class PolicyValidationMode 🔹

Language	Type name
.NET	Amazon.CDK.AWS.Bedrock.Agentcore.Alpha.PolicyValidationMode
Go	github.com/aws/aws-cdk-go/awsbedrockagentcorealpha/v2#PolicyValidationMode
Java	software.amazon.awscdk.services.bedrock.agentcore.alpha.PolicyValidationMode
Python	aws_cdk.aws_bedrock_agentcore_alpha.PolicyValidationMode
TypeScript (source)	@aws-cdk/aws-bedrock-agentcore-alpha » PolicyValidationMode

Validation mode for Cedar policy definitions.

Example

const gateway = new agentcore.Gateway(this, "MyGateway", {
  gatewayName: "my-gateway",
});

const policyEngine = new agentcore.PolicyEngine(this, "MyPolicyEngine", {
  policyEngineName: "my_policy_engine",
});

const allowAllPolicy = new agentcore.Policy(this, "AllowAllPolicy", {
  policyEngine: policyEngine,
  policyName: "allow_all",
  statement: agentcore.PolicyStatement.permit()
    .forAllPrincipals() // ** This will give overly permission to all principals
    .onAllActions()
    .onResource('AgentCore::Gateway', gateway.gatewayArn),
  description: "Allow all actions on specific gateway (development only)",
  validationMode: agentcore.PolicyValidationMode.IGNORE_ALL_FINDINGS,
});

// Generated Cedar:
// permit(
//   principal,
//   action,
//   resource == AgentCore::Gateway::"arn:aws:bedrock-agentcore:region:account:gateway/gateway-id"
// );

Initializer

new PolicyValidationMode(value: string)

Parameters

• value string

Properties

Name	Type	Description
value🔹	string	The string value of the validation mode.
static FAIL_ON_ANY_FINDINGS🔹	PolicyValidationMode	Fail policy creation if any validation findings are detected.
static IGNORE_ALL_FINDINGS🔹	PolicyValidationMode	Ignore all validation findings and create the policy anyway.

---

value🔹

Type: string

The string value of the validation mode.

---

static FAIL_ON_ANY_FINDINGS🔹

Type: PolicyValidationMode

Fail policy creation if any validation findings are detected.

This is the safer default - catches policy errors early.

---

static IGNORE_ALL_FINDINGS🔹

Type: PolicyValidationMode

Ignore all validation findings and create the policy anyway.

Use with caution - may result in runtime authorization errors.