---
title: "GET /policy-engines/{policyEngineId}/policy-summaries/{policyId}"
method: GET
path: "/policy-engines/{policyEngineId}/policy-summaries/{policyId}"
---

# GET /policy-engines/{policyEngineId}/policy-summaries/{policyId}

`GET /policy-engines/{policyEngineId}/policy-summaries/{policyId}`

Retrieves a metadata-only summary of a specific policy without decrypting customer content. This lightweight read operation returns resource identifiers, status, and timestamps, but does not include the policy definition, description, or status reasons. Because this operation does not require access to the customer's KMS key, it is suitable for resource discovery, inventory, and integration scenarios where only metadata is needed.

## Path parameters

- `policyEngineId` string, required
- `policyId` string, required

## Response `200`

Success

- GetPolicySummaryResponse
  - `policyId` string, required — The unique identifier of the policy.
  - `name` string, required — The customer-assigned name of the policy.
  - `policyEngineId` string, required — The identifier of the policy engine that manages this policy.
  - `createdAt` string, date-time, required — The timestamp when the policy was originally created.
  - `updatedAt` string, date-time, required — The timestamp when the policy was last modified.
  - `policyArn` string, required — The Amazon Resource Name (ARN) of the policy.
  - `status` 'CREATING' | 'ACTIVE' | 'UPDATING' | 'DELETING' | 'CREATE_FAILED' | 'UPDATE_FAILED' | 'DELETE_FAILED', required — The current status of the policy.
  - `enforcementMode` 'ACTIVE' | 'LOG_ONLY' — The current enforcement mode of the policy.

## Other responses

- `480` — AccessDeniedException
- `481` — ValidationException
- `482` — ThrottlingException
- `483` — ResourceNotFoundException
- `484` — InternalServerException

---

[API](https://skmtc.net/aws/apis/bedrock-agentcore-control.md) · [All operations](https://skmtc.net/aws/apis/bedrock-agentcore-control/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/bedrock-agentcore-control/versions/0ebde766792b/schema)