Bedrock-Agentcore
Prefix bedrock-agentcore, 259 actions · Domain AI & Machine Learning
6 AWS managed policies. 1 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.
Operator and limited (5)
Service-linked roles (1)
Also grants Bedrock-Agentcore actions (26)
- AdministratorAccess
- AIDevOpsAgentActionsPolicy
- AmazonSageMakerJobFullAccess
- AssuranceServiceRolePolicy
- AWS_ConfigRole
- AWSCODAPermissionsBoundary
- AWSConfigServiceRolePolicy
- AWSMcpServiceActionsFullAccess
- AWSObservabilityAdminTelemetryEnablementServiceRolePolicy
- AWSResourceExplorerServiceRolePolicy
- AWSSupportServiceRolePolicy
- AWSWAFConsoleFullAccess
- AWSWAFConsoleReadOnlyAccess
- AWSWAFFullAccess
- AWSWAFReadOnlyAccess
- AWSWellArchitectedAgentResourceScanningServiceRolePolicy
- NetworkSecurityManagerServiceRolePolicy
- PowerUserAccess
- ReadOnlyAccess
- SageMakerStudioAdminIAMDefaultExecutionPolicy
- SageMakerStudioAdminIAMPermissiveExecutionPolicy
- SageMakerStudioUserIAMDefaultExecutionPolicy
- SageMakerStudioUserIAMPermissiveExecutionPolicy
- SecurityAudit
- ViewOnlyAccess
- WellArchitectedAgentResourceScanning
adddatasetexamples allowvendedlogdeliveryforresource authorizeaction batchcreatememoryrecords batchdeletememoryrecords batchputgatewayratelimits batchupdatememoryrecords completeresourcetokenauth connectbrowserautomationstream connectbrowserliveviewstream createabtest createagentruntime createagentruntimeendpoint createapikeycredentialprovider createbrowser createbrowserprofile createcapacityprovider createcodeinterpreter createconfigurationbundle createconsentportal createdataset createdatasetversion createevaluator createevent creategateway creategatewayratelimit creategatewayrule creategatewaytarget createharness createharnessendpoint creatememory createoauth2credentialprovider createonlineevaluationconfig createpaymentconnector createpaymentcredentialprovider createpaymentinstrument createpaymentmanager createpaymentsession createpolicy createpolicyengine createregistry createregistryrecord createworkloadidentity deleteabtest deleteagentruntime deleteagentruntimeendpoint deleteapikeycredentialprovider deletebatchevaluation deletebrowser deletebrowserprofile deletecapacityprovider deletecapacityprovidersession deletecodeinterpreter deleteconfigurationbundle deleteconsentportal deletedataset deletedatasetexamples deleteevaluator deleteevent deletegateway deletegatewayratelimit deletegatewayrule deletegatewaytarget deleteharness deleteharnessendpoint deletememory deletememoryrecord deleteoauth2credentialprovider deleteonlineevaluationconfig deletepaymentconnector deletepaymentcredentialprovider deletepaymentinstrument deletepaymentmanager deletepaymentsession deletepolicy deletepolicyengine deleterecommendation deleteregistry deleteregistryrecord deleteresourcepolicy deleteworkloadidentity evaluate gatewayassociatewebacl gatewaydisassociatewebacl gatewaygetwebaclforresource gatewaylistresourcesforwebacl getabtest getagentcard getagentruntime getagentruntimeendpoint getapikeycredentialprovider getbatchevaluation getbrowser getbrowserprofile getbrowsersession getcapacityprovider getcodeinterpreter getcodeinterpretersession getconfigurationbundle getconfigurationbundleversion getconsentportal getdataset getevaluator getevent getgateway getgatewayratelimit getgatewayrule getgatewaytarget getharness getharnessendpoint getmemory getmemoryrecord getoauth2credentialprovider getonlineevaluationconfig getpaymentconnector getpaymentcredentialprovider getpaymentinstrument getpaymentinstrumentbalance getpaymentmanager getpaymentsession getpolicy getpolicyengine getpolicyenginesummary getpolicygeneration getpolicygenerationsummary getpolicysummary getrecommendation getregistry getregistryrecord getresourceapikey getresourceoauth2token getresourcepaymenttoken getresourcepolicy gettokenvault getworkloadaccesstoken getworkloadaccesstokenforjwt getworkloadaccesstokenforuserid getworkloadidentity ingestdata invokeagentruntime invokeagentruntimecommand invokeagentruntimecommandshell invokeagentruntimeforuser invokeagentruntimewithwebsocketstream invokeagentruntimewithwebsocketstreamforuser invokecodeinterpreter invokegateway invokeharness invokeregistrymcp invokewebanswer invokewebsearch listabtests listactors listagentruntimeendpoints listagentruntimeversions listagentruntimeversionsbycapacityprovider listagentruntimes listapikeycredentialproviders listbatchevaluations listbrowserprofiles listbrowsersessions listbrowsers listcapacityproviders listcodeinterpretersessions listcodeinterpreters listconfigurationbundleversions listconfigurationbundles listconsentportals listdatasetexamples listdatasetversions listdatasets listevaluators listevents listgatewayratelimits listgatewayrules listgatewaytargets listgateways listharnessendpoints listharnessversions listharnesses listmemories listmemoryextractionjobs listmemoryrecords listoauth2credentialproviders listonlineevaluationconfigs listpaymentconnectors listpaymentcredentialproviders listpaymentinstruments listpaymentmanagers listpaymentsessions listpolicies listpolicyenginesummaries listpolicyengines listpolicygenerationassets listpolicygenerationsummaries listpolicygenerations listpolicysummaries listrecommendations listregistries listregistryrecords listsessions listtagsforresource listworkloadidentities manageadminpolicy manageresourcescopedpolicy partiallyauthorizeactions passcapacityprovider processpayment putresourcepolicy putsystemlogevents resettokenvaultkeymaterial retrievememoryrecords savebrowsersessionprofile searchregistryrecords settokenvaultcmk startbatchevaluation startbrowsersession startcodeinterpretersession startmemoryextractionjob startpolicygeneration startrecommendation stopbatchevaluation stopbrowsersession stopcodeinterpretersession stopruntimesession submitregistryrecordforapproval synchronizegatewaytargets tagresource untagresource updateabtest updateagentruntime updateagentruntimeendpoint updateapikeycredentialprovider updatebrowserstream updatecapacityprovider updateconfigurationbundle updateconsentportal updatedataset updatedatasetexamples updateevaluator updategateway updategatewayratelimit updategatewayrule updategatewaytarget updateharness updateharnessendpoint updatememory updatememoryrecordexpiryspecification updateoauth2credentialprovider updateonlineevaluationconfig updatepaymentconnector updatepaymentcredentialprovider updatepaymentmanager updatepolicy updatepolicyengine updateregistry updateregistryrecord updateregistryrecordstatus updateworkloadidentity
Actions (259)
| Action | Access level | Policies granting without limits | Policies granting with resource or condition limits |
|---|---|---|---|
| bedrock-agentcore:AddDatasetExamples | Write | 8 | 4 |
| bedrock-agentcore:AllowVendedLogDeliveryForResource | Permissions management | 7 | 3 |
| bedrock-agentcore:AuthorizeAction | Permissions management | 7 | 2 |
| bedrock-agentcore:BatchCreateMemoryRecords | Write | 8 | 3 |
| bedrock-agentcore:BatchDeleteMemoryRecords | Write | 8 | 3 |
| bedrock-agentcore:BatchPutGatewayRateLimits | Write | 7 | 2 |
| bedrock-agentcore:BatchUpdateMemoryRecords | Write | 8 | 3 |
| bedrock-agentcore:CompleteResourceTokenAuth | Read | 7 | 2 |
| bedrock-agentcore:ConnectBrowserAutomationStream | Read | 7 | 4 |
| bedrock-agentcore:ConnectBrowserLiveViewStream | Read | 7 | 2 |
| bedrock-agentcore:CreateABTest | Write | 7 | 2 |
| bedrock-agentcore:CreateAgentRuntime | Write | 8 | 3 |
| bedrock-agentcore:CreateAgentRuntimeEndpoint | Write | 8 | 3 |
| bedrock-agentcore:CreateApiKeyCredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:CreateBrowser | Write | 7 | 2 |
| bedrock-agentcore:CreateBrowserProfile | Write | 7 | 2 |
| bedrock-agentcore:CreateCapacityProvider | Write | 7 | 2 |
| bedrock-agentcore:CreateCodeInterpreter | Write | 7 | 2 |
| bedrock-agentcore:CreateConfigurationBundle | Write | 7 | 2 |
| bedrock-agentcore:CreateConsentPortal | Write | 7 | 2 |
| bedrock-agentcore:CreateDataset | Write | 8 | 4 |
| bedrock-agentcore:CreateDatasetVersion | Write | 8 | 4 |
| bedrock-agentcore:CreateEvaluator | Write | 7 | 3 |
| bedrock-agentcore:CreateEvent | Write | 8 | 3 |
| bedrock-agentcore:CreateGateway | Write | 8 | 3 |
| bedrock-agentcore:CreateGatewayRateLimit | Write | 7 | 2 |
| bedrock-agentcore:CreateGatewayRule | Write | 7 | 2 |
| bedrock-agentcore:CreateGatewayTarget | Write | 8 | 3 |
| bedrock-agentcore:CreateHarness | Write | 8 | 3 |
| bedrock-agentcore:CreateHarnessEndpoint | Write | 8 | 3 |
| bedrock-agentcore:CreateMemory | Write | 8 | 3 |
| bedrock-agentcore:CreateOauth2CredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:CreateOnlineEvaluationConfig | Write | 7 | 3 |
| bedrock-agentcore:CreatePaymentConnector | Write | 7 | 2 |
| bedrock-agentcore:CreatePaymentCredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:CreatePaymentInstrument | Write | 7 | 2 |
| bedrock-agentcore:CreatePaymentManager | Write | 7 | 2 |
| bedrock-agentcore:CreatePaymentSession | Write | 7 | 2 |
| bedrock-agentcore:CreatePolicy | Write | 7 | 2 |
| bedrock-agentcore:CreatePolicyEngine | Write | 7 | 2 |
| bedrock-agentcore:CreateRegistry | Write | 7 | 2 |
| bedrock-agentcore:CreateRegistryRecord | Write | 7 | 2 |
| bedrock-agentcore:CreateWorkloadIdentity | Write | 8 | 4 |
| bedrock-agentcore:DeleteABTest | Write | 7 | 2 |
| bedrock-agentcore:DeleteAgentRuntime | Write | 8 | 3 |
| bedrock-agentcore:DeleteAgentRuntimeEndpoint | Write | 8 | 3 |
| bedrock-agentcore:DeleteApiKeyCredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:DeleteBatchEvaluation | Write | 8 | 3 |
| bedrock-agentcore:DeleteBrowser | Write | 7 | 2 |
| bedrock-agentcore:DeleteBrowserProfile | Write | 7 | 2 |
| bedrock-agentcore:DeleteCapacityProvider | Write | 7 | 2 |
| bedrock-agentcore:DeleteCapacityProviderSession | Write | 7 | 2 |
| bedrock-agentcore:DeleteCodeInterpreter | Write | 7 | 2 |
| bedrock-agentcore:DeleteConfigurationBundle | Write | 7 | 2 |
| bedrock-agentcore:DeleteConsentPortal | Write | 7 | 2 |
| bedrock-agentcore:DeleteDataset | Write | 8 | 4 |
| bedrock-agentcore:DeleteDatasetExamples | Write | 8 | 4 |
| bedrock-agentcore:DeleteEvaluator | Write | 7 | 3 |
| bedrock-agentcore:DeleteEvent | Write | 8 | 3 |
| bedrock-agentcore:DeleteGateway | Write | 8 | 3 |
| bedrock-agentcore:DeleteGatewayRateLimit | Write | 7 | 2 |
| bedrock-agentcore:DeleteGatewayRule | Write | 7 | 2 |
| bedrock-agentcore:DeleteGatewayTarget | Write | 8 | 3 |
| bedrock-agentcore:DeleteHarness | Write | 8 | 3 |
| bedrock-agentcore:DeleteHarnessEndpoint | Write | 8 | 3 |
| bedrock-agentcore:DeleteMemory | Write | 8 | 3 |
| bedrock-agentcore:DeleteMemoryRecord | Write | 8 | 3 |
| bedrock-agentcore:DeleteOauth2CredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:DeleteOnlineEvaluationConfig | Write | 7 | 3 |
| bedrock-agentcore:DeletePaymentConnector | Write | 7 | 2 |
| bedrock-agentcore:DeletePaymentCredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:DeletePaymentInstrument | Write | 7 | 2 |
| bedrock-agentcore:DeletePaymentManager | Write | 7 | 2 |
| bedrock-agentcore:DeletePaymentSession | Write | 7 | 2 |
| bedrock-agentcore:DeletePolicy | Write | 7 | 2 |
| bedrock-agentcore:DeletePolicyEngine | Write | 7 | 2 |
| bedrock-agentcore:DeleteRecommendation | Write | 7 | 2 |
| bedrock-agentcore:DeleteRegistry | Write | 7 | 2 |
| bedrock-agentcore:DeleteRegistryRecord | Write | 7 | 2 |
| bedrock-agentcore:DeleteResourcePolicy | Write | 7 | 2 |
| bedrock-agentcore:DeleteWorkloadIdentity | Write | 8 | 4 |
| bedrock-agentcore:Evaluate | Write | 7 | 3 |
| bedrock-agentcore:GatewayAssociateWebACL | Write | 7 | 4 |
| bedrock-agentcore:GatewayDisassociateWebACL | Write | 7 | 4 |
| bedrock-agentcore:GatewayGetWebACLForResource | Read | 9 | 7 |
| bedrock-agentcore:GatewayListResourcesForWebACL | List | 14 | 2 |
| bedrock-agentcore:GetABTest | Read | 11 | 2 |
| bedrock-agentcore:GetAgentCard | Read | 11 | 3 |
| bedrock-agentcore:GetAgentRuntime | Read | 15 | 6 |
| bedrock-agentcore:GetAgentRuntimeEndpoint | Read | 16 | 5 |
| bedrock-agentcore:GetApiKeyCredentialProvider | Read | 15 | 3 |
| bedrock-agentcore:GetBatchEvaluation | Read | 12 | 3 |
| bedrock-agentcore:GetBrowser | Read | 15 | 4 |
| bedrock-agentcore:GetBrowserProfile | Read | 15 | 3 |
| bedrock-agentcore:GetBrowserSession | Read | 10 | 4 |
| bedrock-agentcore:GetCapacityProvider | Read | 11 | 2 |
| bedrock-agentcore:GetCodeInterpreter | Read | 15 | 4 |
| bedrock-agentcore:GetCodeInterpreterSession | Read | 11 | 4 |
| bedrock-agentcore:GetConfigurationBundle | Read | 15 | 2 |
| bedrock-agentcore:GetConfigurationBundleVersion | Read | 13 | 3 |
| bedrock-agentcore:GetConsentPortal | Read | 10 | 2 |
| bedrock-agentcore:GetDataset | Read | 10 | 5 |
| bedrock-agentcore:GetEvaluator | Read | 17 | 5 |
| bedrock-agentcore:GetEvent | Read | 11 | 3 |
| bedrock-agentcore:GetGateway | Read | 16 | 7 |
| bedrock-agentcore:GetGatewayRateLimit | Read | 10 | 2 |
| bedrock-agentcore:GetGatewayRule | Read | 11 | 2 |
| bedrock-agentcore:GetGatewayTarget | Read | 16 | 5 |
| bedrock-agentcore:GetHarness | Read | 13 | 4 |
| bedrock-agentcore:GetHarnessEndpoint | Read | 12 | 3 |
| bedrock-agentcore:GetMemory | Read | 16 | 5 |
| bedrock-agentcore:GetMemoryRecord | Read | 11 | 3 |
| bedrock-agentcore:GetOauth2CredentialProvider | Read | 15 | 3 |
| bedrock-agentcore:GetOnlineEvaluationConfig | Read | 15 | 5 |
| bedrock-agentcore:GetPaymentConnector | Read | 15 | 3 |
| bedrock-agentcore:GetPaymentCredentialProvider | Read | 15 | 3 |
| bedrock-agentcore:GetPaymentInstrument | Read | 10 | 2 |
| bedrock-agentcore:GetPaymentInstrumentBalance | Read | 9 | 2 |
| bedrock-agentcore:GetPaymentManager | Read | 15 | 2 |
| bedrock-agentcore:GetPaymentSession | Read | 11 | 2 |
| bedrock-agentcore:GetPolicy | Read | 15 | 4 |
| bedrock-agentcore:GetPolicyEngine | Read | 15 | 4 |
| bedrock-agentcore:GetPolicyEngineSummary | Read | 14 | 2 |
| bedrock-agentcore:GetPolicyGeneration | Read | 15 | 2 |
| bedrock-agentcore:GetPolicyGenerationSummary | Read | 14 | 2 |
| bedrock-agentcore:GetPolicySummary | Read | 14 | 2 |
| bedrock-agentcore:GetRecommendation | Read | 11 | 2 |
| bedrock-agentcore:GetRegistry | Read | 12 | 2 |
| bedrock-agentcore:GetRegistryRecord | Read | 12 | 2 |
| bedrock-agentcore:GetResourceApiKey | Read | 8 | 2 |
| bedrock-agentcore:GetResourceOauth2Token | Read | 8 | 3 |
| bedrock-agentcore:GetResourcePaymentToken | Read | 8 | 2 |
| bedrock-agentcore:GetResourcePolicy | Read | 15 | 3 |
| bedrock-agentcore:GetTokenVault | Read | 15 | 3 |
| bedrock-agentcore:GetWorkloadAccessToken | Write | 9 | 5 |
| bedrock-agentcore:GetWorkloadAccessTokenForJWT | Write | 9 | 4 |
| bedrock-agentcore:GetWorkloadAccessTokenForUserId | Write | 8 | 3 |
| bedrock-agentcore:GetWorkloadIdentity | Read | 14 | 6 |
| bedrock-agentcore:IngestData | Write | 7 | 2 |
| bedrock-agentcore:InvokeAgentRuntime | Write | 8 | 4 |
| bedrock-agentcore:InvokeAgentRuntimeCommand | Write | 7 | 2 |
| bedrock-agentcore:InvokeAgentRuntimeCommandShell | Write | 7 | 2 |
| bedrock-agentcore:InvokeAgentRuntimeForUser | Write | 7 | 2 |
| bedrock-agentcore:InvokeAgentRuntimeWithWebSocketStream | Write | 7 | 2 |
| bedrock-agentcore:InvokeAgentRuntimeWithWebSocketStreamForUser | Write | 7 | 2 |
| bedrock-agentcore:InvokeCodeInterpreter | Write | 7 | 4 |
| bedrock-agentcore:InvokeGateway | Permissions management | 8 | 3 |
| bedrock-agentcore:InvokeHarness | Write | 8 | 3 |
| bedrock-agentcore:InvokeRegistryMcp | Read | 7 | 2 |
| bedrock-agentcore:InvokeWebAnswer | Write | 7 | 2 |
| bedrock-agentcore:InvokeWebSearch | Permissions management | 7 | 2 |
| bedrock-agentcore:ListABTests | List | 11 | 2 |
| bedrock-agentcore:ListActors | List | 10 | 4 |
| bedrock-agentcore:ListAgentRuntimeEndpoints | List | 15 | 5 |
| bedrock-agentcore:ListAgentRuntimeVersions | List | 12 | 4 |
| bedrock-agentcore:ListAgentRuntimeVersionsByCapacityProvider | List | 9 | 2 |
| bedrock-agentcore:ListAgentRuntimes | List | 16 | 4 |
| bedrock-agentcore:ListApiKeyCredentialProviders | Read | 15 | 4 |
| bedrock-agentcore:ListBatchEvaluations | List | 13 | 2 |
| bedrock-agentcore:ListBrowserProfiles | List | 14 | 4 |
| bedrock-agentcore:ListBrowserSessions | List | 12 | 3 |
| bedrock-agentcore:ListBrowsers | List | 14 | 4 |
| bedrock-agentcore:ListCapacityProviders | List | 10 | 2 |
| bedrock-agentcore:ListCodeInterpreterSessions | List | 12 | 3 |
| bedrock-agentcore:ListCodeInterpreters | List | 14 | 4 |
| bedrock-agentcore:ListConfigurationBundleVersions | List | 11 | 2 |
| bedrock-agentcore:ListConfigurationBundles | List | 14 | 2 |
| bedrock-agentcore:ListConsentPortals | List | 8 | 2 |
| bedrock-agentcore:ListDatasetExamples | List | 9 | 4 |
| bedrock-agentcore:ListDatasetVersions | List | 9 | 4 |
| bedrock-agentcore:ListDatasets | List | 11 | 4 |
| bedrock-agentcore:ListEvaluators | List | 16 | 5 |
| bedrock-agentcore:ListEvents | List | 11 | 4 |
| bedrock-agentcore:ListGatewayRateLimits | List | 8 | 2 |
| bedrock-agentcore:ListGatewayRules | List | 9 | 2 |
| bedrock-agentcore:ListGatewayTargets | List | 15 | 5 |
| bedrock-agentcore:ListGateways | List | 18 | 4 |
| bedrock-agentcore:ListHarnessEndpoints | List | 11 | 3 |
| bedrock-agentcore:ListHarnessVersions | List | 9 | 3 |
| bedrock-agentcore:ListHarnesses | List | 14 | 3 |
| bedrock-agentcore:ListMemories | List | 16 | 4 |
| bedrock-agentcore:ListMemoryExtractionJobs | List | 9 | 3 |
| bedrock-agentcore:ListMemoryRecords | List | 11 | 4 |
| bedrock-agentcore:ListOauth2CredentialProviders | Read | 15 | 5 |
| bedrock-agentcore:ListOnlineEvaluationConfigs | List | 14 | 5 |
| bedrock-agentcore:ListPaymentConnectors | List | 13 | 3 |
| bedrock-agentcore:ListPaymentCredentialProviders | List | 13 | 3 |
| bedrock-agentcore:ListPaymentInstruments | List | 9 | 2 |
| bedrock-agentcore:ListPaymentManagers | List | 13 | 2 |
| bedrock-agentcore:ListPaymentSessions | List | 9 | 2 |
| bedrock-agentcore:ListPolicies | List | 14 | 4 |
| bedrock-agentcore:ListPolicyEngineSummaries | List | 13 | 2 |
| bedrock-agentcore:ListPolicyEngines | List | 14 | 4 |
| bedrock-agentcore:ListPolicyGenerationAssets | List | 11 | 2 |
| bedrock-agentcore:ListPolicyGenerationSummaries | List | 13 | 2 |
| bedrock-agentcore:ListPolicyGenerations | List | 14 | 2 |
| bedrock-agentcore:ListPolicySummaries | List | 13 | 2 |
| bedrock-agentcore:ListRecommendations | List | 11 | 2 |
| bedrock-agentcore:ListRegistries | List | 10 | 2 |
| bedrock-agentcore:ListRegistryRecords | List | 10 | 2 |
| bedrock-agentcore:ListSessions | List | 10 | 4 |
| bedrock-agentcore:ListTagsForResource | List | 15 | 6 |
| bedrock-agentcore:ListWorkloadIdentities | Read | 13 | 4 |
| bedrock-agentcore:ManageAdminPolicy | Permissions management | 7 | 2 |
| bedrock-agentcore:ManageResourceScopedPolicy | Permissions management | 7 | 2 |
| bedrock-agentcore:PartiallyAuthorizeActions | Permissions management | 7 | 2 |
| bedrock-agentcore:PassCapacityProvider | Write | 7 | 2 |
| bedrock-agentcore:ProcessPayment | Write | 7 | 2 |
| bedrock-agentcore:PutResourcePolicy | Write | 7 | 2 |
| bedrock-agentcore:PutSystemLogEvents | Write | 7 | 3 |
| bedrock-agentcore:ResetTokenVaultKeyMaterial | Write | 7 | 2 |
| bedrock-agentcore:RetrieveMemoryRecords | List | 9 | 3 |
| bedrock-agentcore:SaveBrowserSessionProfile | Write | 7 | 2 |
| bedrock-agentcore:SearchRegistryRecords | Read | 8 | 2 |
| bedrock-agentcore:SetTokenVaultCMK | Write | 7 | 2 |
| bedrock-agentcore:StartBatchEvaluation | Write | 8 | 3 |
| bedrock-agentcore:StartBrowserSession | Write | 7 | 4 |
| bedrock-agentcore:StartCodeInterpreterSession | Write | 7 | 4 |
| bedrock-agentcore:StartMemoryExtractionJob | Write | 7 | 2 |
| bedrock-agentcore:StartPolicyGeneration | Write | 7 | 2 |
| bedrock-agentcore:StartRecommendation | Write | 7 | 2 |
| bedrock-agentcore:StopBatchEvaluation | Write | 8 | 3 |
| bedrock-agentcore:StopBrowserSession | Write | 7 | 4 |
| bedrock-agentcore:StopCodeInterpreterSession | Write | 7 | 4 |
| bedrock-agentcore:StopRuntimeSession | Write | 8 | 4 |
| bedrock-agentcore:SubmitRegistryRecordForApproval | Write | 7 | 2 |
| bedrock-agentcore:SynchronizeGatewayTargets | Permissions management | 8 | 3 |
| bedrock-agentcore:TagResource | Tagging | 7 | 5 |
| bedrock-agentcore:UntagResource | Tagging | 7 | 3 |
| bedrock-agentcore:UpdateABTest | Write | 7 | 2 |
| bedrock-agentcore:UpdateAgentRuntime | Write | 8 | 3 |
| bedrock-agentcore:UpdateAgentRuntimeEndpoint | Write | 8 | 3 |
| bedrock-agentcore:UpdateApiKeyCredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:UpdateBrowserStream | Write | 7 | 2 |
| bedrock-agentcore:UpdateCapacityProvider | Write | 7 | 2 |
| bedrock-agentcore:UpdateConfigurationBundle | Write | 7 | 2 |
| bedrock-agentcore:UpdateConsentPortal | Write | 7 | 2 |
| bedrock-agentcore:UpdateDataset | Write | 8 | 4 |
| bedrock-agentcore:UpdateDatasetExamples | Write | 8 | 4 |
| bedrock-agentcore:UpdateEvaluator | Write | 7 | 3 |
| bedrock-agentcore:UpdateGateway | Write | 8 | 3 |
| bedrock-agentcore:UpdateGatewayRateLimit | Write | 7 | 2 |
| bedrock-agentcore:UpdateGatewayRule | Write | 7 | 2 |
| bedrock-agentcore:UpdateGatewayTarget | Write | 8 | 3 |
| bedrock-agentcore:UpdateHarness | Write | 8 | 3 |
| bedrock-agentcore:UpdateHarnessEndpoint | Write | 8 | 3 |
| bedrock-agentcore:UpdateMemory | Write | 8 | 3 |
| bedrock-agentcore:UpdateMemoryRecordExpirySpecification | Write | 8 | 3 |
| bedrock-agentcore:UpdateOauth2CredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:UpdateOnlineEvaluationConfig | Write | 7 | 3 |
| bedrock-agentcore:UpdatePaymentConnector | Write | 7 | 2 |
| bedrock-agentcore:UpdatePaymentCredentialProvider | Write | 7 | 2 |
| bedrock-agentcore:UpdatePaymentManager | Write | 7 | 2 |
| bedrock-agentcore:UpdatePolicy | Write | 7 | 2 |
| bedrock-agentcore:UpdatePolicyEngine | Write | 7 | 2 |
| bedrock-agentcore:UpdateRegistry | Write | 7 | 2 |
| bedrock-agentcore:UpdateRegistryRecord | Write | 7 | 2 |
| bedrock-agentcore:UpdateRegistryRecordStatus | Write | 7 | 2 |
| bedrock-agentcore:UpdateWorkloadIdentity | Write | 8 | 3 |