Amazon Bedrock Agent Core Control Policy

This table represents the Amazon Bedrock Agent Core Control Policy resource from Amazon Web Services.

aws.bedrock_agentcore_policy

Fields

TitleIDTypeData TypeDescription
_keycorestring
account_idcorestring
created_atcoretimestampThe timestamp when the policy was originally created. This is automatically set by the service and used for auditing and lifecycle management.
definitioncorejsonThe Cedar policy statement that defines the access control rules. This contains the actual policy logic used for agent behavior control and access decisions.
descriptioncorestringA human-readable description of the policy's purpose and functionality. Limited to 4,096 characters, this helps administrators understand and manage the policy.
namecorestringThe customer-assigned immutable name for the policy. This human-readable identifier must be unique within the account and cannot exceed 48 characters.
policy_arncorestringThe Amazon Resource Name (ARN) of the policy. This globally unique identifier can be used for cross-service references and IAM policy statements.
policy_engine_idcorestringThe identifier of the policy engine that manages this policy. This establishes the policy engine context for policy evaluation and management.
policy_idcorestringThe unique identifier for the policy. This system-generated identifier consists of the user name plus a 10-character generated suffix and serves as the primary key for policy operations.
statuscorestringThe current status of the policy.
status_reasonscorearray<string>Additional information about the policy status. This provides details about any failures or the current state of the policy lifecycle.
tagscorehstore_csv
updated_atcoretimestampThe timestamp when the policy was last modified. This tracks the most recent changes to the policy configuration or metadata.