policy_generation_summaries

Creates, updates, deletes, gets or lists a policy_generation_summaries resource.

Overview

Name	policy_generation_summaries
Type	Resource
Id	aws.bedrock_agentcore_control.policy_generation_summaries

Fields

The following fields are returned by SELECT queries:

get_policy_generation_summary

Name	Datatype	Description
name	string	The customer-assigned name for the policy generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*</code>)
created_at	string (date-time)	The timestamp when the policy generation request was created.
findings	string	The findings from the policy generation process, if available.
policy_engine_id	string	The identifier of the policy engine associated with this policy generation. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
policy_generation_arn	string	The Amazon Resource Name (ARN) of the policy generation request. (pattern: <code>arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}/policy-generation/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}</code>)
policy_generation_id	string	The unique identifier of the policy generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
resource	object	The resource information associated with the policy generation.
status	string	The current status of the policy generation request. (GENERATING, GENERATED, GENERATE_FAILED, DELETE_FAILED)
updated_at	string (date-time)	The timestamp when the policy generation was last updated.

list_policy_generation_summaries

Name	Datatype	Description
name	string	The customer-assigned name for this policy generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*</code>)
created_at	string (date-time)	The timestamp when this policy generation request was created.
findings	string	Findings and insights from this policy generation process.
policy_engine_id	string	The identifier of the policy engine associated with this generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
policy_generation_arn	string	The ARN of this policy generation request. (pattern: <code>arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}/policy-generation/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}</code>)
policy_generation_id	string	The unique identifier for this policy generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
resource	object	The resource information associated with this policy generation.
status	string	The current status of this policy generation request. (GENERATING, GENERATED, GENERATE_FAILED, DELETE_FAILED)
updated_at	string (date-time)	The timestamp when this policy generation was last updated.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_policy_generation_summary	select	policy_generation_id, policy_engine_id, region		Retrieves a metadata-only summary of a specific policy generation request without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.
list_policy_generation_summaries	select	policy_engine_id, region	nextToken, maxResults	Retrieves a paginated list of metadata-only policy generation summaries within a policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings for each policy generation, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
policy_engine_id	string	The identifier of the policy engine whose policy generation summaries to retrieve.
policy_generation_id	string	The unique identifier of the policy generation request to retrieve the summary for.
region	string	AWS region (default: us-east-1)
maxResults	integer	The maximum number of policy generation summaries to return in a single response.
nextToken	string	A pagination token returned from a previous ListPolicyGenerationSummaries call. Use this token to retrieve the next page of results when the response is paginated.

SELECT examples

get_policy_generation_summary

Retrieves a metadata-only summary of a specific policy generation request without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

SELECT
name,
created_at,
findings,
policy_engine_id,
policy_generation_arn,
policy_generation_id,
resource,
status,
updated_at
FROM aws.bedrock_agentcore_control.policy_generation_summaries
WHERE policy_generation_id = '{{ policy_generation_id }}' -- required
AND policy_engine_id = '{{ policy_engine_id }}' -- required
AND region = '{{ region }}' -- required
;

list_policy_generation_summaries

Retrieves a paginated list of metadata-only policy generation summaries within a policy engine without decrypting customer content. This lightweight read operation returns resource identifiers, status, timestamps, and findings for each policy generation, but does not include status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

SELECT
name,
created_at,
findings,
policy_engine_id,
policy_generation_arn,
policy_generation_id,
resource,
status,
updated_at
FROM aws.bedrock_agentcore_control.policy_generation_summaries
WHERE policy_engine_id = '{{ policy_engine_id }}' -- required
AND region = '{{ region }}' -- required
AND nextToken = '{{ nextToken }}'
AND maxResults = '{{ maxResults }}'
;