Policy Gateway

Define allow, block, approval, and redact rules for agent tool calls.

Policies

Policy preview

NameBlock IAM mutations in production

Matchtool:aws.iam.*

Conditionenvironment == production

Actionapproval

Fallbackblock