Skip to content

feat(gateway): manage execution role policies #1994

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Draft
aidandaly24 wants to merge 9 commits into from
Draft

feat(gateway): manage execution role policies #1994

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
9 commits
Select commit Hold shift + click to select a range
6e7d1db
feat(gateway): manage execution role policies
aidandaly24 Aug 13, 2026
64282c3
fix(gateway): grant JWT workload token access
aidandaly24 Aug 13, 2026
00183a4
fix(gateway): scope credential token access
aidandaly24 Aug 13, 2026
2f90c25
fix(gateway): grant token vault KMS access
aidandaly24 Aug 13, 2026
116d459
test(gateway): minimize delete fixture update
aidandaly24 Aug 13, 2026
03a78dc
fix(gateway): harden execution role reconciliation
aidandaly24 Aug 13, 2026
69af5e2
fix(gateway): close execution role policy gaps
aidandaly24 Aug 13, 2026
3bc012d
fix(gateway): recover policy reconciliation
aidandaly24 Aug 13, 2026
5901331
fix(gateway): tighten policy recovery paths
aidandaly24 Aug 13, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 8 additions & 0 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -362,6 +362,14 @@ agentcore gateway rule list
agentcore gateway rule get
```

Gateway execution-role reconciliation supports one mutation at a time per
Gateway. Do not run Gateway, Target, or Connector create, update, or delete
commands concurrently for the same Gateway; the CLI does not provide
cross-process locking. If a Gateway deletion remains indeterminate after
retries, the CLI retains `AgentCoreCliGatewayExecutionPolicy` rather than risk
removing permissions from a live Gateway. After confirming the Gateway is
deleted, remove that inline policy manually from its former execution role.

---

# Architecture & patterns
Expand Down
Loading
Loading