@cloud-copilot/iam-data

{ "allowvendedlogdeliveryforresource": { "name": "AllowVendedLogDeliveryForResource", "description": "Grants permission to configure vended telemetry for a resource", "accessLevel": "Permissions management, Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "payment-manager", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "authorizeaction": { "name": "AuthorizeAction", "description": "Grants permission to evaluate Cedar policies for authorization requests", "accessLevel": "Permissions management, Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gatewayassociatewebacl": { "name": "GatewayAssociateWebACL", "description": "Grants permission to associate an AWS WAF Web ACL with an AgentCore Gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gatewaydisassociatewebacl": { "name": "GatewayDisassociateWebACL", "description": "Grants permission to remove the AWS WAF Web ACL association from an AgentCore Gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gatewaygetwebaclforresource": { "name": "GatewayGetWebACLForResource", "description": "Grants permission to retrieve the AWS WAF Web ACL ARN currently associated with an AgentCore Gateway", "accessLevel": "Read", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "gatewaylistresourcesforwebacl": { "name": "GatewayListResourcesForWebACL", "description": "Grants permission to list AgentCore Gateways associated with an AWS WAF Web ACL", "accessLevel": "List", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "invokegateway": { "name": "InvokeGateway", "description": "Grants permission to invoke a gateway", "accessLevel": "Permissions management, Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "invokewebsearch": { "name": "InvokeWebSearch", "description": "Grants permission to invoke a web search target", "accessLevel": "Permissions management, Write", "resourceTypes": [ { "name": "web-search", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "manageadminpolicy": { "name": "ManageAdminPolicy", "description": "Grants permission to create or modify wildcard policies that apply to gateway resources", "accessLevel": "Permissions management, Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "manageresourcescopedpolicy": { "name": "ManageResourceScopedPolicy", "description": "Grants permission to create or modify policies that apply to specific gateway resources", "accessLevel": "Permissions management, Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "partiallyauthorizeactions": { "name": "PartiallyAuthorizeActions", "description": "Grants permission to perform partial evaluation of Cedar policies to authorize a caller to list tools they are allowed to call", "accessLevel": "Permissions management, Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "synchronizegatewaytargets": { "name": "SynchronizeGatewayTargets", "description": "Grants permission to enable search on gateways", "accessLevel": "Permissions management, Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "adddatasetexamples": { "name": "AddDatasetExamples", "description": "Grants permission to add examples to a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchcreatememoryrecords": { "name": "BatchCreateMemoryRecords", "description": "Grants permission to create one or more memory records", "accessLevel": "Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "bedrock-agentcore:namespace" ], "dependentActions": [] }, "batchdeletememoryrecords": { "name": "BatchDeleteMemoryRecords", "description": "Grants permission to delete one or more memory records", "accessLevel": "Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "batchupdatememoryrecords": { "name": "BatchUpdateMemoryRecords", "description": "Grants permission to update one or more memory records", "accessLevel": "Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "bedrock-agentcore:namespace" ], "dependentActions": [] }, "completeresourcetokenauth": { "name": "CompleteResourceTokenAuth", "description": "Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource", "accessLevel": "Read", "resourceTypes": [ { "name": "oauth2credentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "workload-identity", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "workload-identity-directory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "bedrock-agentcore:InboundJwtClaim/aud", "bedrock-agentcore:InboundJwtClaim/client_id", "bedrock-agentcore:InboundJwtClaim/iss", "bedrock-agentcore:InboundJwtClaim/scope", "bedrock-agentcore:InboundJwtClaim/sub", "bedrock-agentcore:userid" ], "dependentActions": [] }, "connectbrowserautomationstream": { "name": "ConnectBrowserAutomationStream", "description": "Grants permission to connect to a browser automation stream", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "connectbrowserliveviewstream": { "name": "ConnectBrowserLiveViewStream", "description": "Grants permission to connect to a browser live view stream", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createabtest": { "name": "CreateABTest", "description": "Grants permission to create an A/B test", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createagentruntime": { "name": "CreateAgentRuntime", "description": "Grants permission to create a new agent runtime", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:RuntimeAuthorizerType", "bedrock-agentcore:securityGroups", "bedrock-agentcore:subnets" ], "dependentActions": [] }, "createagentruntimeendpoint": { "name": "CreateAgentRuntimeEndpoint", "description": "Grants permission to create a new agent runtime endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "runtime", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createapikeycredentialprovider": { "name": "CreateApiKeyCredentialProvider", "description": "Grants permission to create a new API Key Credential Provider", "accessLevel": "Write", "resourceTypes": [ { "name": "apikeycredentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createbrowser": { "name": "CreateBrowser", "description": "Grants permission to create a new custom browser", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:securityGroups", "bedrock-agentcore:subnets" ], "dependentActions": [] }, "createbrowserprofile": { "name": "CreateBrowserProfile", "description": "Grants permission to create a new browser profile", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createcodeinterpreter": { "name": "CreateCodeInterpreter", "description": "Grants permission to create a new custom code interpreter", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:securityGroups", "bedrock-agentcore:subnets" ], "dependentActions": [] }, "createconfigurationbundle": { "name": "CreateConfigurationBundle", "description": "Grants permission to create a new configuration bundle", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createdataset": { "name": "CreateDataset", "description": "Grants permission to create a new dataset", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdatasetversion": { "name": "CreateDatasetVersion", "description": "Grants permission to create a new version of a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createevaluator": { "name": "CreateEvaluator", "description": "Grants permission to create a new evaluator", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createevent": { "name": "CreateEvent", "description": "Grants permission to create an Event", "accessLevel": "Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "bedrock-agentcore:actorId", "bedrock-agentcore:sessionId" ], "dependentActions": [] }, "creategateway": { "name": "CreateGateway", "description": "Grants permission to create a new gateway", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "creategatewayrule": { "name": "CreateGatewayRule", "description": "Grants permission to create a new rule in an existing gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "creategatewaytarget": { "name": "CreateGatewayTarget", "description": "Grants permission to create a new target in an existing gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createharness": { "name": "CreateHarness", "description": "Grants permission to create a new harness", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createharnessendpoint": { "name": "CreateHarnessEndpoint", "description": "Grants permission to create a new harness endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "harness", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "creatememory": { "name": "CreateMemory", "description": "Grants permission to create a Memory resource", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:KmsKeyArn" ], "dependentActions": [] }, "createoauth2credentialprovider": { "name": "CreateOauth2CredentialProvider", "description": "Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol", "accessLevel": "Write", "resourceTypes": [ { "name": "oauth2credentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createonlineevaluationconfig": { "name": "CreateOnlineEvaluationConfig", "description": "Grants permission to create a new online evaluation configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:ResourceTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createpaymentconnector": { "name": "CreatePaymentConnector", "description": "Grants permission to create a new payment connector under a payment manager", "accessLevel": "Write", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpaymentcredentialprovider": { "name": "CreatePaymentCredentialProvider", "description": "Grants permission to create a new Payment Credential Provider", "accessLevel": "Write", "resourceTypes": [ { "name": "paymentcredentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createpaymentinstrument": { "name": "CreatePaymentInstrument", "description": "Grants permission to create a new payment instrument", "accessLevel": "Write", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpaymentmanager": { "name": "CreatePaymentManager", "description": "Grants permission to create a new payment manager", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys", "bedrock-agentcore:DiscoveryUrl" ], "dependentActions": [] }, "createpaymentsession": { "name": "CreatePaymentSession", "description": "Grants permission to create a new payment session", "accessLevel": "Write", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpolicy": { "name": "CreatePolicy", "description": "Grants permission to create a new policy within a policy engine", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createpolicyengine": { "name": "CreatePolicyEngine", "description": "Grants permission to create a new policy engine", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createregistry": { "name": "CreateRegistry", "description": "Grants permission to create a new registry", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createregistryrecord": { "name": "CreateRegistryRecord", "description": "Grants permission to create a new registry record", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createworkloadidentity": { "name": "CreateWorkloadIdentity", "description": "Grants permission to create a new Workload Identity", "accessLevel": "Write", "resourceTypes": [ { "name": "workload-identity", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "workload-identity-directory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteabtest": { "name": "DeleteABTest", "description": "Grants permission to delete an A/B test", "accessLevel": "Write", "resourceTypes": [ { "name": "ab-test", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentruntime": { "name": "DeleteAgentRuntime", "description": "Grants permission to delete an agent runtime", "accessLevel": "Write", "resourceTypes": [ { "name": "runtime", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentruntimeendpoint": { "name": "DeleteAgentRuntimeEndpoint", "description": "Grants permission to delete an agent runtime endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "runtime", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "runtime-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteapikeycredentialprovider": { "name": "DeleteApiKeyCredentialProvider", "description": "Grants permission to delete a registered API Key Credential Provider", "accessLevel": "Write", "resourceTypes": [ { "name": "apikeycredentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebatchevaluation": { "name": "DeleteBatchEvaluation", "description": "Grants permission to delete a batch evaluation", "accessLevel": "Write", "resourceTypes": [ { "name": "batch-evaluate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebrowser": { "name": "DeleteBrowser", "description": "Grants permission to delete a custom browser", "accessLevel": "Write", "resourceTypes": [ { "name": "browser-custom", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletebrowserprofile": { "name": "DeleteBrowserProfile", "description": "Grants permission to delete a browser profile", "accessLevel": "Write", "resourceTypes": [ { "name": "browser-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecodeinterpreter": { "name": "DeleteCodeInterpreter", "description": "Grants permission to delete a custom code interpreter", "accessLevel": "Write", "resourceTypes": [ { "name": "code-interpreter-custom", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteconfigurationbundle": { "name": "DeleteConfigurationBundle", "description": "Grants permission to delete a configuration bundle", "accessLevel": "Write", "resourceTypes": [ { "name": "configuration-bundle", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedataset": { "name": "DeleteDataset", "description": "Grants permission to delete a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedatasetexamples": { "name": "DeleteDatasetExamples", "description": "Grants permission to delete examples from a dataset", "accessLevel": "Write", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteevaluator": { "name": "DeleteEvaluator", "description": "Grants permission to delete an evaluator", "accessLevel": "Write", "resourceTypes": [ { "name": "evaluator", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteevent": { "name": "DeleteEvent", "description": "Grants permission to delete an Event", "accessLevel": "Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "bedrock-agentcore:actorId", "bedrock-agentcore:sessionId" ], "dependentActions": [] }, "deletegateway": { "name": "DeleteGateway", "description": "Grants permission to delete an existing gateway", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletegatewayrule": { "name": "DeleteGatewayRule", "description": "Grants permission to delete an existing gateway rule", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletegatewaytarget": { "name": "DeleteGatewayTarget", "description": "Grants permission to delete an existing gateway target", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteharness": { "name": "DeleteHarness", "description": "Grants permission to delete a harness", "accessLevel": "Write", "resourceTypes": [ { "name": "harness", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteharnessendpoint": { "name": "DeleteHarnessEndpoint", "description": "Grants permission to delete a harness endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "harness", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "harness-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletememory": { "name": "DeleteMemory", "description": "Grants permission to delete a Memory resource", "accessLevel": "Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletememoryrecord": { "name": "DeleteMemoryRecord", "description": "Grants permission to delete a Memory Record", "accessLevel": "Write", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteoauth2credentialprovider": { "name": "DeleteOauth2CredentialProvider", "description": "Grants permission to delete a registered OAuth2 Credential Provider", "accessLevel": "Write", "resourceTypes": [ { "name": "oauth2credentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteonlineevaluationconfig": { "name": "DeleteOnlineEvaluationConfig", "description": "Grants permission to delete an online evaluation configuration", "accessLevel": "Write", "resourceTypes": [ { "name": "online-evaluation-config", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepaymentconnector": { "name": "DeletePaymentConnector", "description": "Grants permission to delete a payment connector", "accessLevel": "Write", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepaymentcredentialprovider": { "name": "DeletePaymentCredentialProvider", "description": "Grants permission to delete a registered Payment Credential Provider", "accessLevel": "Write", "resourceTypes": [ { "name": "paymentcredentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepaymentinstrument": { "name": "DeletePaymentInstrument", "description": "Grants permission to delete a payment instrument", "accessLevel": "Write", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepaymentmanager": { "name": "DeletePaymentManager", "description": "Grants permission to delete a payment manager", "accessLevel": "Write", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepaymentsession": { "name": "DeletePaymentSession", "description": "Grants permission to delete a payment session", "accessLevel": "Write", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepolicy": { "name": "DeletePolicy", "description": "Grants permission to delete a policy", "accessLevel": "Write", "resourceTypes": [ { "name": "policy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepolicyengine": { "name": "DeletePolicyEngine", "description": "Grants permission to delete a policy engine", "accessLevel": "Write", "resourceTypes": [ { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleterecommendation": { "name": "DeleteRecommendation", "description": "Grants permission to delete a recommendation", "accessLevel": "Write", "resourceTypes": [ { "name": "recommendation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteregistry": { "name": "DeleteRegistry", "description": "Grants permission to delete an existing registry", "accessLevel": "Write", "resourceTypes": [ { "name": "registry", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteregistryrecord": { "name": "DeleteRegistryRecord", "description": "Grants permission to delete an existing registry record", "accessLevel": "Write", "resourceTypes": [ { "name": "registry-record", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "description": "Grants permission to delete the resource-based policy for a Bedrock resource", "accessLevel": "Write", "resourceTypes": [ { "name": "gateway", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "runtime", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "runtime-endpoint", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteworkloadidentity": { "name": "DeleteWorkloadIdentity", "description": "Grants permission to delete a registered Workload Identity", "accessLevel": "Write", "resourceTypes": [ { "name": "workload-identity", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "workload-identity-directory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "evaluate": { "name": "Evaluate", "description": "Grants permission to run an evaluation using an evaluator", "accessLevel": "Write", "resourceTypes": [ { "name": "evaluator", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getabtest": { "name": "GetABTest", "description": "Grants permission to get details of an A/B test", "accessLevel": "Read", "resourceTypes": [ { "name": "ab-test", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentcard": { "name": "GetAgentCard", "description": "Grants permission to retrieve an agent card for A2A", "accessLevel": "Read", "resourceTypes": [ { "name": "runtime", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "runtime-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentruntime": { "name": "GetAgentRuntime", "description": "Grants permission to get details of an agent runtime", "accessLevel": "Read", "resourceTypes": [ { "name": "runtime", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentruntimeendpoint": { "name": "GetAgentRuntimeEndpoint", "description": "Grants permission to get details of an agent runtime endpoint", "accessLevel": "Read", "resourceTypes": [ { "name": "runtime", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "runtime-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getapikeycredentialprovider": { "name": "GetApiKeyCredentialProvider", "description": "Grants permission to fetch a registered API Key Credential Provider by its name", "accessLevel": "Read", "resourceTypes": [ { "name": "apikeycredentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbatchevaluation": { "name": "GetBatchEvaluation", "description": "Grants permission to get details of a batch evaluation", "accessLevel": "Read", "resourceTypes": [ { "name": "batch-evaluate", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbrowser": { "name": "GetBrowser", "description": "Grants permission to get details of a browser", "accessLevel": "Read", "resourceTypes": [ { "name": "browser-custom", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbrowserprofile": { "name": "GetBrowserProfile", "description": "Grants permission to get details of a browser profile", "accessLevel": "Read", "resourceTypes": [ { "name": "browser-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getbrowsersession": { "name": "GetBrowserSession", "description": "Grants permission to get details of a browser session", "accessLevel": "Read", "resourceTypes": [ { "name": "browser", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "browser-custom", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcodeinterpreter": { "name": "GetCodeInterpreter", "description": "Grants permission to get details of a code interpreter", "accessLevel": "Read", "resourceTypes": [ { "name": "code-interpreter-custom", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcodeinterpretersession": { "name": "GetCodeInterpreterSession", "description": "Grants permission to get details of a code interpreter session", "accessLevel": "Read", "resourceTypes": [ { "name": "code-interpreter", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "code-interpreter-custom", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getconfigurationbundle": { "name": "GetConfigurationBundle", "description": "Grants permission to get details of a configuration bundle", "accessLevel": "Read", "resourceTypes": [ { "name": "configuration-bundle", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getconfigurationbundleversion": { "name": "GetConfigurationBundleVersion", "description": "Grants permission to get a specific version of a configuration bundle", "accessLevel": "Read", "resourceTypes": [ { "name": "configuration-bundle", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataset": { "name": "GetDataset", "description": "Grants permission to get details of a dataset", "accessLevel": "Read", "resourceTypes": [ { "name": "dataset", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevaluator": { "name": "GetEvaluator", "description": "Grants permission to get details of an evaluator", "accessLevel": "Read", "resourceTypes": [ { "name": "evaluator", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevent": { "name": "GetEvent", "description": "Grants permission to fetch an Event", "accessLevel": "Read", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "bedrock-agentcore:actorId", "bedrock-agentcore:sessionId" ], "dependentActions": [] }, "getgateway": { "name": "GetGateway", "description": "Grants permission to retrieve an existing gateway", "accessLevel": "Read", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getgatewayrule": { "name": "GetGatewayRule", "description": "Grants permission to retrieve an existing gateway rule", "accessLevel": "Read", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getgatewaytarget": { "name": "GetGatewayTarget", "description": "Grants permission to retrieve an existing gateway target", "accessLevel": "Read", "resourceTypes": [ { "name": "gateway", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getharness": { "name": "GetHarness", "description": "Grants permission to get details of a harness", "accessLevel": "Read", "resourceTypes": [ { "name": "harness", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getharnessendpoint": { "name": "GetHarnessEndpoint", "description": "Grants permission to get details of a harness endpoint", "accessLevel": "Read", "resourceTypes": [ { "name": "harness", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "harness-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmemory": { "name": "GetMemory", "description": "Grants permission to fetch details for a Memory resource", "accessLevel": "Read", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmemoryrecord": { "name": "GetMemoryRecord", "description": "Grants permission to fetch a Memory Record", "accessLevel": "Read", "resourceTypes": [ { "name": "memory", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getoauth2credentialprovider": { "name": "GetOauth2CredentialProvider", "description": "Grants permission to fetch a registered OAuth2 Credential Provider by its name", "accessLevel": "Read", "resourceTypes": [ { "name": "oauth2credentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getonlineevaluationconfig": { "name": "GetOnlineEvaluationConfig", "description": "Grants permission to get details of an online evaluation configuration", "accessLevel": "Read", "resourceTypes": [ { "name": "online-evaluation-config", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpaymentconnector": { "name": "GetPaymentConnector", "description": "Grants permission to retrieve details of a payment connector", "accessLevel": "Read", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpaymentcredentialprovider": { "name": "GetPaymentCredentialProvider", "description": "Grants permission to fetch a registered Payment Credential Provider by its name", "accessLevel": "Read", "resourceTypes": [ { "name": "paymentcredentialprovider", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "token-vault", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpaymentinstrument": { "name": "GetPaymentInstrument", "description": "Grants permission to retrieve details of a payment instrument", "accessLevel": "Read", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpaymentinstrumentbalance": { "name": "GetPaymentInstrumentBalance", "description": "Grants permission to retrieve the balance of a payment instrument", "accessLevel": "Read", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpaymentmanager": { "name": "GetPaymentManager", "description": "Grants permission to retrieve details of a payment manager", "accessLevel": "Read", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpaymentsession": { "name": "GetPaymentSession", "description": "Grants permission to retrieve details of a payment session", "accessLevel": "Read", "resourceTypes": [ { "name": "payment-manager", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpolicy": { "name": "GetPolicy", "description": "Grants permission to retrieve a policy", "accessLevel": "Read", "resourceTypes": [ { "name": "policy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpolicyengine": { "name": "GetPolicyEngine", "description": "Grants permission to retrieve a policy engine", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpolicyenginesummary": { "name": "GetPolicyEngineSummary", "description": "Grants permission to retrieve a summary of a policy engine", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpolicygeneration": { "name": "GetPolicyGeneration", "description": "Grants permission to retrieve status and results of a policy generation request", "accessLevel": "Read", "resourceTypes": [ { "name": "policy-engine", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "policy-generation", "required": true, "conditionKeys": [], "dependentActions": [] } ]