AgentRegistryFullAccess

Summary

Provides full access to AWS Agent Registry.

Permissions imported from the AWS Managed Policy Reference Guide; other sections reviewed against the listed AWS sources.

Identity

ARN

arn:aws:iam::aws:policy/AgentRegistryFullAccessCopy ARN

Default version

v2

Created

2026-08-06

Last edited

2026-08-31

Services

agent-registry, bedrock-agentcore, iam, kms, secretsmanager

Control-plane actions (37)

By access level: 4 List, 1 Permissions management, 9 Read, 2 Tagging, 21 Write.

Data-plane actions (3)

By access level: 1 List, 2 Read.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: scoped.

Can be attached: Yes, to users, groups and roles.

Why this tier

• Grants 24 write, tagging or permissions-management actions, short of full control of any service.
• Grants iam:PassRole, but only for scoped roles or under conditions (for example iam:PassedToService).

Guidance

Related policies

Same service

• AgentRegistryReadOnlyAccess
• AmazonAppFlowFullAccess
• AmazonAuroraDSQLConsoleFullAccess
• AmazonAuroraDSQLFullAccess
• AmazonChimeSDKMessagingServiceRolePolicy
• AmazonDataZonePreviewConsoleFullAccess
• AmazonDocDBReadOnlyAccess
• AmazonEventBridgeApiDestinationsServiceRolePolicy

Same domain

• AIOpsAssistantIncidentReportPolicy
• AIOpsAssistantPolicy
• AIOpsConsoleAdminPolicy
• AIOpsOperatorAccess
• AIOpsReadOnlyAccess
• AmazonAugmentedAIFullAccess
• AmazonAugmentedAIHumanLoopFullAccess
• AmazonAugmentedAIIntegratedAPIAccess

Frequently asked questions

When should I attach AgentRegistryFullAccess?

The reference page says you can attach AgentRegistryFullAccess to your users, groups and roles, and describes it as full access to AWS Agent Registry. Attach it only for people who administer the registry.

What does AgentRegistryFullAccess grant?

It allows agent-registry:* on Agent Registry resources, passing any role to agent-registry.amazonaws.com, bedrock-agentcore workload identity and OAuth2 credential actions, conditioned kms actions, secretsmanager:GetSecretValue on all secrets, iam:ListRoles and creating the Agent Registry service-linked role.

What are the security risks of AgentRegistryFullAccess?

secretsmanager:GetSecretValue is unconditioned on all secrets, and iam:PassRole covers every role when passed to agent-registry.amazonaws.com. AWS managed policies don't grant least privilege permissions, and you must consider the security risk of granting principals more permissions than they need. AWS updates to the policy affect every identity it is attached to.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AgentRegistryFullAccess",
      "Effect": "Allow",
      "Action": "agent-registry:*",
      "Resource": "arn:aws:agent-registry:*:*:*"
    },
    {
      "Sid": "AgentRegistryPassRoleAccess",
      "Effect": "Allow",
      "Action": "iam:PassRole",
      "Resource": "arn:aws:iam::*:role/*",
      "Condition": {
        "StringEquals": {
          "iam:PassedToService": "agent-registry.amazonaws.com"
        }
      }
    },
    {
      "Sid": "AgentRegistryWorkloadIdentityAccess",
      "Effect": "Allow",
      "Action": [
        "bedrock-agentcore:CreateWorkloadIdentity",
        "bedrock-agentcore:DeleteWorkloadIdentity",
        "bedrock-agentcore:GetWorkloadAccessToken",
        "bedrock-agentcore:GetWorkloadIdentity"
      ],
      "Resource": "arn:aws:bedrock-agentcore:*:*:workload-identity-directory/*"
    },
    {
      "Sid": "AllowGetResourceOauth2TokenForOauthBasedSynchronization",
      "Effect": "Allow",
      "Action": [
        "bedrock-agentcore:GetResourceOauth2Token"
      ],
      "Resource": [
        "arn:aws:bedrock-agentcore:*:*:credential-provider/*",
        "arn:aws:bedrock-agentcore:*:*:workload-identity-directory/*",
        "arn:aws:bedrock-agentcore:*:*:token-vault/*/oauth2credentialprovider/*"
      ]
    },
    {
      "Sid": "AllowListOauth2CredentialsProvidersForConsolePicker",
      "Effect": "Allow",
      "Action": [
        "bedrock-agentcore:ListOauth2CredentialProviders"
      ],
      "Resource": "arn:aws:bedrock-agentcore:*:*:*"
    },
    {
      "Sid": "IAMListAccess",
      "Effect": "Allow",
      "Action": [
        "iam:ListRoles"
      ],
      "Resource": "arn:aws:iam::*:role/*"
    },
    {
      "Sid": "AgentRegistryKMSDecryptKeyForSynchronization",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt"
      ],
      "Resource": "arn:aws:kms:*:*:key/*",
      "Condition": {
        "ForAnyValue:StringEquals": {
          "aws:CalledVia": "bedrock-agentcore.amazonaws.com"
        }
      }
    },
    {
      "Sid": "AgentRegistryKMSDescribeKey",
      "Effect": "Allow",
      "Action": [
        "kms:DescribeKey"
      ],
      "Resource": "arn:aws:kms:*:*:key/*",
      "Condition": {
        "StringLike": {
          "kms:ViaService": "agent-registry.*.amazonaws.com"
        }
      }
    },
    {
      "Sid": "AgentRegistryKMSCryptoOps",
      "Effect": "Allow",
      "Action": [
        "kms:Decrypt",
        "kms:Encrypt",
        "kms:GenerateDataKey",
        "kms:GenerateDataKeyWithoutPlaintext",
        "kms:ReEncryptFrom",
        "kms:ReEncryptTo"
      ],
      "Resource": "arn:aws:kms:*:*:key/*",
      "Condition": {
        "StringLike": {
          "kms:ViaService": "agent-registry.*.amazonaws.com",
          "kms:EncryptionContext:aws:agent-registry:registry-arn": "arn:aws:agent-registry:*:*:registry/*"
        }
      }
    },
    {
      "Sid": "AgentRegistryKMSCreateGrant",
      "Effect": "Allow",
      "Action": "kms:CreateGrant",
      "Resource": "arn:aws:kms:*:*:key/*",
      "Condition": {
        "StringLike": {
          "kms:ViaService": "agent-registry.*.amazonaws.com"
        },
        "ForAllValues:StringEquals": {
          "kms:GrantOperations": [
            "Decrypt",
            "Encrypt",
            "GenerateDataKey",
            "GenerateDataKeyWithoutPlaintext",
            "ReEncryptFrom",
            "ReEncryptTo",
            "DescribeKey",
            "CreateGrant"
          ]
        },
        "Null": {
          "kms:GrantOperations": "false"
        }
      }
    },
    {
      "Sid": "AgentRegistrySecretsManagerAccess",
      "Effect": "Allow",
      "Action": [
        "secretsmanager:GetSecretValue"
      ],
      "Resource": "arn:aws:secretsmanager:*:*:secret:*"
    },
    {
      "Sid": "AgentRegistryServiceLinkedRoleAccess",
      "Effect": "Allow",
      "Action": "iam:CreateServiceLinkedRole",
      "Resource": "arn:aws:iam::*:role/aws-service-role/agent-registry.amazonaws.com/AWSServiceRoleForAgentRegistry",
      "Condition": {
        "StringLike": {
          "iam:AWSServiceName": "agent-registry.amazonaws.com"
        }
      }
    }
  ]
}

Version history

Current version v2, edited by AWS on 2026-08-31. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AgentRegistryFullAccess
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AgentRegistryFullAccess
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AgentRegistryFullAccess

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AgentRegistryFullAccess

resource "aws_iam_role_policy_attachment" "agentregistryfullaccess" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/AgentRegistryFullAccess"
}

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("AgentRegistryFullAccess"),
);

Sources

• AgentRegistryFullAccess (AWS Managed Policy Reference Guide) (retrieved 2026-11-13; supports summary, practicalScope, useCases, securityConsiderations, assignmentGuidance, faqs)
• Grant a user permissions to pass a role to an AWS service (IAM User Guide) (retrieved 2026-11-13; supports securityConsiderations)
• Managed policies and inline policies (IAM User Guide) (retrieved 2026-11-12; supports securityConsiderations, faqs)
• AWS managed policies for job functions (IAM User Guide) (retrieved 2026-11-12; supports bestPractices, faqs)

• Official AWS reference for AgentRegistryFullAccess
• Report a data issue