Sign in Dashboard Get started
  1. Packages
  2. Packages
  3. AWS
  4. API Docs
  5. bedrock
  6. AgentcoreRegistry
Viewing docs for AWS v7.41.0
published on Friday, Aug 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

aws.bedrock.AgentcoreRegistry

aws logo aws logo
Viewing docs for AWS v7.41.0
published on Friday, Aug 7, 2026 by Pulumi
Schema (JSON)
pulumi/pulumi-aws

    Manages an AWS Bedrock AgentCore Registry. A registry serves as a centralized catalog for organizing and managing registry records, including MCP servers, A2A agents, agent skills, and custom resource types.

    Warning: This resource is deprecated. AWS Agent Registry is currently available in public preview. On August 6, 2026) functionality will move from the bedrock-agentcore namespace to the agent-registry namespace. This resource will continue to work until September 17, 2026 Name of the registry. Must be unique within your account and contain only letters, numbers, hyphens, and underscores. Maximum length of 64 characters.

    The following arguments are optional:

    • approvalConfiguration - (Optional) Approval configuration for registry records. See below.
    • authorizerConfiguration - (Optional) Authorizer configuration for the registry. Required when authorizerType is CUSTOM_JWT. See below.
    • authorizerType - (Optional, Forces new resource) Type of authorizer to use for the registry. Valid values are AWS_IAM (default) and CUSTOM_JWT. This controls the authorization method for the Search and Invoke APIs used by consumers.
    • description - (Optional) Description of the registry.
    • region - (Optional) Region where this resource will be managed. Defaults to the Region set in the provider configuration.

    Create AgentcoreRegistry Resource

    Resources are created with functions called constructors. To learn more about declaring and configuring resources, see Resources.

    Constructor syntax

    new AgentcoreRegistry(name: string, args?: AgentcoreRegistryArgs, opts?: CustomResourceOptions);
    @overload
def AgentcoreRegistry(resource_name: str,
                      args: Optional[AgentcoreRegistryArgs] = None,
                      opts: Optional[ResourceOptions] = None)

@overload
def AgentcoreRegistry(resource_name: str,
                      opts: Optional[ResourceOptions] = None,
                      approval_configurations: Optional[Sequence[AgentcoreRegistryApprovalConfigurationArgs]] = None,
                      authorizer_configuration: Optional[AgentcoreRegistryAuthorizerConfigurationArgs] = None,
                      authorizer_type: Optional[str] = None,
                      description: Optional[str] = None,
                      name: Optional[str] = None,
                      region: Optional[str] = None,
                      timeouts: Optional[AgentcoreRegistryTimeoutsArgs] = None)
    func NewAgentcoreRegistry(ctx *Context, name string, args *AgentcoreRegistryArgs, opts ...ResourceOption) (*AgentcoreRegistry, error)
    public AgentcoreRegistry(string name, AgentcoreRegistryArgs? args = null, CustomResourceOptions? opts = null)
    public AgentcoreRegistry(String name, AgentcoreRegistryArgs args)
public AgentcoreRegistry(String name, AgentcoreRegistryArgs args, CustomResourceOptions options)

    type: aws:bedrock:AgentcoreRegistry
properties: # The arguments to resource properties.
options: # Bag of options to control resource's behavior.


    resource "aws_bedrock_agentcore_registry" "name" {
    # resource properties
}

    Parameters

    name string
    The unique name of the resource.
    args AgentcoreRegistryArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    resource_name str
    The unique name of the resource.
    args AgentcoreRegistryArgs
    The arguments to resource properties.
    opts ResourceOptions
    Bag of options to control resource's behavior.
    ctx Context
    Context object for the current deployment.
    name string
    The unique name of the resource.
    args AgentcoreRegistryArgs
    The arguments to resource properties.
    opts ResourceOption
    Bag of options to control resource's behavior.
    name string
    The unique name of the resource.
    args AgentcoreRegistryArgs
    The arguments to resource properties.
    opts CustomResourceOptions
    Bag of options to control resource's behavior.
    name String
    The unique name of the resource.
    args AgentcoreRegistryArgs
    The arguments to resource properties.
    options CustomResourceOptions
    Bag of options to control resource's behavior.

    Constructor example

    The following reference example uses placeholder values for all input properties.

    var agentcoreRegistryResource = new Aws.Bedrock.AgentcoreRegistry("agentcoreRegistryResource", new()
{
    ApprovalConfigurations = new[]
    {
        new Aws.Bedrock.Inputs.AgentcoreRegistryApprovalConfigurationArgs
        {
            AutoApproval = false,
        },
    },
    AuthorizerConfiguration = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationArgs
    {
        CustomJwtAuthorizer = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerArgs
        {
            DiscoveryUrl = "string",
            AllowedAudiences = new[]
            {
                "string",
            },
            AllowedClients = new[]
            {
                "string",
            },
            AllowedScopes = new[]
            {
                "string",
            },
            AllowedWorkloadConfiguration = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationArgs
            {
                HostingEnvironments = new[]
                {
                    new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationHostingEnvironmentArgs
                    {
                        Arn = "string",
                    },
                },
                WorkloadIdentities = new[]
                {
                    "string",
                },
            },
            CustomClaims = new[]
            {
                new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs
                {
                    AuthorizingClaimMatchValue = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs
                    {
                        ClaimMatchOperator = "string",
                        ClaimMatchValue = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs
                        {
                            MatchValueString = "string",
                            MatchValueStringLists = new[]
                            {
                                "string",
                            },
                        },
                    },
                    InboundTokenClaimName = "string",
                    InboundTokenClaimValueType = "string",
                },
            },
            PrivateEndpoint = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs
            {
                ManagedVpcResource = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs
                {
                    EndpointIpAddressType = "string",
                    SubnetIds = new[]
                    {
                        "string",
                    },
                    VpcIdentifier = "string",
                    RoutingDomain = "string",
                    SecurityGroupIds = new[]
                    {
                        "string",
                    },
                    Tags = 
                    {
                        { "string", "string" },
                    },
                },
                SelfManagedLatticeResource = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs
                {
                    ResourceConfigurationIdentifier = "string",
                },
            },
            PrivateEndpointOverrides = new[]
            {
                new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs
                {
                    Domain = "string",
                    PrivateEndpoint = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs
                    {
                        ManagedVpcResource = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs
                        {
                            EndpointIpAddressType = "string",
                            SubnetIds = new[]
                            {
                                "string",
                            },
                            VpcIdentifier = "string",
                            RoutingDomain = "string",
                            SecurityGroupIds = new[]
                            {
                                "string",
                            },
                            Tags = 
                            {
                                { "string", "string" },
                            },
                        },
                        SelfManagedLatticeResource = new Aws.Bedrock.Inputs.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs
                        {
                            ResourceConfigurationIdentifier = "string",
                        },
                    },
                },
            },
        },
    },
    AuthorizerType = "string",
    Description = "string",
    Name = "string",
    Region = "string",
    Timeouts = new Aws.Bedrock.Inputs.AgentcoreRegistryTimeoutsArgs
    {
        Create = "string",
        Delete = "string",
        Update = "string",
    },
});

    example, err := bedrock.NewAgentcoreRegistry(ctx, "agentcoreRegistryResource", &bedrock.AgentcoreRegistryArgs{
	ApprovalConfigurations: bedrock.AgentcoreRegistryApprovalConfigurationArray{
		&bedrock.AgentcoreRegistryApprovalConfigurationArgs{
			AutoApproval: pulumi.Bool(false),
		},
	},
	AuthorizerConfiguration: &bedrock.AgentcoreRegistryAuthorizerConfigurationArgs{
		CustomJwtAuthorizer: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerArgs{
			DiscoveryUrl: pulumi.String("string"),
			AllowedAudiences: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedClients: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedScopes: pulumi.StringArray{
				pulumi.String("string"),
			},
			AllowedWorkloadConfiguration: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationArgs{
				HostingEnvironments: bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationHostingEnvironmentArray{
					&bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationHostingEnvironmentArgs{
						Arn: pulumi.String("string"),
					},
				},
				WorkloadIdentities: pulumi.StringArray{
					pulumi.String("string"),
				},
			},
			CustomClaims: bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArray{
				&bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs{
					AuthorizingClaimMatchValue: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs{
						ClaimMatchOperator: pulumi.String("string"),
						ClaimMatchValue: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs{
							MatchValueString: pulumi.String("string"),
							MatchValueStringLists: pulumi.StringArray{
								pulumi.String("string"),
							},
						},
					},
					InboundTokenClaimName:      pulumi.String("string"),
					InboundTokenClaimValueType: pulumi.String("string"),
				},
			},
			PrivateEndpoint: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs{
				ManagedVpcResource: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs{
					EndpointIpAddressType: pulumi.String("string"),
					SubnetIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					VpcIdentifier: pulumi.String("string"),
					RoutingDomain: pulumi.String("string"),
					SecurityGroupIds: pulumi.StringArray{
						pulumi.String("string"),
					},
					Tags: pulumi.StringMap{
						"string": pulumi.String("string"),
					},
				},
				SelfManagedLatticeResource: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs{
					ResourceConfigurationIdentifier: pulumi.String("string"),
				},
			},
			PrivateEndpointOverrides: bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArray{
				&bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs{
					Domain: pulumi.String("string"),
					PrivateEndpoint: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs{
						ManagedVpcResource: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs{
							EndpointIpAddressType: pulumi.String("string"),
							SubnetIds: pulumi.StringArray{
								pulumi.String("string"),
							},
							VpcIdentifier: pulumi.String("string"),
							RoutingDomain: pulumi.String("string"),
							SecurityGroupIds: pulumi.StringArray{
								pulumi.String("string"),
							},
							Tags: pulumi.StringMap{
								"string": pulumi.String("string"),
							},
						},
						SelfManagedLatticeResource: &bedrock.AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs{
							ResourceConfigurationIdentifier: pulumi.String("string"),
						},
					},
				},
			},
		},
	},
	AuthorizerType: pulumi.String("string"),
	Description:    pulumi.String("string"),
	Name:           pulumi.String("string"),
	Region:         pulumi.String("string"),
	Timeouts: &bedrock.AgentcoreRegistryTimeoutsArgs{
		Create: pulumi.String("string"),
		Delete: pulumi.String("string"),
		Update: pulumi.String("string"),
	},
})

    resource "aws_bedrock_agentcore_registry" "agentcoreRegistryResource" {
  lifecycle {
    create_before_destroy = true
  }
  approval_configurations {
    auto_approval = false
  }
  authorizer_configuration = {
    custom_jwt_authorizer = {
      discovery_url     = "string"
      allowed_audiences = ["string"]
      allowed_clients   = ["string"]
      allowed_scopes    = ["string"]
      allowed_workload_configuration = {
        hosting_environments = [{
          arn = "string"
        }]
        workload_identities = ["string"]
      }
      custom_claims = [{
        authorizing_claim_match_value = {
          claim_match_operator = "string"
          claim_match_value = {
            match_value_string       = "string"
            match_value_string_lists = ["string"]
          }
        }
        inbound_token_claim_name       = "string"
        inbound_token_claim_value_type = "string"
      }]
      private_endpoint = {
        managed_vpc_resource = {
          endpoint_ip_address_type = "string"
          subnet_ids               = ["string"]
          vpc_identifier           = "string"
          routing_domain           = "string"
          security_group_ids       = ["string"]
          tags = {
            "string" = "string"
          }
        }
        self_managed_lattice_resource = {
          resource_configuration_identifier = "string"
        }
      }
      private_endpoint_overrides = [{
        domain = "string"
        private_endpoint = {
          managed_vpc_resource = {
            endpoint_ip_address_type = "string"
            subnet_ids               = ["string"]
            vpc_identifier           = "string"
            routing_domain           = "string"
            security_group_ids       = ["string"]
            tags = {
              "string" = "string"
            }
          }
          self_managed_lattice_resource = {
            resource_configuration_identifier = "string"
          }
        }
      }]
    }
  }
  authorizer_type = "string"
  description     = "string"
  name            = "string"
  region          = "string"
  timeouts = {
    create = "string"
    delete = "string"
    update = "string"
  }
}

    var agentcoreRegistryResource = new AgentcoreRegistry("agentcoreRegistryResource", AgentcoreRegistryArgs.builder()
    .approvalConfigurations(AgentcoreRegistryApprovalConfigurationArgs.builder()
        .autoApproval(false)
        .build())
    .authorizerConfiguration(AgentcoreRegistryAuthorizerConfigurationArgs.builder()
        .customJwtAuthorizer(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerArgs.builder()
            .discoveryUrl("string")
            .allowedAudiences("string")
            .allowedClients("string")
            .allowedScopes("string")
            .allowedWorkloadConfiguration(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationArgs.builder()
                .hostingEnvironments(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationHostingEnvironmentArgs.builder()
                    .arn("string")
                    .build())
                .workloadIdentities("string")
                .build())
            .customClaims(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs.builder()
                .authorizingClaimMatchValue(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs.builder()
                    .claimMatchOperator("string")
                    .claimMatchValue(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs.builder()
                        .matchValueString("string")
                        .matchValueStringLists("string")
                        .build())
                    .build())
                .inboundTokenClaimName("string")
                .inboundTokenClaimValueType("string")
                .build())
            .privateEndpoint(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs.builder()
                .managedVpcResource(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs.builder()
                    .endpointIpAddressType("string")
                    .subnetIds("string")
                    .vpcIdentifier("string")
                    .routingDomain("string")
                    .securityGroupIds("string")
                    .tags(Map.of("string", "string"))
                    .build())
                .selfManagedLatticeResource(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs.builder()
                    .resourceConfigurationIdentifier("string")
                    .build())
                .build())
            .privateEndpointOverrides(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs.builder()
                .domain("string")
                .privateEndpoint(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs.builder()
                    .managedVpcResource(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs.builder()
                        .endpointIpAddressType("string")
                        .subnetIds("string")
                        .vpcIdentifier("string")
                        .routingDomain("string")
                        .securityGroupIds("string")
                        .tags(Map.of("string", "string"))
                        .build())
                    .selfManagedLatticeResource(AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs.builder()
                        .resourceConfigurationIdentifier("string")
                        .build())
                    .build())
                .build())
            .build())
        .build())
    .authorizerType("string")
    .description("string")
    .name("string")
    .region("string")
    .timeouts(AgentcoreRegistryTimeoutsArgs.builder()
        .create("string")
        .delete("string")
        .update("string")
        .build())
    .build());

    agentcore_registry_resource = aws.bedrock.AgentcoreRegistry("agentcoreRegistryResource",
    approval_configurations=[{
        "auto_approval": False,
    }],
    authorizer_configuration={
        "custom_jwt_authorizer": {
            "discovery_url": "string",
            "allowed_audiences": ["string"],
            "allowed_clients": ["string"],
            "allowed_scopes": ["string"],
            "allowed_workload_configuration": {
                "hosting_environments": [{
                    "arn": "string",
                }],
                "workload_identities": ["string"],
            },
            "custom_claims": [{
                "authorizing_claim_match_value": {
                    "claim_match_operator": "string",
                    "claim_match_value": {
                        "match_value_string": "string",
                        "match_value_string_lists": ["string"],
                    },
                },
                "inbound_token_claim_name": "string",
                "inbound_token_claim_value_type": "string",
            }],
            "private_endpoint": {
                "managed_vpc_resource": {
                    "endpoint_ip_address_type": "string",
                    "subnet_ids": ["string"],
                    "vpc_identifier": "string",
                    "routing_domain": "string",
                    "security_group_ids": ["string"],
                    "tags": {
                        "string": "string",
                    },
                },
                "self_managed_lattice_resource": {
                    "resource_configuration_identifier": "string",
                },
            },
            "private_endpoint_overrides": [{
                "domain": "string",
                "private_endpoint": {
                    "managed_vpc_resource": {
                        "endpoint_ip_address_type": "string",
                        "subnet_ids": ["string"],
                        "vpc_identifier": "string",
                        "routing_domain": "string",
                        "security_group_ids": ["string"],
                        "tags": {
                            "string": "string",
                        },
                    },
                    "self_managed_lattice_resource": {
                        "resource_configuration_identifier": "string",
                    },
                },
            }],
        },
    },
    authorizer_type="string",
    description="string",
    name="string",
    region="string",
    timeouts={
        "create": "string",
        "delete": "string",
        "update": "string",
    })

    const agentcoreRegistryResource = new aws.bedrock.AgentcoreRegistry("agentcoreRegistryResource", {
    approvalConfigurations: [{
        autoApproval: false,
    }],
    authorizerConfiguration: {
        customJwtAuthorizer: {
            discoveryUrl: "string",
            allowedAudiences: ["string"],
            allowedClients: ["string"],
            allowedScopes: ["string"],
            allowedWorkloadConfiguration: {
                hostingEnvironments: [{
                    arn: "string",
                }],
                workloadIdentities: ["string"],
            },
            customClaims: [{
                authorizingClaimMatchValue: {
                    claimMatchOperator: "string",
                    claimMatchValue: {
                        matchValueString: "string",
                        matchValueStringLists: ["string"],
                    },
                },
                inboundTokenClaimName: "string",
                inboundTokenClaimValueType: "string",
            }],
            privateEndpoint: {
                managedVpcResource: {
                    endpointIpAddressType: "string",
                    subnetIds: ["string"],
                    vpcIdentifier: "string",
                    routingDomain: "string",
                    securityGroupIds: ["string"],
                    tags: {
                        string: "string",
                    },
                },
                selfManagedLatticeResource: {
                    resourceConfigurationIdentifier: "string",
                },
            },
            privateEndpointOverrides: [{
                domain: "string",
                privateEndpoint: {
                    managedVpcResource: {
                        endpointIpAddressType: "string",
                        subnetIds: ["string"],
                        vpcIdentifier: "string",
                        routingDomain: "string",
                        securityGroupIds: ["string"],
                        tags: {
                            string: "string",
                        },
                    },
                    selfManagedLatticeResource: {
                        resourceConfigurationIdentifier: "string",
                    },
                },
            }],
        },
    },
    authorizerType: "string",
    description: "string",
    name: "string",
    region: "string",
    timeouts: {
        create: "string",
        "delete": "string",
        update: "string",
    },
});

    type: aws:bedrock:AgentcoreRegistry
properties:
    approvalConfigurations:
        - autoApproval: false
    authorizerConfiguration:
        customJwtAuthorizer:
            allowedAudiences:
                - string
            allowedClients:
                - string
            allowedScopes:
                - string
            allowedWorkloadConfiguration:
                hostingEnvironments:
                    - arn: string
                workloadIdentities:
                    - string
            customClaims:
                - authorizingClaimMatchValue:
                    claimMatchOperator: string
                    claimMatchValue:
                        matchValueString: string
                        matchValueStringLists:
                            - string
                  inboundTokenClaimName: string
                  inboundTokenClaimValueType: string
            discoveryUrl: string
            privateEndpoint:
                managedVpcResource:
                    endpointIpAddressType: string
                    routingDomain: string
                    securityGroupIds:
                        - string
                    subnetIds:
                        - string
                    tags:
                        string: string
                    vpcIdentifier: string
                selfManagedLatticeResource:
                    resourceConfigurationIdentifier: string
            privateEndpointOverrides:
                - domain: string
                  privateEndpoint:
                    managedVpcResource:
                        endpointIpAddressType: string
                        routingDomain: string
                        securityGroupIds:
                            - string
                        subnetIds:
                            - string
                        tags:
                            string: string
                        vpcIdentifier: string
                    selfManagedLatticeResource:
                        resourceConfigurationIdentifier: string
    authorizerType: string
    description: string
    name: string
    region: string
    timeouts:
        create: string
        delete: string
        update: string

    AgentcoreRegistry Resource Properties

    To learn more about resource properties and how to use them, see Inputs and Outputs in the Architecture and Concepts docs.

    Inputs

    In Python, inputs that are objects can be passed either as argument classes or as dictionary literals.

    The AgentcoreRegistry resource accepts the following input properties:

    approval_configurations list(object)
    authorizer_configuration object
    authorizer_type string
    description string
    name string
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    timeouts object

    Outputs

    All input properties are implicitly available as output properties. Additionally, the AgentcoreRegistry resource produces the following output properties:

    Id string
    The provider-assigned unique ID for this managed resource.
    RegistryArn string
    ARN of the registry.
    RegistryId string
    Unique identifier of the registry.
    Id string
    The provider-assigned unique ID for this managed resource.
    RegistryArn string
    ARN of the registry.
    RegistryId string
    Unique identifier of the registry.
    id string
    The provider-assigned unique ID for this managed resource.
    registry_arn string
    ARN of the registry.
    registry_id string
    Unique identifier of the registry.
    id String
    The provider-assigned unique ID for this managed resource.
    registryArn String
    ARN of the registry.
    registryId String
    Unique identifier of the registry.
    id string
    The provider-assigned unique ID for this managed resource.
    registryArn string
    ARN of the registry.
    registryId string
    Unique identifier of the registry.
    id str
    The provider-assigned unique ID for this managed resource.
    registry_arn str
    ARN of the registry.
    registry_id str
    Unique identifier of the registry.
    id String
    The provider-assigned unique ID for this managed resource.
    registryArn String
    ARN of the registry.
    registryId String
    Unique identifier of the registry.

    Look up Existing AgentcoreRegistry Resource

    Get an existing AgentcoreRegistry resource’s state with the given name, ID, and optional extra properties used to qualify the lookup.

    public static get(name: string, id: Input<ID>, state?: AgentcoreRegistryState, opts?: CustomResourceOptions): AgentcoreRegistry
    @staticmethod
def get(resource_name: str,
        id: str,
        opts: Optional[ResourceOptions] = None,
        approval_configurations: Optional[Sequence[AgentcoreRegistryApprovalConfigurationArgs]] = None,
        authorizer_configuration: Optional[AgentcoreRegistryAuthorizerConfigurationArgs] = None,
        authorizer_type: Optional[str] = None,
        description: Optional[str] = None,
        name: Optional[str] = None,
        region: Optional[str] = None,
        registry_arn: Optional[str] = None,
        registry_id: Optional[str] = None,
        timeouts: Optional[AgentcoreRegistryTimeoutsArgs] = None) -> AgentcoreRegistry
    func GetAgentcoreRegistry(ctx *Context, name string, id IDInput, state *AgentcoreRegistryState, opts ...ResourceOption) (*AgentcoreRegistry, error)
    public static AgentcoreRegistry Get(string name, Input<string> id, AgentcoreRegistryState? state, CustomResourceOptions? opts = null)
    public static AgentcoreRegistry get(String name, Output<String> id, AgentcoreRegistryState state, CustomResourceOptions options)
    resources:  _:    type: aws:bedrock:AgentcoreRegistry    get:      id: ${id}
    import {
  to = aws_bedrock_agentcore_registry.example
  id = "${id}"
}
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    resource_name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    name
    The unique name of the resulting resource.
    id
    The unique provider ID of the resource to lookup.
    state
    Any extra arguments used during the lookup.
    opts
    A bag of options that control this resource's behavior.
    The following state arguments are supported:
    ApprovalConfigurations List<AgentcoreRegistryApprovalConfiguration>
    AuthorizerConfiguration AgentcoreRegistryAuthorizerConfiguration
    AuthorizerType string
    Description string
    Name string
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RegistryArn string
    ARN of the registry.
    RegistryId string
    Unique identifier of the registry.
    Timeouts AgentcoreRegistryTimeouts
    ApprovalConfigurations []AgentcoreRegistryApprovalConfigurationArgs
    AuthorizerConfiguration AgentcoreRegistryAuthorizerConfigurationArgs
    AuthorizerType string
    Description string
    Name string
    Region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    RegistryArn string
    ARN of the registry.
    RegistryId string
    Unique identifier of the registry.
    Timeouts AgentcoreRegistryTimeoutsArgs
    approval_configurations list(object)
    authorizer_configuration object
    authorizer_type string
    description string
    name string
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    registry_arn string
    ARN of the registry.
    registry_id string
    Unique identifier of the registry.
    timeouts object
    approvalConfigurations List<AgentcoreRegistryApprovalConfiguration>
    authorizerConfiguration AgentcoreRegistryAuthorizerConfiguration
    authorizerType String
    description String
    name String
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    registryArn String
    ARN of the registry.
    registryId String
    Unique identifier of the registry.
    timeouts AgentcoreRegistryTimeouts
    approvalConfigurations AgentcoreRegistryApprovalConfiguration[]
    authorizerConfiguration AgentcoreRegistryAuthorizerConfiguration
    authorizerType string
    description string
    name string
    region string
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    registryArn string
    ARN of the registry.
    registryId string
    Unique identifier of the registry.
    timeouts AgentcoreRegistryTimeouts
    approvalConfigurations List<Property Map>
    authorizerConfiguration Property Map
    authorizerType String
    description String
    name String
    region String
    Region where this resource will be managed. Defaults to the Region set in the provider configuration.
    registryArn String
    ARN of the registry.
    registryId String
    Unique identifier of the registry.
    timeouts Property Map

    Supporting Types

    AgentcoreRegistryApprovalConfiguration, AgentcoreRegistryApprovalConfigurationArgs

    autoApproval Boolean
    autoApproval boolean
    autoApproval Boolean

    AgentcoreRegistryAuthorizerConfiguration, AgentcoreRegistryAuthorizerConfigurationArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizer, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfiguration, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationHostingEnvironment, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerAllowedWorkloadConfigurationHostingEnvironmentArgs

    Arn string
    Arn string
    arn string
    arn String
    arn string
    arn str
    arn String

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaim, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValue, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValue, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerCustomClaimAuthorizingClaimMatchValueClaimMatchValueArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpoint, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResource, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointManagedVpcResourceArgs

    EndpointIpAddressType string
    SubnetIds List<string>
    VpcIdentifier string
    RoutingDomain string
    SecurityGroupIds List<string>
    Tags Dictionary<string, string>
    EndpointIpAddressType string
    SubnetIds []string
    VpcIdentifier string
    RoutingDomain string
    SecurityGroupIds []string
    Tags map[string]string
    endpoint_ip_address_type string
    subnet_ids list(string)
    vpc_identifier string
    routing_domain string
    security_group_ids list(string)
    tags map(string)
    endpointIpAddressType String
    subnetIds List<String>
    vpcIdentifier String
    routingDomain String
    securityGroupIds List<String>
    tags Map<String,String>
    endpointIpAddressType string
    subnetIds string[]
    vpcIdentifier string
    routingDomain string
    securityGroupIds string[]
    tags {[key: string]: string}
    endpoint_ip_address_type str
    subnet_ids Sequence[str]
    vpc_identifier str
    routing_domain str
    security_group_ids Sequence[str]
    tags Mapping[str, str]
    endpointIpAddressType String
    subnetIds List<String>
    vpcIdentifier String
    routingDomain String
    securityGroupIds List<String>
    tags Map<String>

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverride, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverrideArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpoint, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResource, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointManagedVpcResourceArgs

    EndpointIpAddressType string
    SubnetIds List<string>
    VpcIdentifier string
    RoutingDomain string
    SecurityGroupIds List<string>
    Tags Dictionary<string, string>
    EndpointIpAddressType string
    SubnetIds []string
    VpcIdentifier string
    RoutingDomain string
    SecurityGroupIds []string
    Tags map[string]string
    endpoint_ip_address_type string
    subnet_ids list(string)
    vpc_identifier string
    routing_domain string
    security_group_ids list(string)
    tags map(string)
    endpointIpAddressType String
    subnetIds List<String>
    vpcIdentifier String
    routingDomain String
    securityGroupIds List<String>
    tags Map<String,String>
    endpointIpAddressType string
    subnetIds string[]
    vpcIdentifier string
    routingDomain string
    securityGroupIds string[]
    tags {[key: string]: string}
    endpoint_ip_address_type str
    subnet_ids Sequence[str]
    vpc_identifier str
    routing_domain str
    security_group_ids Sequence[str]
    tags Mapping[str, str]
    endpointIpAddressType String
    subnetIds List<String>
    vpcIdentifier String
    routingDomain String
    securityGroupIds List<String>
    tags Map<String>

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResource, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointOverridePrivateEndpointSelfManagedLatticeResourceArgs

    AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResource, AgentcoreRegistryAuthorizerConfigurationCustomJwtAuthorizerPrivateEndpointSelfManagedLatticeResourceArgs

    AgentcoreRegistryTimeouts, AgentcoreRegistryTimeoutsArgs

    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    Delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    Update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update string
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update str
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    create String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).
    delete String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours). Setting a timeout for a Delete operation is only applicable if changes are saved into state before the destroy operation occurs.
    update String
    A string that can be parsed as a duration consisting of numbers and unit suffixes, such as "30s" or "2h45m". Valid time units are "s" (seconds), "m" (minutes), "h" (hours).

    Import

    Identity Schema

    Required

    • registryId (String) Registry ID.

    Optional

    • accountId (String) AWS account ID for this resource.
    • region (String) AWS Region for this resource.

    Using pulumi import, import a Bedrock AgentCore Registry by registry ID. For example:

    $ pulumi import aws:bedrock/agentcoreRegistry:AgentcoreRegistry example registry-id-12345678

    To learn more about importing existing cloud resources, see Importing resources.

    Package Details

    Repository
    AWS Classic pulumi/pulumi-aws
    License
    Apache-2.0
    Notes
    This Pulumi package is based on the aws Terraform Provider.
    aws logo aws logo
    Viewing docs for AWS v7.41.0
    published on Friday, Aug 7, 2026 by Pulumi
    Schema (JSON)
    pulumi/pulumi-aws

      Try Pulumi Cloud free.
      Your team will thank you.

      Start free trial