bedrock-agentcore:CreateAgentRuntime is a Write access-level action in the bedrock-agentcore service. Grants permission to create a new agent runtime
This action does not support resource-level permissions; use "Resource": "*" in your policy.
Keys you can use in the Condition block of a policy that grants bedrock-agentcore:CreateAgentRuntime.
Filters access by creating requests based on the allowed set of values for each of the mandatory tags
Filters access by creating requests based on the presence of mandatory tags in the request
Filters access by the authorizer type configured for the AgentCore runtime
Filters access by the ID of security groups configured for an AgentCore resource
Filters access by the ID of subnets configured for an AgentCore resource
A minimal policy that allows bedrock-agentcore:CreateAgentRuntime. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBedrockagentcoreCreateAgentRuntime",
"Effect": "Allow",
"Action": "bedrock-agentcore:CreateAgentRuntime",
"Resource": "*"
}
]
}