registries

Creates, updates, deletes, gets or lists a registries resource.

Overview

Name	registries
Type	Resource
Id	aws.agent_registry_control.registries

Fields

The following fields are returned by SELECT queries:

get_registry

Name	Datatype	Description
name	string	Registry name with validation pattern (pattern: <code>[a-zA-Z0-9][a-zA-Z0-9_-./]*</code>)
approval_configuration	object	Configuration for the registry's record approval workflow. Controls whether records submitted for approval require manual review before they become approved and discoverable, or are auto-approved. When no auto-approval rules are configured, submitted records require manual review.
created_at	string (date-time)	The timestamp when the registry was created
description	string	Description of the Resource
discovery_configuration	object	Discovery configuration for the registry. Controls how consumers are authorized to search the registry and invoke its MCP endpoint.
registry_arn	string	The ARN of the registry (pattern: <code>arn:aws(-[^:]+)?:agent-registry:[a-z0-9-]+:[0-9]{12}:registry/[a-zA-Z0-9]{12,16}</code>)
registry_id	string	The unique identifier of the registry (pattern: <code>[a-zA-Z0-9]{12,16}</code>)
status	string	Current status of the registry (CREATING, READY, UPDATING, CREATE_FAILED, UPDATE_FAILED, DELETING, DELETE_FAILED)
status_reason	string	The reason for the current status. Typically populated when the status indicates a failure state.
updated_at	string (date-time)	The timestamp when the registry was last updated

list_registries

Name	Datatype	Description
name	string	Registry name with validation pattern (pattern: <code>[a-zA-Z0-9][a-zA-Z0-9_-./]*</code>)
created_at	string (date-time)	The timestamp when the registry was created
description	string	Description of the Resource
discovery_configuration	object	Discovery configuration for the registry. Controls how consumers are authorized to search the registry and invoke its MCP endpoint.
registry_arn	string	Registry Amazon Resource Name (pattern: <code>arn:aws(-[^:]+)?:agent-registry:[a-z0-9-]+:[0-9]{12}:registry/[a-zA-Z0-9]{12,16}</code>)
registry_id	string	Unique registry identifier (pattern: <code>[a-zA-Z0-9]{12,16}</code>)
status	string	Current status of the registry (CREATING, READY, UPDATING, CREATE_FAILED, UPDATE_FAILED, DELETING, DELETE_FAILED)
status_reason	string	The reason for the current status. Typically populated when the status indicates a failure state.
updated_at	string (date-time)	The timestamp when the registry was last updated

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_registry	select	registry_id, region		Gets a registry by identifier (ARN or ID)
list_registries	select	region		Lists the registries in the caller's account and Region, with optional filtering by status and discovery authorizer type
create_registry	insert	region, name		Creates a new registry, a catalog that organizes registry records and defines their discovery authorization and record approval behavior. Creation is asynchronous: the registry begins in the CREATING status and becomes usable once it reaches READY.
update_registry	update	registry_id, region		Updates an existing registry. This operation uses PATCH semantics: specify only the fields you want to change, and omit the rest to leave them unchanged. Updates are applied asynchronously and the registry transitions to the UPDATING status while they are processed.
delete_registry	delete	registry_id, region		Deletes a registry. Deletion is asynchronous: the registry transitions to the DELETING status and is removed along with its registry records.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
region	string	AWS region (default: us-east-1)
registry_id	string	The identifier of the registry to delete (ARN or ID)

SELECT examples

get_registry

Gets a registry by identifier (ARN or ID)

SELECT
name,
approval_configuration,
created_at,
description,
discovery_configuration,
registry_arn,
registry_id,
status,
status_reason,
updated_at
FROM aws.agent_registry_control.registries
WHERE registry_id = '{{ registry_id }}' -- required
AND region = '{{ region }}' -- required
;

list_registries

Lists the registries in the caller's account and Region, with optional filtering by status and discovery authorizer type

SELECT
name,
created_at,
description,
discovery_configuration,
registry_arn,
registry_id,
status,
status_reason,
updated_at
FROM aws.agent_registry_control.registries
WHERE region = '{{ region }}' -- required
;

INSERT examples

create_registry

Creates a new registry, a catalog that organizes registry records and defines their discovery authorization and record approval behavior. Creation is asynchronous: the registry begins in the CREATING status and becomes usable once it reaches READY.

INSERT INTO aws.agent_registry_control.registries (
name,
description,
discoveryConfiguration,
clientToken,
tags,
approvalConfiguration,
region
)
SELECT 
'{{ name }}' /* required */,
'{{ description }}',
'{{ discoveryConfiguration }}',
'{{ clientToken }}',
'{{ tags }}',
'{{ approvalConfiguration }}',
'{{ region }}'
RETURNING
registry_arn
;

Manifest

# Description fields are for documentation purposes
- name: registries
props:
  - name: region
    value: "{{ region }}"
    description: Required parameter for the registries resource.
  - name: name
    value: "{{ name }}"
    description: |
      Registry name with validation pattern
  - name: description
    value: "{{ description }}"
    description: |
      Description of the Resource
  - name: discoveryConfiguration
    description: |
      Discovery configuration for the registry. Controls how consumers are authorized to search the registry and invoke its MCP endpoint.
    value:
      authorizerConfiguration:
        customJWTAuthorizer:
          discoveryUrl: "{{ discoveryUrl }}"
          allowedAudience:
            - "{{ allowedAudience }}"
          allowedClients:
            - "{{ allowedClients }}"
          allowedScopes:
            - "{{ allowedScopes }}"
          customClaims:
            - inboundTokenClaimName: "{{ inboundTokenClaimName }}"
              inboundTokenClaimValueType: "{{ inboundTokenClaimValueType }}"
              authorizingClaimMatchValue:
                claimMatchValue: "{{ claimMatchValue }}"
                claimMatchOperator: "{{ claimMatchOperator }}"
          privateEndpoint:
            selfManagedLatticeResource:
              resourceConfigurationIdentifier: "{{ resourceConfigurationIdentifier }}"
            managedVpcResource:
              vpcIdentifier: "{{ vpcIdentifier }}"
              subnetIds: "{{ subnetIds }}"
              endpointIpAddressType: "{{ endpointIpAddressType }}"
              securityGroupIds: "{{ securityGroupIds }}"
              tags: "{{ tags }}"
              routingDomain: "{{ routingDomain }}"
          privateEndpointOverrides:
            - domain: "{{ domain }}"
              privateEndpoint:
                selfManagedLatticeResource: "{{ selfManagedLatticeResource }}"
                managedVpcResource: "{{ managedVpcResource }}"
      authorizerType: "{{ authorizerType }}"
  - name: clientToken
    value: "{{ clientToken }}"
    description: |
      Client specified token used for idempotency checks
  - name: tags
    value: "{{ tags }}"
    description: |
      A map of tag keys to tag values.
  - name: approvalConfiguration
    description: |
      Configuration for the registry's record approval workflow. Controls whether records submitted for approval require manual review before they become approved and discoverable, or are auto-approved. When no auto-approval rules are configured, submitted records require manual review.
    value:
      autoApprovalRules:
        - "{{ autoApprovalRules }}"

UPDATE examples

update_registry

Updates an existing registry. This operation uses PATCH semantics: specify only the fields you want to change, and omit the rest to leave them unchanged. Updates are applied asynchronously and the registry transitions to the UPDATING status while they are processed.

UPDATE aws.agent_registry_control.registries
SET 
name = '{{ name }}',
description = '{{ description }}',
discoveryConfiguration = '{{ discoveryConfiguration }}',
approvalConfiguration = '{{ approvalConfiguration }}'
WHERE 
registry_id = '{{ registry_id }}' --required
AND region = '{{ region }}' --required
RETURNING
name,
approval_configuration,
created_at,
description,
discovery_configuration,
registry_arn,
registry_id,
status,
status_reason,
updated_at;

DELETE examples

delete_registry

Deletes a registry. Deletion is asynchronous: the registry transitions to the DELETING status and is removed along with its registry records.

DELETE FROM aws.agent_registry_control.registries
WHERE registry_id = '{{ registry_id }}' --required
AND region = '{{ region }}' --required
;