policy_engine_summaries

Creates, updates, deletes, gets or lists a policy_engine_summaries resource.

Overview

Name	policy_engine_summaries
Type	Resource
Id	aws.bedrock_agentcore_control.policy_engine_summaries

Fields

The following fields are returned by SELECT queries:

get_policy_engine_summary

Name	Datatype	Description
name	string	The customer-assigned name of the policy engine. (pattern: <code>[A-Za-z][A-Za-z0-9_]*</code>)
created_at	string (date-time)	The timestamp when the policy engine was originally created.
encryption_key_arn	string	The Amazon Resource Name (ARN) of the KMS key used to encrypt the policy engine data. (pattern: <code>arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}</code>)
policy_engine_arn	string	The Amazon Resource Name (ARN) of the policy engine. (pattern: <code>arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}</code>)
policy_engine_id	string	The unique identifier of the policy engine. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
status	string	The current status of the policy engine. (CREATING, ACTIVE, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED, DELETE_FAILED)
updated_at	string (date-time)	The timestamp when the policy engine was last modified.

list_policy_engine_summaries

Name	Datatype	Description
name	string	The customer-assigned name of the policy engine. (pattern: <code>[A-Za-z][A-Za-z0-9_]*</code>)
created_at	string (date-time)	The timestamp when the policy engine was originally created.
encryption_key_arn	string	The Amazon Resource Name (ARN) of the KMS key used to encrypt the policy engine data. (pattern: <code>arn:aws(|-cn|-us-gov):kms:[a-zA-Z0-9-]*:[0-9]{12}:key/[a-zA-Z0-9-]{36}</code>)
policy_engine_arn	string	The Amazon Resource Name (ARN) of the policy engine. (pattern: <code>arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}</code>)
policy_engine_id	string	The unique identifier for the policy engine. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
status	string	The current status of the policy engine. (CREATING, ACTIVE, UPDATING, DELETING, CREATE_FAILED, UPDATE_FAILED, DELETE_FAILED)
updated_at	string (date-time)	The timestamp when the policy engine was last modified.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_policy_engine_summary	select	policy_engine_id, region		Retrieves a metadata-only summary of a specific policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and the encryption key ARN, but does not include the description or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.
list_policy_engine_summaries	select	region	nextToken, maxResults	Retrieves a paginated list of metadata-only policy engine summaries without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps for each policy engine, but does not include descriptions or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
policy_engine_id	string	The unique identifier of the policy engine to retrieve the summary for. This must be a valid policy engine ID that exists within the account.
region	string	AWS region (default: us-east-1)
maxResults	integer	The maximum number of policy engine summaries to return in a single response.
nextToken	string	A pagination token returned from a previous ListPolicyEngineSummaries call. Use this token to retrieve the next page of results when the response is paginated.

SELECT examples

get_policy_engine_summary

Retrieves a metadata-only summary of a specific policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and the encryption key ARN, but does not include the description or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

SELECT
name,
created_at,
encryption_key_arn,
policy_engine_arn,
policy_engine_id,
status,
updated_at
FROM aws.bedrock_agentcore_control.policy_engine_summaries
WHERE policy_engine_id = '{{ policy_engine_id }}' -- required
AND region = '{{ region }}' -- required
;

list_policy_engine_summaries

Retrieves a paginated list of metadata-only policy engine summaries without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps for each policy engine, but does not include descriptions or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

SELECT
name,
created_at,
encryption_key_arn,
policy_engine_arn,
policy_engine_id,
status,
updated_at
FROM aws.bedrock_agentcore_control.policy_engine_summaries
WHERE region = '{{ region }}' -- required
AND nextToken = '{{ nextToken }}'
AND maxResults = '{{ maxResults }}'
;