bedrock-agentcore:CreateApiKeyCredentialProvider is a Write access-level action in the bedrock-agentcore service. Grants permission to create a new API Key Credential Provider
ARNs that bedrock-agentcore:CreateApiKeyCredentialProvider can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants bedrock-agentcore:CreateApiKeyCredentialProvider.
Filters access by creating requests based on the allowed set of values for each of the mandatory tags
Filters access by creating requests based on the presence of mandatory tags in the request
Filters access by having actions based on the tag value associated with the resource
A minimal policy that allows bedrock-agentcore:CreateApiKeyCredentialProvider. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBedrockagentcoreCreateApiKeyCredentialProvider",
"Effect": "Allow",
"Action": "bedrock-agentcore:CreateApiKeyCredentialProvider",
"Resource": "*"
}
]
}