aws-iam-data 0.0.412 → 0.0.413

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -33705,6 +33705,1474 @@
33705
33705
  }
33706
33706
  ]
33707
33707
  },
33708
+ {
33709
+ "name": "Amazon Bedrock Agentcore",
33710
+ "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html",
33711
+ "servicePrefix": "bedrock-agentcore",
33712
+ "actions": [
33713
+ {
33714
+ "name": "AllowVendedLogDeliveryForResource",
33715
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33716
+ "permissionOnly": true,
33717
+ "description": "Grants permission to configure vended telemetry for a resource",
33718
+ "accessLevel": "Permissions management",
33719
+ "resourceTypes": [
33720
+ {
33721
+ "resourceType": "memory",
33722
+ "required": true,
33723
+ "conditionKeys": [],
33724
+ "dependentActions": []
33725
+ }
33726
+ ]
33727
+ },
33728
+ {
33729
+ "name": "ConnectBrowserAutomationStream",
33730
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33731
+ "permissionOnly": false,
33732
+ "description": "Grants permission to connect to a browser automation stream",
33733
+ "accessLevel": "Read",
33734
+ "resourceTypes": [
33735
+ {
33736
+ "resourceType": "",
33737
+ "required": false,
33738
+ "conditionKeys": [],
33739
+ "dependentActions": []
33740
+ }
33741
+ ]
33742
+ },
33743
+ {
33744
+ "name": "ConnectBrowserLiveViewStream",
33745
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33746
+ "permissionOnly": false,
33747
+ "description": "Grants permission to connect to a browser live view stream",
33748
+ "accessLevel": "Read",
33749
+ "resourceTypes": [
33750
+ {
33751
+ "resourceType": "",
33752
+ "required": false,
33753
+ "conditionKeys": [],
33754
+ "dependentActions": []
33755
+ }
33756
+ ]
33757
+ },
33758
+ {
33759
+ "name": "CreateAgentRuntime",
33760
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33761
+ "permissionOnly": false,
33762
+ "description": "Grants permission to create a new agent runtime",
33763
+ "accessLevel": "Write",
33764
+ "resourceTypes": [
33765
+ {
33766
+ "resourceType": "",
33767
+ "required": false,
33768
+ "conditionKeys": [],
33769
+ "dependentActions": [
33770
+ "iam:PassRole"
33771
+ ]
33772
+ }
33773
+ ]
33774
+ },
33775
+ {
33776
+ "name": "CreateAgentRuntimeEndpoint",
33777
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33778
+ "permissionOnly": false,
33779
+ "description": "Grants permission to create a new agent endpoint",
33780
+ "accessLevel": "Write",
33781
+ "resourceTypes": [
33782
+ {
33783
+ "resourceType": "",
33784
+ "required": false,
33785
+ "conditionKeys": [],
33786
+ "dependentActions": []
33787
+ }
33788
+ ]
33789
+ },
33790
+ {
33791
+ "name": "CreateApiKeyCredentialProvider",
33792
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateApiKeyCredentialProvider.html",
33793
+ "permissionOnly": false,
33794
+ "description": "Grants permission to create a new API Key Credential Provider",
33795
+ "accessLevel": "Write",
33796
+ "resourceTypes": [
33797
+ {
33798
+ "resourceType": "",
33799
+ "required": false,
33800
+ "conditionKeys": [],
33801
+ "dependentActions": []
33802
+ }
33803
+ ]
33804
+ },
33805
+ {
33806
+ "name": "CreateBrowser",
33807
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33808
+ "permissionOnly": false,
33809
+ "description": "Grants permission to create a new custom browser",
33810
+ "accessLevel": "Write",
33811
+ "resourceTypes": [
33812
+ {
33813
+ "resourceType": "",
33814
+ "required": false,
33815
+ "conditionKeys": [],
33816
+ "dependentActions": []
33817
+ }
33818
+ ]
33819
+ },
33820
+ {
33821
+ "name": "CreateCodeInterpreter",
33822
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33823
+ "permissionOnly": false,
33824
+ "description": "Grants permission to create a new custom code interpreter",
33825
+ "accessLevel": "Write",
33826
+ "resourceTypes": [
33827
+ {
33828
+ "resourceType": "",
33829
+ "required": false,
33830
+ "conditionKeys": [],
33831
+ "dependentActions": []
33832
+ }
33833
+ ]
33834
+ },
33835
+ {
33836
+ "name": "CreateEvent",
33837
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html",
33838
+ "permissionOnly": false,
33839
+ "description": "Grants permission to create an Event",
33840
+ "accessLevel": "Write",
33841
+ "resourceTypes": [
33842
+ {
33843
+ "resourceType": "memory",
33844
+ "required": true,
33845
+ "conditionKeys": [],
33846
+ "dependentActions": []
33847
+ },
33848
+ {
33849
+ "resourceType": "",
33850
+ "required": false,
33851
+ "conditionKeys": [
33852
+ "bedrock-agentcore:sessionId",
33853
+ "bedrock-agentcore:actorId"
33854
+ ],
33855
+ "dependentActions": []
33856
+ }
33857
+ ]
33858
+ },
33859
+ {
33860
+ "name": "CreateGateway",
33861
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateGateway.html",
33862
+ "permissionOnly": false,
33863
+ "description": "Grants permission to create a new gateway",
33864
+ "accessLevel": "Write",
33865
+ "resourceTypes": [
33866
+ {
33867
+ "resourceType": "",
33868
+ "required": false,
33869
+ "conditionKeys": [],
33870
+ "dependentActions": [
33871
+ "iam:PassRole"
33872
+ ]
33873
+ }
33874
+ ]
33875
+ },
33876
+ {
33877
+ "name": "CreateGatewayTarget",
33878
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateGatewayTarget.html",
33879
+ "permissionOnly": false,
33880
+ "description": "Grants permission to create a new target in an existing gateway",
33881
+ "accessLevel": "Write",
33882
+ "resourceTypes": [
33883
+ {
33884
+ "resourceType": "gateway",
33885
+ "required": true,
33886
+ "conditionKeys": [],
33887
+ "dependentActions": []
33888
+ }
33889
+ ]
33890
+ },
33891
+ {
33892
+ "name": "CreateMemory",
33893
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateMemory.html",
33894
+ "permissionOnly": false,
33895
+ "description": "Grants permission to create a Memory resource",
33896
+ "accessLevel": "Write",
33897
+ "resourceTypes": [
33898
+ {
33899
+ "resourceType": "",
33900
+ "required": false,
33901
+ "conditionKeys": [],
33902
+ "dependentActions": [
33903
+ "iam:PassRole"
33904
+ ]
33905
+ }
33906
+ ]
33907
+ },
33908
+ {
33909
+ "name": "CreateOauth2CredentialProvider",
33910
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateOauth2CredentialProvider.html",
33911
+ "permissionOnly": false,
33912
+ "description": "Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol",
33913
+ "accessLevel": "Write",
33914
+ "resourceTypes": [
33915
+ {
33916
+ "resourceType": "",
33917
+ "required": false,
33918
+ "conditionKeys": [],
33919
+ "dependentActions": []
33920
+ }
33921
+ ]
33922
+ },
33923
+ {
33924
+ "name": "CreateWorkloadIdentity",
33925
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateWorkloadIdentity.html",
33926
+ "permissionOnly": false,
33927
+ "description": "Grants permission to create a new Workload Identity",
33928
+ "accessLevel": "Write",
33929
+ "resourceTypes": [
33930
+ {
33931
+ "resourceType": "",
33932
+ "required": false,
33933
+ "conditionKeys": [],
33934
+ "dependentActions": []
33935
+ }
33936
+ ]
33937
+ },
33938
+ {
33939
+ "name": "DeleteAgentRuntime",
33940
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33941
+ "permissionOnly": false,
33942
+ "description": "Grants permission to delete an agent runtime",
33943
+ "accessLevel": "Write",
33944
+ "resourceTypes": [
33945
+ {
33946
+ "resourceType": "runtime",
33947
+ "required": true,
33948
+ "conditionKeys": [],
33949
+ "dependentActions": []
33950
+ }
33951
+ ]
33952
+ },
33953
+ {
33954
+ "name": "DeleteAgentRuntimeEndpoint",
33955
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33956
+ "permissionOnly": false,
33957
+ "description": "Grants permission to delete an agent endpoint",
33958
+ "accessLevel": "Write",
33959
+ "resourceTypes": [
33960
+ {
33961
+ "resourceType": "runtime",
33962
+ "required": true,
33963
+ "conditionKeys": [],
33964
+ "dependentActions": []
33965
+ },
33966
+ {
33967
+ "resourceType": "runtime-endpoint",
33968
+ "required": true,
33969
+ "conditionKeys": [],
33970
+ "dependentActions": []
33971
+ }
33972
+ ]
33973
+ },
33974
+ {
33975
+ "name": "DeleteApiKeyCredentialProvider",
33976
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteApiKeyCredentialProvider.html",
33977
+ "permissionOnly": false,
33978
+ "description": "Grants permission to delete a registered API Key Credential Provider",
33979
+ "accessLevel": "Write",
33980
+ "resourceTypes": [
33981
+ {
33982
+ "resourceType": "",
33983
+ "required": false,
33984
+ "conditionKeys": [],
33985
+ "dependentActions": []
33986
+ }
33987
+ ]
33988
+ },
33989
+ {
33990
+ "name": "DeleteBrowser",
33991
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
33992
+ "permissionOnly": false,
33993
+ "description": "Grants permission to delete a custom browser",
33994
+ "accessLevel": "Write",
33995
+ "resourceTypes": [
33996
+ {
33997
+ "resourceType": "browser-custom",
33998
+ "required": true,
33999
+ "conditionKeys": [],
34000
+ "dependentActions": []
34001
+ }
34002
+ ]
34003
+ },
34004
+ {
34005
+ "name": "DeleteCodeInterpreter",
34006
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34007
+ "permissionOnly": false,
34008
+ "description": "Grants permission to delete a custom code interpreter",
34009
+ "accessLevel": "Write",
34010
+ "resourceTypes": [
34011
+ {
34012
+ "resourceType": "code-interpreter-custom",
34013
+ "required": true,
34014
+ "conditionKeys": [],
34015
+ "dependentActions": []
34016
+ }
34017
+ ]
34018
+ },
34019
+ {
34020
+ "name": "DeleteEvent",
34021
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html",
34022
+ "permissionOnly": false,
34023
+ "description": "Grants permission to delete an Event",
34024
+ "accessLevel": "Write",
34025
+ "resourceTypes": [
34026
+ {
34027
+ "resourceType": "memory",
34028
+ "required": true,
34029
+ "conditionKeys": [],
34030
+ "dependentActions": []
34031
+ },
34032
+ {
34033
+ "resourceType": "",
34034
+ "required": false,
34035
+ "conditionKeys": [
34036
+ "bedrock-agentcore:sessionId",
34037
+ "bedrock-agentcore:actorId"
34038
+ ],
34039
+ "dependentActions": []
34040
+ }
34041
+ ]
34042
+ },
34043
+ {
34044
+ "name": "DeleteGateway",
34045
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteGateway.html",
34046
+ "permissionOnly": false,
34047
+ "description": "Grants permission to delete an existing gateway",
34048
+ "accessLevel": "Write",
34049
+ "resourceTypes": [
34050
+ {
34051
+ "resourceType": "gateway",
34052
+ "required": true,
34053
+ "conditionKeys": [],
34054
+ "dependentActions": []
34055
+ }
34056
+ ]
34057
+ },
34058
+ {
34059
+ "name": "DeleteGatewayTarget",
34060
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteGatewayTarget.html",
34061
+ "permissionOnly": false,
34062
+ "description": "Grants permission to delete an existing gateway target",
34063
+ "accessLevel": "Write",
34064
+ "resourceTypes": [
34065
+ {
34066
+ "resourceType": "gateway",
34067
+ "required": true,
34068
+ "conditionKeys": [],
34069
+ "dependentActions": []
34070
+ }
34071
+ ]
34072
+ },
34073
+ {
34074
+ "name": "DeleteMemory",
34075
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemory.html",
34076
+ "permissionOnly": false,
34077
+ "description": "Grants permission to delete a Memory resource",
34078
+ "accessLevel": "Write",
34079
+ "resourceTypes": [
34080
+ {
34081
+ "resourceType": "memory",
34082
+ "required": true,
34083
+ "conditionKeys": [],
34084
+ "dependentActions": []
34085
+ }
34086
+ ]
34087
+ },
34088
+ {
34089
+ "name": "DeleteMemoryRecord",
34090
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html",
34091
+ "permissionOnly": false,
34092
+ "description": "Grants permission to delete a Memory Record",
34093
+ "accessLevel": "Write",
34094
+ "resourceTypes": [
34095
+ {
34096
+ "resourceType": "memory",
34097
+ "required": true,
34098
+ "conditionKeys": [],
34099
+ "dependentActions": []
34100
+ }
34101
+ ]
34102
+ },
34103
+ {
34104
+ "name": "DeleteOauth2CredentialProvider",
34105
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteOauth2CredentialProvider.html",
34106
+ "permissionOnly": false,
34107
+ "description": "Grants permission to delete a registered OAuth2 Credential Provider",
34108
+ "accessLevel": "Write",
34109
+ "resourceTypes": [
34110
+ {
34111
+ "resourceType": "",
34112
+ "required": false,
34113
+ "conditionKeys": [],
34114
+ "dependentActions": []
34115
+ }
34116
+ ]
34117
+ },
34118
+ {
34119
+ "name": "DeleteWorkloadIdentity",
34120
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteWorkloadIdentity.html",
34121
+ "permissionOnly": false,
34122
+ "description": "Grants permission to delete a registered Workload Identity",
34123
+ "accessLevel": "Write",
34124
+ "resourceTypes": [
34125
+ {
34126
+ "resourceType": "",
34127
+ "required": false,
34128
+ "conditionKeys": [],
34129
+ "dependentActions": []
34130
+ }
34131
+ ]
34132
+ },
34133
+ {
34134
+ "name": "GetAgentRuntime",
34135
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34136
+ "permissionOnly": false,
34137
+ "description": "Grants permission to get details of an agent runtime",
34138
+ "accessLevel": "Read",
34139
+ "resourceTypes": [
34140
+ {
34141
+ "resourceType": "runtime",
34142
+ "required": true,
34143
+ "conditionKeys": [],
34144
+ "dependentActions": []
34145
+ }
34146
+ ]
34147
+ },
34148
+ {
34149
+ "name": "GetAgentRuntimeEndpoint",
34150
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34151
+ "permissionOnly": false,
34152
+ "description": "Grants permission to get details of an agent endpoint",
34153
+ "accessLevel": "Read",
34154
+ "resourceTypes": [
34155
+ {
34156
+ "resourceType": "runtime",
34157
+ "required": true,
34158
+ "conditionKeys": [],
34159
+ "dependentActions": []
34160
+ },
34161
+ {
34162
+ "resourceType": "runtime-endpoint",
34163
+ "required": true,
34164
+ "conditionKeys": [],
34165
+ "dependentActions": []
34166
+ }
34167
+ ]
34168
+ },
34169
+ {
34170
+ "name": "GetApiKeyCredentialProvider",
34171
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetApiKeyCredentialProvider.html",
34172
+ "permissionOnly": false,
34173
+ "description": "Grants permission to fetch a registered API Key Credential Provider by its name",
34174
+ "accessLevel": "Read",
34175
+ "resourceTypes": [
34176
+ {
34177
+ "resourceType": "",
34178
+ "required": false,
34179
+ "conditionKeys": [],
34180
+ "dependentActions": []
34181
+ }
34182
+ ]
34183
+ },
34184
+ {
34185
+ "name": "GetBrowser",
34186
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34187
+ "permissionOnly": false,
34188
+ "description": "Grants permission to get details of a browser",
34189
+ "accessLevel": "Read",
34190
+ "resourceTypes": [
34191
+ {
34192
+ "resourceType": "browser-custom",
34193
+ "required": true,
34194
+ "conditionKeys": [],
34195
+ "dependentActions": []
34196
+ }
34197
+ ]
34198
+ },
34199
+ {
34200
+ "name": "GetBrowserSession",
34201
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34202
+ "permissionOnly": false,
34203
+ "description": "Grants permission to get details of a browser session",
34204
+ "accessLevel": "Read",
34205
+ "resourceTypes": [
34206
+ {
34207
+ "resourceType": "browser",
34208
+ "required": true,
34209
+ "conditionKeys": [],
34210
+ "dependentActions": []
34211
+ },
34212
+ {
34213
+ "resourceType": "browser-custom",
34214
+ "required": true,
34215
+ "conditionKeys": [],
34216
+ "dependentActions": []
34217
+ }
34218
+ ]
34219
+ },
34220
+ {
34221
+ "name": "GetCodeInterpreter",
34222
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34223
+ "permissionOnly": false,
34224
+ "description": "Grants permission to get details of a code interpreter",
34225
+ "accessLevel": "Read",
34226
+ "resourceTypes": [
34227
+ {
34228
+ "resourceType": "code-interpreter-custom",
34229
+ "required": true,
34230
+ "conditionKeys": [],
34231
+ "dependentActions": []
34232
+ }
34233
+ ]
34234
+ },
34235
+ {
34236
+ "name": "GetCodeInterpreterSession",
34237
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34238
+ "permissionOnly": false,
34239
+ "description": "Grants permission to get details of a code interpreter session",
34240
+ "accessLevel": "Read",
34241
+ "resourceTypes": [
34242
+ {
34243
+ "resourceType": "code-interpreter",
34244
+ "required": true,
34245
+ "conditionKeys": [],
34246
+ "dependentActions": []
34247
+ },
34248
+ {
34249
+ "resourceType": "code-interpreter-custom",
34250
+ "required": true,
34251
+ "conditionKeys": [],
34252
+ "dependentActions": []
34253
+ }
34254
+ ]
34255
+ },
34256
+ {
34257
+ "name": "GetEvent",
34258
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html",
34259
+ "permissionOnly": false,
34260
+ "description": "Grants permission to fetch an Event",
34261
+ "accessLevel": "Read",
34262
+ "resourceTypes": [
34263
+ {
34264
+ "resourceType": "memory",
34265
+ "required": true,
34266
+ "conditionKeys": [],
34267
+ "dependentActions": []
34268
+ },
34269
+ {
34270
+ "resourceType": "",
34271
+ "required": false,
34272
+ "conditionKeys": [
34273
+ "bedrock-agentcore:sessionId",
34274
+ "bedrock-agentcore:actorId"
34275
+ ],
34276
+ "dependentActions": []
34277
+ }
34278
+ ]
34279
+ },
34280
+ {
34281
+ "name": "GetGateway",
34282
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetGateway.html",
34283
+ "permissionOnly": false,
34284
+ "description": "Grants permission to retrieve an existing gateway",
34285
+ "accessLevel": "Read",
34286
+ "resourceTypes": [
34287
+ {
34288
+ "resourceType": "gateway",
34289
+ "required": true,
34290
+ "conditionKeys": [],
34291
+ "dependentActions": []
34292
+ }
34293
+ ]
34294
+ },
34295
+ {
34296
+ "name": "GetGatewayTarget",
34297
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetGatewayTarget.html",
34298
+ "permissionOnly": false,
34299
+ "description": "Grants permission to retrieve an existing gateway target",
34300
+ "accessLevel": "Read",
34301
+ "resourceTypes": [
34302
+ {
34303
+ "resourceType": "gateway",
34304
+ "required": true,
34305
+ "conditionKeys": [],
34306
+ "dependentActions": []
34307
+ }
34308
+ ]
34309
+ },
34310
+ {
34311
+ "name": "GetMemory",
34312
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemory.html",
34313
+ "permissionOnly": false,
34314
+ "description": "Grants permission to fetch details for a Memory resource",
34315
+ "accessLevel": "Read",
34316
+ "resourceTypes": [
34317
+ {
34318
+ "resourceType": "memory",
34319
+ "required": true,
34320
+ "conditionKeys": [],
34321
+ "dependentActions": []
34322
+ }
34323
+ ]
34324
+ },
34325
+ {
34326
+ "name": "GetMemoryRecord",
34327
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html",
34328
+ "permissionOnly": false,
34329
+ "description": "Grants permission to fetch a Memory Record",
34330
+ "accessLevel": "Read",
34331
+ "resourceTypes": [
34332
+ {
34333
+ "resourceType": "memory",
34334
+ "required": true,
34335
+ "conditionKeys": [],
34336
+ "dependentActions": []
34337
+ }
34338
+ ]
34339
+ },
34340
+ {
34341
+ "name": "GetOauth2CredentialProvider",
34342
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetOauth2CredentialProvider.html",
34343
+ "permissionOnly": false,
34344
+ "description": "Grants permission to fetch a registered OAuth2 Credential Provider by its name",
34345
+ "accessLevel": "Read",
34346
+ "resourceTypes": [
34347
+ {
34348
+ "resourceType": "",
34349
+ "required": false,
34350
+ "conditionKeys": [],
34351
+ "dependentActions": []
34352
+ }
34353
+ ]
34354
+ },
34355
+ {
34356
+ "name": "GetResourceApiKey",
34357
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html",
34358
+ "permissionOnly": false,
34359
+ "description": "Grants permission to retrieve an API Key associated with an Api Key Credential Provider",
34360
+ "accessLevel": "Read",
34361
+ "resourceTypes": [
34362
+ {
34363
+ "resourceType": "",
34364
+ "required": false,
34365
+ "conditionKeys": [],
34366
+ "dependentActions": []
34367
+ }
34368
+ ]
34369
+ },
34370
+ {
34371
+ "name": "GetResourceOauth2Token",
34372
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html",
34373
+ "permissionOnly": false,
34374
+ "description": "Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource",
34375
+ "accessLevel": "Read",
34376
+ "resourceTypes": [
34377
+ {
34378
+ "resourceType": "",
34379
+ "required": false,
34380
+ "conditionKeys": [],
34381
+ "dependentActions": []
34382
+ }
34383
+ ]
34384
+ },
34385
+ {
34386
+ "name": "GetTokenVault",
34387
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetTokenVault.html",
34388
+ "permissionOnly": false,
34389
+ "description": "Grants permission to fetch the current configuration of the TokenVault, including encryption settings",
34390
+ "accessLevel": "Read",
34391
+ "resourceTypes": [
34392
+ {
34393
+ "resourceType": "",
34394
+ "required": false,
34395
+ "conditionKeys": [],
34396
+ "dependentActions": []
34397
+ }
34398
+ ]
34399
+ },
34400
+ {
34401
+ "name": "GetWorkloadAccessToken",
34402
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html",
34403
+ "permissionOnly": false,
34404
+ "description": "Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user",
34405
+ "accessLevel": "Write",
34406
+ "resourceTypes": [
34407
+ {
34408
+ "resourceType": "",
34409
+ "required": false,
34410
+ "conditionKeys": [],
34411
+ "dependentActions": []
34412
+ }
34413
+ ]
34414
+ },
34415
+ {
34416
+ "name": "GetWorkloadAccessTokenForJWT",
34417
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html",
34418
+ "permissionOnly": false,
34419
+ "description": "Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token",
34420
+ "accessLevel": "Write",
34421
+ "resourceTypes": [
34422
+ {
34423
+ "resourceType": "",
34424
+ "required": false,
34425
+ "conditionKeys": [],
34426
+ "dependentActions": []
34427
+ }
34428
+ ]
34429
+ },
34430
+ {
34431
+ "name": "GetWorkloadAccessTokenForUserId",
34432
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html",
34433
+ "permissionOnly": false,
34434
+ "description": "Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id",
34435
+ "accessLevel": "Write",
34436
+ "resourceTypes": [
34437
+ {
34438
+ "resourceType": "",
34439
+ "required": false,
34440
+ "conditionKeys": [],
34441
+ "dependentActions": []
34442
+ }
34443
+ ]
34444
+ },
34445
+ {
34446
+ "name": "GetWorkloadIdentity",
34447
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadIdentity.html",
34448
+ "permissionOnly": false,
34449
+ "description": "Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs",
34450
+ "accessLevel": "Read",
34451
+ "resourceTypes": [
34452
+ {
34453
+ "resourceType": "",
34454
+ "required": false,
34455
+ "conditionKeys": [],
34456
+ "dependentActions": []
34457
+ }
34458
+ ]
34459
+ },
34460
+ {
34461
+ "name": "InvokeAgentRuntimeEndpoint",
34462
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34463
+ "permissionOnly": false,
34464
+ "description": "Grants permission to invoke an agent endpoint",
34465
+ "accessLevel": "Write",
34466
+ "resourceTypes": [
34467
+ {
34468
+ "resourceType": "runtime",
34469
+ "required": true,
34470
+ "conditionKeys": [],
34471
+ "dependentActions": []
34472
+ },
34473
+ {
34474
+ "resourceType": "runtime-endpoint",
34475
+ "required": true,
34476
+ "conditionKeys": [],
34477
+ "dependentActions": []
34478
+ }
34479
+ ]
34480
+ },
34481
+ {
34482
+ "name": "InvokeCodeInterpreter",
34483
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34484
+ "permissionOnly": false,
34485
+ "description": "Grants permission to invoke a code interpreter session",
34486
+ "accessLevel": "Write",
34487
+ "resourceTypes": [
34488
+ {
34489
+ "resourceType": "code-interpreter",
34490
+ "required": true,
34491
+ "conditionKeys": [],
34492
+ "dependentActions": []
34493
+ },
34494
+ {
34495
+ "resourceType": "code-interpreter-custom",
34496
+ "required": true,
34497
+ "conditionKeys": [],
34498
+ "dependentActions": []
34499
+ }
34500
+ ]
34501
+ },
34502
+ {
34503
+ "name": "ListActors",
34504
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html",
34505
+ "permissionOnly": false,
34506
+ "description": "Grants permission to list Actors",
34507
+ "accessLevel": "List",
34508
+ "resourceTypes": [
34509
+ {
34510
+ "resourceType": "memory",
34511
+ "required": true,
34512
+ "conditionKeys": [],
34513
+ "dependentActions": []
34514
+ }
34515
+ ]
34516
+ },
34517
+ {
34518
+ "name": "ListAgentRuntimeEndpoints",
34519
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34520
+ "permissionOnly": false,
34521
+ "description": "Grants permission to list agent endpoints",
34522
+ "accessLevel": "List",
34523
+ "resourceTypes": [
34524
+ {
34525
+ "resourceType": "",
34526
+ "required": false,
34527
+ "conditionKeys": [],
34528
+ "dependentActions": []
34529
+ }
34530
+ ]
34531
+ },
34532
+ {
34533
+ "name": "ListAgentRuntimeVersions",
34534
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34535
+ "permissionOnly": false,
34536
+ "description": "Grants permission to list agent runtime versions",
34537
+ "accessLevel": "List",
34538
+ "resourceTypes": [
34539
+ {
34540
+ "resourceType": "",
34541
+ "required": false,
34542
+ "conditionKeys": [],
34543
+ "dependentActions": []
34544
+ }
34545
+ ]
34546
+ },
34547
+ {
34548
+ "name": "ListAgentRuntimes",
34549
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34550
+ "permissionOnly": false,
34551
+ "description": "Grants permission to list agent runtimes",
34552
+ "accessLevel": "List",
34553
+ "resourceTypes": [
34554
+ {
34555
+ "resourceType": "",
34556
+ "required": false,
34557
+ "conditionKeys": [],
34558
+ "dependentActions": []
34559
+ }
34560
+ ]
34561
+ },
34562
+ {
34563
+ "name": "ListApiKeyCredentialProviders",
34564
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListApiKeyCredentialProviders.html",
34565
+ "permissionOnly": false,
34566
+ "description": "Grants permission to list all API Key Credential Providers in the Token Vault",
34567
+ "accessLevel": "Read",
34568
+ "resourceTypes": [
34569
+ {
34570
+ "resourceType": "",
34571
+ "required": false,
34572
+ "conditionKeys": [],
34573
+ "dependentActions": []
34574
+ }
34575
+ ]
34576
+ },
34577
+ {
34578
+ "name": "ListBrowserSessions",
34579
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34580
+ "permissionOnly": false,
34581
+ "description": "Grants permission to list browser sessions",
34582
+ "accessLevel": "List",
34583
+ "resourceTypes": [
34584
+ {
34585
+ "resourceType": "",
34586
+ "required": false,
34587
+ "conditionKeys": [],
34588
+ "dependentActions": []
34589
+ }
34590
+ ]
34591
+ },
34592
+ {
34593
+ "name": "ListBrowsers",
34594
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34595
+ "permissionOnly": false,
34596
+ "description": "Grants permission to list browsers",
34597
+ "accessLevel": "List",
34598
+ "resourceTypes": [
34599
+ {
34600
+ "resourceType": "",
34601
+ "required": false,
34602
+ "conditionKeys": [],
34603
+ "dependentActions": []
34604
+ }
34605
+ ]
34606
+ },
34607
+ {
34608
+ "name": "ListCodeInterpreterSessions",
34609
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34610
+ "permissionOnly": false,
34611
+ "description": "Grants permission to list code interpreter sessions",
34612
+ "accessLevel": "List",
34613
+ "resourceTypes": [
34614
+ {
34615
+ "resourceType": "code-interpreter",
34616
+ "required": true,
34617
+ "conditionKeys": [],
34618
+ "dependentActions": []
34619
+ },
34620
+ {
34621
+ "resourceType": "code-interpreter-custom",
34622
+ "required": true,
34623
+ "conditionKeys": [],
34624
+ "dependentActions": []
34625
+ }
34626
+ ]
34627
+ },
34628
+ {
34629
+ "name": "ListCodeInterpreters",
34630
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34631
+ "permissionOnly": false,
34632
+ "description": "Grants permission to list code interpreters",
34633
+ "accessLevel": "List",
34634
+ "resourceTypes": [
34635
+ {
34636
+ "resourceType": "",
34637
+ "required": false,
34638
+ "conditionKeys": [],
34639
+ "dependentActions": []
34640
+ }
34641
+ ]
34642
+ },
34643
+ {
34644
+ "name": "ListEvents",
34645
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html",
34646
+ "permissionOnly": false,
34647
+ "description": "Grants permission to list events",
34648
+ "accessLevel": "List",
34649
+ "resourceTypes": [
34650
+ {
34651
+ "resourceType": "memory",
34652
+ "required": true,
34653
+ "conditionKeys": [],
34654
+ "dependentActions": []
34655
+ },
34656
+ {
34657
+ "resourceType": "",
34658
+ "required": false,
34659
+ "conditionKeys": [
34660
+ "bedrock-agentcore:sessionId",
34661
+ "bedrock-agentcore:actorId"
34662
+ ],
34663
+ "dependentActions": []
34664
+ }
34665
+ ]
34666
+ },
34667
+ {
34668
+ "name": "ListGatewayTargets",
34669
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListGatewayTargets.html",
34670
+ "permissionOnly": false,
34671
+ "description": "Grants permission to list existing gateway targets",
34672
+ "accessLevel": "List",
34673
+ "resourceTypes": [
34674
+ {
34675
+ "resourceType": "gateway",
34676
+ "required": true,
34677
+ "conditionKeys": [],
34678
+ "dependentActions": []
34679
+ }
34680
+ ]
34681
+ },
34682
+ {
34683
+ "name": "ListGateways",
34684
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListGateways.html",
34685
+ "permissionOnly": false,
34686
+ "description": "Grants permission to list existing gateways",
34687
+ "accessLevel": "List",
34688
+ "resourceTypes": [
34689
+ {
34690
+ "resourceType": "",
34691
+ "required": false,
34692
+ "conditionKeys": [],
34693
+ "dependentActions": []
34694
+ }
34695
+ ]
34696
+ },
34697
+ {
34698
+ "name": "ListMemories",
34699
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemories.html",
34700
+ "permissionOnly": false,
34701
+ "description": "Grants permission to list memory resources",
34702
+ "accessLevel": "List",
34703
+ "resourceTypes": [
34704
+ {
34705
+ "resourceType": "",
34706
+ "required": false,
34707
+ "conditionKeys": [],
34708
+ "dependentActions": []
34709
+ }
34710
+ ]
34711
+ },
34712
+ {
34713
+ "name": "ListMemoryRecords",
34714
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html",
34715
+ "permissionOnly": false,
34716
+ "description": "Grants permission to list memory records",
34717
+ "accessLevel": "List",
34718
+ "resourceTypes": [
34719
+ {
34720
+ "resourceType": "memory",
34721
+ "required": true,
34722
+ "conditionKeys": [],
34723
+ "dependentActions": []
34724
+ },
34725
+ {
34726
+ "resourceType": "",
34727
+ "required": false,
34728
+ "conditionKeys": [
34729
+ "bedrock-agentcore:namespace",
34730
+ "bedrock-agentcore:strategyId"
34731
+ ],
34732
+ "dependentActions": []
34733
+ }
34734
+ ]
34735
+ },
34736
+ {
34737
+ "name": "ListOauth2CredentialProviders",
34738
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListOauth2CredentialProviders.html",
34739
+ "permissionOnly": false,
34740
+ "description": "Grants permission to list all OAuth2 Credential Providers in the Token Vault",
34741
+ "accessLevel": "Read",
34742
+ "resourceTypes": [
34743
+ {
34744
+ "resourceType": "",
34745
+ "required": false,
34746
+ "conditionKeys": [],
34747
+ "dependentActions": []
34748
+ }
34749
+ ]
34750
+ },
34751
+ {
34752
+ "name": "ListSessions",
34753
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html",
34754
+ "permissionOnly": false,
34755
+ "description": "Grants permission to list sessions",
34756
+ "accessLevel": "List",
34757
+ "resourceTypes": [
34758
+ {
34759
+ "resourceType": "memory",
34760
+ "required": true,
34761
+ "conditionKeys": [],
34762
+ "dependentActions": []
34763
+ },
34764
+ {
34765
+ "resourceType": "",
34766
+ "required": false,
34767
+ "conditionKeys": [
34768
+ "bedrock-agentcore:actorId"
34769
+ ],
34770
+ "dependentActions": []
34771
+ }
34772
+ ]
34773
+ },
34774
+ {
34775
+ "name": "ListWorkloadIdentities",
34776
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListWorkloadIdentities.html",
34777
+ "permissionOnly": false,
34778
+ "description": "Grants permission to list all Workload Identities in the caller's AWS account",
34779
+ "accessLevel": "Read",
34780
+ "resourceTypes": [
34781
+ {
34782
+ "resourceType": "",
34783
+ "required": false,
34784
+ "conditionKeys": [],
34785
+ "dependentActions": []
34786
+ }
34787
+ ]
34788
+ },
34789
+ {
34790
+ "name": "RetrieveMemoryRecords",
34791
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html",
34792
+ "permissionOnly": false,
34793
+ "description": "Grants permission to retrieve memory records through sematic query",
34794
+ "accessLevel": "List",
34795
+ "resourceTypes": [
34796
+ {
34797
+ "resourceType": "memory",
34798
+ "required": true,
34799
+ "conditionKeys": [],
34800
+ "dependentActions": []
34801
+ },
34802
+ {
34803
+ "resourceType": "",
34804
+ "required": false,
34805
+ "conditionKeys": [
34806
+ "bedrock-agentcore:namespace",
34807
+ "bedrock-agentcore:strategyId"
34808
+ ],
34809
+ "dependentActions": []
34810
+ }
34811
+ ]
34812
+ },
34813
+ {
34814
+ "name": "SetTokenVaultCMK",
34815
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SetTokenVaultCMK.html",
34816
+ "permissionOnly": false,
34817
+ "description": "Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault",
34818
+ "accessLevel": "Read",
34819
+ "resourceTypes": [
34820
+ {
34821
+ "resourceType": "",
34822
+ "required": false,
34823
+ "conditionKeys": [],
34824
+ "dependentActions": []
34825
+ }
34826
+ ]
34827
+ },
34828
+ {
34829
+ "name": "StartBrowserSession",
34830
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34831
+ "permissionOnly": false,
34832
+ "description": "Grants permission to starts a new browser session",
34833
+ "accessLevel": "Write",
34834
+ "resourceTypes": [
34835
+ {
34836
+ "resourceType": "browser",
34837
+ "required": true,
34838
+ "conditionKeys": [],
34839
+ "dependentActions": []
34840
+ },
34841
+ {
34842
+ "resourceType": "browser-custom",
34843
+ "required": true,
34844
+ "conditionKeys": [],
34845
+ "dependentActions": []
34846
+ }
34847
+ ]
34848
+ },
34849
+ {
34850
+ "name": "StartCodeInterpreterSession",
34851
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34852
+ "permissionOnly": false,
34853
+ "description": "Grants permission to start a new code interpreter session",
34854
+ "accessLevel": "Write",
34855
+ "resourceTypes": [
34856
+ {
34857
+ "resourceType": "code-interpreter",
34858
+ "required": true,
34859
+ "conditionKeys": [],
34860
+ "dependentActions": []
34861
+ },
34862
+ {
34863
+ "resourceType": "code-interpreter-custom",
34864
+ "required": true,
34865
+ "conditionKeys": [],
34866
+ "dependentActions": []
34867
+ }
34868
+ ]
34869
+ },
34870
+ {
34871
+ "name": "StopBrowserSession",
34872
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34873
+ "permissionOnly": false,
34874
+ "description": "Grants permission to stop a browser session",
34875
+ "accessLevel": "Write",
34876
+ "resourceTypes": [
34877
+ {
34878
+ "resourceType": "browser",
34879
+ "required": true,
34880
+ "conditionKeys": [],
34881
+ "dependentActions": []
34882
+ },
34883
+ {
34884
+ "resourceType": "browser-custom",
34885
+ "required": true,
34886
+ "conditionKeys": [],
34887
+ "dependentActions": []
34888
+ }
34889
+ ]
34890
+ },
34891
+ {
34892
+ "name": "StopCodeInterpreterSession",
34893
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34894
+ "permissionOnly": false,
34895
+ "description": "Grants permission to stop a code interpreter session",
34896
+ "accessLevel": "Write",
34897
+ "resourceTypes": [
34898
+ {
34899
+ "resourceType": "code-interpreter",
34900
+ "required": true,
34901
+ "conditionKeys": [],
34902
+ "dependentActions": []
34903
+ },
34904
+ {
34905
+ "resourceType": "code-interpreter-custom",
34906
+ "required": true,
34907
+ "conditionKeys": [],
34908
+ "dependentActions": []
34909
+ }
34910
+ ]
34911
+ },
34912
+ {
34913
+ "name": "SynchronizeGatewayTargets",
34914
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html",
34915
+ "permissionOnly": true,
34916
+ "description": "Grants permission to enable search on gateways",
34917
+ "accessLevel": "Permissions management",
34918
+ "resourceTypes": [
34919
+ {
34920
+ "resourceType": "gateway",
34921
+ "required": true,
34922
+ "conditionKeys": [],
34923
+ "dependentActions": []
34924
+ }
34925
+ ]
34926
+ },
34927
+ {
34928
+ "name": "UpdateAgentRuntime",
34929
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34930
+ "permissionOnly": false,
34931
+ "description": "Grants permission to update an agent runtime",
34932
+ "accessLevel": "Write",
34933
+ "resourceTypes": [
34934
+ {
34935
+ "resourceType": "runtime",
34936
+ "required": true,
34937
+ "conditionKeys": [],
34938
+ "dependentActions": [
34939
+ "iam:PassRole"
34940
+ ]
34941
+ }
34942
+ ]
34943
+ },
34944
+ {
34945
+ "name": "UpdateAgentRuntimeEndpoint",
34946
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34947
+ "permissionOnly": false,
34948
+ "description": "Grants permission to update an agent endpoint",
34949
+ "accessLevel": "Write",
34950
+ "resourceTypes": [
34951
+ {
34952
+ "resourceType": "runtime",
34953
+ "required": true,
34954
+ "conditionKeys": [],
34955
+ "dependentActions": []
34956
+ },
34957
+ {
34958
+ "resourceType": "runtime-endpoint",
34959
+ "required": true,
34960
+ "conditionKeys": [],
34961
+ "dependentActions": []
34962
+ }
34963
+ ]
34964
+ },
34965
+ {
34966
+ "name": "UpdateApiKeyCredentialProvider",
34967
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateApiKeyCredentialProvider.html",
34968
+ "permissionOnly": false,
34969
+ "description": "Grants permission to update an existing API Key Credential Provider",
34970
+ "accessLevel": "Write",
34971
+ "resourceTypes": [
34972
+ {
34973
+ "resourceType": "",
34974
+ "required": false,
34975
+ "conditionKeys": [],
34976
+ "dependentActions": []
34977
+ }
34978
+ ]
34979
+ },
34980
+ {
34981
+ "name": "UpdateBrowserStream",
34982
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/",
34983
+ "permissionOnly": false,
34984
+ "description": "Grants permission to update the status of browser session stream",
34985
+ "accessLevel": "Write",
34986
+ "resourceTypes": [
34987
+ {
34988
+ "resourceType": "browser",
34989
+ "required": true,
34990
+ "conditionKeys": [],
34991
+ "dependentActions": []
34992
+ },
34993
+ {
34994
+ "resourceType": "browser-custom",
34995
+ "required": true,
34996
+ "conditionKeys": [],
34997
+ "dependentActions": []
34998
+ }
34999
+ ]
35000
+ },
35001
+ {
35002
+ "name": "UpdateGateway",
35003
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateGateway.html",
35004
+ "permissionOnly": false,
35005
+ "description": "Grants permission to update an existing gateway",
35006
+ "accessLevel": "Write",
35007
+ "resourceTypes": [
35008
+ {
35009
+ "resourceType": "gateway",
35010
+ "required": true,
35011
+ "conditionKeys": [],
35012
+ "dependentActions": [
35013
+ "iam:PassRole"
35014
+ ]
35015
+ }
35016
+ ]
35017
+ },
35018
+ {
35019
+ "name": "UpdateGatewayTarget",
35020
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateGatewayTarget.html",
35021
+ "permissionOnly": false,
35022
+ "description": "Grants permission to update an existing gateway target",
35023
+ "accessLevel": "Write",
35024
+ "resourceTypes": [
35025
+ {
35026
+ "resourceType": "gateway",
35027
+ "required": true,
35028
+ "conditionKeys": [],
35029
+ "dependentActions": []
35030
+ }
35031
+ ]
35032
+ },
35033
+ {
35034
+ "name": "UpdateMemory",
35035
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateMemory.html",
35036
+ "permissionOnly": false,
35037
+ "description": "Grants permission to update a Memory resource",
35038
+ "accessLevel": "Write",
35039
+ "resourceTypes": [
35040
+ {
35041
+ "resourceType": "memory",
35042
+ "required": true,
35043
+ "conditionKeys": [],
35044
+ "dependentActions": [
35045
+ "iam:PassRole"
35046
+ ]
35047
+ }
35048
+ ]
35049
+ },
35050
+ {
35051
+ "name": "UpdateOauth2CredentialProvider",
35052
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateOauth2CredentialProvider.html",
35053
+ "permissionOnly": false,
35054
+ "description": "Grants permission to update an existing OAuth2 Credential Provider",
35055
+ "accessLevel": "Write",
35056
+ "resourceTypes": [
35057
+ {
35058
+ "resourceType": "",
35059
+ "required": false,
35060
+ "conditionKeys": [],
35061
+ "dependentActions": []
35062
+ }
35063
+ ]
35064
+ },
35065
+ {
35066
+ "name": "UpdateWorkloadIdentity",
35067
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateWorkloadIdentity.html",
35068
+ "permissionOnly": false,
35069
+ "description": "Grants permission to update the metadata of an existing Workload Identity",
35070
+ "accessLevel": "Write",
35071
+ "resourceTypes": [
35072
+ {
35073
+ "resourceType": "",
35074
+ "required": false,
35075
+ "conditionKeys": [],
35076
+ "dependentActions": []
35077
+ }
35078
+ ]
35079
+ }
35080
+ ],
35081
+ "resourceTypes": [
35082
+ {
35083
+ "name": "memory",
35084
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/memory.html",
35085
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}",
35086
+ "conditionKeys": []
35087
+ },
35088
+ {
35089
+ "name": "gateway",
35090
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/gateway.html",
35091
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}",
35092
+ "conditionKeys": []
35093
+ },
35094
+ {
35095
+ "name": "workload-identity",
35096
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/workloadIdentity.html",
35097
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}",
35098
+ "conditionKeys": []
35099
+ },
35100
+ {
35101
+ "name": "oauth2credentialprovider",
35102
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/oauth2credentialprovider.html",
35103
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}",
35104
+ "conditionKeys": []
35105
+ },
35106
+ {
35107
+ "name": "apikeycredentialprovider",
35108
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/apikeycredentialprovider.html",
35109
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}",
35110
+ "conditionKeys": []
35111
+ },
35112
+ {
35113
+ "name": "runtime",
35114
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/runtime.html",
35115
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}",
35116
+ "conditionKeys": []
35117
+ },
35118
+ {
35119
+ "name": "runtime-endpoint",
35120
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/runtimeEndpoint.html",
35121
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}",
35122
+ "conditionKeys": []
35123
+ },
35124
+ {
35125
+ "name": "code-interpreter-custom",
35126
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/codeInterpreter.html",
35127
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}",
35128
+ "conditionKeys": []
35129
+ },
35130
+ {
35131
+ "name": "code-interpreter",
35132
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/codeInterpreter.html",
35133
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}",
35134
+ "conditionKeys": []
35135
+ },
35136
+ {
35137
+ "name": "browser-custom",
35138
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/browser.html",
35139
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}",
35140
+ "conditionKeys": []
35141
+ },
35142
+ {
35143
+ "name": "browser",
35144
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/browser.html",
35145
+ "arnPattern": "arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}",
35146
+ "conditionKeys": []
35147
+ }
35148
+ ],
35149
+ "conditionKeys": [
35150
+ {
35151
+ "name": "bedrock-agentcore:actorId",
35152
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-actorId",
35153
+ "description": "Filters access by Actor Id",
35154
+ "type": "String"
35155
+ },
35156
+ {
35157
+ "name": "bedrock-agentcore:namespace",
35158
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-namespace",
35159
+ "description": "Filters access by namespace",
35160
+ "type": "String"
35161
+ },
35162
+ {
35163
+ "name": "bedrock-agentcore:sessionId",
35164
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-sessionId",
35165
+ "description": "Filters access by Session Id",
35166
+ "type": "String"
35167
+ },
35168
+ {
35169
+ "name": "bedrock-agentcore:strategyId",
35170
+ "apiReferenceUrl": "https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/#condition-keys-strategyId",
35171
+ "description": "Filters access by Memory Strategy Id",
35172
+ "type": "String"
35173
+ }
35174
+ ]
35175
+ },
33708
35176
  {
33709
35177
  "name": "AWS Billing",
33710
35178
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsbilling.html",
@@ -326462,9 +327930,9 @@
326462
327930
  },
326463
327931
  {
326464
327932
  "name": "CreateBucketMetadataTableConfiguration",
326465
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataTableConfiguration.html",
327933
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_CreateBucketMetadataConfiguration.html",
326466
327934
  "permissionOnly": false,
326467
- "description": "Grants permission to create a new S3 Metadata configuration for a specified bucket",
327935
+ "description": "Grants permission to create a new S3 Metadata configuration for a specified general purpose bucket",
326468
327936
  "accessLevel": "Write",
326469
327937
  "resourceTypes": [
326470
327938
  {
@@ -326472,9 +327940,12 @@
326472
327940
  "required": true,
326473
327941
  "conditionKeys": [],
326474
327942
  "dependentActions": [
327943
+ "kms:DescribeKey",
326475
327944
  "s3tables:CreateNamespace",
326476
327945
  "s3tables:CreateTable",
327946
+ "s3tables:CreateTableBucket",
326477
327947
  "s3tables:GetTable",
327948
+ "s3tables:PutTableEncryption",
326478
327949
  "s3tables:PutTablePolicy"
326479
327950
  ]
326480
327951
  },
@@ -326847,9 +328318,9 @@
326847
328318
  },
326848
328319
  {
326849
328320
  "name": "DeleteBucketMetadataTableConfiguration",
326850
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataTableConfiguration.html",
328321
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_DeleteBucketMetadataConfiguration.html",
326851
328322
  "permissionOnly": false,
326852
- "description": "Grants permission to delete the S3 Metadata configuration for a specified bucket",
328323
+ "description": "Grants permission to delete the S3 Metadata configuration for a specified general purpose bucket",
326853
328324
  "accessLevel": "Write",
326854
328325
  "resourceTypes": [
326855
328326
  {
@@ -327837,9 +329308,9 @@
327837
329308
  },
327838
329309
  {
327839
329310
  "name": "GetBucketMetadataTableConfiguration",
327840
- "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataTableConfiguration.html",
329311
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_GetBucketMetadataConfiguration.html",
327841
329312
  "permissionOnly": false,
327842
- "description": "Grants permission to return the S3 Metadata configuration for a specified bucket",
329313
+ "description": "Grants permission to return the S3 Metadata configuration for a specified general purpose bucket",
327843
329314
  "accessLevel": "Read",
327844
329315
  "resourceTypes": [
327845
329316
  {
@@ -330931,6 +332402,70 @@
330931
332402
  }
330932
332403
  ]
330933
332404
  },
332405
+ {
332406
+ "name": "UpdateBucketMetadataInventoryTableConfiguration",
332407
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataInventoryTableConfiguration.html",
332408
+ "permissionOnly": false,
332409
+ "description": "Grants permission to update the inventory table configuration on an existing S3 Metadata configuration for a specified general purpose bucket",
332410
+ "accessLevel": "Write",
332411
+ "resourceTypes": [
332412
+ {
332413
+ "resourceType": "bucket",
332414
+ "required": true,
332415
+ "conditionKeys": [],
332416
+ "dependentActions": [
332417
+ "kms:DescribeKey",
332418
+ "s3tables:CreateNamespace",
332419
+ "s3tables:CreateTable",
332420
+ "s3tables:CreateTableBucket",
332421
+ "s3tables:GetTable",
332422
+ "s3tables:PutTableEncryption",
332423
+ "s3tables:PutTablePolicy"
332424
+ ]
332425
+ },
332426
+ {
332427
+ "resourceType": "",
332428
+ "required": false,
332429
+ "conditionKeys": [
332430
+ "s3:authType",
332431
+ "s3:ResourceAccount",
332432
+ "s3:signatureAge",
332433
+ "s3:signatureversion",
332434
+ "s3:TlsVersion",
332435
+ "s3:x-amz-content-sha256"
332436
+ ],
332437
+ "dependentActions": []
332438
+ }
332439
+ ]
332440
+ },
332441
+ {
332442
+ "name": "UpdateBucketMetadataJournalTableConfiguration",
332443
+ "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_UpdateBucketMetadataJournalTableConfiguration.html",
332444
+ "permissionOnly": false,
332445
+ "description": "Grants permission to update the journal table configuration on an existing S3 Metadata configuration for a specified general purpose bucket",
332446
+ "accessLevel": "Write",
332447
+ "resourceTypes": [
332448
+ {
332449
+ "resourceType": "bucket",
332450
+ "required": true,
332451
+ "conditionKeys": [],
332452
+ "dependentActions": []
332453
+ },
332454
+ {
332455
+ "resourceType": "",
332456
+ "required": false,
332457
+ "conditionKeys": [
332458
+ "s3:authType",
332459
+ "s3:ResourceAccount",
332460
+ "s3:signatureAge",
332461
+ "s3:signatureversion",
332462
+ "s3:TlsVersion",
332463
+ "s3:x-amz-content-sha256"
332464
+ ],
332465
+ "dependentActions": []
332466
+ }
332467
+ ]
332468
+ },
330934
332469
  {
330935
332470
  "name": "UpdateJobPriority",
330936
332471
  "apiReferenceUrl": "https://docs.aws.amazon.com/AmazonS3/latest/API/API_control_UpdateJobPriority.html",
@@ -350234,6 +351769,7 @@
350234
351769
  "required": false,
350235
351770
  "conditionKeys": [
350236
351771
  "aws:RequestTag/${TagKey}",
351772
+ "aws:ResourceTag/${TagKey}",
350237
351773
  "aws:TagKeys"
350238
351774
  ],
350239
351775
  "dependentActions": [
@@ -372026,45 +373562,6 @@
372026
373562
  "resourceTypes": [],
372027
373563
  "conditionKeys": []
372028
373564
  },
372029
- {
372030
- "name": "AWS Support Recommendations",
372031
- "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssupportrecommendations.html",
372032
- "servicePrefix": "supportrecommendations",
372033
- "actions": [
372034
- {
372035
- "name": "GetSupportTroubleshootingResponse",
372036
- "apiReferenceUrl": "https://docs.aws.amazon.com/awssupport/latest/user/security-support-recommendations.html/",
372037
- "permissionOnly": true,
372038
- "description": "Grants permission to the GetSupportTroubleshootingResponse API which lists troubleshooting responses for users' issues",
372039
- "accessLevel": "Read",
372040
- "resourceTypes": [
372041
- {
372042
- "resourceType": "",
372043
- "required": false,
372044
- "conditionKeys": [],
372045
- "dependentActions": []
372046
- }
372047
- ]
372048
- },
372049
- {
372050
- "name": "StartSupportTroubleshooting",
372051
- "apiReferenceUrl": "https://docs.aws.amazon.com/awssupport/latest/user/security-support-recommendations.html/",
372052
- "permissionOnly": true,
372053
- "description": "Grants permission to the StartSupportTroubleshooting API which starts troubleshooting for users' issues",
372054
- "accessLevel": "Read",
372055
- "resourceTypes": [
372056
- {
372057
- "resourceType": "",
372058
- "required": false,
372059
- "conditionKeys": [],
372060
- "dependentActions": []
372061
- }
372062
- ]
372063
- }
372064
- ],
372065
- "resourceTypes": [],
372066
- "conditionKeys": []
372067
- },
372068
373565
  {
372069
373566
  "name": "AWS Sustainability",
372070
373567
  "authReferenceUrl": "https://docs.aws.amazon.com/service-authorization/latest/reference/list_awssustainability.html",