aws-iam-language-server 0.0.32 → 0.0.34

package/src/data/servicereference/services/bedrock-agentcore.json

@@ -1 +1 @@
-{"name":"bedrock-agentcore","actions":{"AllowVendedLogDeliveryForResource":{"name":"AllowVendedLogDeliveryForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"},{"name":"payment-manager"}],"description":"Grants permission to configure vended telemetry for a resource","accessLevel":"Permissions management","resourceTypes":[{"name":"memory","required":true},{"name":"payment-manager","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AllowVendedLogDeliveryForResource"},"AuthorizeAction":{"name":"AuthorizeAction","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to evaluate Cedar policies for authorization requests","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AuthorizeAction"},"BatchCreateMemoryRecords":{"name":"BatchCreateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to create one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchCreateMemoryRecords"},"BatchDeleteMemoryRecords":{"name":"BatchDeleteMemoryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchDeleteMemoryRecords"},"BatchUpdateMemoryRecords":{"name":"BatchUpdateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to update one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchUpdateMemoryRecords"},"CompleteResourceTokenAuth":{"name":"CompleteResourceTokenAuth","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub","bedrock-agentcore:userid"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CompleteResourceTokenAuth"},"ConnectBrowserAutomationStream":{"name":"ConnectBrowserAutomationStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser automation stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserAutomationStream"},"ConnectBrowserLiveViewStream":{"name":"ConnectBrowserLiveViewStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser live view stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserLiveViewStream"},"CreateABTest":{"name":"CreateABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create an A/B test","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateABTest"},"CreateAgentRuntime":{"name":"CreateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:RuntimeAuthorizerType","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new agent runtime","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntime"},"CreateAgentRuntimeEndpoint":{"name":"CreateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"runtime"}],"description":"Grants permission to create a new agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntimeEndpoint"},"CreateApiKeyCredentialProvider":{"name":"CreateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateApiKeyCredentialProvider"},"CreateBrowser":{"name":"CreateBrowser","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom browser","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowser"},"CreateBrowserProfile":{"name":"CreateBrowserProfile","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new browser profile","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowserProfile"},"CreateCodeInterpreter":{"name":"CreateCodeInterpreter","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom code interpreter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateCodeInterpreter"},"CreateConfigurationBundle":{"name":"CreateConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new configuration bundle","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateConfigurationBundle"},"CreateEvaluator":{"name":"CreateEvaluator","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new evaluator","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvaluator"},"CreateEvent":{"name":"CreateEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to create an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvent"},"CreateGateway":{"name":"CreateGateway","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new gateway","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGateway"},"CreateGatewayRule":{"name":"CreateGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new rule in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayRule"},"CreateGatewayTarget":{"name":"CreateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new target in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayTarget"},"CreateHarness":{"name":"CreateHarness","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new harness","accessLevel":"Write","resourceTypes":[],"dependentActions":["bedrock-agentcore:CreateAgentRuntime","bedrock-agentcore:GetAgentRuntime","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateHarness"},"CreateMemory":{"name":"CreateMemory","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:KmsKeyArn"],"resources":[],"description":"Grants permission to create a Memory resource","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateMemory"},"CreateOauth2CredentialProvider":{"name":"CreateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOauth2CredentialProvider"},"CreateOnlineEvaluationConfig":{"name":"CreateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new online evaluation configuration","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOnlineEvaluationConfig"},"CreatePaymentConnector":{"name":"CreatePaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to create a new payment connector under a payment manager","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentConnector"},"CreatePaymentCredentialProvider":{"name":"CreatePaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Payment Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentCredentialProvider"},"CreatePaymentInstrument":{"name":"CreatePaymentInstrument","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to create a new payment instrument","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentInstrument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentInstrument"},"CreatePaymentManager":{"name":"CreatePaymentManager","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new payment manager","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentManager"},"CreatePaymentSession":{"name":"CreatePaymentSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to create a new payment session","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentSession"},"CreatePolicy":{"name":"CreatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to create a new policy within a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicy"},"CreatePolicyEngine":{"name":"CreatePolicyEngine","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new policy engine","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicyEngine"},"CreateRegistry":{"name":"CreateRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new registry","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateRegistry"},"CreateRegistryRecord":{"name":"CreateRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to create a new registry record","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateRegistryRecord"},"CreateWorkloadIdentity":{"name":"CreateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to create a new Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateWorkloadIdentity"},"DeleteABTest":{"name":"DeleteABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"ab-test"}],"description":"Grants permission to delete an A/B test","accessLevel":"Write","resourceTypes":[{"name":"ab-test","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteABTest"},"DeleteAgentRuntime":{"name":"DeleteAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to delete an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntime"},"DeleteAgentRuntimeEndpoint":{"name":"DeleteAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntimeEndpoint"},"DeleteApiKeyCredentialProvider":{"name":"DeleteApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteApiKeyCredentialProvider"},"DeleteBatchEvaluation":{"name":"DeleteBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"batch-evaluate"}],"description":"Grants permission to delete a batch evaluation","accessLevel":"Write","resourceTypes":[{"name":"batch-evaluate","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBatchEvaluation"},"DeleteBrowser":{"name":"DeleteBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to delete a custom browser","accessLevel":"Write","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowser"},"DeleteBrowserProfile":{"name":"DeleteBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to delete a browser profile","accessLevel":"Write","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowserProfile"},"DeleteCodeInterpreter":{"name":"DeleteCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to delete a custom code interpreter","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteCodeInterpreter"},"DeleteConfigurationBundle":{"name":"DeleteConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to delete a configuration bundle","accessLevel":"Write","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteConfigurationBundle"},"DeleteEvaluator":{"name":"DeleteEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to delete an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvaluator"},"DeleteEvent":{"name":"DeleteEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to delete an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvent"},"DeleteGateway":{"name":"DeleteGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGateway"},"DeleteGatewayRule":{"name":"DeleteGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway rule","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayRule"},"DeleteGatewayTarget":{"name":"DeleteGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayTarget"},"DeleteHarness":{"name":"DeleteHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to delete a harness","accessLevel":"Write","resourceTypes":[{"name":"harness","required":true}],"dependentActions":["bedrock-agentcore:DeleteAgentRuntime","bedrock-agentcore:GetAgentRuntime","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteHarness"},"DeleteMemory":{"name":"DeleteMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemory"},"DeleteMemoryRecord":{"name":"DeleteMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory Record","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemoryRecord"},"DeleteOauth2CredentialProvider":{"name":"DeleteOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOauth2CredentialProvider"},"DeleteOnlineEvaluationConfig":{"name":"DeleteOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to delete an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOnlineEvaluationConfig"},"DeletePaymentConnector":{"name":"DeletePaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment connector","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentConnector"},"DeletePaymentCredentialProvider":{"name":"DeletePaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered Payment Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentCredentialProvider"},"DeletePaymentInstrument":{"name":"DeletePaymentInstrument","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment instrument","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentInstrument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentInstrument"},"DeletePaymentManager":{"name":"DeletePaymentManager","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment manager","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentManager"},"DeletePaymentSession":{"name":"DeletePaymentSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment session","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentSession"},"DeletePolicy":{"name":"DeletePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to delete a policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicy"},"DeletePolicyEngine":{"name":"DeletePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to delete a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicyEngine"},"DeleteRecommendation":{"name":"DeleteRecommendation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"recommendation"}],"description":"Grants permission to delete a recommendation","accessLevel":"Write","resourceTypes":[{"name":"recommendation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteRecommendation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRecommendation"},"DeleteRegistry":{"name":"DeleteRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to delete an existing registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRegistry"},"DeleteRegistryRecord":{"name":"DeleteRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to delete an existing registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRegistryRecord"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteResourcePolicy"},"DeleteWorkloadIdentity":{"name":"DeleteWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to delete a registered Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteWorkloadIdentity"},"Evaluate":{"name":"Evaluate","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to run an evaluation using an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-Evaluate"},"GetABTest":{"name":"GetABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"ab-test"}],"description":"Grants permission to get details of an A/B test","accessLevel":"Read","resourceTypes":[{"name":"ab-test","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetABTest"},"GetAgentCard":{"name":"GetAgentCard","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve an agent card for A2A","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentCard"},"GetAgentRuntime":{"name":"GetAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to get details of an agent runtime","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntime"},"GetAgentRuntimeEndpoint":{"name":"GetAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to get details of an agent runtime endpoint","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntimeEndpoint"},"GetApiKeyCredentialProvider":{"name":"GetApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered API Key Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetApiKeyCredentialProvider"},"GetBatchEvaluation":{"name":"GetBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"batch-evaluate"}],"description":"Grants permission to get details of a batch evaluation","accessLevel":"Read","resourceTypes":[{"name":"batch-evaluate","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBatchEvaluation"},"GetBrowser":{"name":"GetBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to get details of a browser","accessLevel":"Read","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowser"},"GetBrowserProfile":{"name":"GetBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to get details of a browser profile","accessLevel":"Read","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserProfile"},"GetBrowserSession":{"name":"GetBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to get details of a browser session","accessLevel":"Read","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserSession"},"GetCodeInterpreter":{"name":"GetCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreter"},"GetCodeInterpreterSession":{"name":"GetCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter session","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreterSession"},"GetConfigurationBundle":{"name":"GetConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to get details of a configuration bundle","accessLevel":"Read","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetConfigurationBundle"},"GetConfigurationBundleVersion":{"name":"GetConfigurationBundleVersion","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to get a specific version of a configuration bundle","accessLevel":"Read","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundleVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetConfigurationBundleVersion"},"GetEvaluator":{"name":"GetEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to get details of an evaluator","accessLevel":"Read","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvaluator"},"GetEvent":{"name":"GetEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to fetch an Event","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvent"},"GetGateway":{"name":"GetGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGateway"},"GetGatewayRule":{"name":"GetGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway rule","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayRule"},"GetGatewayTarget":{"name":"GetGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway target","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayTarget"},"GetHarness":{"name":"GetHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to get details of a harness","accessLevel":"Read","resourceTypes":[{"name":"harness","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetHarness"},"GetMemory":{"name":"GetMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch details for a Memory resource","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemory"},"GetMemoryRecord":{"name":"GetMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch a Memory Record","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemoryRecord"},"GetOauth2CredentialProvider":{"name":"GetOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered OAuth2 Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOauth2CredentialProvider"},"GetOnlineEvaluationConfig":{"name":"GetOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to get details of an online evaluation configuration","accessLevel":"Read","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOnlineEvaluationConfig"},"GetPaymentConnector":{"name":"GetPaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment connector","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentConnector"},"GetPaymentCredentialProvider":{"name":"GetPaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered Payment Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentCredentialProvider"},"GetPaymentInstrument":{"name":"GetPaymentInstrument","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment instrument","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentInstrument"},"GetPaymentInstrumentBalance":{"name":"GetPaymentInstrumentBalance","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve the balance of a payment instrument","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrumentBalance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentInstrumentBalance"},"GetPaymentManager":{"name":"GetPaymentManager","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment manager","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentManager"},"GetPaymentSession":{"name":"GetPaymentSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment session","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentSession"},"GetPolicy":{"name":"GetPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicy"},"GetPolicyEngine":{"name":"GetPolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngine"},"GetPolicyEngineSummary":{"name":"GetPolicyEngineSummary","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a summary of a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngineSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngineSummary"},"GetPolicyGeneration":{"name":"GetPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve status and results of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGeneration"},"GetPolicyGenerationSummary":{"name":"GetPolicyGenerationSummary","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve a summary of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGenerationSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGenerationSummary"},"GetPolicySummary":{"name":"GetPolicySummary","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a summary of a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicySummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicySummary"},"GetRecommendation":{"name":"GetRecommendation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"recommendation"}],"description":"Grants permission to get details of a recommendation","accessLevel":"Read","resourceTypes":[{"name":"recommendation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetRecommendation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRecommendation"},"GetRegistry":{"name":"GetRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve an existing registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRegistry"},"GetRegistryRecord":{"name":"GetRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to retrieve an existing registry record","accessLevel":"Read","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRegistryRecord"},"GetResourceApiKey":{"name":"GetResourceApiKey","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an API Key associated with an Api Key Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceApiKey"},"GetResourceOauth2Token":{"name":"GetResourceOauth2Token","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceOauth2Token"},"GetResourcePaymentToken":{"name":"GetResourcePaymentToken","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve a payment authentication token associated with a Payment Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePaymentToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePaymentToken"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve the resource-based policy for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePolicy"},"GetTokenVault":{"name":"GetTokenVault","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to fetch the current configuration of the TokenVault, including encryption settings","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetTokenVault"},"GetWorkloadAccessToken":{"name":"GetWorkloadAccessToken","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessToken"},"GetWorkloadAccessTokenForJWT":{"name":"GetWorkloadAccessTokenForJWT","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForJWT"},"GetWorkloadAccessTokenForUserId":{"name":"GetWorkloadAccessTokenForUserId","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:userid"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForUserId"},"GetWorkloadIdentity":{"name":"GetWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadIdentity"},"InvokeAgentRuntime":{"name":"InvokeAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntime"},"InvokeAgentRuntimeCommand":{"name":"InvokeAgentRuntimeCommand","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke commands on an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeCommand"},"InvokeAgentRuntimeForUser":{"name":"InvokeAgentRuntimeForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeForUser"},"InvokeAgentRuntimeWithWebSocketStream":{"name":"InvokeAgentRuntimeWithWebSocketStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStream"},"InvokeAgentRuntimeWithWebSocketStreamForUser":{"name":"InvokeAgentRuntimeWithWebSocketStreamForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStreamForUser"},"InvokeCodeInterpreter":{"name":"InvokeCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to invoke a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeCodeInterpreter"},"InvokeGateway":{"name":"InvokeGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to invoke a gateway","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeGateway"},"InvokeHarness":{"name":"InvokeHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to invoke a harness","accessLevel":"Write","resourceTypes":[{"name":"harness","required":true}],"dependentActions":["bedrock-agentcore:InvokeAgentRuntime"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeHarness"},"InvokeRegistryMcp":{"name":"InvokeRegistryMcp","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to invoke an MCP operation against an existing registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeRegistryMcp"},"ListABTests":{"name":"ListABTests","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list A/B tests","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListABTests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListABTests"},"ListActors":{"name":"ListActors","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list Actors","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListActors"},"ListAgentRuntimeEndpoints":{"name":"ListAgentRuntimeEndpoints","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime endpoints","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeEndpoints"},"ListAgentRuntimeVersions":{"name":"ListAgentRuntimeVersions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime versions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeVersions"},"ListAgentRuntimes":{"name":"ListAgentRuntimes","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtimes","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimes"},"ListApiKeyCredentialProviders":{"name":"ListApiKeyCredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all API Key Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListApiKeyCredentialProviders"},"ListBatchEvaluations":{"name":"ListBatchEvaluations","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list batch evaluations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBatchEvaluations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBatchEvaluations"},"ListBrowserProfiles":{"name":"ListBrowserProfiles","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser profiles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserProfiles"},"ListBrowserSessions":{"name":"ListBrowserSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser sessions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserSessions"},"ListBrowsers":{"name":"ListBrowsers","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browsers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowsers"},"ListCodeInterpreterSessions":{"name":"ListCodeInterpreterSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to list code interpreter sessions","accessLevel":"List","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreterSessions"},"ListCodeInterpreters":{"name":"ListCodeInterpreters","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list code interpreters","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreters"},"ListConfigurationBundleVersions":{"name":"ListConfigurationBundleVersions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to list versions of a configuration bundle","accessLevel":"List","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundleVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListConfigurationBundleVersions"},"ListConfigurationBundles":{"name":"ListConfigurationBundles","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list configuration bundles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListConfigurationBundles"},"ListEvaluators":{"name":"ListEvaluators","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list evaluators","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvaluators"},"ListEvents":{"name":"ListEvents","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to list events","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvents"},"ListGatewayRules":{"name":"ListGatewayRules","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway rules","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayRules"},"ListGatewayTargets":{"name":"ListGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway targets","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayTargets"},"ListGateways":{"name":"ListGateways","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing gateways","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGateways"},"ListHarnesses":{"name":"ListHarnesses","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list harnesses","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnesses.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListHarnesses"},"ListMemories":{"name":"ListMemories","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list memory resources","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemories"},"ListMemoryExtractionJobs":{"name":"ListMemoryExtractionJobs","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list extraction jobs for this memory","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryExtractionJobs"},"ListMemoryRecords":{"name":"ListMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to list memory records","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryRecords"},"ListOauth2CredentialProviders":{"name":"ListOauth2CredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all OAuth2 Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOauth2CredentialProviders"},"ListOnlineEvaluationConfigs":{"name":"ListOnlineEvaluationConfigs","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list online evaluation configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOnlineEvaluationConfigs"},"ListPaymentConnectors":{"name":"ListPaymentConnectors","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to list payment connectors under a payment manager","accessLevel":"List","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentConnectors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentConnectors"},"ListPaymentCredentialProviders":{"name":"ListPaymentCredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all Payment Credential Providers in the Token Vault","accessLevel":"List","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentCredentialProviders"},"ListPaymentInstruments":{"name":"ListPaymentInstruments","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to list payment instruments","accessLevel":"List","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentInstruments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentInstruments"},"ListPaymentManagers":{"name":"ListPaymentManagers","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list payment managers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentManagers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentManagers"},"ListPaymentSessions":{"name":"ListPaymentSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to list payment sessions","accessLevel":"List","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentSessions"},"ListPolicies":{"name":"ListPolicies","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policies within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicies"},"ListPolicyEngineSummaries":{"name":"ListPolicyEngineSummaries","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list policy engine summaries","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngineSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngineSummaries"},"ListPolicyEngines":{"name":"ListPolicyEngines","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list policy engines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngines"},"ListPolicyGenerationAssets":{"name":"ListPolicyGenerationAssets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to list generated policy assets from a generation request","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationAssets"},"ListPolicyGenerationSummaries":{"name":"ListPolicyGenerationSummaries","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation summaries","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationSummaries"},"ListPolicyGenerations":{"name":"ListPolicyGenerations","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation requests","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerations"},"ListPolicySummaries":{"name":"ListPolicySummaries","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy summaries within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicySummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicySummaries"},"ListRecommendations":{"name":"ListRecommendations","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list recommendations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListRecommendations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRecommendations"},"ListRegistries":{"name":"ListRegistries","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing registries","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRegistries"},"ListRegistryRecords":{"name":"ListRegistryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to list existing registry records in a registry","accessLevel":"List","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRegistryRecords"},"ListSessions":{"name":"ListSessions","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId"],"resources":[{"name":"memory"}],"description":"Grants permission to list sessions","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListSessions"},"ListTagsForResource":{"name":"ListTagsForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"harness"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"payment-manager"},{"name":"paymentcredentialprovider"},{"name":"policy-engine"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list tags for a Bedrock-AgentCore resource","accessLevel":"List","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"harness","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"payment-manager","required":false},{"name":"paymentcredentialprovider","required":false},{"name":"policy-engine","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListTagsForResource"},"ListWorkloadIdentities":{"name":"ListWorkloadIdentities","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list all Workload Identities in the caller's AWS account","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListWorkloadIdentities"},"ManageAdminPolicy":{"name":"ManageAdminPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create or modify wildcard policies that apply to gateway resources","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageAdminPolicy"},"ManageResourceScopedPolicy":{"name":"ManageResourceScopedPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create or modify policies that apply to specific gateway resources","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageResourceScopedPolicy"},"PartiallyAuthorizeActions":{"name":"PartiallyAuthorizeActions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PartiallyAuthorizeActions"},"ProcessPayment":{"name":"ProcessPayment","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to process a payment transaction","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ProcessPayment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ProcessPayment"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to create or update the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PutResourcePolicy"},"RetrieveMemoryRecords":{"name":"RetrieveMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to retrieve memory records through sematic query","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-RetrieveMemoryRecords"},"SaveBrowserSessionProfile":{"name":"SaveBrowserSessionProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to save a browser session profile","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SaveBrowserSessionProfile"},"SearchRegistryRecords":{"name":"SearchRegistryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to search for registry records","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SearchRegistryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SearchRegistryRecords"},"SetTokenVaultCMK":{"name":"SetTokenVaultCMK","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault","accessLevel":"Write","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SetTokenVaultCMK"},"StartBatchEvaluation":{"name":"StartBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to start a batch evaluation","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBatchEvaluation"},"StartBrowserSession":{"name":"StartBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to start a new browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBrowserSession"},"StartCodeInterpreterSession":{"name":"StartCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to start a new code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartCodeInterpreterSession"},"StartMemoryExtractionJob":{"name":"StartMemoryExtractionJob","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to start memory extraction job","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartMemoryExtractionJob"},"StartPolicyGeneration":{"name":"StartPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to start an AI-powered policy generation request","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartPolicyGeneration"},"StartRecommendation":{"name":"StartRecommendation","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to start a recommendation","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartRecommendation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartRecommendation"},"StopBatchEvaluation":{"name":"StopBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"batch-evaluate"}],"description":"Grants permission to stop a batch evaluation","accessLevel":"Write","resourceTypes":[{"name":"batch-evaluate","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBatchEvaluation"},"StopBrowserSession":{"name":"StopBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to stop a browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBrowserSession"},"StopCodeInterpreterSession":{"name":"StopCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to stop a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopCodeInterpreterSession"},"StopRuntimeSession":{"name":"StopRuntimeSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to stop a runtime session","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopRuntimeSession"},"SubmitRegistryRecordForApproval":{"name":"SubmitRegistryRecordForApproval","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to submit a registry record for approval","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SubmitRegistryRecordForApproval.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SubmitRegistryRecordForApproval"},"SynchronizeGatewayTargets":{"name":"SynchronizeGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable search on gateways","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SynchronizeGatewayTargets"},"TagResource":{"name":"TagResource","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"harness"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"payment-manager"},{"name":"paymentcredentialprovider"},{"name":"policy-engine"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Tag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"harness","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"payment-manager","required":false},{"name":"paymentcredentialprovider","required":false},{"name":"policy-engine","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-TagResource"},"UntagResource":{"name":"UntagResource","service":"bedrock-agentcore","conditionKeys":["aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"harness"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"payment-manager"},{"name":"paymentcredentialprovider"},{"name":"policy-engine"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Untag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"harness","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"payment-manager","required":false},{"name":"paymentcredentialprovider","required":false},{"name":"policy-engine","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UntagResource"},"UpdateABTest":{"name":"UpdateABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"ab-test"}],"description":"Grants permission to update an A/B test","accessLevel":"Write","resourceTypes":[{"name":"ab-test","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateABTest"},"UpdateAgentRuntime":{"name":"UpdateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:RuntimeAuthorizerType","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[{"name":"runtime"}],"description":"Grants permission to update an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntime"},"UpdateAgentRuntimeEndpoint":{"name":"UpdateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to update an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntimeEndpoint"},"UpdateApiKeyCredentialProvider":{"name":"UpdateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateApiKeyCredentialProvider"},"UpdateBrowserStream":{"name":"UpdateBrowserStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to update the status of browser session stream","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateBrowserStream"},"UpdateConfigurationBundle":{"name":"UpdateConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to update a configuration bundle","accessLevel":"Write","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateConfigurationBundle"},"UpdateEvaluator":{"name":"UpdateEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to update an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateEvaluator"},"UpdateGateway":{"name":"UpdateGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGateway"},"UpdateGatewayRule":{"name":"UpdateGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway rule","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayRule"},"UpdateGatewayTarget":{"name":"UpdateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayTarget"},"UpdateHarness":{"name":"UpdateHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to update a harness","accessLevel":"Write","resourceTypes":[{"name":"harness","required":true}],"dependentActions":["bedrock-agentcore:GetAgentRuntime","bedrock-agentcore:UpdateAgentRuntime","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateHarness"},"UpdateMemory":{"name":"UpdateMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to update a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateMemory"},"UpdateOauth2CredentialProvider":{"name":"UpdateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOauth2CredentialProvider"},"UpdateOnlineEvaluationConfig":{"name":"UpdateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to update an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOnlineEvaluationConfig"},"UpdatePaymentConnector":{"name":"UpdatePaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to update an existing payment connector","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePaymentConnector"},"UpdatePaymentCredentialProvider":{"name":"UpdatePaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing Payment Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePaymentCredentialProvider"},"UpdatePaymentManager":{"name":"UpdatePaymentManager","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to update an existing payment manager","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePaymentManager"},"UpdatePolicy":{"name":"UpdatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to update an existing policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicy"},"UpdatePolicyEngine":{"name":"UpdatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to update a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicyEngine"},"UpdateRegistry":{"name":"UpdateRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to update an existing registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistry"},"UpdateRegistryRecord":{"name":"UpdateRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to update an existing registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistryRecord"},"UpdateRegistryRecordStatus":{"name":"UpdateRegistryRecordStatus","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to update the status of a registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecordStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistryRecordStatus"},"UpdateWorkloadIdentity":{"name":"UpdateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to update the metadata of an existing Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateWorkloadIdentity"}},"resources":[{"service":"bedrock-agentcore","name":"ab-test","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/${ABTestId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"apikeycredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"batch-evaluate","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/${BatchEvaluationId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"browser","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"browser-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"browser-profile","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/${BrowserProfileId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"code-interpreter","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"code-interpreter-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"configuration-bundle","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/${ConfigurationBundleId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"evaluator","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"gateway","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"harness","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/${HarnessId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"memory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"oauth2credentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"online-evaluation-config","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"payment-manager","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/${PaymentManagerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"paymentcredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/paymentcredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"policy","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"policy-engine","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"policy-generation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"recommendation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:recommendation/${RecommendationId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"registry","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"registry-record","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"runtime","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"runtime-endpoint","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"token-vault","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"workload-identity","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"workload-identity-directory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by creating requests based on the allowed set of values for each of the mandatory tags"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by having actions based on the tag value associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by creating requests based on the presence of mandatory tags in the request"},"bedrock-agentcore:GatewayAuthorizerType":{"name":"bedrock-agentcore:GatewayAuthorizerType","types":["String"],"description":"Filters access by the authorizerType attribute on a Gateway"},"bedrock-agentcore:InboundJwtClaim/aud":{"name":"bedrock-agentcore:InboundJwtClaim/aud","types":["ArrayOfString"],"description":"Filters access by the audience claim (aud) in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/client_id":{"name":"bedrock-agentcore:InboundJwtClaim/client_id","types":["String"],"description":"Filters access by the client_id claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/iss":{"name":"bedrock-agentcore:InboundJwtClaim/iss","types":["String"],"description":"Filters access by the issuer (iss) claim present in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/scope":{"name":"bedrock-agentcore:InboundJwtClaim/scope","types":["ArrayOfString"],"description":"Filters access by the scope claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/sub":{"name":"bedrock-agentcore:InboundJwtClaim/sub","types":["String"],"description":"Filters access by the subject claim (sub) in the JWT passed in the request"},"bedrock-agentcore:KmsKeyArn":{"name":"bedrock-agentcore:KmsKeyArn","types":["String"],"description":"Filters access by KMS Key arn provided"},"bedrock-agentcore:RuntimeAuthorizerType":{"name":"bedrock-agentcore:RuntimeAuthorizerType","types":["String"],"description":"Filters access by the authorizer type configured for the AgentCore runtime"},"bedrock-agentcore:actorId":{"name":"bedrock-agentcore:actorId","types":["String"],"description":"Filters access by Actor Id"},"bedrock-agentcore:namespace":{"name":"bedrock-agentcore:namespace","types":["String"],"description":"Filters access by namespace"},"bedrock-agentcore:securityGroups":{"name":"bedrock-agentcore:securityGroups","types":["ArrayOfString"],"description":"Filters access by the ID of security groups configured for the AgentCore runtime"},"bedrock-agentcore:sessionId":{"name":"bedrock-agentcore:sessionId","types":["String"],"description":"Filters access by Session Id"},"bedrock-agentcore:strategyId":{"name":"bedrock-agentcore:strategyId","types":["String"],"description":"Filters access by Memory Strategy Id"},"bedrock-agentcore:subnets":{"name":"bedrock-agentcore:subnets","types":["ArrayOfString"],"description":"Filters access by the ID of subnets configured for the AgentCore runtime"},"bedrock-agentcore:userid":{"name":"bedrock-agentcore:userid","types":["String"],"description":"Filters access by the static user ID value passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html"}
+{"name":"bedrock-agentcore","actions":{"AllowVendedLogDeliveryForResource":{"name":"AllowVendedLogDeliveryForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"},{"name":"payment-manager"}],"description":"Grants permission to configure vended telemetry for a resource","accessLevel":"Permissions management","resourceTypes":[{"name":"memory","required":true},{"name":"payment-manager","required":false}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AllowVendedLogDeliveryForResource"},"AuthorizeAction":{"name":"AuthorizeAction","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to evaluate Cedar policies for authorization requests","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AuthorizeAction"},"BatchCreateMemoryRecords":{"name":"BatchCreateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to create one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchCreateMemoryRecords"},"BatchDeleteMemoryRecords":{"name":"BatchDeleteMemoryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchDeleteMemoryRecords"},"BatchUpdateMemoryRecords":{"name":"BatchUpdateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to update one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchUpdateMemoryRecords"},"CompleteResourceTokenAuth":{"name":"CompleteResourceTokenAuth","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub","bedrock-agentcore:userid"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CompleteResourceTokenAuth"},"ConnectBrowserAutomationStream":{"name":"ConnectBrowserAutomationStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser automation stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserAutomationStream"},"ConnectBrowserLiveViewStream":{"name":"ConnectBrowserLiveViewStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser live view stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserLiveViewStream"},"CreateABTest":{"name":"CreateABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create an A/B test","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateABTest"},"CreateAgentRuntime":{"name":"CreateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:RuntimeAuthorizerType","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new agent runtime","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntime"},"CreateAgentRuntimeEndpoint":{"name":"CreateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"runtime"}],"description":"Grants permission to create a new agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntimeEndpoint"},"CreateApiKeyCredentialProvider":{"name":"CreateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateApiKeyCredentialProvider"},"CreateBrowser":{"name":"CreateBrowser","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom browser","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowser"},"CreateBrowserProfile":{"name":"CreateBrowserProfile","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new browser profile","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowserProfile"},"CreateCodeInterpreter":{"name":"CreateCodeInterpreter","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom code interpreter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateCodeInterpreter"},"CreateConfigurationBundle":{"name":"CreateConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new configuration bundle","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateConfigurationBundle"},"CreateEvaluator":{"name":"CreateEvaluator","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new evaluator","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvaluator"},"CreateEvent":{"name":"CreateEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to create an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvent"},"CreateGateway":{"name":"CreateGateway","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new gateway","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGateway"},"CreateGatewayRule":{"name":"CreateGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new rule in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayRule"},"CreateGatewayTarget":{"name":"CreateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new target in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayTarget"},"CreateHarness":{"name":"CreateHarness","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new harness","accessLevel":"Write","resourceTypes":[],"dependentActions":["bedrock-agentcore:CreateAgentRuntime","bedrock-agentcore:GetAgentRuntime","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateHarness"},"CreateMemory":{"name":"CreateMemory","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:KmsKeyArn"],"resources":[],"description":"Grants permission to create a Memory resource","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateMemory"},"CreateOauth2CredentialProvider":{"name":"CreateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOauth2CredentialProvider"},"CreateOnlineEvaluationConfig":{"name":"CreateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new online evaluation configuration","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOnlineEvaluationConfig"},"CreatePaymentConnector":{"name":"CreatePaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to create a new payment connector under a payment manager","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentConnector"},"CreatePaymentCredentialProvider":{"name":"CreatePaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Payment Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentCredentialProvider"},"CreatePaymentInstrument":{"name":"CreatePaymentInstrument","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to create a new payment instrument","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentInstrument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentInstrument"},"CreatePaymentManager":{"name":"CreatePaymentManager","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new payment manager","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentManager"},"CreatePaymentSession":{"name":"CreatePaymentSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to create a new payment session","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePaymentSession"},"CreatePolicy":{"name":"CreatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to create a new policy within a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicy"},"CreatePolicyEngine":{"name":"CreatePolicyEngine","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new policy engine","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicyEngine"},"CreateRegistry":{"name":"CreateRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new registry","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateRegistry"},"CreateRegistryRecord":{"name":"CreateRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to create a new registry record","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateRegistryRecord"},"CreateWorkloadIdentity":{"name":"CreateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to create a new Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateWorkloadIdentity"},"DeleteABTest":{"name":"DeleteABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"ab-test"}],"description":"Grants permission to delete an A/B test","accessLevel":"Write","resourceTypes":[{"name":"ab-test","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteABTest"},"DeleteAgentRuntime":{"name":"DeleteAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to delete an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntime"},"DeleteAgentRuntimeEndpoint":{"name":"DeleteAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntimeEndpoint"},"DeleteApiKeyCredentialProvider":{"name":"DeleteApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteApiKeyCredentialProvider"},"DeleteBatchEvaluation":{"name":"DeleteBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"batch-evaluate"}],"description":"Grants permission to delete a batch evaluation","accessLevel":"Write","resourceTypes":[{"name":"batch-evaluate","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBatchEvaluation"},"DeleteBrowser":{"name":"DeleteBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to delete a custom browser","accessLevel":"Write","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowser"},"DeleteBrowserProfile":{"name":"DeleteBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to delete a browser profile","accessLevel":"Write","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowserProfile"},"DeleteCodeInterpreter":{"name":"DeleteCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to delete a custom code interpreter","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteCodeInterpreter"},"DeleteConfigurationBundle":{"name":"DeleteConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to delete a configuration bundle","accessLevel":"Write","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteConfigurationBundle"},"DeleteEvaluator":{"name":"DeleteEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to delete an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvaluator"},"DeleteEvent":{"name":"DeleteEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to delete an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvent"},"DeleteGateway":{"name":"DeleteGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGateway"},"DeleteGatewayRule":{"name":"DeleteGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway rule","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayRule"},"DeleteGatewayTarget":{"name":"DeleteGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayTarget"},"DeleteHarness":{"name":"DeleteHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to delete a harness","accessLevel":"Write","resourceTypes":[{"name":"harness","required":true}],"dependentActions":["bedrock-agentcore:DeleteAgentRuntime","bedrock-agentcore:GetAgentRuntime","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteHarness"},"DeleteMemory":{"name":"DeleteMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemory"},"DeleteMemoryRecord":{"name":"DeleteMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory Record","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemoryRecord"},"DeleteOauth2CredentialProvider":{"name":"DeleteOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOauth2CredentialProvider"},"DeleteOnlineEvaluationConfig":{"name":"DeleteOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to delete an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOnlineEvaluationConfig"},"DeletePaymentConnector":{"name":"DeletePaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment connector","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentConnector"},"DeletePaymentCredentialProvider":{"name":"DeletePaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered Payment Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentCredentialProvider"},"DeletePaymentInstrument":{"name":"DeletePaymentInstrument","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment instrument","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentInstrument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentInstrument"},"DeletePaymentManager":{"name":"DeletePaymentManager","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment manager","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentManager"},"DeletePaymentSession":{"name":"DeletePaymentSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to delete a payment session","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePaymentSession"},"DeletePolicy":{"name":"DeletePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to delete a policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicy"},"DeletePolicyEngine":{"name":"DeletePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to delete a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicyEngine"},"DeleteRecommendation":{"name":"DeleteRecommendation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"recommendation"}],"description":"Grants permission to delete a recommendation","accessLevel":"Write","resourceTypes":[{"name":"recommendation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteRecommendation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRecommendation"},"DeleteRegistry":{"name":"DeleteRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to delete an existing registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRegistry"},"DeleteRegistryRecord":{"name":"DeleteRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to delete an existing registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteRegistryRecord"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteResourcePolicy"},"DeleteWorkloadIdentity":{"name":"DeleteWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to delete a registered Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteWorkloadIdentity"},"Evaluate":{"name":"Evaluate","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to run an evaluation using an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-Evaluate"},"GetABTest":{"name":"GetABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"ab-test"}],"description":"Grants permission to get details of an A/B test","accessLevel":"Read","resourceTypes":[{"name":"ab-test","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetABTest"},"GetAgentCard":{"name":"GetAgentCard","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve an agent card for A2A","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentCard"},"GetAgentRuntime":{"name":"GetAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to get details of an agent runtime","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntime"},"GetAgentRuntimeEndpoint":{"name":"GetAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to get details of an agent runtime endpoint","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntimeEndpoint"},"GetApiKeyCredentialProvider":{"name":"GetApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered API Key Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetApiKeyCredentialProvider"},"GetBatchEvaluation":{"name":"GetBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"batch-evaluate"}],"description":"Grants permission to get details of a batch evaluation","accessLevel":"Read","resourceTypes":[{"name":"batch-evaluate","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBatchEvaluation"},"GetBrowser":{"name":"GetBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to get details of a browser","accessLevel":"Read","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowser"},"GetBrowserProfile":{"name":"GetBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to get details of a browser profile","accessLevel":"Read","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserProfile"},"GetBrowserSession":{"name":"GetBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to get details of a browser session","accessLevel":"Read","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserSession"},"GetCodeInterpreter":{"name":"GetCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreter"},"GetCodeInterpreterSession":{"name":"GetCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter session","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreterSession"},"GetConfigurationBundle":{"name":"GetConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to get details of a configuration bundle","accessLevel":"Read","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetConfigurationBundle"},"GetConfigurationBundleVersion":{"name":"GetConfigurationBundleVersion","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to get a specific version of a configuration bundle","accessLevel":"Read","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundleVersion.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetConfigurationBundleVersion"},"GetEvaluator":{"name":"GetEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to get details of an evaluator","accessLevel":"Read","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvaluator"},"GetEvent":{"name":"GetEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to fetch an Event","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvent"},"GetGateway":{"name":"GetGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGateway"},"GetGatewayRule":{"name":"GetGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway rule","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayRule"},"GetGatewayTarget":{"name":"GetGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway target","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayTarget"},"GetHarness":{"name":"GetHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to get details of a harness","accessLevel":"Read","resourceTypes":[{"name":"harness","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetHarness"},"GetMemory":{"name":"GetMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch details for a Memory resource","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemory"},"GetMemoryRecord":{"name":"GetMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch a Memory Record","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemoryRecord"},"GetOauth2CredentialProvider":{"name":"GetOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered OAuth2 Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOauth2CredentialProvider"},"GetOnlineEvaluationConfig":{"name":"GetOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to get details of an online evaluation configuration","accessLevel":"Read","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOnlineEvaluationConfig"},"GetPaymentConnector":{"name":"GetPaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment connector","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentConnector"},"GetPaymentCredentialProvider":{"name":"GetPaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered Payment Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentCredentialProvider"},"GetPaymentInstrument":{"name":"GetPaymentInstrument","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment instrument","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrument.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentInstrument"},"GetPaymentInstrumentBalance":{"name":"GetPaymentInstrumentBalance","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve the balance of a payment instrument","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrumentBalance.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentInstrumentBalance"},"GetPaymentManager":{"name":"GetPaymentManager","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment manager","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentManager"},"GetPaymentSession":{"name":"GetPaymentSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to retrieve details of a payment session","accessLevel":"Read","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPaymentSession"},"GetPolicy":{"name":"GetPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicy"},"GetPolicyEngine":{"name":"GetPolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngine"},"GetPolicyEngineSummary":{"name":"GetPolicyEngineSummary","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a summary of a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngineSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngineSummary"},"GetPolicyGeneration":{"name":"GetPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve status and results of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGeneration"},"GetPolicyGenerationSummary":{"name":"GetPolicyGenerationSummary","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve a summary of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGenerationSummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGenerationSummary"},"GetPolicySummary":{"name":"GetPolicySummary","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a summary of a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicySummary.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicySummary"},"GetRecommendation":{"name":"GetRecommendation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"recommendation"}],"description":"Grants permission to get details of a recommendation","accessLevel":"Read","resourceTypes":[{"name":"recommendation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetRecommendation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRecommendation"},"GetRegistry":{"name":"GetRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to retrieve an existing registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRegistry"},"GetRegistryRecord":{"name":"GetRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to retrieve an existing registry record","accessLevel":"Read","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetRegistryRecord"},"GetResourceApiKey":{"name":"GetResourceApiKey","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an API Key associated with an Api Key Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceApiKey"},"GetResourceOauth2Token":{"name":"GetResourceOauth2Token","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceOauth2Token"},"GetResourcePaymentToken":{"name":"GetResourcePaymentToken","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve a payment authentication token associated with a Payment Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePaymentToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePaymentToken"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve the resource-based policy for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePolicy"},"GetTokenVault":{"name":"GetTokenVault","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to fetch the current configuration of the TokenVault, including encryption settings","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetTokenVault"},"GetWorkloadAccessToken":{"name":"GetWorkloadAccessToken","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessToken"},"GetWorkloadAccessTokenForJWT":{"name":"GetWorkloadAccessTokenForJWT","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForJWT"},"GetWorkloadAccessTokenForUserId":{"name":"GetWorkloadAccessTokenForUserId","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:userid"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForUserId"},"GetWorkloadIdentity":{"name":"GetWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadIdentity"},"InvokeAgentRuntime":{"name":"InvokeAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntime"},"InvokeAgentRuntimeCommand":{"name":"InvokeAgentRuntimeCommand","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke commands on an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeCommand"},"InvokeAgentRuntimeCommandShell":{"name":"InvokeAgentRuntimeCommandShell","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke a command shell on an agent runtime endpoint over a web socket stream","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommandShell.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeCommandShell"},"InvokeAgentRuntimeForUser":{"name":"InvokeAgentRuntimeForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeForUser"},"InvokeAgentRuntimeWithWebSocketStream":{"name":"InvokeAgentRuntimeWithWebSocketStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStream"},"InvokeAgentRuntimeWithWebSocketStreamForUser":{"name":"InvokeAgentRuntimeWithWebSocketStreamForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStreamForUser"},"InvokeCodeInterpreter":{"name":"InvokeCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to invoke a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeCodeInterpreter"},"InvokeGateway":{"name":"InvokeGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to invoke a gateway","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeGateway"},"InvokeHarness":{"name":"InvokeHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to invoke a harness","accessLevel":"Write","resourceTypes":[{"name":"harness","required":true}],"dependentActions":["bedrock-agentcore:InvokeAgentRuntime"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeHarness"},"InvokeRegistryMcp":{"name":"InvokeRegistryMcp","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to invoke an MCP operation against an existing registry","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeRegistryMcp"},"ListABTests":{"name":"ListABTests","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list A/B tests","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListABTests.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListABTests"},"ListActors":{"name":"ListActors","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list Actors","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListActors"},"ListAgentRuntimeEndpoints":{"name":"ListAgentRuntimeEndpoints","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime endpoints","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeEndpoints"},"ListAgentRuntimeVersions":{"name":"ListAgentRuntimeVersions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime versions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeVersions"},"ListAgentRuntimes":{"name":"ListAgentRuntimes","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtimes","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimes"},"ListApiKeyCredentialProviders":{"name":"ListApiKeyCredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all API Key Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListApiKeyCredentialProviders"},"ListBatchEvaluations":{"name":"ListBatchEvaluations","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list batch evaluations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBatchEvaluations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBatchEvaluations"},"ListBrowserProfiles":{"name":"ListBrowserProfiles","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser profiles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserProfiles"},"ListBrowserSessions":{"name":"ListBrowserSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser sessions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserSessions"},"ListBrowsers":{"name":"ListBrowsers","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browsers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowsers"},"ListCodeInterpreterSessions":{"name":"ListCodeInterpreterSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to list code interpreter sessions","accessLevel":"List","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreterSessions"},"ListCodeInterpreters":{"name":"ListCodeInterpreters","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list code interpreters","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreters"},"ListConfigurationBundleVersions":{"name":"ListConfigurationBundleVersions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to list versions of a configuration bundle","accessLevel":"List","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundleVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListConfigurationBundleVersions"},"ListConfigurationBundles":{"name":"ListConfigurationBundles","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list configuration bundles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListConfigurationBundles"},"ListEvaluators":{"name":"ListEvaluators","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list evaluators","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvaluators"},"ListEvents":{"name":"ListEvents","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to list events","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvents"},"ListGatewayRules":{"name":"ListGatewayRules","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway rules","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayRules.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayRules"},"ListGatewayTargets":{"name":"ListGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway targets","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayTargets"},"ListGateways":{"name":"ListGateways","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing gateways","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGateways"},"ListHarnesses":{"name":"ListHarnesses","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list harnesses","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnesses.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListHarnesses"},"ListMemories":{"name":"ListMemories","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list memory resources","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemories"},"ListMemoryExtractionJobs":{"name":"ListMemoryExtractionJobs","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list extraction jobs for this memory","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryExtractionJobs"},"ListMemoryRecords":{"name":"ListMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to list memory records","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryRecords"},"ListOauth2CredentialProviders":{"name":"ListOauth2CredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all OAuth2 Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOauth2CredentialProviders"},"ListOnlineEvaluationConfigs":{"name":"ListOnlineEvaluationConfigs","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list online evaluation configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOnlineEvaluationConfigs"},"ListPaymentConnectors":{"name":"ListPaymentConnectors","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to list payment connectors under a payment manager","accessLevel":"List","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentConnectors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentConnectors"},"ListPaymentCredentialProviders":{"name":"ListPaymentCredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all Payment Credential Providers in the Token Vault","accessLevel":"List","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentCredentialProviders"},"ListPaymentInstruments":{"name":"ListPaymentInstruments","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to list payment instruments","accessLevel":"List","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentInstruments.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentInstruments"},"ListPaymentManagers":{"name":"ListPaymentManagers","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list payment managers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentManagers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentManagers"},"ListPaymentSessions":{"name":"ListPaymentSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to list payment sessions","accessLevel":"List","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPaymentSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPaymentSessions"},"ListPolicies":{"name":"ListPolicies","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policies within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicies"},"ListPolicyEngineSummaries":{"name":"ListPolicyEngineSummaries","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list policy engine summaries","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngineSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngineSummaries"},"ListPolicyEngines":{"name":"ListPolicyEngines","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list policy engines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngines"},"ListPolicyGenerationAssets":{"name":"ListPolicyGenerationAssets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to list generated policy assets from a generation request","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationAssets"},"ListPolicyGenerationSummaries":{"name":"ListPolicyGenerationSummaries","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation summaries","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationSummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationSummaries"},"ListPolicyGenerations":{"name":"ListPolicyGenerations","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation requests","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerations"},"ListPolicySummaries":{"name":"ListPolicySummaries","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy summaries within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicySummaries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicySummaries"},"ListRecommendations":{"name":"ListRecommendations","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list recommendations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListRecommendations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRecommendations"},"ListRegistries":{"name":"ListRegistries","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing registries","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistries.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRegistries"},"ListRegistryRecords":{"name":"ListRegistryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to list existing registry records in a registry","accessLevel":"List","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListRegistryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListRegistryRecords"},"ListSessions":{"name":"ListSessions","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId"],"resources":[{"name":"memory"}],"description":"Grants permission to list sessions","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListSessions"},"ListTagsForResource":{"name":"ListTagsForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"harness"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"payment-manager"},{"name":"paymentcredentialprovider"},{"name":"policy-engine"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list tags for a Bedrock-AgentCore resource","accessLevel":"List","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"harness","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"payment-manager","required":false},{"name":"paymentcredentialprovider","required":false},{"name":"policy-engine","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListTagsForResource"},"ListWorkloadIdentities":{"name":"ListWorkloadIdentities","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list all Workload Identities in the caller's AWS account","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListWorkloadIdentities"},"ManageAdminPolicy":{"name":"ManageAdminPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create or modify wildcard policies that apply to gateway resources","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageAdminPolicy"},"ManageResourceScopedPolicy":{"name":"ManageResourceScopedPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create or modify policies that apply to specific gateway resources","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageResourceScopedPolicy"},"PartiallyAuthorizeActions":{"name":"PartiallyAuthorizeActions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PartiallyAuthorizeActions"},"ProcessPayment":{"name":"ProcessPayment","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to process a payment transaction","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ProcessPayment.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ProcessPayment"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to create or update the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PutResourcePolicy"},"RetrieveMemoryRecords":{"name":"RetrieveMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to retrieve memory records through sematic query","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-RetrieveMemoryRecords"},"SaveBrowserSessionProfile":{"name":"SaveBrowserSessionProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to save a browser session profile","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SaveBrowserSessionProfile"},"SearchRegistryRecords":{"name":"SearchRegistryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to search for registry records","accessLevel":"Read","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SearchRegistryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SearchRegistryRecords"},"SetTokenVaultCMK":{"name":"SetTokenVaultCMK","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault","accessLevel":"Write","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SetTokenVaultCMK"},"StartBatchEvaluation":{"name":"StartBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to start a batch evaluation","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBatchEvaluation"},"StartBrowserSession":{"name":"StartBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to start a new browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBrowserSession"},"StartCodeInterpreterSession":{"name":"StartCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to start a new code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartCodeInterpreterSession"},"StartMemoryExtractionJob":{"name":"StartMemoryExtractionJob","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to start memory extraction job","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartMemoryExtractionJob"},"StartPolicyGeneration":{"name":"StartPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to start an AI-powered policy generation request","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartPolicyGeneration"},"StartRecommendation":{"name":"StartRecommendation","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to start a recommendation","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartRecommendation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartRecommendation"},"StopBatchEvaluation":{"name":"StopBatchEvaluation","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"batch-evaluate"}],"description":"Grants permission to stop a batch evaluation","accessLevel":"Write","resourceTypes":[{"name":"batch-evaluate","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBatchEvaluation.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBatchEvaluation"},"StopBrowserSession":{"name":"StopBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to stop a browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBrowserSession"},"StopCodeInterpreterSession":{"name":"StopCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to stop a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopCodeInterpreterSession"},"StopRuntimeSession":{"name":"StopRuntimeSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to stop a runtime session","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopRuntimeSession"},"SubmitRegistryRecordForApproval":{"name":"SubmitRegistryRecordForApproval","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to submit a registry record for approval","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SubmitRegistryRecordForApproval.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SubmitRegistryRecordForApproval"},"SynchronizeGatewayTargets":{"name":"SynchronizeGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable search on gateways","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SynchronizeGatewayTargets"},"TagResource":{"name":"TagResource","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"harness"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"payment-manager"},{"name":"paymentcredentialprovider"},{"name":"policy-engine"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Tag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"harness","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"payment-manager","required":false},{"name":"paymentcredentialprovider","required":false},{"name":"policy-engine","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-TagResource"},"UntagResource":{"name":"UntagResource","service":"bedrock-agentcore","conditionKeys":["aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"harness"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"payment-manager"},{"name":"paymentcredentialprovider"},{"name":"policy-engine"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Untag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"harness","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"payment-manager","required":false},{"name":"paymentcredentialprovider","required":false},{"name":"policy-engine","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UntagResource"},"UpdateABTest":{"name":"UpdateABTest","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"ab-test"}],"description":"Grants permission to update an A/B test","accessLevel":"Write","resourceTypes":[{"name":"ab-test","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateABTest.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateABTest"},"UpdateAgentRuntime":{"name":"UpdateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:RuntimeAuthorizerType","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[{"name":"runtime"}],"description":"Grants permission to update an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntime"},"UpdateAgentRuntimeEndpoint":{"name":"UpdateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to update an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntimeEndpoint"},"UpdateApiKeyCredentialProvider":{"name":"UpdateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateApiKeyCredentialProvider"},"UpdateBrowserStream":{"name":"UpdateBrowserStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to update the status of browser session stream","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateBrowserStream"},"UpdateConfigurationBundle":{"name":"UpdateConfigurationBundle","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"configuration-bundle"}],"description":"Grants permission to update a configuration bundle","accessLevel":"Write","resourceTypes":[{"name":"configuration-bundle","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateConfigurationBundle.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateConfigurationBundle"},"UpdateEvaluator":{"name":"UpdateEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to update an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateEvaluator"},"UpdateGateway":{"name":"UpdateGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGateway"},"UpdateGatewayRule":{"name":"UpdateGatewayRule","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway rule","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayRule.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayRule"},"UpdateGatewayTarget":{"name":"UpdateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayTarget"},"UpdateHarness":{"name":"UpdateHarness","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"harness"}],"description":"Grants permission to update a harness","accessLevel":"Write","resourceTypes":[{"name":"harness","required":true}],"dependentActions":["bedrock-agentcore:GetAgentRuntime","bedrock-agentcore:UpdateAgentRuntime","iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateHarness.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateHarness"},"UpdateMemory":{"name":"UpdateMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to update a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateMemory"},"UpdateOauth2CredentialProvider":{"name":"UpdateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOauth2CredentialProvider"},"UpdateOnlineEvaluationConfig":{"name":"UpdateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to update an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOnlineEvaluationConfig"},"UpdatePaymentConnector":{"name":"UpdatePaymentConnector","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to update an existing payment connector","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentConnector.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePaymentConnector"},"UpdatePaymentCredentialProvider":{"name":"UpdatePaymentCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"paymentcredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing Payment Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"paymentcredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePaymentCredentialProvider"},"UpdatePaymentManager":{"name":"UpdatePaymentManager","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"payment-manager"}],"description":"Grants permission to update an existing payment manager","accessLevel":"Write","resourceTypes":[{"name":"payment-manager","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePaymentManager.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePaymentManager"},"UpdatePolicy":{"name":"UpdatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to update an existing policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicy"},"UpdatePolicyEngine":{"name":"UpdatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to update a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicyEngine"},"UpdateRegistry":{"name":"UpdateRegistry","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry"}],"description":"Grants permission to update an existing registry","accessLevel":"Write","resourceTypes":[{"name":"registry","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistry.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistry"},"UpdateRegistryRecord":{"name":"UpdateRegistryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to update an existing registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistryRecord"},"UpdateRegistryRecordStatus":{"name":"UpdateRegistryRecordStatus","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"registry-record"}],"description":"Grants permission to update the status of a registry record","accessLevel":"Write","resourceTypes":[{"name":"registry-record","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateRegistryRecordStatus.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateRegistryRecordStatus"},"UpdateWorkloadIdentity":{"name":"UpdateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to update the metadata of an existing Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateWorkloadIdentity"}},"resources":[{"service":"bedrock-agentcore","name":"ab-test","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:ab-test/${ABTestId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"apikeycredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"batch-evaluate","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:batch-evaluate/${BatchEvaluationId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"browser","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"browser-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"browser-profile","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/${BrowserProfileId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"code-interpreter","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"code-interpreter-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"configuration-bundle","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:configuration-bundle/${ConfigurationBundleId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"evaluator","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"gateway","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"harness","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:harness/${HarnessId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"memory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"oauth2credentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"online-evaluation-config","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"payment-manager","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:payment-manager/${PaymentManagerId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"paymentcredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/paymentcredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"policy","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"policy-engine","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"policy-generation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"recommendation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:recommendation/${RecommendationId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"registry","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"registry-record","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:registry/${RegistryId}/record/${RecordId}"],"conditionKeys":[]},{"service":"bedrock-agentcore","name":"runtime","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"runtime-endpoint","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"token-vault","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"workload-identity","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"service":"bedrock-agentcore","name":"workload-identity-directory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"name":"aws:RequestTag/${TagKey}","types":["String"],"description":"Filters access by creating requests based on the allowed set of values for each of the mandatory tags"},"aws:ResourceTag/${TagKey}":{"name":"aws:ResourceTag/${TagKey}","types":["String"],"description":"Filters access by having actions based on the tag value associated with the resource"},"aws:TagKeys":{"name":"aws:TagKeys","types":["ArrayOfString"],"description":"Filters access by creating requests based on the presence of mandatory tags in the request"},"bedrock-agentcore:GatewayAuthorizerType":{"name":"bedrock-agentcore:GatewayAuthorizerType","types":["String"],"description":"Filters access by the authorizerType attribute on a Gateway"},"bedrock-agentcore:InboundJwtClaim/aud":{"name":"bedrock-agentcore:InboundJwtClaim/aud","types":["ArrayOfString"],"description":"Filters access by the audience claim (aud) in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/client_id":{"name":"bedrock-agentcore:InboundJwtClaim/client_id","types":["String"],"description":"Filters access by the client_id claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/iss":{"name":"bedrock-agentcore:InboundJwtClaim/iss","types":["String"],"description":"Filters access by the issuer (iss) claim present in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/scope":{"name":"bedrock-agentcore:InboundJwtClaim/scope","types":["ArrayOfString"],"description":"Filters access by the scope claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/sub":{"name":"bedrock-agentcore:InboundJwtClaim/sub","types":["String"],"description":"Filters access by the subject claim (sub) in the JWT passed in the request"},"bedrock-agentcore:KmsKeyArn":{"name":"bedrock-agentcore:KmsKeyArn","types":["String"],"description":"Filters access by KMS Key arn provided"},"bedrock-agentcore:RuntimeAuthorizerType":{"name":"bedrock-agentcore:RuntimeAuthorizerType","types":["String"],"description":"Filters access by the authorizer type configured for the AgentCore runtime"},"bedrock-agentcore:actorId":{"name":"bedrock-agentcore:actorId","types":["String"],"description":"Filters access by Actor Id"},"bedrock-agentcore:namespace":{"name":"bedrock-agentcore:namespace","types":["String"],"description":"Filters access by namespace"},"bedrock-agentcore:securityGroups":{"name":"bedrock-agentcore:securityGroups","types":["ArrayOfString"],"description":"Filters access by the ID of security groups configured for the AgentCore runtime"},"bedrock-agentcore:sessionId":{"name":"bedrock-agentcore:sessionId","types":["String"],"description":"Filters access by Session Id"},"bedrock-agentcore:strategyId":{"name":"bedrock-agentcore:strategyId","types":["String"],"description":"Filters access by Memory Strategy Id"},"bedrock-agentcore:subnets":{"name":"bedrock-agentcore:subnets","types":["ArrayOfString"],"description":"Filters access by the ID of subnets configured for the AgentCore runtime"},"bedrock-agentcore:userid":{"name":"bedrock-agentcore:userid","types":["String"],"description":"Filters access by the static user ID value passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html"}