View a markdown version of this page

RegistryRecordIamCredentialProvider - Amazon Bedrock AgentCore Control Plane
Services or capabilities described in Amazon Web Services documentation might vary by Region. To see the differences applicable to the China Regions, see Getting Started with Amazon Web Services in China (PDF).

RegistryRecordIamCredentialProvider

IAM credential provider configuration for authenticating with an external source using SigV4 signing during synchronization.

Contents

region

The Amazon region for SigV4 signing (for example, us-west-2). If not specified, the region is extracted from the MCP server URL hostname, with fallback to the service's own region.

Type: String

Length Constraints: Minimum length of 1. Maximum length of 64.

Pattern: [a-z0-9-]+

Required: No

roleArn

The Amazon Resource Name (ARN) of the IAM role to assume for SigV4 signing.

Type: String

Length Constraints: Minimum length of 20. Maximum length of 2048.

Pattern: arn:aws(-[^:]+)?:iam::[0-9]{12}:role/.+

Required: No

service

The SigV4 signing service name (for example, execute-api or bedrock-agentcore).

Type: String

Length Constraints: Minimum length of 1. Maximum length of 128.

Pattern: [a-zA-Z0-9_-]+

Required: No

See Also

For more information about using this API in one of the language-specific Amazon SDKs, see the following: