# PolicyAttributes

Attributes for importing an existing Policy.

- Source: [`aws-bedrockagentcore/lib/policy/policy-base.ts`](https://github.com/aws/aws-cdk/blob/v2.275.0/packages/aws-cdk-lib/aws-bedrockagentcore/lib/policy/policy-base.ts#L121)
- Type last changed: v2.269.0 · 10 Sep 2026

## Example

```ts
const importedEngine = agentcore.PolicyEngine.fromPolicyEngineAttributes(
  this,
  "ImportedEngine",
  {
    policyEngineArn: "policy-engine/my-engine-id",
  }
);

const importedPolicy = agentcore.Policy.fromPolicyAttributes(
  this,
  "ImportedPolicy",
  {
    policyArn: "my-policy-arn",
    policyEngine: importedEngine,
  }
);

// Grant permissions to the imported policy
const role = new iam.Role(this, "PolicyRole", {
  assumedBy: new iam.ServicePrincipal("lambda.amazonaws.com"),
});

importedPolicy.grantRead(role);
```

## Properties

- `policyArn`: string (required) — The ARN of the policy.

- `policyEngine`: [IPolicyEngine](/cdk/api/v2/docs/aws-cdk-lib.aws_bedrockagentcore.IPolicyEngine.html) (required) — The policy engine this policy belongs to [disable-awslint:prefer-ref-interface].