1. Registry
  2. Packages
  3. AWS Cloud Control
  4. API Docs
  5. agentregistry
  6. Registry

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.78.0
published on Monday, Sep 7, 2026 by Pulumi
aws-native logo aws-native logo

We recommend new projects start with resources from the AWS provider.

Viewing docs for AWS Cloud Control v1.78.0
published on Monday, Sep 7, 2026 by Pulumi

    Definition of AWS::AgentRegistry::Registry Resource Type

    Create Registry Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new Registry(name: string, args?: RegistryArgs, opts?: CustomResourceOptions);
    @overload
    def Registry(resource_name: str,
                 args: Optional[RegistryArgs] = None,
                 opts: Optional[ResourceOptions] = None)
    
    @overload
    def Registry(resource_name: str,
                 opts: Optional[ResourceOptions] = None,
                 approval_configuration: Optional[RegistryApprovalConfigurationArgs] = None,
                 authorizer_type: Optional[RegistryAuthorizerType] = None,
                 description: Optional[str] = None,
                 discovery_configuration: Optional[RegistryDiscoveryConfigurationArgs] = None,
                 name: Optional[str] = None,
                 tags: Optional[Sequence[_root_inputs.TagArgs]] = None)
    func NewRegistry(ctx *Context, name string, args *RegistryArgs, opts ...ResourceOption) (*Registry, error)
    public Registry(string name, RegistryArgs? args = null, CustomResourceOptions? opts = null)
    public Registry(String name, RegistryArgs args)
    public Registry(String name, RegistryArgs args, CustomResourceOptions options)
    
    type: aws-native:agentregistry:Registry
    properties: # The arguments to resource properties.
    options: # Bag of options to control resource's behavior.
    
    
    resource "aws-native_agentregistry_registry" "name" {
        # resource properties
    }

    Parameters

    name string
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args RegistryArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Registry Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The Registry resource accepts the following input properties:

    approval_configuration object
    authorizer_type "CUSTOM_JWT" | "AWS_IAM"
    description string
    The description of the registry.
    discovery_configuration object
    name string
    The name of the registry.
    tags list(object)
    Tags to assign to the registry.
    approvalConfiguration Property Map
    authorizerType "CUSTOM_JWT" | "AWS_IAM"
    description String
    The description of the registry.
    discoveryConfiguration Property Map
    name String
    The name of the registry.
    tags List<Property Map>
    Tags to assign to the registry.

    Outputs

    All input properties are implicitly available as output properties. Additionally, the Registry resource produces the following output properties:

    CreatedAt string
    The timestamp when the registry was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    RegistryArn string
    The Amazon Resource Name (ARN) of the registry.
    RegistryId string
    The unique identifier of the registry.
    Status Pulumi.AwsNative.AgentRegistry.RegistryStatus
    UpdatedAt string
    The timestamp when the registry was last updated.
    CreatedAt string
    The timestamp when the registry was created.
    Id string
    The provider-assigned unique ID for this managed resource.
    RegistryArn string
    The Amazon Resource Name (ARN) of the registry.
    RegistryId string
    The unique identifier of the registry.
    Status RegistryStatus
    UpdatedAt string
    The timestamp when the registry was last updated.
    created_at string
    The timestamp when the registry was created.
    id string
    The provider-assigned unique ID for this managed resource.
    registry_arn string
    The Amazon Resource Name (ARN) of the registry.
    registry_id string
    The unique identifier of the registry.
    status "CREATING" | "READY" | "UPDATING" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETING" | "DELETE_FAILED"
    updated_at string
    The timestamp when the registry was last updated.
    createdAt String
    The timestamp when the registry was created.
    id String
    The provider-assigned unique ID for this managed resource.
    registryArn String
    The Amazon Resource Name (ARN) of the registry.
    registryId String
    The unique identifier of the registry.
    status RegistryStatus
    updatedAt String
    The timestamp when the registry was last updated.
    createdAt string
    The timestamp when the registry was created.
    id string
    The provider-assigned unique ID for this managed resource.
    registryArn string
    The Amazon Resource Name (ARN) of the registry.
    registryId string
    The unique identifier of the registry.
    status RegistryStatus
    updatedAt string
    The timestamp when the registry was last updated.
    created_at str
    The timestamp when the registry was created.
    id str
    The provider-assigned unique ID for this managed resource.
    registry_arn str
    The Amazon Resource Name (ARN) of the registry.
    registry_id str
    The unique identifier of the registry.
    status RegistryStatus
    updated_at str
    The timestamp when the registry was last updated.
    createdAt String
    The timestamp when the registry was created.
    id String
    The provider-assigned unique ID for this managed resource.
    registryArn String
    The Amazon Resource Name (ARN) of the registry.
    registryId String
    The unique identifier of the registry.
    status "CREATING" | "READY" | "UPDATING" | "CREATE_FAILED" | "UPDATE_FAILED" | "DELETING" | "DELETE_FAILED"
    updatedAt String
    The timestamp when the registry was last updated.

    Supporting Types

    RegistryApprovalConfiguration, RegistryApprovalConfigurationArgs

    Configuration for the registry's record approval workflow.
    AutoApprovalRules List<Pulumi.AwsNative.AgentRegistry.RegistryAutoApprovalRule>
    The rules that determine which registry records are automatically approved on submission. When omitted or empty, submitted records require manual review.
    AutoApprovalRules []RegistryAutoApprovalRule
    The rules that determine which registry records are automatically approved on submission. When omitted or empty, submitted records require manual review.
    auto_approval_rules list("APPROVE_ALL")
    The rules that determine which registry records are automatically approved on submission. When omitted or empty, submitted records require manual review.
    autoApprovalRules List<RegistryAutoApprovalRule>
    The rules that determine which registry records are automatically approved on submission. When omitted or empty, submitted records require manual review.
    autoApprovalRules RegistryAutoApprovalRule[]
    The rules that determine which registry records are automatically approved on submission. When omitted or empty, submitted records require manual review.
    auto_approval_rules Sequence[RegistryAutoApprovalRule]
    The rules that determine which registry records are automatically approved on submission. When omitted or empty, submitted records require manual review.
    autoApprovalRules List<"APPROVE_ALL">
    The rules that determine which registry records are automatically approved on submission. When omitted or empty, submitted records require manual review.

    RegistryAuthorizerConfiguration, RegistryAuthorizerConfigurationArgs

    The authorizer configuration for the registry. This is a union - specify exactly one member.

    RegistryAuthorizerType, RegistryAuthorizerTypeArgs

    CustomJwt
    CUSTOM_JWT
    AwsIam
    AWS_IAM
    RegistryAuthorizerTypeCustomJwt
    CUSTOM_JWT
    RegistryAuthorizerTypeAwsIam
    AWS_IAM
    "CUSTOM_JWT"
    CUSTOM_JWT
    "AWS_IAM"
    AWS_IAM
    CustomJwt
    CUSTOM_JWT
    AwsIam
    AWS_IAM
    CustomJwt
    CUSTOM_JWT
    AwsIam
    AWS_IAM
    CUSTOM_JWT
    CUSTOM_JWT
    AWS_IAM
    AWS_IAM
    "CUSTOM_JWT"
    CUSTOM_JWT
    "AWS_IAM"
    AWS_IAM

    RegistryAuthorizingClaimMatchValueType, RegistryAuthorizingClaimMatchValueTypeArgs

    The value and match operator used to authorize a claim during JWT validation.

    RegistryAuthorizingClaimMatchValueTypeClaimMatchOperator, RegistryAuthorizingClaimMatchValueTypeClaimMatchOperatorArgs

    EqualsValue
    EQUALS
    Contains
    CONTAINS
    ContainsAny
    CONTAINS_ANY
    RegistryAuthorizingClaimMatchValueTypeClaimMatchOperatorEquals
    EQUALS
    RegistryAuthorizingClaimMatchValueTypeClaimMatchOperatorContains
    CONTAINS
    RegistryAuthorizingClaimMatchValueTypeClaimMatchOperatorContainsAny
    CONTAINS_ANY
    "EQUALS"
    EQUALS
    "CONTAINS"
    CONTAINS
    "CONTAINS_ANY"
    CONTAINS_ANY
    Equals
    EQUALS
    Contains
    CONTAINS
    ContainsAny
    CONTAINS_ANY
    Equals
    EQUALS
    Contains
    CONTAINS
    ContainsAny
    CONTAINS_ANY
    EQUALS
    EQUALS
    CONTAINS
    CONTAINS
    CONTAINS_ANY
    CONTAINS_ANY
    "EQUALS"
    EQUALS
    "CONTAINS"
    CONTAINS
    "CONTAINS_ANY"
    CONTAINS_ANY

    RegistryAutoApprovalRule, RegistryAutoApprovalRuleArgs

    ApproveAll
    APPROVE_ALL
    RegistryAutoApprovalRuleApproveAll
    APPROVE_ALL
    "APPROVE_ALL"
    APPROVE_ALL
    ApproveAll
    APPROVE_ALL
    ApproveAll
    APPROVE_ALL
    APPROVE_ALL
    APPROVE_ALL
    "APPROVE_ALL"
    APPROVE_ALL

    RegistryClaimMatchValueType, RegistryClaimMatchValueTypeArgs

    The expected value used to match a claim. Exactly one member is set.

    RegistryCustomClaimValidationType, RegistryCustomClaimValidationTypeArgs

    A validation rule applied to a single claim of an inbound JWT.

    RegistryCustomClaimValidationTypeInboundTokenClaimValueType, RegistryCustomClaimValidationTypeInboundTokenClaimValueTypeArgs

    String
    STRING
    StringArray
    STRING_ARRAY
    RegistryCustomClaimValidationTypeInboundTokenClaimValueTypeString
    STRING
    RegistryCustomClaimValidationTypeInboundTokenClaimValueTypeStringArray
    STRING_ARRAY
    "STRING"
    STRING
    "STRING_ARRAY"
    STRING_ARRAY
    String
    STRING
    StringArray
    STRING_ARRAY
    String
    STRING
    StringArray
    STRING_ARRAY
    STRING
    STRING
    STRING_ARRAY
    STRING_ARRAY
    "STRING"
    STRING
    "STRING_ARRAY"
    STRING_ARRAY

    RegistryCustomJwtAuthorizerConfiguration, RegistryCustomJwtAuthorizerConfigurationArgs

    Configuration for a custom JWT authorizer that validates inbound bearer tokens against an OpenID Connect identity provider.
    DiscoveryUrl string
    The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
    AllowedAudience List<string>
    The audience values accepted during JWT validation.
    AllowedClients List<string>
    The client identifiers accepted during JWT validation.
    AllowedScopes List<string>
    The scopes accepted during JWT validation.
    CustomClaims List<Pulumi.AwsNative.AgentRegistry.Inputs.RegistryCustomClaimValidationType>
    Additional custom claim validations applied to the inbound JWT.
    DiscoveryUrl string
    The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
    AllowedAudience []string
    The audience values accepted during JWT validation.
    AllowedClients []string
    The client identifiers accepted during JWT validation.
    AllowedScopes []string
    The scopes accepted during JWT validation.
    CustomClaims []RegistryCustomClaimValidationType
    Additional custom claim validations applied to the inbound JWT.
    discovery_url string
    The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
    allowed_audience list(string)
    The audience values accepted during JWT validation.
    allowed_clients list(string)
    The client identifiers accepted during JWT validation.
    allowed_scopes list(string)
    The scopes accepted during JWT validation.
    custom_claims list(object)
    Additional custom claim validations applied to the inbound JWT.
    discoveryUrl String
    The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
    allowedAudience List<String>
    The audience values accepted during JWT validation.
    allowedClients List<String>
    The client identifiers accepted during JWT validation.
    allowedScopes List<String>
    The scopes accepted during JWT validation.
    customClaims List<RegistryCustomClaimValidationType>
    Additional custom claim validations applied to the inbound JWT.
    discoveryUrl string
    The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
    allowedAudience string[]
    The audience values accepted during JWT validation.
    allowedClients string[]
    The client identifiers accepted during JWT validation.
    allowedScopes string[]
    The scopes accepted during JWT validation.
    customClaims RegistryCustomClaimValidationType[]
    Additional custom claim validations applied to the inbound JWT.
    discovery_url str
    The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
    allowed_audience Sequence[str]
    The audience values accepted during JWT validation.
    allowed_clients Sequence[str]
    The client identifiers accepted during JWT validation.
    allowed_scopes Sequence[str]
    The scopes accepted during JWT validation.
    custom_claims Sequence[RegistryCustomClaimValidationType]
    Additional custom claim validations applied to the inbound JWT.
    discoveryUrl String
    The OpenID Connect discovery URL used to retrieve the identity provider's metadata and signing keys.
    allowedAudience List<String>
    The audience values accepted during JWT validation.
    allowedClients List<String>
    The client identifiers accepted during JWT validation.
    allowedScopes List<String>
    The scopes accepted during JWT validation.
    customClaims List<Property Map>
    Additional custom claim validations applied to the inbound JWT.

    RegistryDiscoveryConfiguration, RegistryDiscoveryConfigurationArgs

    Discovery configuration for the registry. Controls how consumers are authorized to search the registry and invoke its MCP endpoint.

    RegistryStatus, RegistryStatusArgs

    Creating
    CREATING
    Ready
    READY
    Updating
    UPDATING
    CreateFailed
    CREATE_FAILED
    UpdateFailed
    UPDATE_FAILED
    Deleting
    DELETING
    DeleteFailed
    DELETE_FAILED
    RegistryStatusCreating
    CREATING
    RegistryStatusReady
    READY
    RegistryStatusUpdating
    UPDATING
    RegistryStatusCreateFailed
    CREATE_FAILED
    RegistryStatusUpdateFailed
    UPDATE_FAILED
    RegistryStatusDeleting
    DELETING
    RegistryStatusDeleteFailed
    DELETE_FAILED
    "CREATING"
    CREATING
    "READY"
    READY
    "UPDATING"
    UPDATING
    "CREATE_FAILED"
    CREATE_FAILED
    "UPDATE_FAILED"
    UPDATE_FAILED
    "DELETING"
    DELETING
    "DELETE_FAILED"
    DELETE_FAILED
    Creating
    CREATING
    Ready
    READY
    Updating
    UPDATING
    CreateFailed
    CREATE_FAILED
    UpdateFailed
    UPDATE_FAILED
    Deleting
    DELETING
    DeleteFailed
    DELETE_FAILED
    Creating
    CREATING
    Ready
    READY
    Updating
    UPDATING
    CreateFailed
    CREATE_FAILED
    UpdateFailed
    UPDATE_FAILED
    Deleting
    DELETING
    DeleteFailed
    DELETE_FAILED
    CREATING
    CREATING
    READY
    READY
    UPDATING
    UPDATING
    CREATE_FAILED
    CREATE_FAILED
    UPDATE_FAILED
    UPDATE_FAILED
    DELETING
    DELETING
    DELETE_FAILED
    DELETE_FAILED
    "CREATING"
    CREATING
    "READY"
    READY
    "UPDATING"
    UPDATING
    "CREATE_FAILED"
    CREATE_FAILED
    "UPDATE_FAILED"
    UPDATE_FAILED
    "DELETING"
    DELETING
    "DELETE_FAILED"
    DELETE_FAILED

    Tag, TagArgs

    A set of tags to apply to the resource.
    Key string
    The key name of the tag
    Value string
    The value of the tag
    Key string
    The key name of the tag
    Value string
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag
    key string
    The key name of the tag
    value string
    The value of the tag
    key str
    The key name of the tag
    value str
    The value of the tag
    key String
    The key name of the tag
    value String
    The value of the tag

    Package Details

    Repository
    AWS Native pulumi/pulumi-aws-native
    License
    Apache-2.0
    aws-native logo aws-native logo

    We recommend new projects start with resources from the AWS provider.

    Viewing docs for AWS Cloud Control v1.78.0
    published on Monday, Sep 7, 2026 by Pulumi

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial