aws-cdk-lib.aws_bedrockagentcore.PolicyEngineProps

PolicyEngineProps Struct

Properties for creating a PolicyEngine resource.

Source

aws-bedrockagentcore/lib/policy/policy-engine.ts

Type last changed

v2.269.0 · 10 Sep 2026

Example

const policyEngine = new agentcore.PolicyEngine(this, "MyEngine", {
  policyEngineName: "my_engine",
});

const lambdaRole = new iam.Role(this, "LambdaRole", {
  assumedBy: new iam.ServicePrincipal("lambda.amazonaws.com"),
});

// Grant read permissions
policyEngine.grantRead(lambdaRole);

// Grant evaluation permissions
policyEngine.grantEvaluate(lambdaRole);

Properties

descriptionstringdescriptionstrdescriptionStringDescriptionstringDescription*string= No description#

Optional description for the policy engine.

Maximum 4,096 characters.

kmsKeyIKeykms_keyIKeykmsKeyIKeyKmsKeyIKeyKmsKeyIKey= AWS owned key#

Custom KMS key for encryption.

[disable-awslint:prefer-ref-interface]

policyEngineNamestringpolicy_engine_namestrpolicyEngineNameStringPolicyEngineNamestringPolicyEngineName*string= Auto-generated unique name#

The name of the policy engine.

Valid characters: a-z, A-Z, 0-9, _ (underscore) Must start with a letter, 1-48 characters Pattern: ^[A-Za-z][A-Za-z0-9_]*$

tags{ [key: string]: string }tagstyping.Mapping[str, str]tagsMap<String, String>TagsIDictionary<string, string>Tags*map[string]*string= No tags#

Tags for the policy engine.

Maximum 50 tags.

Used as props by

• PolicyEngine