PolicyEngineProps

class aws_cdk.aws_bedrockagentcore.PolicyEngineProps(*, description=None, kms_key=None, policy_engine_name=None, tags=None)

Bases: object

Properties for creating a PolicyEngine resource.

Parameters:

  • description (Optional[str]) – Optional description for the policy engine. Maximum 4,096 characters. Default: - No description

  • kms_key (Optional[IKey]) – Custom KMS key for encryption. [disable-awslint:prefer-ref-interface] Default: - AWS owned key

  • policy_engine_name (Optional[str]) – The name of the policy engine. Valid characters: a-z, A-Z, 0-9, _ (underscore) Must start with a letter, 1-48 characters Pattern: ^[A-Za-z][A-Za-z0-9_]*$ Default: - Auto-generated unique name

  • tags (Optional[Mapping[str, str]]) – Tags for the policy engine. Maximum 50 tags. Default: - No tags

ExampleMetadata:

fixture=default infused

Example:

policy_engine = agentcore.PolicyEngine(self, "MyEngine",
    policy_engine_name="my_engine"
)

lambda_role = iam.Role(self, "LambdaRole",
    assumed_by=iam.ServicePrincipal("lambda.amazonaws.com")
)

# Grant read permissions
policy_engine.grant_read(lambda_role)

# Grant evaluation permissions
policy_engine.grant_evaluate(lambda_role)

Attributes

description

Optional description for the policy engine.

Maximum 4,096 characters.

Default:

  • No description

kms_key

Custom KMS key for encryption.

[disable-awslint:prefer-ref-interface]

Default:

  • AWS owned key

policy_engine_name

The name of the policy engine.

Valid characters: a-z, A-Z, 0-9, _ (underscore) Must start with a letter, 1-48 characters Pattern: ^[A-Za-z][A-Za-z0-9_]*$

Default:

  • Auto-generated unique name

tags

Tags for the policy engine.

Maximum 50 tags.

Default:

  • No tags