bedrock-agentcore:UpdateAgentRuntime is a Write access-level action in the bedrock-agentcore service. Grants permission to update an agent runtime
ARNs that bedrock-agentcore:UpdateAgentRuntime can be scoped to in an IAM policy.
Keys you can use in the Condition block of a policy that grants bedrock-agentcore:UpdateAgentRuntime.
Filters access by the authorizer type configured for the AgentCore runtime
Filters access by the ID of security groups configured for an AgentCore resource
Filters access by the ID of subnets configured for an AgentCore resource
Filters access by having actions based on the tag value associated with the resource
A minimal policy that allows bedrock-agentcore:UpdateAgentRuntime. Replace "Resource": "*" with a specific ARN to follow least privilege.
{
"Version": "2012-10-17",
"Statement": [
{
"Sid": "AllowBedrockagentcoreUpdateAgentRuntime",
"Effect": "Allow",
"Action": "bedrock-agentcore:UpdateAgentRuntime",
"Resource": "*"
}
]
}