RegistryRecordIamCredentialProvider - Amazon Bedrock AgentCore Control Plane

RegistryRecordIamCredentialProvider

IAM credential provider configuration for authenticating with an external source using SigV4 signing during synchronization.

Contents

region

The AWS region for SigV4 signing (for example, us-west-2). If not specified, the region is extracted from the MCP server URL hostname, with fallback to the service's own region.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: [a-z0-9-]+

Required: No

roleArn

The Amazon Resource Name (ARN) of the IAM role to assume for SigV4 signing.

Type: String

Length Constraints: Minimum length of 20. Maximum length of 2048.

Pattern: arn:aws(-[^:]+)?:iam::[0-9]{12}:role/.+

Required: No

service

The SigV4 signing service name (for example, execute-api or bedrock-agentcore).

Type: String

Length Constraints: Minimum length of 1. Maximum length of 128.

Pattern: [a-zA-Z0-9_-]+

Required: No

See Also

For more information about using this API in one of the language-specific AWS SDKs, see the following: