Hacktoberfest 2026: los issues que los mantenedores marcaron para octubre, abiertos y aptos para principiantes. Explorar issues de Hacktoberfest

Support existing IAM roles for runtime container-build infrastructure

Abierto
  • ¿Algo no está bien?
#2,698 0 comentarios 0 reacciones 0 asignados Ver en GitHub

Los mantenedores suelen responder en 1 día

@proton0210 ya está trabajando en esto.

Desde el 25/10/2026.

  • #2700 de @proton0210 — abierto

Evaluación

Dificultad
4/5
Tiempo estimado
3-5 días
Aptitud para principiantes
54/100
Tipo de issue
Nueva funcionalidad
Claridad
Bien especificado
Estado de actividad
Activo
Stack tecnológico
aws, typescript
Área
cloud, devops, infrastructure, security

Línea de trabajo

Start by tracing the agentcore add runtime command through its configuration handling, then inspect the @aws/agentcore-cdk runtime and container-build integration. Use agentcore.json to verify that supplied ARNs persist through build and deploy operations, and identify where shared CodeBuild configuration is validated. Done means all three supplied roles are imported without permission changes, omitted roles still trigger automatic creation, conflicts are rejected clearly, and tests and required trust/permission documentation are added.

Escrito por el modelo de indexación a partir del texto del issue.

Descripción

enhancement
Description

agentcore add runtime --role-arn supports an existing runtime execution role. Container deployments still create two additional roles: a CodeBuild execution role and a Lambda execution role for the container-build handler.

This blocks container deployments in environments where IAM roles must be provisioned centrally.

Allow users to supply these roles when adding a runtime. Proposed flag names:

agentcore add runtime \
  --name myAgent \
  --language python \
  --role-arn <runtime-role-arn> \
  --container-build-role-arn <codebuild-role-arn> \
  --container-build-handler-role-arn <lambda-role-arn>

Persist the ARNs in agentcore.json and expose equivalent configuration in @aws/agentcore-cdk.

Import supplied roles without modifying their permissions. Preserve automatic role creation when the options are omitted.

Acceptance Criteria
  • Supplying all three roles produces no IAM roles or policies for the runtime or its container-build infrastructure.
  • The configuration survives subsequent build and deploy operations.
  • Shared CodeBuild infrastructure handles supplied roles consistently across runtimes and rejects conflicting configuration clearly.
  • Documentation specifies required trust relationships and permissions for each role.
  • Tests cover supplied roles, default role creation, and conflicting shared-build configuration.
Additional Context

This covers runtime container-build infrastructure. CDK bootstrap remains a separate prerequisite for environments that prohibit role creation.

Lenguaje dominante
TypeScript
Estrellas
320
Forks
109
Merge medio
18 h 29 min
PR fusionados (30 d)
172

Preparar el entorno

Primeros pasos

  1. Lee el issue completo y luego la guía de contribución del proyecto.
  2. Comenta en el issue que vas a ocuparte — evita que dos personas hagan lo mismo.
  3. Haz un fork del repositorio y trabaja en una rama.
  4. Abre un pull request que haga referencia al número del issue.

Más de aws/agentcore-cli

Todos los issues de aws/agentcore-cli

Issues similares

Más issues de TypeScript

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.