cdk-iam-floyd
Version:
AWS IAM policy statement generator with fluent interface for AWS CDK
1,632 lines • 326 kB
JavaScript
"use strict";
Object.defineProperty(exports, "__esModule", { value: true });
exports.BedrockAgentcore = void 0;
const shared_1 = require("../../shared");
/**
* Statement provider for service [bedrock-agentcore](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrockagentcore.html).
*
* @param sid [SID](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_elements_sid.html) of the statement
*/
class BedrockAgentcore extends shared_1.PolicyStatement {
/**
* Grants permission to configure vended telemetry for a resource
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/
*/
toAllowVendedLogDeliveryForResource() {
return this.to('AllowVendedLogDeliveryForResource');
}
/**
* Grants permission to evaluate Cedar policies for authorization requests
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html
*/
toAuthorizeAction() {
return this.to('AuthorizeAction');
}
/**
* Grants permission to create one or more memory records
*
* Access Level: Write
*
* Possible conditions:
* - .ifNamespace()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchCreateMemoryRecords.html
*/
toBatchCreateMemoryRecords() {
return this.to('BatchCreateMemoryRecords');
}
/**
* Grants permission to delete one or more memory records
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchDeleteMemoryRecords.html
*/
toBatchDeleteMemoryRecords() {
return this.to('BatchDeleteMemoryRecords');
}
/**
* Grants permission to update one or more memory records
*
* Access Level: Write
*
* Possible conditions:
* - .ifNamespace()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_BatchUpdateMemoryRecords.html
*/
toBatchUpdateMemoryRecords() {
return this.to('BatchUpdateMemoryRecords');
}
/**
* Grants permission to retrieve access token with OAuth2 for 3LO flow to access external resource
*
* Access Level: Read
*
* Possible conditions:
* - .ifInboundJwtClaimIss()
* - .ifInboundJwtClaimSub()
* - .ifInboundJwtClaimAud()
* - .ifInboundJwtClaimScope()
* - .ifInboundJwtClaimClientId()
* - .ifUserid()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CompleteResourceTokenAuth.html
*/
toCompleteResourceTokenAuth() {
return this.to('CompleteResourceTokenAuth');
}
/**
* Grants permission to connect to a browser automation stream
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserAutomationStream.html
*/
toConnectBrowserAutomationStream() {
return this.to('ConnectBrowserAutomationStream');
}
/**
* Grants permission to connect to a browser live view stream
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ConnectBrowserLiveViewStream.html
*/
toConnectBrowserLiveViewStream() {
return this.to('ConnectBrowserLiveViewStream');
}
/**
* Grants permission to create an A/B test
*
* Access Level: Write
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateABTest.html
*/
toCreateABTest() {
return this.to('CreateABTest');
}
/**
* Grants permission to create a new agent runtime
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifSubnets()
* - .ifSecurityGroups()
* - .ifRuntimeAuthorizerType()
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntime.html
*/
toCreateAgentRuntime() {
return this.to('CreateAgentRuntime');
}
/**
* Grants permission to create a new agent runtime endpoint
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateAgentRuntimeEndpoint.html
*/
toCreateAgentRuntimeEndpoint() {
return this.to('CreateAgentRuntimeEndpoint');
}
/**
* Grants permission to create a new API Key Credential Provider
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateApiKeyCredentialProvider.html
*/
toCreateApiKeyCredentialProvider() {
return this.to('CreateApiKeyCredentialProvider');
}
/**
* Grants permission to create a new custom browser
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifSubnets()
* - .ifSecurityGroups()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowser.html
*/
toCreateBrowser() {
return this.to('CreateBrowser');
}
/**
* Grants permission to create a new browser profile
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateBrowserProfile.html
*/
toCreateBrowserProfile() {
return this.to('CreateBrowserProfile');
}
/**
* Grants permission to create a new custom code interpreter
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifSubnets()
* - .ifSecurityGroups()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateCodeInterpreter.html
*/
toCreateCodeInterpreter() {
return this.to('CreateCodeInterpreter');
}
/**
* Grants permission to create a new configuration bundle
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateConfigurationBundle.html
*/
toCreateConfigurationBundle() {
return this.to('CreateConfigurationBundle');
}
/**
* Grants permission to create a new evaluator
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsResourceTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateEvaluator.html
*/
toCreateEvaluator() {
return this.to('CreateEvaluator');
}
/**
* Grants permission to create an Event
*
* Access Level: Write
*
* Possible conditions:
* - .ifSessionId()
* - .ifActorId()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_CreateEvent.html
*/
toCreateEvent() {
return this.to('CreateEvent');
}
/**
* Grants permission to create a new gateway
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGateway.html
*/
toCreateGateway() {
return this.to('CreateGateway');
}
/**
* Grants permission to create a new rule in an existing gateway
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayRule.html
*/
toCreateGatewayRule() {
return this.to('CreateGatewayRule');
}
/**
* Grants permission to create a new target in an existing gateway
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateGatewayTarget.html
*/
toCreateGatewayTarget() {
return this.to('CreateGatewayTarget');
}
/**
* Grants permission to create a new harness
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - bedrock-agentcore:CreateAgentRuntime
* - bedrock-agentcore:GetAgentRuntime
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateHarness.html
*/
toCreateHarness() {
return this.to('CreateHarness');
}
/**
* Grants permission to create a Memory resource
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
* - .ifKmsKeyArn()
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateMemory.html
*/
toCreateMemory() {
return this.to('CreateMemory');
}
/**
* Grants permission to create a new Credential Provider to access external resources with OAuth2 protocol
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOauth2CredentialProvider.html
*/
toCreateOauth2CredentialProvider() {
return this.to('CreateOauth2CredentialProvider');
}
/**
* Grants permission to create a new online evaluation configuration
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsResourceTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateOnlineEvaluationConfig.html
*/
toCreateOnlineEvaluationConfig() {
return this.to('CreateOnlineEvaluationConfig');
}
/**
* Grants permission to create a new payment connector under a payment manager
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentConnector.html
*/
toCreatePaymentConnector() {
return this.to('CreatePaymentConnector');
}
/**
* Grants permission to create a new Payment Credential Provider
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentCredentialProvider.html
*/
toCreatePaymentCredentialProvider() {
return this.to('CreatePaymentCredentialProvider');
}
/**
* Grants permission to create a new payment instrument
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentInstrument.html
*/
toCreatePaymentInstrument() {
return this.to('CreatePaymentInstrument');
}
/**
* Grants permission to create a new payment manager
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* Dependent actions:
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentManager.html
*/
toCreatePaymentManager() {
return this.to('CreatePaymentManager');
}
/**
* Grants permission to create a new payment session
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePaymentSession.html
*/
toCreatePaymentSession() {
return this.to('CreatePaymentSession');
}
/**
* Grants permission to create a new policy within a policy engine
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicy.html
*/
toCreatePolicy() {
return this.to('CreatePolicy');
}
/**
* Grants permission to create a new policy engine
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreatePolicyEngine.html
*/
toCreatePolicyEngine() {
return this.to('CreatePolicyEngine');
}
/**
* Grants permission to create a new registry
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistry.html
*/
toCreateRegistry() {
return this.to('CreateRegistry');
}
/**
* Grants permission to create a new registry record
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateRegistryRecord.html
*/
toCreateRegistryRecord() {
return this.to('CreateRegistryRecord');
}
/**
* Grants permission to create a new Workload Identity
*
* Access Level: Write
*
* Possible conditions:
* - .ifAwsRequestTag()
* - .ifAwsTagKeys()
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_CreateWorkloadIdentity.html
*/
toCreateWorkloadIdentity() {
return this.to('CreateWorkloadIdentity');
}
/**
* Grants permission to delete an A/B test
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteABTest.html
*/
toDeleteABTest() {
return this.to('DeleteABTest');
}
/**
* Grants permission to delete an agent runtime
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntime.html
*/
toDeleteAgentRuntime() {
return this.to('DeleteAgentRuntime');
}
/**
* Grants permission to delete an agent runtime endpoint
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteAgentRuntimeEndpoint.html
*/
toDeleteAgentRuntimeEndpoint() {
return this.to('DeleteAgentRuntimeEndpoint');
}
/**
* Grants permission to delete a registered API Key Credential Provider
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteApiKeyCredentialProvider.html
*/
toDeleteApiKeyCredentialProvider() {
return this.to('DeleteApiKeyCredentialProvider');
}
/**
* Grants permission to delete a batch evaluation
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteBatchEvaluation.html
*/
toDeleteBatchEvaluation() {
return this.to('DeleteBatchEvaluation');
}
/**
* Grants permission to delete a custom browser
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowser.html
*/
toDeleteBrowser() {
return this.to('DeleteBrowser');
}
/**
* Grants permission to delete a browser profile
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteBrowserProfile.html
*/
toDeleteBrowserProfile() {
return this.to('DeleteBrowserProfile');
}
/**
* Grants permission to delete a custom code interpreter
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteCodeInterpreter.html
*/
toDeleteCodeInterpreter() {
return this.to('DeleteCodeInterpreter');
}
/**
* Grants permission to delete a configuration bundle
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteConfigurationBundle.html
*/
toDeleteConfigurationBundle() {
return this.to('DeleteConfigurationBundle');
}
/**
* Grants permission to delete an evaluator
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteEvaluator.html
*/
toDeleteEvaluator() {
return this.to('DeleteEvaluator');
}
/**
* Grants permission to delete an Event
*
* Access Level: Write
*
* Possible conditions:
* - .ifSessionId()
* - .ifActorId()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteEvent.html
*/
toDeleteEvent() {
return this.to('DeleteEvent');
}
/**
* Grants permission to delete an existing gateway
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGateway.html
*/
toDeleteGateway() {
return this.to('DeleteGateway');
}
/**
* Grants permission to delete an existing gateway rule
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayRule.html
*/
toDeleteGatewayRule() {
return this.to('DeleteGatewayRule');
}
/**
* Grants permission to delete an existing gateway target
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteGatewayTarget.html
*/
toDeleteGatewayTarget() {
return this.to('DeleteGatewayTarget');
}
/**
* Grants permission to delete a harness
*
* Access Level: Write
*
* Dependent actions:
* - bedrock-agentcore:DeleteAgentRuntime
* - bedrock-agentcore:GetAgentRuntime
* - iam:PassRole
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteHarness.html
*/
toDeleteHarness() {
return this.to('DeleteHarness');
}
/**
* Grants permission to delete a Memory resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteMemory.html
*/
toDeleteMemory() {
return this.to('DeleteMemory');
}
/**
* Grants permission to delete a Memory Record
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteMemoryRecord.html
*/
toDeleteMemoryRecord() {
return this.to('DeleteMemoryRecord');
}
/**
* Grants permission to delete a registered OAuth2 Credential Provider
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOauth2CredentialProvider.html
*/
toDeleteOauth2CredentialProvider() {
return this.to('DeleteOauth2CredentialProvider');
}
/**
* Grants permission to delete an online evaluation configuration
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteOnlineEvaluationConfig.html
*/
toDeleteOnlineEvaluationConfig() {
return this.to('DeleteOnlineEvaluationConfig');
}
/**
* Grants permission to delete a payment connector
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentConnector.html
*/
toDeletePaymentConnector() {
return this.to('DeletePaymentConnector');
}
/**
* Grants permission to delete a registered Payment Credential Provider
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentCredentialProvider.html
*/
toDeletePaymentCredentialProvider() {
return this.to('DeletePaymentCredentialProvider');
}
/**
* Grants permission to delete a payment instrument
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentInstrument.html
*/
toDeletePaymentInstrument() {
return this.to('DeletePaymentInstrument');
}
/**
* Grants permission to delete a payment manager
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentManager.html
*/
toDeletePaymentManager() {
return this.to('DeletePaymentManager');
}
/**
* Grants permission to delete a payment session
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePaymentSession.html
*/
toDeletePaymentSession() {
return this.to('DeletePaymentSession');
}
/**
* Grants permission to delete a policy
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicy.html
*/
toDeletePolicy() {
return this.to('DeletePolicy');
}
/**
* Grants permission to delete a policy engine
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeletePolicyEngine.html
*/
toDeletePolicyEngine() {
return this.to('DeletePolicyEngine');
}
/**
* Grants permission to delete a recommendation
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_DeleteRecommendation.html
*/
toDeleteRecommendation() {
return this.to('DeleteRecommendation');
}
/**
* Grants permission to delete an existing registry
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistry.html
*/
toDeleteRegistry() {
return this.to('DeleteRegistry');
}
/**
* Grants permission to delete an existing registry record
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteRegistryRecord.html
*/
toDeleteRegistryRecord() {
return this.to('DeleteRegistryRecord');
}
/**
* Grants permission to delete the resource-based policy for a Bedrock resource
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteResourcePolicy.html
*/
toDeleteResourcePolicy() {
return this.to('DeleteResourcePolicy');
}
/**
* Grants permission to delete a registered Workload Identity
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_DeleteWorkloadIdentity.html
*/
toDeleteWorkloadIdentity() {
return this.to('DeleteWorkloadIdentity');
}
/**
* Grants permission to run an evaluation using an evaluator
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_Evaluate.html
*/
toEvaluate() {
return this.to('Evaluate');
}
/**
* Grants permission to get details of an A/B test
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetABTest.html
*/
toGetABTest() {
return this.to('GetABTest');
}
/**
* Grants permission to retrieve an agent card for A2A
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetAgentCard.html
*/
toGetAgentCard() {
return this.to('GetAgentCard');
}
/**
* Grants permission to get details of an agent runtime
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntime.html
*/
toGetAgentRuntime() {
return this.to('GetAgentRuntime');
}
/**
* Grants permission to get details of an agent runtime endpoint
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetAgentRuntimeEndpoint.html
*/
toGetAgentRuntimeEndpoint() {
return this.to('GetAgentRuntimeEndpoint');
}
/**
* Grants permission to fetch a registered API Key Credential Provider by its name
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetApiKeyCredentialProvider.html
*/
toGetApiKeyCredentialProvider() {
return this.to('GetApiKeyCredentialProvider');
}
/**
* Grants permission to get details of a batch evaluation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBatchEvaluation.html
*/
toGetBatchEvaluation() {
return this.to('GetBatchEvaluation');
}
/**
* Grants permission to get details of a browser
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowser.html
*/
toGetBrowser() {
return this.to('GetBrowser');
}
/**
* Grants permission to get details of a browser profile
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetBrowserProfile.html
*/
toGetBrowserProfile() {
return this.to('GetBrowserProfile');
}
/**
* Grants permission to get details of a browser session
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetBrowserSession.html
*/
toGetBrowserSession() {
return this.to('GetBrowserSession');
}
/**
* Grants permission to get details of a code interpreter
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetCodeInterpreter.html
*/
toGetCodeInterpreter() {
return this.to('GetCodeInterpreter');
}
/**
* Grants permission to get details of a code interpreter session
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetCodeInterpreterSession.html
*/
toGetCodeInterpreterSession() {
return this.to('GetCodeInterpreterSession');
}
/**
* Grants permission to get details of a configuration bundle
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundle.html
*/
toGetConfigurationBundle() {
return this.to('GetConfigurationBundle');
}
/**
* Grants permission to get a specific version of a configuration bundle
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetConfigurationBundleVersion.html
*/
toGetConfigurationBundleVersion() {
return this.to('GetConfigurationBundleVersion');
}
/**
* Grants permission to get details of an evaluator
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetEvaluator.html
*/
toGetEvaluator() {
return this.to('GetEvaluator');
}
/**
* Grants permission to fetch an Event
*
* Access Level: Read
*
* Possible conditions:
* - .ifSessionId()
* - .ifActorId()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetEvent.html
*/
toGetEvent() {
return this.to('GetEvent');
}
/**
* Grants permission to retrieve an existing gateway
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGateway.html
*/
toGetGateway() {
return this.to('GetGateway');
}
/**
* Grants permission to retrieve an existing gateway rule
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayRule.html
*/
toGetGatewayRule() {
return this.to('GetGatewayRule');
}
/**
* Grants permission to retrieve an existing gateway target
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetGatewayTarget.html
*/
toGetGatewayTarget() {
return this.to('GetGatewayTarget');
}
/**
* Grants permission to get details of a harness
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetHarness.html
*/
toGetHarness() {
return this.to('GetHarness');
}
/**
* Grants permission to fetch details for a Memory resource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetMemory.html
*/
toGetMemory() {
return this.to('GetMemory');
}
/**
* Grants permission to fetch a Memory Record
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetMemoryRecord.html
*/
toGetMemoryRecord() {
return this.to('GetMemoryRecord');
}
/**
* Grants permission to fetch a registered OAuth2 Credential Provider by its name
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOauth2CredentialProvider.html
*/
toGetOauth2CredentialProvider() {
return this.to('GetOauth2CredentialProvider');
}
/**
* Grants permission to get details of an online evaluation configuration
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetOnlineEvaluationConfig.html
*/
toGetOnlineEvaluationConfig() {
return this.to('GetOnlineEvaluationConfig');
}
/**
* Grants permission to retrieve details of a payment connector
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentConnector.html
*/
toGetPaymentConnector() {
return this.to('GetPaymentConnector');
}
/**
* Grants permission to fetch a registered Payment Credential Provider by its name
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentCredentialProvider.html
*/
toGetPaymentCredentialProvider() {
return this.to('GetPaymentCredentialProvider');
}
/**
* Grants permission to retrieve details of a payment instrument
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrument.html
*/
toGetPaymentInstrument() {
return this.to('GetPaymentInstrument');
}
/**
* Grants permission to retrieve the balance of a payment instrument
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentInstrumentBalance.html
*/
toGetPaymentInstrumentBalance() {
return this.to('GetPaymentInstrumentBalance');
}
/**
* Grants permission to retrieve details of a payment manager
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentManager.html
*/
toGetPaymentManager() {
return this.to('GetPaymentManager');
}
/**
* Grants permission to retrieve details of a payment session
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPaymentSession.html
*/
toGetPaymentSession() {
return this.to('GetPaymentSession');
}
/**
* Grants permission to retrieve a policy
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicy.html
*/
toGetPolicy() {
return this.to('GetPolicy');
}
/**
* Grants permission to retrieve a policy engine
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngine.html
*/
toGetPolicyEngine() {
return this.to('GetPolicyEngine');
}
/**
* Grants permission to retrieve a summary of a policy engine
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyEngineSummary.html
*/
toGetPolicyEngineSummary() {
return this.to('GetPolicyEngineSummary');
}
/**
* Grants permission to retrieve status and results of a policy generation request
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGeneration.html
*/
toGetPolicyGeneration() {
return this.to('GetPolicyGeneration');
}
/**
* Grants permission to retrieve a summary of a policy generation request
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicyGenerationSummary.html
*/
toGetPolicyGenerationSummary() {
return this.to('GetPolicyGenerationSummary');
}
/**
* Grants permission to retrieve a summary of a policy
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetPolicySummary.html
*/
toGetPolicySummary() {
return this.to('GetPolicySummary');
}
/**
* Grants permission to get details of a recommendation
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetRecommendation.html
*/
toGetRecommendation() {
return this.to('GetRecommendation');
}
/**
* Grants permission to retrieve an existing registry
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistry.html
*/
toGetRegistry() {
return this.to('GetRegistry');
}
/**
* Grants permission to retrieve an existing registry record
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetRegistryRecord.html
*/
toGetRegistryRecord() {
return this.to('GetRegistryRecord');
}
/**
* Grants permission to retrieve an API Key associated with an Api Key Credential Provider
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceApiKey.html
*/
toGetResourceApiKey() {
return this.to('GetResourceApiKey');
}
/**
* Grants permission to retrieve access token with OAuth2 2LO or 3LO flow to access external resource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetResourceOauth2Token.html
*/
toGetResourceOauth2Token() {
return this.to('GetResourceOauth2Token');
}
/**
* Grants permission to retrieve a payment authentication token associated with a Payment Credential Provider
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePaymentToken.html
*/
toGetResourcePaymentToken() {
return this.to('GetResourcePaymentToken');
}
/**
* Grants permission to retrieve the resource-based policy for a Bedrock resource
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetResourcePolicy.html
*/
toGetResourcePolicy() {
return this.to('GetResourcePolicy');
}
/**
* Grants permission to fetch the current configuration of the TokenVault, including encryption settings
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetTokenVault.html
*/
toGetTokenVault() {
return this.to('GetTokenVault');
}
/**
* Grants permission to retrieve an Workload access token for agentic workloads not acting on behalf of a user
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessToken.html
*/
toGetWorkloadAccessToken() {
return this.to('GetWorkloadAccessToken');
}
/**
* Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with JWT token
*
* Access Level: Write
*
* Possible conditions:
* - .ifInboundJwtClaimIss()
* - .ifInboundJwtClaimSub()
* - .ifInboundJwtClaimAud()
* - .ifInboundJwtClaimScope()
* - .ifInboundJwtClaimClientId()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForJWT.html
*/
toGetWorkloadAccessTokenForJWT() {
return this.to('GetWorkloadAccessTokenForJWT');
}
/**
* Grants permission to retrieve an Workload access token for agentic workloads acting on behalf of user with User Id
*
* Access Level: Write
*
* Possible conditions:
* - .ifUserid()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_GetWorkloadAccessTokenForUserId.html
*/
toGetWorkloadAccessTokenForUserId() {
return this.to('GetWorkloadAccessTokenForUserId');
}
/**
* Grants permission to fetch details for a specific Workload identity, including its name and allowed OAuth2 return URLs
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_GetWorkloadIdentity.html
*/
toGetWorkloadIdentity() {
return this.to('GetWorkloadIdentity');
}
/**
* Grants permission to invoke an agent runtime endpoint
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html
*/
toInvokeAgentRuntime() {
return this.to('InvokeAgentRuntime');
}
/**
* Grants permission to invoke commands on an agent runtime endpoint
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeCommand.html
*/
toInvokeAgentRuntimeCommand() {
return this.to('InvokeAgentRuntimeCommand');
}
/**
* Grants permission to invoke an agent runtime endpoint with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntime.html
*/
toInvokeAgentRuntimeForUser() {
return this.to('InvokeAgentRuntimeForUser');
}
/**
* Grants permission to invoke an agent runtime endpoint with WebSocket stream
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html
*/
toInvokeAgentRuntimeWithWebSocketStream() {
return this.to('InvokeAgentRuntimeWithWebSocketStream');
}
/**
* Grants permission to invoke an agent runtime endpoint with WebSocket stream and with X-Amzn-Bedrock-AgentCore-Runtime-User-Id header
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeAgentRuntimeWithWebSocketStream.html
*/
toInvokeAgentRuntimeWithWebSocketStreamForUser() {
return this.to('InvokeAgentRuntimeWithWebSocketStreamForUser');
}
/**
* Grants permission to invoke a code interpreter session
*
* Access Level: Write
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeCodeInterpreter.html
*/
toInvokeCodeInterpreter() {
return this.to('InvokeCodeInterpreter');
}
/**
* Grants permission to invoke a gateway
*
* Access Level: Permissions management
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html
*/
toInvokeGateway() {
return this.to('InvokeGateway');
}
/**
* Grants permission to invoke a harness
*
* Access Level: Write
*
* Dependent actions:
* - bedrock-agentcore:InvokeAgentRuntime
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_InvokeHarness.html
*/
toInvokeHarness() {
return this.to('InvokeHarness');
}
/**
* Grants permission to invoke an MCP operation against an existing registry
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/welcome.html
*/
toInvokeRegistryMcp() {
return this.to('InvokeRegistryMcp');
}
/**
* Grants permission to list A/B tests
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListABTests.html
*/
toListABTests() {
return this.to('ListABTests');
}
/**
* Grants permission to list Actors
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListActors.html
*/
toListActors() {
return this.to('ListActors');
}
/**
* Grants permission to list agent runtime endpoints
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeEndpoints.html
*/
toListAgentRuntimeEndpoints() {
return this.to('ListAgentRuntimeEndpoints');
}
/**
* Grants permission to list agent runtime versions
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimeVersions.html
*/
toListAgentRuntimeVersions() {
return this.to('ListAgentRuntimeVersions');
}
/**
* Grants permission to list agent runtimes
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListAgentRuntimes.html
*/
toListAgentRuntimes() {
return this.to('ListAgentRuntimes');
}
/**
* Grants permission to list all API Key Credential Providers in the Token Vault
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListApiKeyCredentialProviders.html
*/
toListApiKeyCredentialProviders() {
return this.to('ListApiKeyCredentialProviders');
}
/**
* Grants permission to list batch evaluations
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBatchEvaluations.html
*/
toListBatchEvaluations() {
return this.to('ListBatchEvaluations');
}
/**
* Grants permission to list browser profiles
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowserProfiles.html
*/
toListBrowserProfiles() {
return this.to('ListBrowserProfiles');
}
/**
* Grants permission to list browser sessions
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListBrowserSessions.html
*/
toListBrowserSessions() {
return this.to('ListBrowserSessions');
}
/**
* Grants permission to list browsers
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListBrowsers.html
*/
toListBrowsers() {
return this.to('ListBrowsers');
}
/**
* Grants permission to list code interpreter sessions
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListCodeInterpreterSessions.html
*/
toListCodeInterpreterSessions() {
return this.to('ListCodeInterpreterSessions');
}
/**
* Grants permission to list code interpreters
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListCodeInterpreters.html
*/
toListCodeInterpreters() {
return this.to('ListCodeInterpreters');
}
/**
* Grants permission to list versions of a configuration bundle
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundleVersions.html
*/
toListConfigurationBundleVersions() {
return this.to('ListConfigurationBundleVersions');
}
/**
* Grants permission to list configuration bundles
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListConfigurationBundles.html
*/
toListConfigurationBundles() {
return this.to('ListConfigurationBundles');
}
/**
* Grants permission to list evaluators
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListEvaluators.html
*/
toListEvaluators() {
return this.to('ListEvaluators');
}
/**
* Grants permission to list events
*
* Access Level: List
*
* Possible conditions:
* - .ifSessionId()
* - .ifActorId()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListEvents.html
*/
toListEvents() {
return this.to('ListEvents');
}
/**
* Grants permission to list existing gateway rules
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayRules.html
*/
toListGatewayRules() {
return this.to('ListGatewayRules');
}
/**
* Grants permission to list existing gateway targets
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGatewayTargets.html
*/
toListGatewayTargets() {
return this.to('ListGatewayTargets');
}
/**
* Grants permission to list existing gateways
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListGateways.html
*/
toListGateways() {
return this.to('ListGateways');
}
/**
* Grants permission to list harnesses
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListHarnesses.html
*/
toListHarnesses() {
return this.to('ListHarnesses');
}
/**
* Grants permission to list memory resources
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListMemories.html
*/
toListMemories() {
return this.to('ListMemories');
}
/**
* Grants permission to list extraction jobs for this memory
*
* Access Level: List
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryExtractionJobs.html
*/
toListMemoryExtractionJobs() {
return this.to('ListMemoryExtractionJobs');
}
/**
* Grants permission to list memory records
*
* Access Level: List
*
* Possible conditions:
* - .ifNamespace()
* - .ifStrategyId()
*
* https://docs.aws.amazon.com/bedrock-agentcore/latest/APIReference/API_ListMemoryRecords.html
*/
toListMemoryRecords() {
return this.to('ListMemoryRecords');
}
/**
* Grants permission to list all OAuth2 Credential Providers in the Token Vault
*
* Access Level: Read
*
* https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListOauth2CredentialProviders.html
*/
toListOauth2CredentialProviders() {
return this.to('ListOauth2CredentialProviders');
}
/**
* Grants permission to list online evaluation configurations
*