npm - aws-iam-language-server - Versions diffs - 0.0.9 → 0.0.10 - Mend

aws-iam-language-server 0.0.9 → 0.0.10

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (489) hide show

package/src/data/servicereference/services/bedrock-agentcore.json CHANGED Viewed

	@@ -1 +1 @@
1	- {"name":"bedrock-agentcore","actions":{"AllowVendedLogDeliveryForResource":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to configure vended telemetry for a resource","accessLevel":"Permissions management","resourceTypes":[{"name":"memory","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AllowVendedLogDeliveryForResource"},"AuthorizeAction":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to evaluate Cedar policies for authorization requests","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AuthorizeAction"},"BatchCreateMemoryRecords":{"conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to create one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchCreateMemoryRecords"},"BatchDeleteMemoryRecords":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchDeleteMemoryRecords"},"BatchUpdateMemoryRecords":{"conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to update one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchUpdateMemoryRecords"},"CompleteResourceTokenAuth":{"conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub","bedrock-agentcore:userid"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CompleteResourceTokenAuth"},"ConnectBrowserAutomationStream":{"conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser automation stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserAutomationStream"},"ConnectBrowserLiveViewStream":{"conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser live view stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserLiveViewStream"},"CreateAgentRuntime":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new agent runtime","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntime"},"CreateAgentRuntimeEndpoint":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"runtime"}],"description":"Grants permission to create a new agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntimeEndpoint"},"CreateApiKeyCredentialProvider":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateApiKeyCredentialProvider"},"CreateBrowser":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom browser","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowser"},"CreateBrowserProfile":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new browser profile","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowserProfile"},"CreateCodeInterpreter":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom code interpreter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateCodeInterpreter"},"CreateEvaluator":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new evaluator","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvaluator"},"CreateEvent":{"conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to create an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvent"},"CreateGateway":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new gateway","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGateway"},"CreateGatewayTarget":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new target in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayTarget"},"CreateMemory":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:KmsKeyArn"],"resources":[],"description":"Grants permission to create a Memory resource","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateMemory"},"CreateOauth2CredentialProvider":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOauth2CredentialProvider"},"CreateOnlineEvaluationConfig":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new online evaluation configuration","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOnlineEvaluationConfig"},"CreatePolicy":{"conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to create a new policy within a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicy"},"CreatePolicyEngine":{"conditionKeys":[],"resources":[],"description":"Grants permission to create a new policy engine","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicyEngine"},"CreateWorkloadIdentity":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to create a new Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateWorkloadIdentity"},"DeleteAgentRuntime":{"conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to delete an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntime"},"DeleteAgentRuntimeEndpoint":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntimeEndpoint"},"DeleteApiKeyCredentialProvider":{"conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteApiKeyCredentialProvider"},"DeleteBrowser":{"conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to delete a custom browser","accessLevel":"Write","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowser"},"DeleteBrowserProfile":{"conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to delete a browser profile","accessLevel":"Write","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowserProfile"},"DeleteCodeInterpreter":{"conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to delete a custom code interpreter","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteCodeInterpreter"},"DeleteEvaluator":{"conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to delete an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvaluator"},"DeleteEvent":{"conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to delete an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvent"},"DeleteGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGateway"},"DeleteGatewayTarget":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayTarget"},"DeleteMemory":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemory"},"DeleteMemoryRecord":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory Record","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemoryRecord"},"DeleteOauth2CredentialProvider":{"conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOauth2CredentialProvider"},"DeleteOnlineEvaluationConfig":{"conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to delete an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOnlineEvaluationConfig"},"DeletePolicy":{"conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to delete a policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicy"},"DeletePolicyEngine":{"conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to delete a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicyEngine"},"DeleteResourcePolicy":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteResourcePolicy"},"DeleteWorkloadIdentity":{"conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to delete a registered Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteWorkloadIdentity"},"Evaluate":{"conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to run an evaluation using an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-Evaluate"},"GetAgentCard":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve an agent card for A2A","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentCard"},"GetAgentRuntime":{"conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to get details of an agent runtime","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntime"},"GetAgentRuntimeEndpoint":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to get details of an agent runtime endpoint","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntimeEndpoint"},"GetApiKeyCredentialProvider":{"conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered API Key Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetApiKeyCredentialProvider"},"GetBrowser":{"conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to get details of a browser","accessLevel":"Read","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowser"},"GetBrowserProfile":{"conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to get details of a browser profile","accessLevel":"Read","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserProfile"},"GetBrowserSession":{"conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to get details of a browser session","accessLevel":"Read","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserSession"},"GetCodeInterpreter":{"conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreter"},"GetCodeInterpreterSession":{"conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter session","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreterSession"},"GetEvaluator":{"conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to get details of an evaluator","accessLevel":"Read","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvaluator"},"GetEvent":{"conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to fetch an Event","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvent"},"GetGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGateway"},"GetGatewayTarget":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway target","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayTarget"},"GetMemory":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch details for a Memory resource","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemory"},"GetMemoryRecord":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch a Memory Record","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemoryRecord"},"GetOauth2CredentialProvider":{"conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered OAuth2 Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOauth2CredentialProvider"},"GetOnlineEvaluationConfig":{"conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to get details of an online evaluation configuration","accessLevel":"Read","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOnlineEvaluationConfig"},"GetPolicy":{"conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicy"},"GetPolicyEngine":{"conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngine"},"GetPolicyGeneration":{"conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve status and results of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGeneration"},"GetResourceApiKey":{"conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an API Key associated with an Api Key Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceApiKey"},"GetResourceOauth2Token":{"conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceOauth2Token"},"GetResourcePolicy":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve the resource-based policy for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePolicy"},"GetTokenVault":{"conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to fetch the current configuration of the TokenVault, including encryption settings","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetTokenVault"},"GetWorkloadAccessToken":{"conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessToken"},"GetWorkloadAccessTokenForJWT":{"conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForJWT"},"GetWorkloadAccessTokenForUserId":{"conditionKeys":["bedrock-agentcore:userid"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForUserId"},"GetWorkloadIdentity":{"conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadIdentity"},"InvokeAgentRuntime":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntime"},"InvokeAgentRuntimeCommand":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke commands on an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeCommand"},"InvokeAgentRuntimeForUser":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeForUser"},"InvokeAgentRuntimeWithWebSocketStream":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStream"},"InvokeAgentRuntimeWithWebSocketStreamForUser":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStreamForUser"},"InvokeCodeInterpreter":{"conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to invoke a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeCodeInterpreter"},"InvokeGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to invoke a gateway","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeGateway"},"ListActors":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list Actors","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListActors"},"ListAgentRuntimeEndpoints":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime endpoints","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeEndpoints"},"ListAgentRuntimeVersions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime versions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeVersions"},"ListAgentRuntimes":{"conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtimes","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimes"},"ListApiKeyCredentialProviders":{"conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all API Key Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListApiKeyCredentialProviders"},"ListBrowserProfiles":{"conditionKeys":[],"resources":[],"description":"Grants permission to list browser profiles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserProfiles"},"ListBrowserSessions":{"conditionKeys":[],"resources":[],"description":"Grants permission to list browser sessions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserSessions"},"ListBrowsers":{"conditionKeys":[],"resources":[],"description":"Grants permission to list browsers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowsers"},"ListCodeInterpreterSessions":{"conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to list code interpreter sessions","accessLevel":"List","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreterSessions"},"ListCodeInterpreters":{"conditionKeys":[],"resources":[],"description":"Grants permission to list code interpreters","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreters"},"ListEvaluators":{"conditionKeys":[],"resources":[],"description":"Grants permission to list evaluators","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvaluators"},"ListEvents":{"conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to list events","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvents"},"ListGatewayTargets":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway targets","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayTargets"},"ListGateways":{"conditionKeys":[],"resources":[],"description":"Grants permission to list existing gateways","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGateways"},"ListMemories":{"conditionKeys":[],"resources":[],"description":"Grants permission to list memory resources","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemories"},"ListMemoryExtractionJobs":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list extraction jobs for this memory","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryExtractionJobs"},"ListMemoryRecords":{"conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to list memory records","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryRecords"},"ListOauth2CredentialProviders":{"conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all OAuth2 Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOauth2CredentialProviders"},"ListOnlineEvaluationConfigs":{"conditionKeys":[],"resources":[],"description":"Grants permission to list online evaluation configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOnlineEvaluationConfigs"},"ListPolicies":{"conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policies within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicies"},"ListPolicyEngines":{"conditionKeys":[],"resources":[],"description":"Grants permission to list policy engines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngines"},"ListPolicyGenerationAssets":{"conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to list generated policy assets from a generation request","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationAssets"},"ListPolicyGenerations":{"conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation requests","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerations"},"ListSessions":{"conditionKeys":["bedrock-agentcore:actorId"],"resources":[{"name":"memory"}],"description":"Grants permission to list sessions","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListSessions"},"ListTagsForResource":{"conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list tags for a Bedrock-AgentCore resource","accessLevel":"List","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListTagsForResource"},"ListWorkloadIdentities":{"conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list all Workload Identities in the caller's AWS account","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListWorkloadIdentities"},"ManageAdminPolicy":{"conditionKeys":[],"resources":[],"description":"Grants permission to create or modify wildcard policies that apply to gateway resources","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageAdminPolicy"},"ManageResourceScopedPolicy":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create or modify policies that apply to specific gateway resources","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageResourceScopedPolicy"},"PartiallyAuthorizeActions":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PartiallyAuthorizeActions"},"PutResourcePolicy":{"conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to create or update the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PutResourcePolicy"},"RetrieveMemoryRecords":{"conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to retrieve memory records through sematic query","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-RetrieveMemoryRecords"},"SaveBrowserSessionProfile":{"conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to save a browser session profile","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SaveBrowserSessionProfile"},"SetTokenVaultCMK":{"conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SetTokenVaultCMK"},"StartBrowserSession":{"conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to start a new browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBrowserSession"},"StartCodeInterpreterSession":{"conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to start a new code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartCodeInterpreterSession"},"StartMemoryExtractionJob":{"conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to start memory extraction job","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartMemoryExtractionJob"},"StartPolicyGeneration":{"conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to start an AI-powered policy generation request","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartPolicyGeneration"},"StopBrowserSession":{"conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to stop a browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBrowserSession"},"StopCodeInterpreterSession":{"conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to stop a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopCodeInterpreterSession"},"StopRuntimeSession":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to stop a runtime session","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopRuntimeSession"},"SynchronizeGatewayTargets":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable search on gateways","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SynchronizeGatewayTargets"},"TagResource":{"conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Tag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-TagResource"},"UntagResource":{"conditionKeys":["aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Untag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UntagResource"},"UpdateAgentRuntime":{"conditionKeys":["bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[{"name":"runtime"}],"description":"Grants permission to update an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntime"},"UpdateAgentRuntimeEndpoint":{"conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to update an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntimeEndpoint"},"UpdateApiKeyCredentialProvider":{"conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateApiKeyCredentialProvider"},"UpdateBrowserStream":{"conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to update the status of browser session stream","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateBrowserStream"},"UpdateEvaluator":{"conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to update an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateEvaluator"},"UpdateGateway":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGateway"},"UpdateGatewayTarget":{"conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayTarget"},"UpdateMemory":{"conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to update a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateMemory"},"UpdateOauth2CredentialProvider":{"conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOauth2CredentialProvider"},"UpdateOnlineEvaluationConfig":{"conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to update an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOnlineEvaluationConfig"},"UpdatePolicy":{"conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to update an existing policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicy"},"UpdatePolicyEngine":{"conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to update a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicyEngine"},"UpdateWorkloadIdentity":{"conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to update the metadata of an existing Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateWorkloadIdentity"}},"resources":[{"name":"apikeycredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"browser","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"],"conditionKeys":[]},{"name":"browser-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"browser-profile","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/${BrowserProfileId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"code-interpreter","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"],"conditionKeys":[]},{"name":"code-interpreter-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"evaluator","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"gateway","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"memory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"oauth2credentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"online-evaluation-config","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"policy","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}"],"conditionKeys":[]},{"name":"policy-engine","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}"],"conditionKeys":[]},{"name":"policy-generation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"],"conditionKeys":[]},{"name":"runtime","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"runtime-endpoint","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"token-vault","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workload-identity","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workload-identity-directory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by creating requests based on the allowed set of values for each of the mandatory tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by having actions based on the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by creating requests based on the presence of mandatory tags in the request"},"bedrock-agentcore:GatewayAuthorizerType":{"types":["String"],"description":"Filters access by the authorizerType attribute on a Gateway"},"bedrock-agentcore:InboundJwtClaim/aud":{"types":["ArrayOfString"],"description":"Filters access by the audience claim (aud) in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/client_id":{"types":["String"],"description":"Filters access by the client_id claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/iss":{"types":["String"],"description":"Filters access by the issuer (iss) claim present in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/scope":{"types":["ArrayOfString"],"description":"Filters access by the scope claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/sub":{"types":["String"],"description":"Filters access by the subject claim (sub) in the JWT passed in the request"},"bedrock-agentcore:KmsKeyArn":{"types":["String"],"description":"Filters access by KMS Key arn provided"},"bedrock-agentcore:actorId":{"types":["String"],"description":"Filters access by Actor Id"},"bedrock-agentcore:namespace":{"types":["String"],"description":"Filters access by namespace"},"bedrock-agentcore:securityGroups":{"types":["ArrayOfString"],"description":"Filters access by the ID of security groups configured for the AgentCore runtime"},"bedrock-agentcore:sessionId":{"types":["String"],"description":"Filters access by Session Id"},"bedrock-agentcore:strategyId":{"types":["String"],"description":"Filters access by Memory Strategy Id"},"bedrock-agentcore:subnets":{"types":["ArrayOfString"],"description":"Filters access by the ID of subnets configured for the AgentCore runtime"},"bedrock-agentcore:userid":{"types":["String"],"description":"Filters access by the static user ID value passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html"}
1	+ {"name":"bedrock-agentcore","actions":{"AllowVendedLogDeliveryForResource":{"name":"AllowVendedLogDeliveryForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to configure vended telemetry for a resource","accessLevel":"Permissions management","resourceTypes":[{"name":"memory","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AllowVendedLogDeliveryForResource"},"AuthorizeAction":{"name":"AuthorizeAction","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to evaluate Cedar policies for authorization requests","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-AuthorizeAction"},"BatchCreateMemoryRecords":{"name":"BatchCreateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to create one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchCreateMemoryRecords"},"BatchDeleteMemoryRecords":{"name":"BatchDeleteMemoryRecords","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchDeleteMemoryRecords"},"BatchUpdateMemoryRecords":{"name":"BatchUpdateMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace"],"resources":[{"name":"memory"}],"description":"Grants permission to update one or more memory records","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-BatchUpdateMemoryRecords"},"CompleteResourceTokenAuth":{"name":"CompleteResourceTokenAuth","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub","bedrock-agentcore:userid"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CompleteResourceTokenAuth"},"ConnectBrowserAutomationStream":{"name":"ConnectBrowserAutomationStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser automation stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserAutomationStream"},"ConnectBrowserLiveViewStream":{"name":"ConnectBrowserLiveViewStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to connect to a browser live view stream","accessLevel":"Read","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ConnectBrowserLiveViewStream"},"CreateAgentRuntime":{"name":"CreateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new agent runtime","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntime"},"CreateAgentRuntimeEndpoint":{"name":"CreateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"runtime"}],"description":"Grants permission to create a new agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateAgentRuntimeEndpoint"},"CreateApiKeyCredentialProvider":{"name":"CreateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateApiKeyCredentialProvider"},"CreateBrowser":{"name":"CreateBrowser","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom browser","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowser"},"CreateBrowserProfile":{"name":"CreateBrowserProfile","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new browser profile","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateBrowserProfile"},"CreateCodeInterpreter":{"name":"CreateCodeInterpreter","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[],"description":"Grants permission to create a new custom code interpreter","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateCodeInterpreter"},"CreateEvaluator":{"name":"CreateEvaluator","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new evaluator","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvaluator"},"CreateEvent":{"name":"CreateEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to create an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateEvent"},"CreateGateway":{"name":"CreateGateway","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new gateway","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGateway"},"CreateGatewayTarget":{"name":"CreateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create a new target in an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateGatewayTarget"},"CreateMemory":{"name":"CreateMemory","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys","bedrock-agentcore:KmsKeyArn"],"resources":[],"description":"Grants permission to create a Memory resource","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateMemory"},"CreateOauth2CredentialProvider":{"name":"CreateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOauth2CredentialProvider"},"CreateOnlineEvaluationConfig":{"name":"CreateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:ResourceTag/${TagKey}","aws:TagKeys"],"resources":[],"description":"Grants permission to create a new online evaluation configuration","accessLevel":"Write","resourceTypes":[],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateOnlineEvaluationConfig"},"CreatePolicy":{"name":"CreatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to create a new policy within a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicy"},"CreatePolicyEngine":{"name":"CreatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create a new policy engine","accessLevel":"Write","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreatePolicyEngine"},"CreateWorkloadIdentity":{"name":"CreateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to create a new Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-CreateWorkloadIdentity"},"DeleteAgentRuntime":{"name":"DeleteAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to delete an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntime"},"DeleteAgentRuntimeEndpoint":{"name":"DeleteAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteAgentRuntimeEndpoint"},"DeleteApiKeyCredentialProvider":{"name":"DeleteApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteApiKeyCredentialProvider"},"DeleteBrowser":{"name":"DeleteBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to delete a custom browser","accessLevel":"Write","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowser"},"DeleteBrowserProfile":{"name":"DeleteBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to delete a browser profile","accessLevel":"Write","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteBrowserProfile"},"DeleteCodeInterpreter":{"name":"DeleteCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to delete a custom code interpreter","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteCodeInterpreter"},"DeleteEvaluator":{"name":"DeleteEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to delete an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvaluator"},"DeleteEvent":{"name":"DeleteEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to delete an Event","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteEvent"},"DeleteGateway":{"name":"DeleteGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGateway"},"DeleteGatewayTarget":{"name":"DeleteGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to delete an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteGatewayTarget"},"DeleteMemory":{"name":"DeleteMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemory"},"DeleteMemoryRecord":{"name":"DeleteMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to delete a Memory Record","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteMemoryRecord"},"DeleteOauth2CredentialProvider":{"name":"DeleteOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to delete a registered OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOauth2CredentialProvider"},"DeleteOnlineEvaluationConfig":{"name":"DeleteOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to delete an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteOnlineEvaluationConfig"},"DeletePolicy":{"name":"DeletePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to delete a policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicy"},"DeletePolicyEngine":{"name":"DeletePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to delete a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeletePolicyEngine"},"DeleteResourcePolicy":{"name":"DeleteResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to delete the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteResourcePolicy"},"DeleteWorkloadIdentity":{"name":"DeleteWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to delete a registered Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-DeleteWorkloadIdentity"},"Evaluate":{"name":"Evaluate","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to run an evaluation using an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-Evaluate"},"GetAgentCard":{"name":"GetAgentCard","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve an agent card for A2A","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentCard"},"GetAgentRuntime":{"name":"GetAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"}],"description":"Grants permission to get details of an agent runtime","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntime"},"GetAgentRuntimeEndpoint":{"name":"GetAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to get details of an agent runtime endpoint","accessLevel":"Read","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetAgentRuntimeEndpoint"},"GetApiKeyCredentialProvider":{"name":"GetApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered API Key Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetApiKeyCredentialProvider"},"GetBrowser":{"name":"GetBrowser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-custom"}],"description":"Grants permission to get details of a browser","accessLevel":"Read","resourceTypes":[{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowser"},"GetBrowserProfile":{"name":"GetBrowserProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser-profile"}],"description":"Grants permission to get details of a browser profile","accessLevel":"Read","resourceTypes":[{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserProfile"},"GetBrowserSession":{"name":"GetBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to get details of a browser session","accessLevel":"Read","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetBrowserSession"},"GetCodeInterpreter":{"name":"GetCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreter"},"GetCodeInterpreterSession":{"name":"GetCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to get details of a code interpreter session","accessLevel":"Read","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetCodeInterpreterSession"},"GetEvaluator":{"name":"GetEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to get details of an evaluator","accessLevel":"Read","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvaluator"},"GetEvent":{"name":"GetEvent","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to fetch an Event","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetEvent"},"GetGateway":{"name":"GetGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGateway"},"GetGatewayTarget":{"name":"GetGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to retrieve an existing gateway target","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetGatewayTarget"},"GetMemory":{"name":"GetMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch details for a Memory resource","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemory"},"GetMemoryRecord":{"name":"GetMemoryRecord","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to fetch a Memory Record","accessLevel":"Read","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetMemoryRecord"},"GetOauth2CredentialProvider":{"name":"GetOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to fetch a registered OAuth2 Credential Provider by its name","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOauth2CredentialProvider"},"GetOnlineEvaluationConfig":{"name":"GetOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to get details of an online evaluation configuration","accessLevel":"Read","resourceTypes":[{"name":"online-evaluation-config","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetOnlineEvaluationConfig"},"GetPolicy":{"name":"GetPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy","accessLevel":"Read","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicy"},"GetPolicyEngine":{"name":"GetPolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to retrieve a policy engine","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyEngine"},"GetPolicyGeneration":{"name":"GetPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to retrieve status and results of a policy generation request","accessLevel":"Read","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetPolicyGeneration"},"GetResourceApiKey":{"name":"GetResourceApiKey","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an API Key associated with an Api Key Credential Provider","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceApiKey"},"GetResourceOauth2Token":{"name":"GetResourceOauth2Token","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true},{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourceOauth2Token"},"GetResourcePolicy":{"name":"GetResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to retrieve the resource-based policy for a Bedrock resource","accessLevel":"Read","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetResourcePolicy"},"GetTokenVault":{"name":"GetTokenVault","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to fetch the current configuration of the TokenVault, including encryption settings","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetTokenVault"},"GetWorkloadAccessToken":{"name":"GetWorkloadAccessToken","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessToken"},"GetWorkloadAccessTokenForJWT":{"name":"GetWorkloadAccessTokenForJWT","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:InboundJwtClaim/aud","bedrock-agentcore:InboundJwtClaim/client_id","bedrock-agentcore:InboundJwtClaim/iss","bedrock-agentcore:InboundJwtClaim/scope","bedrock-agentcore:InboundJwtClaim/sub"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForJWT"},"GetWorkloadAccessTokenForUserId":{"name":"GetWorkloadAccessTokenForUserId","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:userid"],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadAccessTokenForUserId"},"GetWorkloadIdentity":{"name":"GetWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-GetWorkloadIdentity"},"InvokeAgentRuntime":{"name":"InvokeAgentRuntime","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntime"},"InvokeAgentRuntimeCommand":{"name":"InvokeAgentRuntimeCommand","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke commands on an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeCommand"},"InvokeAgentRuntimeForUser":{"name":"InvokeAgentRuntimeForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeForUser"},"InvokeAgentRuntimeWithWebSocketStream":{"name":"InvokeAgentRuntimeWithWebSocketStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStream"},"InvokeAgentRuntimeWithWebSocketStreamForUser":{"name":"InvokeAgentRuntimeWithWebSocketStreamForUser","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeAgentRuntimeWithWebSocketStreamForUser"},"InvokeCodeInterpreter":{"name":"InvokeCodeInterpreter","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to invoke a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeCodeInterpreter"},"InvokeGateway":{"name":"InvokeGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to invoke a gateway","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-InvokeGateway"},"ListActors":{"name":"ListActors","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list Actors","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListActors"},"ListAgentRuntimeEndpoints":{"name":"ListAgentRuntimeEndpoints","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime endpoints","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeEndpoints"},"ListAgentRuntimeVersions":{"name":"ListAgentRuntimeVersions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtime versions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimeVersions"},"ListAgentRuntimes":{"name":"ListAgentRuntimes","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list agent runtimes","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListAgentRuntimes"},"ListApiKeyCredentialProviders":{"name":"ListApiKeyCredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all API Key Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListApiKeyCredentialProviders"},"ListBrowserProfiles":{"name":"ListBrowserProfiles","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser profiles","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserProfiles"},"ListBrowserSessions":{"name":"ListBrowserSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browser sessions","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowserSessions"},"ListBrowsers":{"name":"ListBrowsers","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list browsers","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListBrowsers"},"ListCodeInterpreterSessions":{"name":"ListCodeInterpreterSessions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to list code interpreter sessions","accessLevel":"List","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreterSessions"},"ListCodeInterpreters":{"name":"ListCodeInterpreters","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list code interpreters","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListCodeInterpreters"},"ListEvaluators":{"name":"ListEvaluators","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list evaluators","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvaluators"},"ListEvents":{"name":"ListEvents","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId"],"resources":[{"name":"memory"}],"description":"Grants permission to list events","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListEvents"},"ListGatewayTargets":{"name":"ListGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to list existing gateway targets","accessLevel":"List","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGatewayTargets"},"ListGateways":{"name":"ListGateways","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list existing gateways","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListGateways"},"ListMemories":{"name":"ListMemories","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list memory resources","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemories"},"ListMemoryExtractionJobs":{"name":"ListMemoryExtractionJobs","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to list extraction jobs for this memory","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryExtractionJobs"},"ListMemoryRecords":{"name":"ListMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to list memory records","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListMemoryRecords"},"ListOauth2CredentialProviders":{"name":"ListOauth2CredentialProviders","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to list all OAuth2 Credential Providers in the Token Vault","accessLevel":"Read","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOauth2CredentialProviders"},"ListOnlineEvaluationConfigs":{"name":"ListOnlineEvaluationConfigs","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list online evaluation configurations","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOnlineEvaluationConfigs.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListOnlineEvaluationConfigs"},"ListPolicies":{"name":"ListPolicies","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policies within a policy engine","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicies.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicies"},"ListPolicyEngines":{"name":"ListPolicyEngines","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to list policy engines","accessLevel":"List","resourceTypes":[],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyEngines"},"ListPolicyGenerationAssets":{"name":"ListPolicyGenerationAssets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"},{"name":"policy-generation"}],"description":"Grants permission to list generated policy assets from a generation request","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true},{"name":"policy-generation","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerationAssets.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerationAssets"},"ListPolicyGenerations":{"name":"ListPolicyGenerations","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to list policy generation requests","accessLevel":"List","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyGenerations.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListPolicyGenerations"},"ListSessions":{"name":"ListSessions","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId"],"resources":[{"name":"memory"}],"description":"Grants permission to list sessions","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListSessions.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListSessions"},"ListTagsForResource":{"name":"ListTagsForResource","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list tags for a Bedrock-AgentCore resource","accessLevel":"List","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListTagsForResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListTagsForResource"},"ListWorkloadIdentities":{"name":"ListWorkloadIdentities","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to list all Workload Identities in the caller's AWS account","accessLevel":"Read","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListWorkloadIdentities.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ListWorkloadIdentities"},"ManageAdminPolicy":{"name":"ManageAdminPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[],"description":"Grants permission to create or modify wildcard policies that apply to gateway resources","accessLevel":"Permissions management","resourceTypes":[],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageAdminPolicy"},"ManageResourceScopedPolicy":{"name":"ManageResourceScopedPolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to create or modify policies that apply to specific gateway resources","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-ManageResourceScopedPolicy"},"PartiallyAuthorizeActions":{"name":"PartiallyAuthorizeActions","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"policy-engine"}],"description":"Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true},{"name":"policy-engine","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PartiallyAuthorizeActions"},"PutResourcePolicy":{"name":"PutResourcePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"},{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to create or update the resource-based policy for a Bedrock resource","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_PutResourcePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-PutResourcePolicy"},"RetrieveMemoryRecords":{"name":"RetrieveMemoryRecords","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:namespace","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to retrieve memory records through sematic query","accessLevel":"List","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_RetrieveMemoryRecords.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-RetrieveMemoryRecords"},"SaveBrowserSessionProfile":{"name":"SaveBrowserSessionProfile","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to save a browser session profile","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_SaveBrowserSessionProfile.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SaveBrowserSessionProfile"},"SetTokenVaultCMK":{"name":"SetTokenVaultCMK","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"token-vault"}],"description":"Grants permission to associate a Customer Managed Key (CMK) or a Service Managed Key with a specific TokenVault","accessLevel":"Read","resourceTypes":[{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_SetTokenVaultCMK.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SetTokenVaultCMK"},"StartBrowserSession":{"name":"StartBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"},{"name":"browser-profile"}],"description":"Grants permission to start a new browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true},{"name":"browser-profile","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartBrowserSession"},"StartCodeInterpreterSession":{"name":"StartCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to start a new code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartCodeInterpreterSession"},"StartMemoryExtractionJob":{"name":"StartMemoryExtractionJob","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:actorId","bedrock-agentcore:sessionId","bedrock-agentcore:strategyId"],"resources":[{"name":"memory"}],"description":"Grants permission to start memory extraction job","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StartMemoryExtractionJob.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartMemoryExtractionJob"},"StartPolicyGeneration":{"name":"StartPolicyGeneration","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to start an AI-powered policy generation request","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_StartPolicyGeneration.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StartPolicyGeneration"},"StopBrowserSession":{"name":"StopBrowserSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to stop a browser session","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopBrowserSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopBrowserSession"},"StopCodeInterpreterSession":{"name":"StopCodeInterpreterSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"code-interpreter"},{"name":"code-interpreter-custom"}],"description":"Grants permission to stop a code interpreter session","accessLevel":"Write","resourceTypes":[{"name":"code-interpreter","required":true},{"name":"code-interpreter-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopCodeInterpreterSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopCodeInterpreterSession"},"StopRuntimeSession":{"name":"StopRuntimeSession","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to stop a runtime session","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_StopRuntimeSession.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-StopRuntimeSession"},"SynchronizeGatewayTargets":{"name":"SynchronizeGatewayTargets","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to enable search on gateways","accessLevel":"Permissions management","resourceTypes":[{"name":"gateway","required":true}],"permissionOnly":true,"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-SynchronizeGatewayTargets"},"TagResource":{"name":"TagResource","service":"bedrock-agentcore","conditionKeys":["aws:RequestTag/${TagKey}","aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Tag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_TagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-TagResource"},"UntagResource":{"name":"UntagResource","service":"bedrock-agentcore","conditionKeys":["aws:TagKeys"],"resources":[{"name":"apikeycredentialprovider"},{"name":"browser-custom"},{"name":"browser-profile"},{"name":"code-interpreter-custom"},{"name":"evaluator"},{"name":"gateway"},{"name":"memory"},{"name":"oauth2credentialprovider"},{"name":"online-evaluation-config"},{"name":"runtime"},{"name":"runtime-endpoint"},{"name":"token-vault"},{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to Untag a Bedrock-AgentCore resource","accessLevel":"Tagging","resourceTypes":[{"name":"apikeycredentialprovider","required":false},{"name":"browser-custom","required":false},{"name":"browser-profile","required":false},{"name":"code-interpreter-custom","required":false},{"name":"evaluator","required":false},{"name":"gateway","required":false},{"name":"memory","required":false},{"name":"oauth2credentialprovider","required":false},{"name":"online-evaluation-config","required":false},{"name":"runtime","required":false},{"name":"runtime-endpoint","required":false},{"name":"token-vault","required":false},{"name":"workload-identity","required":false},{"name":"workload-identity-directory","required":false}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UntagResource.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UntagResource"},"UpdateAgentRuntime":{"name":"UpdateAgentRuntime","service":"bedrock-agentcore","conditionKeys":["bedrock-agentcore:securityGroups","bedrock-agentcore:subnets"],"resources":[{"name":"runtime"}],"description":"Grants permission to update an agent runtime","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntime.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntime"},"UpdateAgentRuntimeEndpoint":{"name":"UpdateAgentRuntimeEndpoint","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"runtime"},{"name":"runtime-endpoint"}],"description":"Grants permission to update an agent runtime endpoint","accessLevel":"Write","resourceTypes":[{"name":"runtime","required":true},{"name":"runtime-endpoint","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateAgentRuntimeEndpoint.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateAgentRuntimeEndpoint"},"UpdateApiKeyCredentialProvider":{"name":"UpdateApiKeyCredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"apikeycredentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing API Key Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"apikeycredentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateApiKeyCredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateApiKeyCredentialProvider"},"UpdateBrowserStream":{"name":"UpdateBrowserStream","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"browser"},{"name":"browser-custom"}],"description":"Grants permission to update the status of browser session stream","accessLevel":"Write","resourceTypes":[{"name":"browser","required":true},{"name":"browser-custom","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_UpdateBrowserStream.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateBrowserStream"},"UpdateEvaluator":{"name":"UpdateEvaluator","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"evaluator"}],"description":"Grants permission to update an evaluator","accessLevel":"Write","resourceTypes":[{"name":"evaluator","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateEvaluator.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateEvaluator"},"UpdateGateway":{"name":"UpdateGateway","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGateway.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGateway"},"UpdateGatewayTarget":{"name":"UpdateGatewayTarget","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"gateway"}],"description":"Grants permission to update an existing gateway target","accessLevel":"Write","resourceTypes":[{"name":"gateway","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateGatewayTarget.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateGatewayTarget"},"UpdateMemory":{"name":"UpdateMemory","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"memory"}],"description":"Grants permission to update a Memory resource","accessLevel":"Write","resourceTypes":[{"name":"memory","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateMemory.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateMemory"},"UpdateOauth2CredentialProvider":{"name":"UpdateOauth2CredentialProvider","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"oauth2credentialprovider"},{"name":"token-vault"}],"description":"Grants permission to update an existing OAuth2 Credential Provider","accessLevel":"Write","resourceTypes":[{"name":"oauth2credentialprovider","required":true},{"name":"token-vault","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOauth2CredentialProvider.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOauth2CredentialProvider"},"UpdateOnlineEvaluationConfig":{"name":"UpdateOnlineEvaluationConfig","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"online-evaluation-config"}],"description":"Grants permission to update an online evaluation configuration","accessLevel":"Write","resourceTypes":[{"name":"online-evaluation-config","required":true}],"dependentActions":["iam:PassRole"],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateOnlineEvaluationConfig.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateOnlineEvaluationConfig"},"UpdatePolicy":{"name":"UpdatePolicy","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy"},{"name":"policy-engine"}],"description":"Grants permission to update an existing policy","accessLevel":"Write","resourceTypes":[{"name":"policy","required":true},{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicy.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicy"},"UpdatePolicyEngine":{"name":"UpdatePolicyEngine","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"policy-engine"}],"description":"Grants permission to update a policy engine","accessLevel":"Write","resourceTypes":[{"name":"policy-engine","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdatePolicyEngine.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdatePolicyEngine"},"UpdateWorkloadIdentity":{"name":"UpdateWorkloadIdentity","service":"bedrock-agentcore","conditionKeys":[],"resources":[{"name":"workload-identity"},{"name":"workload-identity-directory"}],"description":"Grants permission to update the metadata of an existing Workload Identity","accessLevel":"Write","resourceTypes":[{"name":"workload-identity","required":true},{"name":"workload-identity-directory","required":true}],"operationUrl":"https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_UpdateWorkloadIdentity.html","iamUrl":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html#amazonbedrockagentcore-UpdateWorkloadIdentity"}},"resources":[{"name":"apikeycredentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/apikeycredentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"browser","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:browser/${BrowserId}"],"conditionKeys":[]},{"name":"browser-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-custom/${BrowserId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"browser-profile","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:browser-profile/${BrowserProfileId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"code-interpreter","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:aws:code-interpreter/${CodeInterpreterId}"],"conditionKeys":[]},{"name":"code-interpreter-custom","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:code-interpreter-custom/${CodeInterpreterId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"evaluator","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:evaluator/${EvaluatorId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"gateway","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:gateway/${GatewayId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"memory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:memory/${MemoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"oauth2credentialprovider","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}/oauth2credentialprovider/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"online-evaluation-config","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:online-evaluation-config/${OnlineEvaluationConfigId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"policy","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy/${PolicyId}"],"conditionKeys":[]},{"name":"policy-engine","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}"],"conditionKeys":[]},{"name":"policy-generation","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:policy-engine/${PolicyEngineId}/policy-generation/${PolicyGenerationId}"],"conditionKeys":[]},{"name":"runtime","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"runtime-endpoint","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:runtime/${RuntimeId}/runtime-endpoint/${Name}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"token-vault","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:token-vault/${TokenVaultId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workload-identity","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}/workload-identity/${WorkloadIdentityName}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]},{"name":"workload-identity-directory","arnFormats":["arn:${Partition}:bedrock-agentcore:${Region}:${Account}:workload-identity-directory/${DirectoryId}"],"conditionKeys":["aws:ResourceTag/${TagKey}"]}],"conditionKeys":{"aws:RequestTag/${TagKey}":{"types":["String"],"description":"Filters access by creating requests based on the allowed set of values for each of the mandatory tags"},"aws:ResourceTag/${TagKey}":{"types":["String"],"description":"Filters access by having actions based on the tag value associated with the resource"},"aws:TagKeys":{"types":["ArrayOfString"],"description":"Filters access by creating requests based on the presence of mandatory tags in the request"},"bedrock-agentcore:GatewayAuthorizerType":{"types":["String"],"description":"Filters access by the authorizerType attribute on a Gateway"},"bedrock-agentcore:InboundJwtClaim/aud":{"types":["ArrayOfString"],"description":"Filters access by the audience claim (aud) in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/client_id":{"types":["String"],"description":"Filters access by the client_id claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/iss":{"types":["String"],"description":"Filters access by the issuer (iss) claim present in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/scope":{"types":["ArrayOfString"],"description":"Filters access by the scope claim in the JWT passed in the request"},"bedrock-agentcore:InboundJwtClaim/sub":{"types":["String"],"description":"Filters access by the subject claim (sub) in the JWT passed in the request"},"bedrock-agentcore:KmsKeyArn":{"types":["String"],"description":"Filters access by KMS Key arn provided"},"bedrock-agentcore:actorId":{"types":["String"],"description":"Filters access by Actor Id"},"bedrock-agentcore:namespace":{"types":["String"],"description":"Filters access by namespace"},"bedrock-agentcore:securityGroups":{"types":["ArrayOfString"],"description":"Filters access by the ID of security groups configured for the AgentCore runtime"},"bedrock-agentcore:sessionId":{"types":["String"],"description":"Filters access by Session Id"},"bedrock-agentcore:strategyId":{"types":["String"],"description":"Filters access by Memory Strategy Id"},"bedrock-agentcore:subnets":{"types":["ArrayOfString"],"description":"Filters access by the ID of subnets configured for the AgentCore runtime"},"bedrock-agentcore:userid":{"types":["String"],"description":"Filters access by the static user ID value passed in the request"}},"url":"https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html"}