# AWS Agent Registry Attributes

Schema attributes for resources in the **AWS Agent Registry** dataset (`aws:agent-registry`).

The registry record is the catalog identity collected in this dataset. The registry container is an access boundary in AWS and isn't collected as a resource.

## Resource Nodes

| Resource name | Resource type | Resource ID | Identity attribute | Display attribute |
| --- | --- | --- | --- | --- |
| AWS Agent Registry Agent | `std:agent` | `aws:agent-registry-record-agent` | `recordArn` | `displayName` |
| AWS Agent Registry MCP | `std:application` | `aws:agent-registry-record-mcp` | `recordArn` | `displayName` |

AWS `recordType` `AGENT` maps to resource ID `aws:agent-registry-record-agent`, resource type `std:agent`, and subtype `AGENT`. AWS `recordType` `MCP` maps to resource ID `aws:agent-registry-record-mcp` and resource type `std:application`. MCP records don't include the `type` attribute. `SKILL` and `CUSTOM` record types aren't collected.

> [!NOTE]
>
> The connector collects registry records only. It doesn't collect registry catalogs as resource nodes. It collects records in every lifecycle status, including `DRAFT`, `PENDING_APPROVAL`, and `APPROVED`. The approved-only discoverable view isn't used for inventory. `discoverable` is `true` only when `status` is `APPROVED`, and that value doesn't filter inventory.

## AWS Agent Registry Agent and MCP

Both record types share the attributes below. The resource ID and resource type differ. The `type` attribute is set only on AGENT records.

**Resource ID**: `aws:agent-registry-record-agent` or `aws:agent-registry-record-mcp`

**Resource type**: `std:agent` or `std:application`

**Identity attribute**: `recordArn`

**Display attribute**: `displayName`

| Attribute | Type | Description |
| --- | --- | --- |
| `identity` | string | The registry record ARN. |
| `recordArn` | string | The native registry record ARN. |
| `recordId` | string | The short registry record identifier. |
| `registryArn` | string | The ARN of the containing registry. The connector stores this as an attribute on the record and doesn't collect the registry as a resource. |
| `name` | string | The customer-specified name unique within the registry. |
| `displayName` | string | The human-readable label. When AWS omits it, the connector uses name. |
| `description` | string | Free-text description. |
| `spDescription` | string | Record description, mirrored for SailPoint description promotion. |
| `recordType` | string | AWS semantic type when collected: AGENT or MCP. SKILL and CUSTOM aren't collected. |
| `recordVersion` | string | The customer version string. |
| `status` | string | The registry record lifecycle status. The connector collects records in every lifecycle status. |
| `discoverable` | boolean | true only when status is APPROVED. This attribute doesn't filter inventory. |
| `descriptorKey` | string | Populated primary descriptor: a2aAgentCard, mcpServer, agentSkillsDefinition, or custom. |
| `descriptorData` | string | The primary descriptor payload. The connector stores metadata only and never executes this payload. |
| `descriptorDataSchemaVersion` | string | The schema version declared by the primary descriptor. |
| `tools` | string | The MCP tool inventory payload for MCP records. |
| `a2aSkills` | string | The JSON array from A2A agent card skills for AGENT records. |
| `syncSourceUrl` | string | The registered descriptor synchronization URL. |
| `syncCredentialProviderArn` | string | The IAM or OAuth credential provider ARN used for synchronization. |
| `syncCredentialProviderType` | string | The non-secret credential provider type. |
| `tags` | string | The resource tags on the record. |
| `createdAt` | string | The creation time in ISO-8601 format. |
| `updatedAt` | string | The last modification time in ISO-8601 format. |
| `awsRegion` | string | The AWS region where the resource resides. |
| `awsAccountId` | string | The AWS account ID that owns the resource. |
| `spBusinessApplication` | string | The SailPoint business application. Always AWS Agent Registry. |
| `type` | string | Set only on AGENT records. The value is AGENT. MCP records don't include type. |

## Resource Links

Resource links are `std:access` links resolved by AWS aggregation. Native resource ARNs referenced by registry records, such as Bedrock agents, AgentCore resources, or IAM roles, and sync credential provider ARNs are external targets. The connector emits links only. It doesn't duplicate those native Bedrock, AgentCore, or IAM resources in this dataset. The syncs-using-credential link includes a `syncCredentialProviderArn` attribute.

| Resource name | Resource type | Resource ID | Identity form |
| --- | --- | --- | --- |
| AWS Agent Registry Record Describes Resource | `std:access` | `aws:agent-registry-record-describes-resource` | `aws:agent-registry-record-describes-resource#{Record ARN}#{Native Resource ARN}` |
| AWS Agent Registry Record Syncs Using Credential | `std:access` | `aws:agent-registry-record-syncs-using-credential` | `aws:agent-registry-record-syncs-using-credential#{Record ARN}#{Credential Provider ARN}` |