PolicyValidationMode

class aws_cdk.aws_bedrock_agentcore_alpha.PolicyValidationMode(value)

Bases: object

(experimental) Validation mode for Cedar policy definitions.

Stability:

experimental

ExampleMetadata:

fixture=default infused

Example:

gateway = agentcore.Gateway(self, "MyGateway",
    gateway_name="my-gateway"
)

policy_engine = agentcore.PolicyEngine(self, "MyPolicyEngine",
    policy_engine_name="my_policy_engine"
)

allow_all_policy = agentcore.Policy(self, "AllowAllPolicy",
    policy_engine=policy_engine,
    policy_name="allow_all",
    statement=agentcore.PolicyStatement.permit().for_all_principals().on_all_actions().on_resource("AgentCore::Gateway", gateway.gateway_arn),
    description="Allow all actions on specific gateway (development only)",
    validation_mode=agentcore.PolicyValidationMode.IGNORE_ALL_FINDINGS
)

Parameters:

value (str)

Stability:

experimental

Attributes

FAIL_ON_ANY_FINDINGS = <aws_cdk.aws_bedrock_agentcore_alpha.PolicyValidationMode object>

IGNORE_ALL_FINDINGS = <aws_cdk.aws_bedrock_agentcore_alpha.PolicyValidationMode object>

value

(experimental) The string value of the validation mode.

Stability:

experimental