoint
    • Description:  Grants permission to get details of a harness endpoint
    • Access:  Read
    • Resources: 

      Name: harness

      Required: Yes

      Name: harness-endpoint

      Required: Yes

  • InvokeWebSearch
    • Description:  Grants permission to invoke a web search target
    • Access:  Permissions management
    • Resources: 

      Name: web-search

      Required: Yes

  • ListHarnessEndpoints
    • Description:  Grants permission to list harness endpoints
    • Access:  List
  • UpdateHarnessEndpoint
    • Description:  Grants permission to update harness endpoint
    • Access:  Write
    • Resources: 

      Name: harness

      Required: Yes

      Name: harness-endpoint

      Required: Yes

    • Dependents: 

      bedrock-agentcore:UpdateAgentRuntimeEndpoint

    Resources
  • harness-endpoint
    • Arn:  arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/${HarnessId}/harness-endpoint/${Name}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • web-search
    • Arn:  arn:${Partition}:bedrock-agentcore:${Region}:${Account}:tool/web-search.v1

Updates

    Actions
  • CreateHarness
      Dependents
    • + bedrock-agentcore:CreateMemory
    • + bedrock-agentcore:GetMemory
  • DeleteMemory
      Dependents
    • + bedrock-agentcore:DeleteMemory
    • + bedrock-agentcore:GetMemory
  • UpdateRegistry
      Dependents
    • + bedrock-agentcore:CreateMemory
    • + bedrock-agentcore:GetMemory
    • + bedrock-agentcore:UpdateMemory
  • ListApiKeyCredentialProviders
      Resources
    • + harness-endpoint