---
title: "GET /policy-engines"
method: GET
path: "/policy-engines"
---

# GET /policy-engines

`GET /policy-engines`

Retrieves a list of policy engines within the AgentCore Policy system. This operation supports pagination to help administrators discover and manage policy engines across their account. Each policy engine serves as a container for related policies.

## Query parameters

- `nextToken` string
- `maxResults` integer

## Response `200`

Success

- ListPolicyEnginesResponse
  - `policyEngines` PolicyEngine[], required — An array of policy engine objects that exist in the account. Each policy engine object contains the engine metadata, status, and key identifiers for further operations.
    - `policyEngineId` string, required — The unique identifier for the policy engine. This system-generated identifier consists of the user name plus a 10-character generated suffix and serves as the primary key for policy engine operations.
    - `name` string, required — The customer-assigned immutable name for the policy engine. This human-readable identifier must be unique within the account and cannot exceed 48 characters.
    - `createdAt` string, date-time, required — The timestamp when the policy engine was originally created. This is automatically set by the service and used for auditing and lifecycle management.
    - `updatedAt` string, date-time, required — The timestamp when the policy engine was last modified. This tracks the most recent changes to the policy engine configuration or metadata.
    - `policyEngineArn` string, required — The Amazon Resource Name (ARN) of the policy engine. This globally unique identifier can be used for cross-service references and IAM policy statements.
    - `status` 'CREATING' | 'ACTIVE' | 'UPDATING' | 'DELETING' | 'CREATE_FAILED' | 'UPDATE_FAILED' | 'DELETE_FAILED', required — The current status of the policy engine.
    - `encryptionKeyArn` string — The Amazon Resource Name (ARN) of the KMS key used to encrypt the policy engine data.
    - `description` string, password — A human-readable description of the policy engine's purpose and scope. Limited to 4,096 characters, this helps administrators understand the policy engine's role in the overall governance strategy.
    - `statusReasons` String[], required — Additional information about the policy engine status. This provides details about any failures or the current state of the policy engine lifecycle.
  - `nextToken` string — A pagination token that can be used in subsequent <a href="https://docs.aws.amazon.com/bedrock-agentcore-control/latest/APIReference/API_ListPolicyEngines.html">ListPolicyEngines</a> calls to retrieve additional results. This token is only present when there are more results available.

## Other responses

- `480` — AccessDeniedException
- `481` — ValidationException
- `482` — ThrottlingException
- `483` — InternalServerException

---

[API](https://skmtc.net/aws/apis/bedrock-agentcore-control.md) · [All operations](https://skmtc.net/aws/apis/bedrock-agentcore-control/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/aws/bedrock-agentcore-control/versions/0ebde766792b/schema)