Gestione delle politiche e dei motori delle politiche
Utilizza queste operazioni per gestire i motori e le politiche delle politiche.
Elenca i motori delle politiche
Visualizza tutti i Policy Engines nel tuo account.
Seleziona uno dei seguenti metodi:
Esempio
- AWS CLI
-
-
aws bedrock-agentcore-control list-policy-engines
- AWS Python SDK (Boto3)
-
-
import boto3
client = boto3.client('bedrock-agentcore-control')
response = client.list_policy_engines()
for engine in response['policyEngines']:
print(f"Policy Engine: {engine['name']} (ID: {engine['policyEngineId']})")
print(f"Status: {engine['status']}")
print(f"Created: {engine['createdAt']}")
print(f"ARN: {engine['policyEngineArn']}")
Scarica Policy Engine
Recupera informazioni dettagliate su uno specifico Policy Engine:
Esempio
- AWS CLI
-
-
aws bedrock-agentcore-control get-policy-engine --policy-engine-id my-policy-engine-id
- AWS Python SDK (Boto3)
-
-
import boto3
client = boto3.client('bedrock-agentcore-control')
response = client.get_policy_engine(
policyEngineId='my-policy-engine-id'
)
print(f"Policy Engine: {response['name']}")
print(f"ID: {response['policyEngineId']}")
print(f"ARN: {response['policyEngineArn']}")
print(f"Status: {response['status']}")
print(f"Created: {response['createdAt']}")
print(f"Updated: {response['updatedAt']}")
Elenca le politiche in un Policy Engine
Visualizza tutte le politiche all'interno di uno specifico Policy Engine:
Esempio
- AWS CLI
-
-
aws bedrock-agentcore-control list-policies --policy-engine-id my-policy-engine-id
- AWS Python SDK (Boto3)
-
-
import boto3
client = boto3.client('bedrock-agentcore-control')
response = client.list_policies(
policyEngineId='my-policy-engine-id'
)
for policy in response['policies']:
print(f"Policy: {policy['name']} (ID: {policy['policyId']})")
print(f"Status: {policy['status']}")
print(f"Description: {policy.get('description', 'No description')}")
print(f"Created: {policy['createdAt']}")
Ottieni Policy
Recupera informazioni dettagliate su una politica specifica:
Esempio
- AWS CLI
-
-
aws bedrock-agentcore-control get-policy --policy-engine-id my-policy-engine-id --policy-id my-policy-id
- AWS Python SDK (Boto3)
-
-
import boto3
client = boto3.client('bedrock-agentcore-control')
response = client.get_policy(
policyId='my-policy-id',
policyEngineId='my-policy-engine-id'
)
print(f"Policy: {response['name']}")
print(f"ID: {response['policyId']}")
print(f"ARN: {response['policyArn']}")
print(f"Status: {response['status']}")
print(f"Created: {response['createdAt']}")
print(f"Updated: {response['updatedAt']}")
print(f"Cedar Statement: {response['definition']['cedar']['statement']}")
Aggiorna le politiche esistenti
Aggiorna la definizione di una politica.
Esempio
- AWS CLI
-
-
aws bedrock-agentcore-control update-policy \
--policy-id my-policy-id \
--policy-engine-id my-policy-engine-id \
--definition '{
"cedar": {
"statement": "permit(principal, action, resource);"
}
}'
- AWS Python SDK (Boto3)
-
-
import boto3
client = boto3.client('bedrock-agentcore-control')
client.update_policy(
policyId='my-policy-id',
policyEngineId='my-policy-engine-id',
definition={
'cedar': {
'statement': 'permit(principal, action, resource);'
}
}
)
waiter = client.get_waiter('policy_active')
waiter.wait(PolicyEngineId="my-policy-engine-id", PolicyId="my-policy-id")
Eliminazione delle policy
Elimina una policy dal Policy Engine.
Esempio
- AWS CLI
-
-
aws bedrock-agentcore-control delete-policy --policy-engine-id my-policy-engine-id --policy-id my-policy-id
- AWS Python SDK (Boto3)
-
-
import boto3
client = boto3.client('bedrock-agentcore-control')
client.delete_policy(policyId='my-policy-id', policyEngineId='my-policy-engine-id')
waiter = client.get_waiter('policy_deleted')
waiter.wait(PolicyEngineId="my-policy-engine-id", PolicyId="my-policy-id")
Elimina Policy Engine
Elimina un intero Policy Engine e tutte le sue politiche.
* Non è possibile eliminare un Policy Engine attualmente collegato a un gateway. Per prima cosa scollegalo aggiornando la configurazione del gateway. * Non è possibile eliminare un Policy Engine che contiene delle policy. Prima elimina tutte le politiche e poi elimina il motore
Esempio
- AWS CLI
-
-
aws bedrock-agentcore-control delete-policy-engine --policy-engine-id my-policy-engine-id
- AWS Python SDK (Boto3)
-
-
import boto3
client = boto3.client('bedrock-agentcore-control')
client.delete_policy_engine(policyEngineId='my-policy-engine-id')
