bedrock-agentcore:RetrieveMemoryRecords is a List access-level action in the bedrock-agentcore service. Grants permission to retrieve memory records through sematic query
ARNs that bedrock-agentcore:RetrieveMemoryRecords can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants bedrock-agentcore:RetrieveMemoryRecords.
Filters access by namespace
Filters access by the namespace path hierarchy of the memory records in the request
Filters access by Memory Strategy Id
Filters access by having actions based on the tag value associated with the resource
A minimal policy that allows bedrock-agentcore:RetrieveMemoryRecords. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBedrockagentcoreRetrieveMemoryRecords",
"Effect": "Allow",
"Action": "bedrock-agentcore:RetrieveMemoryRecords",
"Resource": "*"
}
]
}