feat: add policy engine and policy support with full deploy pipeline#546
Draft
jesseturner21 wants to merge 4 commits intoaws:mainfrom
Draft
feat: add policy engine and policy support with full deploy pipeline#546jesseturner21 wants to merge 4 commits intoaws:mainfrom
jesseturner21 wants to merge 4 commits intoaws:mainfrom
Conversation
Add Cedar authorization policy support to AgentCore CLI: - Schema: PolicyEngine and Policy schemas with Zod validation - TUI: Full add/remove wizards for policy engines and policies - Source methods: Cedar file, inline statement, or AI generation - Gateway selection for generation flow - Expandable text input for generation prompts - CLI: Non-interactive add/remove commands with all flags - agentcore add policy-engine --name <name> - agentcore add policy --name <name> --engine <engine> --source/--statement/--generate - agentcore remove policy-engine/policy --name <name> - Deploy: CDK construct integration, CloudFormation output parsing, deployed state tracking with composite engine/policy keys - Status: Policy engines and policies shown in status command and ResourceGraph TUI with correct deployment state diffing - Generation: StartPolicyGeneration + waiter integration with deployed engine ID and gateway ARN resolution - Validation: Schema validation for names, statements, validation modes Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
…e collisions Policies are nested under engines, so the same policy name can exist in multiple engines. Switch getRemovable/remove/previewRemove to use an "engineName/policyName" composite key so the generic TUI remove flow can uniquely identify policies with a single string. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
jesseturner21
had a problem deploying
to
e2e-testing
GitHub Actions
Failure
Regenerate lock file with npm@10 to resolve missing yaml@2.8.2 dependency entry that caused `npm ci` failures on Node 20.x and 22.x. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
jesseturner21
had a problem deploying
to
e2e-testing
GitHub Actions
Failure
- Merge duplicate imports in policy-generation.ts - Use dot notation instead of bracket notation in outputs test - Replace Array<T> with T[] in outputs.ts and useDeployFlow.ts - Add void operator for floating promises in AddPolicyFlow - Wrap async handlers with void for no-misused-promises - Escape quotes in JSX text in AddPolicyScreen - Fix prettier formatting across all changed files Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
jesseturner21
had a problem deploying
to
e2e-testing
GitHub Actions
Failure
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
PolicyEngineandPolicyschemas with Zod validation, integrated intoAgentCoreProjectSpecand deployed state trackingadd/removecommands forpolicy-engineandpolicywith all flags (--name,--engine,--source/--statement/--generate)engine/policykeys to handle cross-engine name collisionsstatuscommand andResourceGraphTUI with correct deployment state diffingStartPolicyGeneration+ waiter integration with deployed engine ID and gateway ARN resolutionTest plan
npm test)integ-tests/add-remove-policy.test.ts)agentcore add policy-engineandagentcore add policywork in TUI and non-interactive modesagentcore remove policy-engineandagentcore remove policycorrectly use composite keysagentcore deploydeploys policy engines and policies via CDKagentcore statusshows policy engine/policy deployment state🤖 Generated with Claude Code