aws-iam-language-server 0.0.16 → 0.0.17

package/src/data/servicereference/services/bedrock-agentcore.json

@@ -1 +1 @@
-{"name":"bedrock-agentcore","actions":{"AllowVendedLogDeliveryForResource":{"name":"AllowVendedLogDeliveryForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to configure vended telemetry for a resource","accessLevel":"Permissions management","resourceTypes":[{"name":"memory","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AllowVendedLogDeliveryForResource"},"AuthorizeAction":{"name":"AuthorizeAction","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to evaluate Cedar policies for authorization requests","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AuthorizeAction"},"BatchCreateMemoryRecords":{"name":"BatchCreateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to create one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchCreateMemoryRecords"},"BatchDeleteMemoryRecords":{"name":"BatchDeleteMemoryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchDeleteMemoryRecords"},"BatchUpdateMemoryRecords":{"name":"BatchUpdateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to update one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchUpdateMemoryRecords"},"CompleteResourceTokenAuth":{"name":"CompleteResourceTokenAuth","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub","bedrock-agentcore:userid"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CompleteResourceTokenAuth"},"ConnectBrowserAutomationStream":{"name":"ConnectBrowserAutomationStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser automation stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserAutomationStream"},"ConnectBrowserLiveViewStream":{"name":"ConnectBrowserLiveViewStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser live view stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserLiveViewStream"},"CreateAgentRuntime":{"name":"CreateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new agent runtime","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntime"},"CreateAgentRuntimeEndpoint":{"name":"CreateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"runtime"}],"description":"Grants permission to create a new agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntimeEndpoint"},"CreateApiKeyCredentialProvider":{"name":"CreateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateApiKeyCredentialProvider"},"CreateBrowser":{"name":"CreateBrowser","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom browser","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowser"},"CreateBrowserProfile":{"name":"CreateBrowserProfile","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new browser profile","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowserProfile"},"CreateCodeInterpreter":{"name":"CreateCodeInterpreter","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom code interpreter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateCodeInterpreter"},"CreateEvaluator":{"name":"CreateEvaluator","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new evaluator","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvaluator"},"CreateEvent":{"name":"CreateEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to create an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvent"},"CreateGateway":{"name":"CreateGateway","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new gateway","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGateway"},"CreateGatewayTarget":{"name":"CreateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new target in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayTarget"},"CreateMemory":{"name":"CreateMemory","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:KmsKeyArn"],"resources":[],"description":"Grants permission to create a Memory resource","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateMemory"},"CreateOauth2CredentialProvider":{"name":"CreateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOauth2CredentialProvider"},"CreateOnlineEvaluationConfig":{"name":"CreateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new online evaluation configuration","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOnlineEvaluationConfig"},"CreatePolicy":{"name":"CreatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to create a new policy within a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicy"},"CreatePolicyEngine":{"name":"CreatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new policy engine","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicyEngine"},"CreateWorkloadIdentity":{"name":"CreateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to create a new Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateWorkloadIdentity"},"DeleteAgentRuntime":{"name":"DeleteAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to delete an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntime"},"DeleteAgentRuntimeEndpoint":{"name":"DeleteAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntimeEndpoint"},"DeleteApiKeyCredentialProvider":{"name":"DeleteApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteApiKeyCredentialProvider"},"DeleteBrowser":{"name":"DeleteBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to delete a custom browser","accessLevel":"Write","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowser"},"DeleteBrowserProfile":{"name":"DeleteBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to delete a browser profile","accessLevel":"Write","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowserProfile"},"DeleteCodeInterpreter":{"name":"DeleteCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to delete a custom code interpreter","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteCodeInterpreter"},"DeleteEvaluator":{"name":"DeleteEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to delete an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvaluator"},"DeleteEvent":{"name":"DeleteEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to delete an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvent"},"DeleteGateway":{"name":"DeleteGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGateway"},"DeleteGatewayTarget":{"name":"DeleteGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayTarget"},"DeleteMemory":{"name":"DeleteMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemory"},"DeleteMemoryRecord":{"name":"DeleteMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory Record","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemoryRecord"},"DeleteOauth2CredentialProvider":{"name":"DeleteOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOauth2CredentialProvider"},"DeleteOnlineEvaluationConfig":{"name":"DeleteOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to delete an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOnlineEvaluationConfig"},"DeletePolicy":{"name":"DeletePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to delete a policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicy"},"DeletePolicyEngine":{"name":"DeletePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to delete a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicyEngine"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteResourcePolicy"},"DeleteWorkloadIdentity":{"name":"DeleteWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to delete a registered Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteWorkloadIdentity"},"Evaluate":{"name":"Evaluate","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to run an evaluation using an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-Evaluate"},"GetAgentCard":{"name":"GetAgentCard","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve an agent card for A2A","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentCard"},"GetAgentRuntime":{"name":"GetAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to get details of an agent runtime","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntime"},"GetAgentRuntimeEndpoint":{"name":"GetAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to get details of an agent runtime endpoint","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntimeEndpoint"},"GetApiKeyCredentialProvider":{"name":"GetApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered API Key Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetApiKeyCredentialProvider"},"GetBrowser":{"name":"GetBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to get details of a browser","accessLevel":"Read","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowser"},"GetBrowserProfile":{"name":"GetBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to get details of a browser profile","accessLevel":"Read","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserProfile"},"GetBrowserSession":{"name":"GetBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to get details of a browser session","accessLevel":"Read","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserSession"},"GetCodeInterpreter":{"name":"GetCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreter"},"GetCodeInterpreterSession":{"name":"GetCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter session","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreterSession"},"GetEvaluator":{"name":"GetEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to get details of an evaluator","accessLevel":"Read","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvaluator"},"GetEvent":{"name":"GetEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to fetch an Event","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvent"},"GetGateway":{"name":"GetGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGateway"},"GetGatewayTarget":{"name":"GetGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway target","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayTarget"},"GetMemory":{"name":"GetMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch details for a Memory resource","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemory"},"GetMemoryRecord":{"name":"GetMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch a Memory Record","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemoryRecord"},"GetOauth2CredentialProvider":{"name":"GetOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered OAuth2 Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOauth2CredentialProvider"},"GetOnlineEvaluationConfig":{"name":"GetOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to get details of an online evaluation configuration","accessLevel":"Read","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOnlineEvaluationConfig"},"GetPolicy":{"name":"GetPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicy"},"GetPolicyEngine":{"name":"GetPolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngine"},"GetPolicyGeneration":{"name":"GetPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve status and results of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGeneration"},"GetResourceApiKey":{"name":"GetResourceApiKey","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an API Key associated with an Api Key Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceApiKey"},"GetResourceOauth2Token":{"name":"GetResourceOauth2Token","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceOauth2Token"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve the resource-based policy for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePolicy"},"GetTokenVault":{"name":"GetTokenVault","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to fetch the current configuration of the TokenVault, including encryption settings","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetTokenVault"},"GetWorkloadAccessToken":{"name":"GetWorkloadAccessToken","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessToken"},"GetWorkloadAccessTokenForJWT":{"name":"GetWorkloadAccessTokenForJWT","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForJWT"},"GetWorkloadAccessTokenForUserId":{"name":"GetWorkloadAccessTokenForUserId","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:userid"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForUserId"},"GetWorkloadIdentity":{"name":"GetWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadIdentity"},"InvokeAgentRuntime":{"name":"InvokeAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntime"},"InvokeAgentRuntimeCommand":{"name":"InvokeAgentRuntimeCommand","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke commands on an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeCommand"},"InvokeAgentRuntimeForUser":{"name":"InvokeAgentRuntimeForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeForUser"},"InvokeAgentRuntimeWithWebSocketStream":{"name":"InvokeAgentRuntimeWithWebSocketStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStream"},"InvokeAgentRuntimeWithWebSocketStreamForUser":{"name":"InvokeAgentRuntimeWithWebSocketStreamForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStreamForUser"},"InvokeCodeInterpreter":{"name":"InvokeCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to invoke a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeCodeInterpreter"},"InvokeGateway":{"name":"InvokeGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to invoke a gateway","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeGateway"},"ListActors":{"name":"ListActors","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list Actors","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListActors"},"ListAgentRuntimeEndpoints":{"name":"ListAgentRuntimeEndpoints","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime endpoints","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeEndpoints"},"ListAgentRuntimeVersions":{"name":"ListAgentRuntimeVersions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime versions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeVersions"},"ListAgentRuntimes":{"name":"ListAgentRuntimes","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtimes","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimes"},"ListApiKeyCredentialProviders":{"name":"ListApiKeyCredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all API Key Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListApiKeyCredentialProviders"},"ListBrowserProfiles":{"name":"ListBrowserProfiles","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser profiles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserProfiles"},"ListBrowserSessions":{"name":"ListBrowserSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser sessions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserSessions"},"ListBrowsers":{"name":"ListBrowsers","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browsers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowsers"},"ListCodeInterpreterSessions":{"name":"ListCodeInterpreterSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to list code interpreter sessions","accessLevel":"List","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreterSessions"},"ListCodeInterpreters":{"name":"ListCodeInterpreters","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list code interpreters","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreters"},"ListEvaluators":{"name":"ListEvaluators","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list evaluators","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvaluators"},"ListEvents":{"name":"ListEvents","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to list events","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvents"},"ListGatewayTargets":{"name":"ListGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway targets","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayTargets"},"ListGateways":{"name":"ListGateways","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing gateways","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGateways"},"ListMemories":{"name":"ListMemories","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list memory resources","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemories"},"ListMemoryExtractionJobs":{"name":"ListMemoryExtractionJobs","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list extraction jobs for this memory","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryExtractionJobs"},"ListMemoryRecords":{"name":"ListMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to list memory records","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryRecords"},"ListOauth2CredentialProviders":{"name":"ListOauth2CredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all OAuth2 Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOauth2CredentialProviders"},"ListOnlineEvaluationConfigs":{"name":"ListOnlineEvaluationConfigs","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list online evaluation configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOnlineEvaluationConfigs"},"ListPolicies":{"name":"ListPolicies","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policies within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicies"},"ListPolicyEngines":{"name":"ListPolicyEngines","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list policy engines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngines"},"ListPolicyGenerationAssets":{"name":"ListPolicyGenerationAssets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to list generated policy assets from a generation request","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationAssets"},"ListPolicyGenerations":{"name":"ListPolicyGenerations","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation requests","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerations"},"ListSessions":{"name":"ListSessions","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId"],"resources":[{"name":"memory"}],"description":"Grants permission to list sessions","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListSessions"},"ListTagsForResource":{"name":"ListTagsForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list tags for a Bedrock-AgentCore resource","accessLevel":"List","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListTagsForResource"},"ListWorkloadIdentities":{"name":"ListWorkloadIdentities","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list all Workload Identities in the caller's AWS account","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListWorkloadIdentities"},"ManageAdminPolicy":{"name":"ManageAdminPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create or modify wildcard policies that apply to gateway resources","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageAdminPolicy"},"ManageResourceScopedPolicy":{"name":"ManageResourceScopedPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create or modify policies that apply to specific gateway resources","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageResourceScopedPolicy"},"PartiallyAuthorizeActions":{"name":"PartiallyAuthorizeActions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PartiallyAuthorizeActions"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to create or update the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PutResourcePolicy"},"RetrieveMemoryRecords":{"name":"RetrieveMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to retrieve memory records through sematic query","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-RetrieveMemoryRecords"},"SaveBrowserSessionProfile":{"name":"SaveBrowserSessionProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to save a browser session profile","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SaveBrowserSessionProfile"},"SetTokenVaultCMK":{"name":"SetTokenVaultCMK","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SetTokenVaultCMK"},"StartBrowserSession":{"name":"StartBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to start a new browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBrowserSession"},"StartCodeInterpreterSession":{"name":"StartCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to start a new code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartCodeInterpreterSession"},"StartMemoryExtractionJob":{"name":"StartMemoryExtractionJob","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to start memory extraction job","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartMemoryExtractionJob"},"StartPolicyGeneration":{"name":"StartPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to start an AI-powered policy generation request","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartPolicyGeneration"},"StopBrowserSession":{"name":"StopBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to stop a browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBrowserSession"},"StopCodeInterpreterSession":{"name":"StopCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to stop a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopCodeInterpreterSession"},"StopRuntimeSession":{"name":"StopRuntimeSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to stop a runtime session","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopRuntimeSession"},"SynchronizeGatewayTargets":{"name":"SynchronizeGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable search on gateways","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SynchronizeGatewayTargets"},"TagResource":{"name":"TagResource","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Tag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-TagResource"},"UntagResource":{"name":"UntagResource","service":"bedrock-agentcore","conditionKeys":["aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Untag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UntagResource"},"UpdateAgentRuntime":{"name":"UpdateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[{"name":"runtime"}],"description":"Grants permission to update an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntime"},"UpdateAgentRuntimeEndpoint":{"name":"UpdateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to update an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntimeEndpoint"},"UpdateApiKeyCredentialProvider":{"name":"UpdateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateApiKeyCredentialProvider"},"UpdateBrowserStream":{"name":"UpdateBrowserStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to update the status of browser session stream","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateBrowserStream"},"UpdateEvaluator":{"name":"UpdateEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to update an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateEvaluator"},"UpdateGateway":{"name":"UpdateGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGateway"},"UpdateGatewayTarget":{"name":"UpdateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayTarget"},"UpdateMemory":{"name":"UpdateMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to update a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateMemory"},"UpdateOauth2CredentialProvider":{"name":"UpdateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOauth2CredentialProvider"},"UpdateOnlineEvaluationConfig":{"name":"UpdateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to update an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOnlineEvaluationConfig"},"UpdatePolicy":{"name":"UpdatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to update an existing policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicy"},"UpdatePolicyEngine":{"name":"UpdatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to update a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicyEngine"},"UpdateWorkloadIdentity":{"name":"UpdateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to update the metadata of an existing Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateWorkloadIdentity"}},"resources":[{"name":"apikeycredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"browser","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"],"conditionKeys":[]},{"name":"browser-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"browser-profile","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/${BrowserProfileId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"code-interpreter","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"],"conditionKeys":[]},{"name":"code-interpreter-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"evaluator","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"gateway","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"memory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"oauth2credentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"online-evaluation-config","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"policy","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}"],"conditionKeys":[]},{"name":"policy-engine","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}"],"conditionKeys":[]},{"name":"policy-generation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"],"conditionKeys":[]},{"name":"runtime","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"runtime-endpoint","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"token-vault","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workload-identity","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workload-identity-directory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by creating requests based on the allowed set of values for each of the mandatory tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by having actions based on the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by creating requests based on the presence of mandatory tags in the request"},"bedrock-agentcore:GatewayAuthorizerType":{"types":["String"],"description":"Filters access by the authorizerType attribute on a Gateway"},"bedrock-agentcore:InboundJwtClaim/aud":{"types":["ArrayOfString"],"description":"Filters access by the audience claim (aud) in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/client_id":{"types":["String"],"description":"Filters access by the client_id claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/iss":{"types":["String"],"description":"Filters access by the issuer (iss) claim present in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/scope":{"types":["ArrayOfString"],"description":"Filters access by the scope claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/sub":{"types":["String"],"description":"Filters access by the subject claim (sub) in the JWT passed in the request"},"bedrock-agentcore:KmsKeyArn":{"types":["String"],"description":"Filters access by KMS Key arn provided"},"bedrock-agentcore:actorId":{"types":["String"],"description":"Filters access by Actor Id"},"bedrock-agentcore:namespace":{"types":["String"],"description":"Filters access by namespace"},"bedrock-agentcore:securityGroups":{"types":["ArrayOfString"],"description":"Filters access by the ID of security groups configured for the AgentCore runtime"},"bedrock-agentcore:sessionId":{"types":["String"],"description":"Filters access by Session Id"},"bedrock-agentcore:strategyId":{"types":["String"],"description":"Filters access by Memory Strategy Id"},"bedrock-agentcore:subnets":{"types":["ArrayOfString"],"description":"Filters access by the ID of subnets configured for the AgentCore runtime"},"bedrock-agentcore:userid":{"types":["String"],"description":"Filters access by the static user ID value passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html"}
+{"name":"bedrock-agentcore","actions":{"AllowVendedLogDeliveryForResource":{"name":"AllowVendedLogDeliveryForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to configure vended telemetry for a resource","accessLevel":"Permissions management","resourceTypes":[{"name":"memory","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AllowVendedLogDeliveryForResource"},"AuthorizeAction":{"name":"AuthorizeAction","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to evaluate Cedar policies for authorization requests","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AuthorizeAction"},"BatchCreateMemoryRecords":{"name":"BatchCreateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to create one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchCreateMemoryRecords"},"BatchDeleteMemoryRecords":{"name":"BatchDeleteMemoryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchDeleteMemoryRecords"},"BatchUpdateMemoryRecords":{"name":"BatchUpdateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to update one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchUpdateMemoryRecords"},"CompleteResourceTokenAuth":{"name":"CompleteResourceTokenAuth","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub","bedrock-agentcore:userid"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CompleteResourceTokenAuth"},"ConnectBrowserAutomationStream":{"name":"ConnectBrowserAutomationStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser automation stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserAutomationStream"},"ConnectBrowserLiveViewStream":{"name":"ConnectBrowserLiveViewStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser live view stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserLiveViewStream"},"CreateAgentRuntime":{"name":"CreateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new agent runtime","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntime"},"CreateAgentRuntimeEndpoint":{"name":"CreateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"runtime"}],"description":"Grants permission to create a new agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntimeEndpoint"},"CreateApiKeyCredentialProvider":{"name":"CreateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateApiKeyCredentialProvider"},"CreateBrowser":{"name":"CreateBrowser","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom browser","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowser"},"CreateBrowserProfile":{"name":"CreateBrowserProfile","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new browser profile","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowserProfile"},"CreateCodeInterpreter":{"name":"CreateCodeInterpreter","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom code interpreter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateCodeInterpreter"},"CreateEvaluator":{"name":"CreateEvaluator","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new evaluator","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvaluator"},"CreateEvent":{"name":"CreateEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to create an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvent"},"CreateGateway":{"name":"CreateGateway","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new gateway","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGateway"},"CreateGatewayTarget":{"name":"CreateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new target in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayTarget"},"CreateMemory":{"name":"CreateMemory","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:KmsKeyArn"],"resources":[],"description":"Grants permission to create a Memory resource","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateMemory"},"CreateOauth2CredentialProvider":{"name":"CreateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOauth2CredentialProvider"},"CreateOnlineEvaluationConfig":{"name":"CreateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new online evaluation configuration","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOnlineEvaluationConfig"},"CreatePolicy":{"name":"CreatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to create a new policy within a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicy"},"CreatePolicyEngine":{"name":"CreatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new policy engine","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicyEngine"},"CreateRegistry":{"name":"CreateRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new registry","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateRegistry"},"CreateRegistryRecord":{"name":"CreateRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to create a new registry record","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateRegistryRecord"},"CreateWorkloadIdentity":{"name":"CreateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to create a new Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateWorkloadIdentity"},"DeleteAgentRuntime":{"name":"DeleteAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to delete an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntime"},"DeleteAgentRuntimeEndpoint":{"name":"DeleteAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntimeEndpoint"},"DeleteApiKeyCredentialProvider":{"name":"DeleteApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteApiKeyCredentialProvider"},"DeleteBrowser":{"name":"DeleteBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to delete a custom browser","accessLevel":"Write","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowser"},"DeleteBrowserProfile":{"name":"DeleteBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to delete a browser profile","accessLevel":"Write","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowserProfile"},"DeleteCodeInterpreter":{"name":"DeleteCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to delete a custom code interpreter","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteCodeInterpreter"},"DeleteEvaluator":{"name":"DeleteEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to delete an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvaluator"},"DeleteEvent":{"name":"DeleteEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to delete an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvent"},"DeleteGateway":{"name":"DeleteGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGateway"},"DeleteGatewayTarget":{"name":"DeleteGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayTarget"},"DeleteMemory":{"name":"DeleteMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemory"},"DeleteMemoryRecord":{"name":"DeleteMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory Record","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemoryRecord"},"DeleteOauth2CredentialProvider":{"name":"DeleteOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOauth2CredentialProvider"},"DeleteOnlineEvaluationConfig":{"name":"DeleteOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to delete an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOnlineEvaluationConfig"},"DeletePolicy":{"name":"DeletePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to delete a policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicy"},"DeletePolicyEngine":{"name":"DeletePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to delete a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicyEngine"},"DeleteRegistry":{"name":"DeleteRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to delete an existing registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRegistry"},"DeleteRegistryRecord":{"name":"DeleteRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to delete an existing registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRegistryRecord"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteResourcePolicy"},"DeleteWorkloadIdentity":{"name":"DeleteWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to delete a registered Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteWorkloadIdentity"},"Evaluate":{"name":"Evaluate","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to run an evaluation using an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-Evaluate"},"GetAgentCard":{"name":"GetAgentCard","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve an agent card for A2A","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentCard"},"GetAgentRuntime":{"name":"GetAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to get details of an agent runtime","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntime"},"GetAgentRuntimeEndpoint":{"name":"GetAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to get details of an agent runtime endpoint","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntimeEndpoint"},"GetApiKeyCredentialProvider":{"name":"GetApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered API Key Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetApiKeyCredentialProvider"},"GetBrowser":{"name":"GetBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to get details of a browser","accessLevel":"Read","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowser"},"GetBrowserProfile":{"name":"GetBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to get details of a browser profile","accessLevel":"Read","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserProfile"},"GetBrowserSession":{"name":"GetBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to get details of a browser session","accessLevel":"Read","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserSession"},"GetCodeInterpreter":{"name":"GetCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreter"},"GetCodeInterpreterSession":{"name":"GetCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter session","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreterSession"},"GetEvaluator":{"name":"GetEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to get details of an evaluator","accessLevel":"Read","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvaluator"},"GetEvent":{"name":"GetEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to fetch an Event","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvent"},"GetGateway":{"name":"GetGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGateway"},"GetGatewayTarget":{"name":"GetGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway target","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayTarget"},"GetMemory":{"name":"GetMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch details for a Memory resource","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemory"},"GetMemoryRecord":{"name":"GetMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch a Memory Record","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemoryRecord"},"GetOauth2CredentialProvider":{"name":"GetOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered OAuth2 Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOauth2CredentialProvider"},"GetOnlineEvaluationConfig":{"name":"GetOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to get details of an online evaluation configuration","accessLevel":"Read","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOnlineEvaluationConfig"},"GetPolicy":{"name":"GetPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicy"},"GetPolicyEngine":{"name":"GetPolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngine"},"GetPolicyGeneration":{"name":"GetPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve status and results of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGeneration"},"GetRegistry":{"name":"GetRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve an existing registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRegistry"},"GetRegistryRecord":{"name":"GetRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to retrieve an existing registry record","accessLevel":"Read","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRegistryRecord"},"GetResourceApiKey":{"name":"GetResourceApiKey","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an API Key associated with an Api Key Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceApiKey"},"GetResourceOauth2Token":{"name":"GetResourceOauth2Token","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceOauth2Token"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve the resource-based policy for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePolicy"},"GetTokenVault":{"name":"GetTokenVault","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to fetch the current configuration of the TokenVault, including encryption settings","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetTokenVault"},"GetWorkloadAccessToken":{"name":"GetWorkloadAccessToken","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessToken"},"GetWorkloadAccessTokenForJWT":{"name":"GetWorkloadAccessTokenForJWT","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForJWT"},"GetWorkloadAccessTokenForUserId":{"name":"GetWorkloadAccessTokenForUserId","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:userid"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForUserId"},"GetWorkloadIdentity":{"name":"GetWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadIdentity"},"InvokeAgentRuntime":{"name":"InvokeAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntime"},"InvokeAgentRuntimeCommand":{"name":"InvokeAgentRuntimeCommand","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke commands on an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeCommand"},"InvokeAgentRuntimeForUser":{"name":"InvokeAgentRuntimeForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeForUser"},"InvokeAgentRuntimeWithWebSocketStream":{"name":"InvokeAgentRuntimeWithWebSocketStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStream"},"InvokeAgentRuntimeWithWebSocketStreamForUser":{"name":"InvokeAgentRuntimeWithWebSocketStreamForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStreamForUser"},"InvokeCodeInterpreter":{"name":"InvokeCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to invoke a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeCodeInterpreter"},"InvokeGateway":{"name":"InvokeGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to invoke a gateway","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeGateway"},"InvokeRegistryMcp":{"name":"InvokeRegistryMcp","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to invoke an MCP operation against an existing registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeRegistryMcp"},"ListActors":{"name":"ListActors","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list Actors","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListActors"},"ListAgentRuntimeEndpoints":{"name":"ListAgentRuntimeEndpoints","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime endpoints","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeEndpoints"},"ListAgentRuntimeVersions":{"name":"ListAgentRuntimeVersions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime versions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeVersions"},"ListAgentRuntimes":{"name":"ListAgentRuntimes","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtimes","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimes"},"ListApiKeyCredentialProviders":{"name":"ListApiKeyCredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all API Key Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListApiKeyCredentialProviders"},"ListBrowserProfiles":{"name":"ListBrowserProfiles","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser profiles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserProfiles"},"ListBrowserSessions":{"name":"ListBrowserSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser sessions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserSessions"},"ListBrowsers":{"name":"ListBrowsers","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browsers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowsers"},"ListCodeInterpreterSessions":{"name":"ListCodeInterpreterSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to list code interpreter sessions","accessLevel":"List","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreterSessions"},"ListCodeInterpreters":{"name":"ListCodeInterpreters","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list code interpreters","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreters"},"ListEvaluators":{"name":"ListEvaluators","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list evaluators","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvaluators"},"ListEvents":{"name":"ListEvents","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to list events","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvents"},"ListGatewayTargets":{"name":"ListGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway targets","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayTargets"},"ListGateways":{"name":"ListGateways","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing gateways","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGateways"},"ListMemories":{"name":"ListMemories","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list memory resources","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemories"},"ListMemoryExtractionJobs":{"name":"ListMemoryExtractionJobs","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list extraction jobs for this memory","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryExtractionJobs"},"ListMemoryRecords":{"name":"ListMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to list memory records","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryRecords"},"ListOauth2CredentialProviders":{"name":"ListOauth2CredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all OAuth2 Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOauth2CredentialProviders"},"ListOnlineEvaluationConfigs":{"name":"ListOnlineEvaluationConfigs","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list online evaluation configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOnlineEvaluationConfigs"},"ListPolicies":{"name":"ListPolicies","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policies within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicies"},"ListPolicyEngines":{"name":"ListPolicyEngines","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list policy engines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngines"},"ListPolicyGenerationAssets":{"name":"ListPolicyGenerationAssets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to list generated policy assets from a generation request","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationAssets"},"ListPolicyGenerations":{"name":"ListPolicyGenerations","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation requests","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerations"},"ListRegistries":{"name":"ListRegistries","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing registries","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRegistries"},"ListRegistryRecords":{"name":"ListRegistryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to list existing registry records in a registry","accessLevel":"List","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRegistryRecords"},"ListSessions":{"name":"ListSessions","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId"],"resources":[{"name":"memory"}],"description":"Grants permission to list sessions","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListSessions"},"ListTagsForResource":{"name":"ListTagsForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list tags for a Bedrock-AgentCore resource","accessLevel":"List","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListTagsForResource"},"ListWorkloadIdentities":{"name":"ListWorkloadIdentities","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list all Workload Identities in the caller's AWS account","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListWorkloadIdentities"},"ManageAdminPolicy":{"name":"ManageAdminPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create or modify wildcard policies that apply to gateway resources","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageAdminPolicy"},"ManageResourceScopedPolicy":{"name":"ManageResourceScopedPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create or modify policies that apply to specific gateway resources","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageResourceScopedPolicy"},"PartiallyAuthorizeActions":{"name":"PartiallyAuthorizeActions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PartiallyAuthorizeActions"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to create or update the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PutResourcePolicy"},"RetrieveMemoryRecords":{"name":"RetrieveMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to retrieve memory records through sematic query","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-RetrieveMemoryRecords"},"SaveBrowserSessionProfile":{"name":"SaveBrowserSessionProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to save a browser session profile","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SaveBrowserSessionProfile"},"SearchRegistryRecords":{"name":"SearchRegistryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to search for registry records","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SearchRegistryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SearchRegistryRecords"},"SetTokenVaultCMK":{"name":"SetTokenVaultCMK","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SetTokenVaultCMK"},"StartBrowserSession":{"name":"StartBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to start a new browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBrowserSession"},"StartCodeInterpreterSession":{"name":"StartCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to start a new code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartCodeInterpreterSession"},"StartMemoryExtractionJob":{"name":"StartMemoryExtractionJob","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to start memory extraction job","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartMemoryExtractionJob"},"StartPolicyGeneration":{"name":"StartPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to start an AI-powered policy generation request","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartPolicyGeneration"},"StopBrowserSession":{"name":"StopBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to stop a browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBrowserSession"},"StopCodeInterpreterSession":{"name":"StopCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to stop a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopCodeInterpreterSession"},"StopRuntimeSession":{"name":"StopRuntimeSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to stop a runtime session","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopRuntimeSession"},"SubmitRegistryRecordForApproval":{"name":"SubmitRegistryRecordForApproval","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to submit a registry record for approval","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SubmitRegistryRecordForApproval.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SubmitRegistryRecordForApproval"},"SynchronizeGatewayTargets":{"name":"SynchronizeGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable search on gateways","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SynchronizeGatewayTargets"},"TagResource":{"name":"TagResource","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Tag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-TagResource"},"UntagResource":{"name":"UntagResource","service":"bedrock-agentcore","conditionKeys":["aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Untag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UntagResource"},"UpdateAgentRuntime":{"name":"UpdateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[{"name":"runtime"}],"description":"Grants permission to update an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntime"},"UpdateAgentRuntimeEndpoint":{"name":"UpdateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to update an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntimeEndpoint"},"UpdateApiKeyCredentialProvider":{"name":"UpdateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateApiKeyCredentialProvider"},"UpdateBrowserStream":{"name":"UpdateBrowserStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to update the status of browser session stream","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateBrowserStream"},"UpdateEvaluator":{"name":"UpdateEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to update an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateEvaluator"},"UpdateGateway":{"name":"UpdateGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGateway"},"UpdateGatewayTarget":{"name":"UpdateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayTarget"},"UpdateMemory":{"name":"UpdateMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to update a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateMemory"},"UpdateOauth2CredentialProvider":{"name":"UpdateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOauth2CredentialProvider"},"UpdateOnlineEvaluationConfig":{"name":"UpdateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to update an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOnlineEvaluationConfig"},"UpdatePolicy":{"name":"UpdatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to update an existing policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicy"},"UpdatePolicyEngine":{"name":"UpdatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to update a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicyEngine"},"UpdateRegistry":{"name":"UpdateRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to update an existing registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistry"},"UpdateRegistryRecord":{"name":"UpdateRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to update an existing registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistryRecord"},"UpdateRegistryRecordStatus":{"name":"UpdateRegistryRecordStatus","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to update the status of a registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecordStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistryRecordStatus"},"UpdateWorkloadIdentity":{"name":"UpdateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to update the metadata of an existing Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateWorkloadIdentity"}},"resources":[{"service":"bedrock-agentcore","name":"apikeycredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"browser","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"browser-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"browser-profile","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/${BrowserProfileId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"code-interpreter","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"code-interpreter-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"evaluator","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"gateway","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"memory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"oauth2credentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"online-evaluation-config","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"policy","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"policy-engine","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"policy-generation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"registry","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"registry-record","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"runtime","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"runtime-endpoint","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"token-vault","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"workload-identity","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"workload-identity-directory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by creating requests based on the allowed set of values for each of the mandatory tags"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by having actions based on the tag value associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by creating requests based on the presence of mandatory tags in the request"},"bedrock-agentcore:GatewayAuthorizerType":{"name":"bedrock-agentcore:GatewayAuthorizerType","types":["String"],"description":"Filters access by the authorizerType attribute on a Gateway"},"bedrock-agentcore:InboundJwtClaim/aud":{"name":"bedrock-agentcore:InboundJwtClaim/aud","types":["ArrayOfString"],"description":"Filters access by the audience claim (aud) in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/client_id":{"name":"bedrock-agentcore:InboundJwtClaim/client_id","types":["String"],"description":"Filters access by the client_id claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/iss":{"name":"bedrock-agentcore:InboundJwtClaim/iss","types":["String"],"description":"Filters access by the issuer (iss) claim present in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/scope":{"name":"bedrock-agentcore:InboundJwtClaim/scope","types":["ArrayOfString"],"description":"Filters access by the scope claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/sub":{"name":"bedrock-agentcore:InboundJwtClaim/sub","types":["String"],"description":"Filters access by the subject claim (sub) in the JWT passed in the request"},"bedrock-agentcore:KmsKeyArn":{"name":"bedrock-agentcore:KmsKeyArn","types":["String"],"description":"Filters access by KMS Key arn provided"},"bedrock-agentcore:actorId":{"name":"bedrock-agentcore:actorId","types":["String"],"description":"Filters access by Actor Id"},"bedrock-agentcore:namespace":{"name":"bedrock-agentcore:namespace","types":["String"],"description":"Filters access by namespace"},"bedrock-agentcore:securityGroups":{"name":"bedrock-agentcore:securityGroups","types":["ArrayOfString"],"description":"Filters access by the ID of security groups configured for the AgentCore runtime"},"bedrock-agentcore:sessionId":{"name":"bedrock-agentcore:sessionId","types":["String"],"description":"Filters access by Session Id"},"bedrock-agentcore:strategyId":{"name":"bedrock-agentcore:strategyId","types":["String"],"description":"Filters access by Memory Strategy Id"},"bedrock-agentcore:subnets":{"name":"bedrock-agentcore:subnets","types":["ArrayOfString"],"description":"Filters access by the ID of subnets configured for the AgentCore runtime"},"bedrock-agentcore:userid":{"name":"bedrock-agentcore:userid","types":["String"],"description":"Filters access by the static user ID value passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html"}