interface PolicyEngineProps

Language	Type name
.NET	Amazon.CDK.AWS.BedrockAgentCore.PolicyEngineProps
Go	github.com/aws/aws-cdk-go/awscdk/v2/awsbedrockagentcore#PolicyEngineProps
Java	software.amazon.awscdk.services.bedrockagentcore.PolicyEngineProps
Python	aws_cdk.aws_bedrockagentcore.PolicyEngineProps
TypeScript (source)	aws-cdk-lib » aws_bedrockagentcore » PolicyEngineProps

Properties for creating a PolicyEngine resource.

Example

const policyEngine = new agentcore.PolicyEngine(this, "MyEngine", {
  policyEngineName: "my_engine",
});

const lambdaRole = new iam.Role(this, "LambdaRole", {
  assumedBy: new iam.ServicePrincipal("lambda.amazonaws.com"),
});

// Grant read permissions
policyEngine.grantRead(lambdaRole);

// Grant evaluation permissions
policyEngine.grantEvaluate(lambdaRole);

Properties

Name	Type	Description
description?	string	Optional description for the policy engine.
kmsKey?	IKey	Custom KMS key for encryption.
policyEngineName?	string	The name of the policy engine.
tags?	{ [string]: string }	Tags for the policy engine.

---

description?

Type: string (optional, default: No description)

Optional description for the policy engine.

Maximum 4,096 characters.

---

kmsKey?

Type: IKey (optional, default: AWS owned key)

Custom KMS key for encryption.

[disable-awslint:prefer-ref-interface]

---

policyEngineName?

Type: string (optional, default: Auto-generated unique name)

The name of the policy engine.

Valid characters: a-z, A-Z, 0-9, _ (underscore) Must start with a letter, 1-48 characters Pattern: ^[A-Za-z][A-Za-z0-9_]*$

---

tags?

Type: { [string]: string } (optional, default: No tags)

Tags for the policy engine.

Maximum 50 tags.