Amazon Bedrock Agentcore (bedrock-agentcore)

Additions

Actions

• IngestData
  
  • Description:  Grants permission to ingest content to generate long-term memory records
  • Access:  Write
  • Resources: 

    Name: memory

    Required: Yes

  • Conditions: 

    bedrock-agentcore:actorId

    bedrock-agentcore:namespaceVariable/${VariableName}

    bedrock-agentcore:sessionId

• ResetTokenVaultKeyMaterial
  
  • Description:  Grants permission to reset a TokenVault's key material to a Service Managed Key after its Customer Managed Key (CMK) has been deleted
  • Access:  Write
  • Resources: 

    Name: token-vault

    Required: Yes

• UpdateMemoryRecordExpirySpecification
  
  • Description:  Grants permission to set or remove the expiry specification of long-term memory records
  • Access:  Write
  • Resources: 

    Name: memory

    Required: Yes

Conditions

• bedrock-agentcore:namespacePath
  
  • Description:  Filters access by the namespace path hierarchy of the memory records in the request
  • Type:  String
• bedrock-agentcore:namespaceVariable/${VariableName}
  
  • Description:  Filters access by the value of a custom namespace variable in the request
  • Type:  String
• bedrock-agentcore:sourceNamespace
  
  • Description:  Filters access by the source namespace of the memory records in the request
  • Type:  String

Updates

Actions

• CreateEvent
  
  Conditions
  
  • ＋ bedrock-agentcore:namespaceVariable/${VariableName}
• ListOauth2CredentialProviders
  
  Conditions
  
  • ＋ bedrock-agentcore:namespacePath
• SearchRegistryRecords
  
  Conditions
  
  • ＋ bedrock-agentcore:namespacePath
• BatchDeleteMemoryRecords
  
  Conditions
  
  • ＋ bedrock-agentcore:namespace
• BatchUpdateMemoryRecords
  
  Conditions
  
  • ＋ bedrock-agentcore:sourceNamespace
• DeleteMemoryRecord
  
  Conditions
  
  • ＋ bedrock-agentcore:namespace
• GetMemoryRecord
  
  Conditions
  
  • ＋ bedrock-agentcore:namespace