@cloud-copilot/iam-data/data/conditionKeys/bedrock-agentcore.json

AWS IAM Data

{
  "aws:requesttag/${tagkey}": {
    "key": "aws:RequestTag/${TagKey}",
    "description": "Filters access by creating requests based on the allowed set of values for each of the mandatory tags",
    "type": "String"
  },
  "aws:resourcetag/${tagkey}": {
    "key": "aws:ResourceTag/${TagKey}",
    "description": "Filters access by having actions based on the tag value associated with the resource",
    "type": "String"
  },
  "aws:tagkeys": {
    "key": "aws:TagKeys",
    "description": "Filters access by creating requests based on the presence of mandatory tags in the request",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:allowedqueryparameters": {
    "key": "bedrock-agentcore:AllowedQueryParameters",
    "description": "Filters access by the metadataConfiguration.allowedQueryParameters attribute of a gateway target",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:allowedrequestheaders": {
    "key": "bedrock-agentcore:AllowedRequestHeaders",
    "description": "Filters access by the metadataConfiguration.allowedRequestHeaders attribute of a gateway target",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:allowedresponseheaders": {
    "key": "bedrock-agentcore:AllowedResponseHeaders",
    "description": "Filters access by the metadataConfiguration.allowedResponseHeaders attribute of a gateway target",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:credentialproviderscope": {
    "key": "bedrock-agentcore:CredentialProviderScope",
    "description": "Filters access by the scopes attribute of an OAuth credential provider on a gateway target",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:credentialprovidertype": {
    "key": "bedrock-agentcore:CredentialProviderType",
    "description": "Filters access by the credentialProviderConfigurations.credentialProviderType attribute of a gateway target",
    "type": "String"
  },
  "bedrock-agentcore:discoveryurl": {
    "key": "bedrock-agentcore:DiscoveryUrl",
    "description": "Filters access by the authorizerConfiguration.customJWTAuthorizer.discoveryUrl attribute of a Gateway",
    "type": "String"
  },
  "bedrock-agentcore:gatewayauthorizertype": {
    "key": "bedrock-agentcore:GatewayAuthorizerType",
    "description": "Filters access by the authorizerType attribute on a Gateway",
    "type": "String"
  },
  "bedrock-agentcore:httptargetconfigurationtype": {
    "key": "bedrock-agentcore:HttpTargetConfigurationType",
    "description": "Filters access by the HTTP target configuration type of a gateway target",
    "type": "String"
  },
  "bedrock-agentcore:inboundjwtclaim/aud": {
    "key": "bedrock-agentcore:InboundJwtClaim/aud",
    "description": "Filters access by the audience claim (aud) in the JWT passed in the request",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:inboundjwtclaim/client_id": {
    "key": "bedrock-agentcore:InboundJwtClaim/client_id",
    "description": "Filters access by the client_id claim in the JWT passed in the request",
    "type": "String"
  },
  "bedrock-agentcore:inboundjwtclaim/iss": {
    "key": "bedrock-agentcore:InboundJwtClaim/iss",
    "description": "Filters access by the issuer (iss) claim present in the JWT passed in the request",
    "type": "String"
  },
  "bedrock-agentcore:inboundjwtclaim/scope": {
    "key": "bedrock-agentcore:InboundJwtClaim/scope",
    "description": "Filters access by the scope claim in the JWT passed in the request",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:inboundjwtclaim/sub": {
    "key": "bedrock-agentcore:InboundJwtClaim/sub",
    "description": "Filters access by the subject claim (sub) in the JWT passed in the request",
    "type": "String"
  },
  "bedrock-agentcore:inferencetargetconfigurationtype": {
    "key": "bedrock-agentcore:InferenceTargetConfigurationType",
    "description": "Filters access by the inference target configuration type of a gateway target",
    "type": "String"
  },
  "bedrock-agentcore:kmskeyarn": {
    "key": "bedrock-agentcore:KmsKeyArn",
    "description": "Filters access by KMS Key arn provided",
    "type": "String"
  },
  "bedrock-agentcore:mcptargetconfigurationtype": {
    "key": "bedrock-agentcore:McpTargetConfigurationType",
    "description": "Filters access by the MCP target configuration type of a gateway target",
    "type": "String"
  },
  "bedrock-agentcore:policyenginearn": {
    "key": "bedrock-agentcore:PolicyEngineArn",
    "description": "Filters access by the policyEngineConfiguration.arn attribute of a Gateway",
    "type": "String"
  },
  "bedrock-agentcore:policyenginemode": {
    "key": "bedrock-agentcore:PolicyEngineMode",
    "description": "Filters access by the policyEngineConfiguration.mode attribute of a Gateway",
    "type": "String"
  },
  "bedrock-agentcore:privateendpointtype": {
    "key": "bedrock-agentcore:PrivateEndpointType",
    "description": "Filters access by the private endpoint type of a gateway target",
    "type": "String"
  },
  "bedrock-agentcore:protocoltype": {
    "key": "bedrock-agentcore:ProtocolType",
    "description": "Filters access by the protocolType attribute of a Gateway",
    "type": "String"
  },
  "bedrock-agentcore:resourceconfigurationidentifier": {
    "key": "bedrock-agentcore:ResourceConfigurationIdentifier",
    "description": "Filters access by the resource configuration identifier of a gateway target private endpoint",
    "type": "String"
  },
  "bedrock-agentcore:runtimeauthorizertype": {
    "key": "bedrock-agentcore:RuntimeAuthorizerType",
    "description": "Filters access by the authorizer type configured for the AgentCore runtime",
    "type": "String"
  },
  "bedrock-agentcore:actorid": {
    "key": "bedrock-agentcore:actorId",
    "description": "Filters access by Actor Id",
    "type": "String"
  },
  "bedrock-agentcore:namespace": {
    "key": "bedrock-agentcore:namespace",
    "description": "Filters access by namespace",
    "type": "String"
  },
  "bedrock-agentcore:securitygroups": {
    "key": "bedrock-agentcore:securityGroups",
    "description": "Filters access by the ID of security groups configured for an AgentCore resource",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:sessionid": {
    "key": "bedrock-agentcore:sessionId",
    "description": "Filters access by Session Id",
    "type": "String"
  },
  "bedrock-agentcore:strategyid": {
    "key": "bedrock-agentcore:strategyId",
    "description": "Filters access by Memory Strategy Id",
    "type": "String"
  },
  "bedrock-agentcore:subnets": {
    "key": "bedrock-agentcore:subnets",
    "description": "Filters access by the ID of subnets configured for an AgentCore resource",
    "type": "ArrayOfString"
  },
  "bedrock-agentcore:userid": {
    "key": "bedrock-agentcore:userid",
    "description": "Filters access by the static user ID value passed in the request",
    "type": "String"
  }
}