awslabs / awslabs/agentcore-samples
06-workshops - [Bug] 07-Tool Access with Policy: Trust policy Sid mismatch — toolkit validation too strict
Open
06-workshops
bug
- Dominant language
- Python
- Stars
- 3.4k
- Forks
- 1.3k
- Avg merge
- 1d 22h
- Merged PRs (30d)
- 30
Description
**In which component is this bug present?**
- [ ] 01-AgentCore-runtime
- [ ] 02-AgentCore-gateway
- [ ] 03-AgentCore-identity
- [ ] 04-AgentCore-memory
- [ ] 05-AgentCore-tools
- [ ] 06-AgentCore-observability
- [x] 07-AgentCore-E2E
**Bug Description**
The toolkit validates the trust policy exactly, including the `Sid` field. The existing role was missing `"Sid": "AssumeRolePolicy"`, causing validation failure even though the principal/action/condition were correct.
**Suggested Fix**
The toolkit should be more lenient in validation — check principal/action/condition, not the Sid field.
Contributor guide
Assessment
This issue has not been assessed yet.