ポリシーとポリシーエンジンの管理

aws bedrock-agentcore-control list-policy-engines

import boto3

client = boto3.client('bedrock-agentcore-control')

response = client.list_policy_engines()
for engine in response['policyEngines']:
    print(f"Policy Engine: {engine['name']} (ID: {engine['policyEngineId']})")
    print(f"Status: {engine['status']}")
    print(f"Created: {engine['createdAt']}")
    print(f"ARN: {engine['policyEngineArn']}")

aws bedrock-agentcore-control get-policy-engine --policy-engine-id my-policy-engine-id

import boto3

client = boto3.client('bedrock-agentcore-control')

response = client.get_policy_engine(
    policyEngineId='my-policy-engine-id'
)

print(f"Policy Engine: {response['name']}")
print(f"ID: {response['policyEngineId']}")
print(f"ARN: {response['policyEngineArn']}")
print(f"Status: {response['status']}")
print(f"Created: {response['createdAt']}")
print(f"Updated: {response['updatedAt']}")

aws bedrock-agentcore-control list-policies --policy-engine-id my-policy-engine-id

import boto3

client = boto3.client('bedrock-agentcore-control')

response = client.list_policies(
    policyEngineId='my-policy-engine-id'
)

for policy in response['policies']:
    print(f"Policy: {policy['name']} (ID: {policy['policyId']})")
    print(f"Status: {policy['status']}")
    print(f"Description: {policy.get('description', 'No description')}")
    print(f"Created: {policy['createdAt']}")

aws bedrock-agentcore-control get-policy --policy-engine-id my-policy-engine-id --policy-id my-policy-id

import boto3

client = boto3.client('bedrock-agentcore-control')

response = client.get_policy(
    policyId='my-policy-id',
    policyEngineId='my-policy-engine-id'
)

print(f"Policy: {response['name']}")
print(f"ID: {response['policyId']}")
print(f"ARN: {response['policyArn']}")
print(f"Status: {response['status']}")
print(f"Created: {response['createdAt']}")
print(f"Updated: {response['updatedAt']}")
print(f"Cedar Statement: {response['definition']['cedar']['statement']}")

aws bedrock-agentcore-control update-policy \
  --policy-id my-policy-id \
  --policy-engine-id my-policy-engine-id \
  --definition '{
    "cedar": {
      "statement": "permit(principal, action, resource);"
    }
  }'

import boto3

client = boto3.client('bedrock-agentcore-control')

client.update_policy(
    policyId='my-policy-id',
    policyEngineId='my-policy-engine-id',
    definition={
        'cedar': {
            'statement': 'permit(principal, action, resource);'
        }
    }
)

waiter = client.get_waiter('policy_active')
waiter.wait(PolicyEngineId="my-policy-engine-id", PolicyId="my-policy-id")

aws bedrock-agentcore-control delete-policy --policy-engine-id my-policy-engine-id --policy-id my-policy-id

import boto3

client = boto3.client('bedrock-agentcore-control')

client.delete_policy(policyId='my-policy-id', policyEngineId='my-policy-engine-id')
waiter = client.get_waiter('policy_deleted')
waiter.wait(PolicyEngineId="my-policy-engine-id", PolicyId="my-policy-id")

aws bedrock-agentcore-control delete-policy-engine --policy-engine-id my-policy-engine-id

import boto3

client = boto3.client('bedrock-agentcore-control')

client.delete_policy_engine(policyEngineId='my-policy-engine-id')