BedrockAgentCoreRuntimeIdentityServiceRolePolicy

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23{
  "PolicyVersion": {
    "Document": {
      "Version": "2012-10-17",
      "Statement": {
        "Sid": "AllowWorkloadIdentityAccess",
        "Effect": "Allow",
        "Action": [
          "bedrock-agentcore:GetWorkloadAccessToken",
          "bedrock-agentcore:GetWorkloadAccessTokenForJWT",
          "bedrock-agentcore:GetWorkloadAccessTokenForUserId"
        ],
        "Resource": [
          "arn:aws:bedrock-agentcore:*:*:workload-identity-directory/default",
          "arn:aws:bedrock-agentcore:*:*:workload-identity-directory/default/workload-identity/*"
        ]
      }
    },
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "CreateDate": "2025-10-11T01:04:08+00:00"
  }
}