iamdata 0.1.202509301__py3-none-any.whl → 0.1.202512101__py3-none-any.whl

iamdata/data/actions/bedrock-agentcore.json

@@ -15,6 +15,117 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "authorizeaction": {
+    "name": "AuthorizeAction",
+    "isPermissionOnly": true,
+    "description": "Grants permission to evaluate Cedar policies for authorization requests",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchcreatememoryrecords": {
+    "name": "BatchCreateMemoryRecords",
+    "description": "Grants permission to create one or more memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:namespace"
+    ],
+    "dependentActions": []
+  },
+  "batchdeletememoryrecords": {
+    "name": "BatchDeleteMemoryRecords",
+    "description": "Grants permission to delete one or more memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "batchupdatememoryrecords": {
+    "name": "BatchUpdateMemoryRecords",
+    "description": "Grants permission to update one or more memory records",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:namespace"
+    ],
+    "dependentActions": []
+  },
+  "completeresourcetokenauth": {
+    "name": "CompleteResourceTokenAuth",
+    "description": "Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "oauth2credentialprovider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:InboundJwtClaim/iss",
+      "bedrock-agentcore:InboundJwtClaim/sub",
+      "bedrock-agentcore:InboundJwtClaim/aud",
+      "bedrock-agentcore:InboundJwtClaim/scope",
+      "bedrock-agentcore:InboundJwtClaim/client_id",
+      "bedrock-agentcore:userid"
+    ],
+    "dependentActions": []
+  },
   "connectbrowserautomationstream": {
     "name": "ConnectBrowserAutomationStream",
     "description": "Grants permission to connect to a browser automation stream",
@@ -80,7 +191,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "createbrowser": {
@@ -105,6 +219,14 @@
     ],
     "dependentActions": []
   },
+  "createevaluator": {
+    "name": "CreateEvaluator",
+    "description": "Grants permission to create a new evaluator",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "createevent": {
     "name": "CreateEvent",
     "description": "Grants permission to create an Event",
@@ -128,7 +250,10 @@
     "description": "Grants permission to create a new gateway",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": [
       "iam:PassRole"
     ]
@@ -153,7 +278,10 @@
     "description": "Grants permission to create a Memory resource",
     "accessLevel": "Write",
     "resourceTypes": [],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": [
       "iam:PassRole"
     ]
@@ -176,6 +304,42 @@
         "dependentActions": []
       }
     ],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
+    "dependentActions": []
+  },
+  "createonlineevaluationconfig": {
+    "name": "CreateOnlineEvaluationConfig",
+    "description": "Grants permission to create a new online evaluation configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "createpolicy": {
+    "name": "CreatePolicy",
+    "description": "Grants permission to create a new policy within a policy engine",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "createpolicyengine": {
+    "name": "CreatePolicyEngine",
+    "description": "Grants permission to create a new policy engine",
+    "accessLevel": "Write",
+    "resourceTypes": [],
     "conditionKeys": [],
     "dependentActions": []
   },
@@ -197,7 +361,10 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "aws:RequestTag/${TagKey}",
+      "aws:TagKeys"
+    ],
     "dependentActions": []
   },
   "deleteagentruntime": {
@@ -287,6 +454,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteevaluator": {
+    "name": "DeleteEvaluator",
+    "description": "Grants permission to delete an evaluator",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "evaluator",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteevent": {
     "name": "DeleteEvent",
     "description": "Grants permission to delete an Event",
@@ -386,6 +568,84 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "deleteonlineevaluationconfig": {
+    "name": "DeleteOnlineEvaluationConfig",
+    "description": "Grants permission to delete an online evaluation configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "online-evaluation-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletepolicy": {
+    "name": "DeletePolicy",
+    "description": "Grants permission to delete a policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deletepolicyengine": {
+    "name": "DeletePolicyEngine",
+    "description": "Grants permission to delete a policy engine",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "deleteresourcepolicy": {
+    "name": "DeleteResourcePolicy",
+    "description": "Grants permission to delete the resource-based policy for a Bedrock resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "deleteworkloadidentity": {
     "name": "DeleteWorkloadIdentity",
     "description": "Grants permission to delete a registered Workload Identity",
@@ -407,6 +667,42 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "evaluate": {
+    "name": "Evaluate",
+    "description": "Grants permission to run an evaluation using an evaluator",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "evaluator",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getagentcard": {
+    "name": "GetAgentCard",
+    "description": "Grants permission to retrieve an agent card for A2A",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getagentruntime": {
     "name": "GetAgentRuntime",
     "description": "Grants permission to get details of an agent runtime",
@@ -536,6 +832,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getevaluator": {
+    "name": "GetEvaluator",
+    "description": "Grants permission to get details of an evaluator",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "evaluator",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "getevent": {
     "name": "GetEvent",
     "description": "Grants permission to fetch an Event",
@@ -635,17 +946,89 @@
     "conditionKeys": [],
     "dependentActions": []
   },
-  "getresourceapikey": {
-    "name": "GetResourceApiKey",
-    "description": "Grants permission to retrieve an API Key associated with an Api Key Credential Provider",
+  "getonlineevaluationconfig": {
+    "name": "GetOnlineEvaluationConfig",
+    "description": "Grants permission to get details of an online evaluation configuration",
     "accessLevel": "Read",
     "resourceTypes": [
       {
-        "name": "apikeycredentialprovider",
+        "name": "online-evaluation-config",
         "required": true,
         "conditionKeys": [],
         "dependentActions": []
-      },
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpolicy": {
+    "name": "GetPolicy",
+    "description": "Grants permission to retrieve a policy",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpolicyengine": {
+    "name": "GetPolicyEngine",
+    "description": "Grants permission to retrieve a policy engine",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getpolicygeneration": {
+    "name": "GetPolicyGeneration",
+    "description": "Grants permission to retrieve status and results of a policy generation request",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy-generation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "getresourceapikey": {
+    "name": "GetResourceApiKey",
+    "description": "Grants permission to retrieve an API Key associated with an Api Key Credential Provider",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "apikeycredentialprovider",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "token-vault",
         "required": true,
@@ -701,6 +1084,33 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "getresourcepolicy": {
+    "name": "GetResourcePolicy",
+    "description": "Grants permission to retrieve the resource-based policy for a Bedrock resource",
+    "accessLevel": "Read",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "gettokenvault": {
     "name": "GetTokenVault",
     "description": "Grants permission to fetch the current configuration of the TokenVault, including encryption settings",
@@ -755,7 +1165,13 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:InboundJwtClaim/iss",
+      "bedrock-agentcore:InboundJwtClaim/sub",
+      "bedrock-agentcore:InboundJwtClaim/aud",
+      "bedrock-agentcore:InboundJwtClaim/scope",
+      "bedrock-agentcore:InboundJwtClaim/client_id"
+    ],
     "dependentActions": []
   },
   "getworkloadaccesstokenforuserid": {
@@ -776,7 +1192,9 @@
         "dependentActions": []
       }
     ],
-    "conditionKeys": [],
+    "conditionKeys": [
+      "bedrock-agentcore:userid"
+    ],
     "dependentActions": []
   },
   "getworkloadidentity": {
@@ -821,6 +1239,69 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokeagentruntimeforuser": {
+    "name": "InvokeAgentRuntimeForUser",
+    "description": "Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeagentruntimewithwebsocketstream": {
+    "name": "InvokeAgentRuntimeWithWebSocketStream",
+    "description": "Grants permission to invoke an agent runtime endpoint with WebSocket stream",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "invokeagentruntimewithwebsocketstreamforuser": {
+    "name": "InvokeAgentRuntimeWithWebSocketStreamForUser",
+    "description": "Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "invokecodeinterpreter": {
     "name": "InvokeCodeInterpreter",
     "description": "Grants permission to invoke a code interpreter session",
@@ -842,6 +1323,22 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "invokegateway": {
+    "name": "InvokeGateway",
+    "isPermissionOnly": true,
+    "description": "Grants permission to invoke a gateway",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listactors": {
     "name": "ListActors",
     "description": "Grants permission to list Actors",
@@ -947,6 +1444,14 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listevaluators": {
+    "name": "ListEvaluators",
+    "description": "Grants permission to list evaluators",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listevents": {
     "name": "ListEvents",
     "description": "Grants permission to list events",
@@ -996,6 +1501,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listmemoryextractionjobs": {
+    "name": "ListMemoryExtractionJobs",
+    "description": "Grants permission to list extraction jobs for this memory",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listmemoryrecords": {
     "name": "ListMemoryRecords",
     "description": "Grants permission to list memory records",
@@ -1035,6 +1555,73 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "listonlineevaluationconfigs": {
+    "name": "ListOnlineEvaluationConfigs",
+    "description": "Grants permission to list online evaluation configurations",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpolicies": {
+    "name": "ListPolicies",
+    "description": "Grants permission to list policies within a policy engine",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpolicyengines": {
+    "name": "ListPolicyEngines",
+    "description": "Grants permission to list policy engines",
+    "accessLevel": "List",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpolicygenerationassets": {
+    "name": "ListPolicyGenerationAssets",
+    "description": "Grants permission to list generated policy assets from a generation request",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy-generation",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "listpolicygenerations": {
+    "name": "ListPolicyGenerations",
+    "description": "Grants permission to list policy generation requests",
+    "accessLevel": "List",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "listsessions": {
     "name": "ListSessions",
     "description": "Grants permission to list sessions",
@@ -1057,6 +1644,12 @@
     "description": "Grants permission to list tags for a Bedrock-AgentCore resource",
     "accessLevel": "List",
     "resourceTypes": [
+      {
+        "name": "apikeycredentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "browser-custom",
         "required": false,
@@ -1069,6 +1662,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "memory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2credentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -1080,6 +1691,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [],
@@ -1106,6 +1735,80 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "manageadminpolicy": {
+    "name": "ManageAdminPolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create or modify wildcard policies that apply to gateway resources",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "manageresourcescopedpolicy": {
+    "name": "ManageResourceScopedPolicy",
+    "isPermissionOnly": true,
+    "description": "Grants permission to create or modify policies that apply to specific gateway resources",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "partiallyauthorizeactions": {
+    "name": "PartiallyAuthorizeActions",
+    "isPermissionOnly": true,
+    "description": "Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call",
+    "accessLevel": "Permissions management",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "putresourcepolicy": {
+    "name": "PutResourcePolicy",
+    "description": "Grants permission to create or update the resource-based policy for a Bedrock resource",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "retrievememoryrecords": {
     "name": "RetrieveMemoryRecords",
     "description": "Grants permission to retrieve memory records through sematic query",
@@ -1181,6 +1884,40 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "startmemoryextractionjob": {
+    "name": "StartMemoryExtractionJob",
+    "description": "Grants permission to start memory extraction job",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "memory",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [
+      "bedrock-agentcore:strategyId",
+      "bedrock-agentcore:sessionId",
+      "bedrock-agentcore:actorId"
+    ],
+    "dependentActions": []
+  },
+  "startpolicygeneration": {
+    "name": "StartPolicyGeneration",
+    "description": "Grants permission to start an AI-powered policy generation request",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "stopbrowsersession": {
     "name": "StopBrowserSession",
     "description": "Grants permission to stop a browser session",
@@ -1223,6 +1960,27 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "stopruntimesession": {
+    "name": "StopRuntimeSession",
+    "description": "Grants permission to stop a runtime session",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "runtime",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "runtime-endpoint",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "synchronizegatewaytargets": {
     "name": "SynchronizeGatewayTargets",
     "isPermissionOnly": true,
@@ -1244,6 +2002,12 @@
     "description": "Grants permission to Tag a Bedrock-AgentCore resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "apikeycredentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "browser-custom",
         "required": false,
@@ -1256,6 +2020,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "memory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2credentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -1267,6 +2049,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1280,6 +2080,12 @@
     "description": "Grants permission to Untag a Bedrock-AgentCore resource",
     "accessLevel": "Tagging",
     "resourceTypes": [
+      {
+        "name": "apikeycredentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "browser-custom",
         "required": false,
@@ -1292,6 +2098,24 @@
         "conditionKeys": [],
         "dependentActions": []
       },
+      {
+        "name": "gateway",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "memory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "oauth2credentialprovider",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
       {
         "name": "runtime",
         "required": false,
@@ -1303,6 +2127,24 @@
         "required": false,
         "conditionKeys": [],
         "dependentActions": []
+      },
+      {
+        "name": "token-vault",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "workload-identity-directory",
+        "required": false,
+        "conditionKeys": [],
+        "dependentActions": []
       }
     ],
     "conditionKeys": [
@@ -1390,6 +2232,21 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateevaluator": {
+    "name": "UpdateEvaluator",
+    "description": "Grants permission to update an evaluator",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "evaluator",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updategateway": {
     "name": "UpdateGateway",
     "description": "Grants permission to update an existing gateway",
@@ -1460,6 +2317,59 @@
     "conditionKeys": [],
     "dependentActions": []
   },
+  "updateonlineevaluationconfig": {
+    "name": "UpdateOnlineEvaluationConfig",
+    "description": "Grants permission to update an online evaluation configuration",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "online-evaluation-config",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": [
+      "iam:PassRole"
+    ]
+  },
+  "updatepolicy": {
+    "name": "UpdatePolicy",
+    "description": "Grants permission to update an existing policy",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      },
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
+  "updatepolicyengine": {
+    "name": "UpdatePolicyEngine",
+    "description": "Grants permission to update a policy engine",
+    "accessLevel": "Write",
+    "resourceTypes": [
+      {
+        "name": "policy-engine",
+        "required": true,
+        "conditionKeys": [],
+        "dependentActions": []
+      }
+    ],
+    "conditionKeys": [],
+    "dependentActions": []
+  },
   "updateworkloadidentity": {
     "name": "UpdateWorkloadIdentity",
     "description": "Grants permission to update the metadata of an existing Workload Identity",