Amazon Bedrock Agentcore (bedrock-agentcore)

2025-09-23

3 new actions, 3 new conditions | 4 updated actions, 4 updated resources

Additions

    Actions
  • ListTagsForResource
    • Description:  Grants permission to list tags for a Bedrock-AgentCore resource
    • Access:  List
    • Resources: 

      Name: browser-custom

      Required: No

      Name: code-interpreter-custom

      Required: No

      Name: runtime

      Required: No

      Name: runtime-endpoint

      Required: No

  • TagResource
    • Description:  Grants permission to Tag a Bedrock-AgentCore resource
    • Access:  Tagging
    • Resources: 

      Name: browser-custom

      Required: No

      Name: code-interpreter-custom

      Required: No

      Name: runtime

      Required: No

      Name: runtime-endpoint

      Required: No

    • Conditions: 

      aws:TagKeys

      aws:RequestTag/${TagKey}

  • UntagResource
    • Description:  Grants permission to Untag a Bedrock-AgentCore resource
    • Access:  Tagging
    • Resources: 

      Name: browser-custom

      Required: No

      Name: code-interpreter-custom

      Required: No

      Name: runtime

      Required: No

      Name: runtime-endpoint

      Required: No

    • Conditions: 

      aws:TagKeys

    Conditions
  • aws:RequestTag/${TagKey}
    • Description:  Filters access by creating requests based on the allowed set of values for each of the mandatory tags
    • Type:  String
  • aws:ResourceTag/${TagKey}
    • Description:  Filters access by having actions based on the tag value associated with the resource
    • Type:  String
  • aws:TagKeys
    • Description:  Filters access by creating requests based on the presence of mandatory tags in the request
    • Type:  ArrayOfString

Updates