AWS CDK Reference

Appearance

v2.276.0

PolicyEngineAttributes Struct ​

Attributes for importing an existing PolicyEngine.

Source
aws-bedrockagentcore/lib/policy/policy-engine-base.ts
Type last changed
v2.269.0 · 10 Sep 2026

Example ​

ts
const importedEngine = agentcore.PolicyEngine.fromPolicyEngineAttributes(
  this,
  "ImportedEngine",
  {
    policyEngineArn: "policy-engine-arn",
    kmsKeyArn: "kms-arn",
  }
);

// Use the imported engine
const policy = new agentcore.Policy(this, "PolicyForImportedEngine", {
  policyEngine: importedEngine,
  statement: agentcore.PolicyStatement.fromCedar("permit(principal, action, resource);"),
});
python
imported_engine = agentcore.PolicyEngine.from_policy_engine_attributes(self, "ImportedEngine",
    policy_engine_arn="policy-engine-arn",
    kms_key_arn="kms-arn"
)

# Use the imported engine
policy = agentcore.Policy(self, "PolicyForImportedEngine",
    policy_engine=imported_engine,
    statement=agentcore.PolicyStatement.from_cedar("permit(principal, action, resource);")
)
java
IPolicyEngine importedEngine = PolicyEngine.fromPolicyEngineAttributes(this, "ImportedEngine", PolicyEngineAttributes.builder()
        .policyEngineArn("policy-engine-arn")
        .kmsKeyArn("kms-arn")
        .build());

// Use the imported engine
Policy policy = Policy.Builder.create(this, "PolicyForImportedEngine")
        .policyEngine(importedEngine)
        .statement(PolicyStatement.fromCedar("permit(principal, action, resource);"))
        .build();
csharp
// Install: dotnet add package Amazon.CDK.Lib
var importedEngine = PolicyEngine.FromPolicyEngineAttributes(this, "ImportedEngine", new PolicyEngineAttributes {
    PolicyEngineArn = "policy-engine-arn",
    KmsKeyArn = "kms-arn"
});

// Use the imported engine
var policy = new Policy(this, "PolicyForImportedEngine", new PolicyProps {
    PolicyEngine = importedEngine,
    Statement = PolicyStatement.FromCedar("permit(principal, action, resource);")
});
go
// Install: go get github.com/aws/aws-cdk-go/awscdk/v2
importedEngine := agentcore.PolicyEngine_FromPolicyEngineAttributes(this, jsii.String("ImportedEngine"), &PolicyEngineAttributes{
	PolicyEngineArn: jsii.String("policy-engine-arn"),
	KmsKeyArn: jsii.String("kms-arn"),
})

// Use the imported engine
policy := agentcore.NewPolicy(this, jsii.String("PolicyForImportedEngine"), &PolicyProps{
	PolicyEngine: importedEngine,
	Statement: agentcore.PolicyStatement_FromCedar(jsii.String("permit(principal, action, resource);")),
})

Properties ​

kmsKeyArnoptionalstringkms_key_arnoptionalstrkmsKeyArnoptionalStringKmsKeyArnoptionalstringKmsKeyArnoptional*string#
The KMS key ARN used for encryption (optional).

Default: No KMS key

policyEngineArnstringpolicy_engine_arnstrpolicyEngineArnStringPolicyEngineArnstringPolicyEngineArn*stringrequired#
The ARN of the policy engine.