View a markdown version of this page

AWS CloudTrail 整合 - Amazon Bedrock AgentCore

AWS CloudTrail 整合

即將進行的命名空間遷移

AWS 客服人員登錄檔目前在 bedrock-agentcore 命名空間下為公開預覽。從 2026 年 8 月 6 日開始,服務會移至代理程式登錄命名空間。如果您使用 AWS 代理程式登錄檔,則必須更新端點、IAM 政策、SDK 用戶端、CLI 指令碼和登錄檔資料。如需從公有預覽遷移的詳細資訊,請參閱 綜合登錄遷移指南

Event types (事件類型)

管理事件 (預設記錄):CreateRegistry、GetRegistry、UpdateRegistry、DeleteRegistry、ListRegistries、CreateRegistryRecord、GetRegistryRecord、UpdateRegistryRecord、DeleteRegistryRecord、ListRegistryRecords、 SubmitRegistryRecordForApproval、UpdateRegistryRecordStatus

CreateRegistryRecord API 的 CloudTrail 日誌範例

{ "eventVersion": "1.09", "userIdentity": { "type": "AssumedRole", "principalId": "<REDACTED>", "arn": "arn:aws:sts::<REDACTED>", "accountId": "<REDACTED>", "accessKeyId": "<REDACTED>", "sessionContext": { "sessionIssuer": { "type": "Role", "principalId": "<REDACTED>", "arn": "<REDACTED>", "accountId": "<REDACTED>", "userName": "Admin" }, "attributes": { "creationDate": "2026-04-08T00:59:33Z", "mfaAuthenticated": "false" } } }, "eventTime": "2026-04-08T01:33:24Z", "eventSource": "bedrock-agentcore.amazonaws.com", "eventName": "CreateRegistryRecord", "awsRegion": "us-east-1", "sourceIPAddress": "<REDACTED>", "userAgent": "<REDACTED>", "requestParameters": { "descriptors": { "mcp": { "server": { "schemaVersion": "2025-12-11", "inlineContent": "{\n \"name\": \"io.example/my-server\",\n \"description\": \"Brief description of server functionality\",\n \"version\": \"1.0.0\"\n} " } } }, "recordVersion": "1.0.0", "clientToken": "<REDACTED>", "name": "record_gk0xk", "registryId": "jzjXulIwVksK", "descriptorType": "MCP" }, "responseElements": { "Access-Control-Expose-Headers": "x-amzn-RequestId,x-amzn-ErrorType,x-amzn-Trace-id,x-amzn-Apigw-id,x-amzn-ErrorMessage,Date", "recordArn": "arn:aws:bedrock-agentcore:us-east-1:123456789012:registry/jzjXulIwVksK/record/QamdREmPPkNr", "status": "CREATING" }, "requestID": "12345678-1234-1234-1234-123456789012", "eventID": "12345678-1234-5678-9abc-123456789012", "readOnly": false, "eventType": "AwsApiCall", "managementEvent": true, "recipientAccountId": "123456789012", "eventCategory": "Management", "sessionCredentialFromConsole": "true" }