policy_generations

Creates, updates, deletes, gets or lists a policy_generations resource.

Overview

Name	policy_generations
Type	Resource
Id	aws.bedrock_agentcore_control.policy_generations

Fields

The following fields are returned by SELECT queries:

get_policy_generation

Name	Datatype	Description
name	string	The customer-assigned name for the policy generation request. This helps identify and track generation operations across multiple requests. (pattern: <code>[A-Za-z][A-Za-z0-9_]*</code>)
created_at	string (date-time)	The timestamp when the policy generation request was created. This is used for tracking and auditing generation operations and their lifecycle.
findings	string	The findings and results from the policy generation process. This includes any issues, recommendations, validation results, or insights from the generated policies.
policy_engine_id	string	The identifier of the policy engine associated with this policy generation. This confirms the policy engine context for the generation operation. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
policy_generation_arn	string	The Amazon Resource Name (ARN) of the policy generation. This globally unique identifier can be used for tracking, auditing, and cross-service references. (pattern: <code>arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}/policy-generation/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}</code>)
policy_generation_id	string	The unique identifier of the policy generation request. This matches the generation ID provided in the request and serves as the tracking identifier. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
resource	object	The resource information associated with the policy generation. This provides context about the target resources for which the policies are being generated.
status	string	The current status of the policy generation. This indicates whether the generation is in progress, completed successfully, or failed during processing. (GENERATING, GENERATED, GENERATE_FAILED, DELETE_FAILED)
status_reasons	array	Additional information about the generation status. This provides details about any failures, warnings, or the current state of the generation process.
updated_at	string (date-time)	The timestamp when the policy generation was last updated. This tracks the progress of the generation process and any status changes.

list_policy_generations

Name	Datatype	Description
name	string	The customer-assigned name for this policy generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*</code>)
created_at	string (date-time)	The timestamp when this policy generation request was created.
findings	string	Findings and insights from this policy generation process.
policy_engine_id	string	The identifier of the policy engine associated with this generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
policy_generation_arn	string	The ARN of this policy generation request. (pattern: <code>arn:aws[-a-z]{0,7}:bedrock-agentcore:[a-z0-9-]{9,15}:[0-9]{12}:policy-engine/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}/policy-generation/[a-zA-Z][a-zA-Z0-9-]{0,47}-[a-zA-Z0-9]{10}</code>)
policy_generation_id	string	The unique identifier for this policy generation request. (pattern: <code>[A-Za-z][A-Za-z0-9_]*-[a-z0-9_]{10}</code>)
resource	object	The resource information associated with this policy generation.
status	string	The current status of this policy generation request. (GENERATING, GENERATED, GENERATE_FAILED, DELETE_FAILED)
status_reasons	array	Additional information about the generation status.
updated_at	string (date-time)	The timestamp when this policy generation was last updated.

Methods

The following methods are available for this resource:

Name	Accessible by	Required Params	Optional Params	Description
get_policy_generation	select	policy_generation_id, policy_engine_id, region		Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into Cedar policy statements using AI-powered translation, enabling non-technical users to create policies.
list_policy_generations	select	policy_engine_id, region	nextToken, maxResults	Retrieves a list of policy generation requests within the AgentCore Policy system. This operation supports pagination and filtering to help track and manage AI-powered policy generation operations.

Parameters

Parameters can be passed in the WHERE clause of a query. Check the Methods section to see which parameters are required or optional for each operation.

Name	Datatype	Description
policy_engine_id	string	The identifier of the policy engine whose policy generations to retrieve.
policy_generation_id	string	The unique identifier of the policy generation request to be retrieved. This must be a valid generation ID from a previous StartPolicyGeneration call.
region	string	AWS region (default: us-east-1)
maxResults	integer	The maximum number of policy generations to return in a single response.
nextToken	string	A pagination token for retrieving additional policy generations when results are paginated.

SELECT examples

get_policy_generation

Retrieves information about a policy generation request within the AgentCore Policy system. Policy generation converts natural language descriptions into Cedar policy statements using AI-powered translation, enabling non-technical users to create policies.

SELECT
name,
created_at,
findings,
policy_engine_id,
policy_generation_arn,
policy_generation_id,
resource,
status,
status_reasons,
updated_at
FROM aws.bedrock_agentcore_control.policy_generations
WHERE policy_generation_id = '{{ policy_generation_id }}' -- required
AND policy_engine_id = '{{ policy_engine_id }}' -- required
AND region = '{{ region }}' -- required
;

list_policy_generations

Retrieves a list of policy generation requests within the AgentCore Policy system. This operation supports pagination and filtering to help track and manage AI-powered policy generation operations.

SELECT
name,
created_at,
findings,
policy_engine_id,
policy_generation_arn,
policy_generation_id,
resource,
status,
status_reasons,
updated_at
FROM aws.bedrock_agentcore_control.policy_generations
WHERE policy_engine_id = '{{ policy_engine_id }}' -- required
AND region = '{{ region }}' -- required
AND nextToken = '{{ nextToken }}'
AND maxResults = '{{ maxResults }}'
;