AgentCore ハーネスでBedrock Mantleを含む7モデルを呼び分けてみた

AWSTemplateFormatVersion: "2010-09-09"
Description: "AgentCore Harness for multi-model invocation (7 models via per-invocation override)"

Resources:
  HarnessExecutionRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: multi-model-harness-role
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: Allow
            Principal:
              Service: bedrock-agentcore.amazonaws.com
            Action: sts:AssumeRole
      Policies:
        # === Base: Model Invocation ===
        - PolicyName: BedrockConverseAllowedModels
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Sid: ConverseAllowedModels
                Effect: Allow
                Action:
                  - bedrock:InvokeModel
                  - bedrock:InvokeModelWithResponseStream
                Resource:
                  - "arn:aws:bedrock:*::foundation-model/anthropic.claude-haiku-4-5*"
                  - "arn:aws:bedrock:*::foundation-model/anthropic.claude-sonnet-5*"
                  - "arn:aws:bedrock:*::foundation-model/google.gemma-3-27b-it"
                  - !Sub "arn:aws:bedrock:*:${AWS::AccountId}:inference-profile/*"
        - PolicyName: MantleAllowedModels
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Sid: MantleCreateInference
                Effect: Allow
                Action:
                  - bedrock-mantle:CreateInference
                  - bedrock-mantle:GetInference
                  - bedrock-mantle:CancelInference
                Resource: !Sub "arn:aws:bedrock-mantle:*:${AWS::AccountId}:project/*"
                Condition:
                  StringEquals:
                    "bedrock-mantle:Model":
                      - "openai.gpt-5.4"
                      - "deepseek.v3.2"
                      - "zai.glm-5"
                      - "openai.gpt-oss-120b"
              - Sid: MantleBearerToken
                Effect: Allow
                Action:
                  - bedrock-mantle:CallWithBearerToken
                Resource: "*"

        # === Base: AgentCore Runtime ===
        - PolicyName: AgentCoreRuntime
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Sid: EcrPublicTokenAccess
                Effect: Allow
                Action:
                  - ecr-public:GetAuthorizationToken
                Resource: "*"
              - Sid: StsForEcrPublicPull
                Effect: Allow
                Action:
                  - sts:GetServiceBearerToken
                Resource: "*"
              - Sid: XRayTracingAccess
                Effect: Allow
                Action:
                  - xray:PutTraceSegments
                  - xray:PutTelemetryRecords
                  - xray:GetSamplingRules
                  - xray:GetSamplingTargets
                Resource: "*"
              - Sid: CloudWatchLogsGroup
                Effect: Allow
                Action:
                  - logs:CreateLogGroup
                  - logs:DescribeLogStreams
                Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/bedrock-agentcore/runtimes/*"
              - Sid: CloudWatchLogsDescribeGroups
                Effect: Allow
                Action:
                  - logs:DescribeLogGroups
                Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:*"
              - Sid: CloudWatchLogsStream
                Effect: Allow
                Action:
                  - logs:CreateLogStream
                  - logs:PutLogEvents
                Resource: !Sub "arn:aws:logs:${AWS::Region}:${AWS::AccountId}:log-group:/aws/bedrock-agentcore/runtimes/*:log-stream:*"
              - Sid: CloudWatchMetricsPublish
                Effect: Allow
                Action:
                  - cloudwatch:PutMetricData
                Resource: "*"
                Condition:
                  StringEquals:
                    "cloudwatch:namespace": "bedrock-agentcore"
              - Sid: AgentCoreWorkloadIdentity
                Effect: Allow
                Action:
                  - bedrock-agentcore:GetWorkloadAccessToken
                  - bedrock-agentcore:GetWorkloadAccessTokenForJWT
                Resource:
                  - !Sub "arn:aws:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:workload-identity-directory/default"
                  - !Sub "arn:aws:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:workload-identity-directory/default/workload-identity/harness_multi_model_review-*"

        # === Optional: AgentCore Memory ===
        - PolicyName: AgentCoreMemory
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Sid: MemoryAccess
                Effect: Allow
                Action:
                  - bedrock-agentcore:CreateEvent
                  - bedrock-agentcore:DeleteEvent
                  - bedrock-agentcore:GetEvent
                  - bedrock-agentcore:ListEvents
                  - bedrock-agentcore:RetrieveMemoryRecords
                Resource: !Sub "arn:aws:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:memory/*"

        # === Deny: Expensive Models (failsafe) ===
        - PolicyName: DenyExpensiveModels
          PolicyDocument:
            Version: "2012-10-17"
            Statement:
              - Sid: DenyExpensiveConverse
                Effect: Deny
                Action:
                  - bedrock:InvokeModel
                  - bedrock:InvokeModelWithResponseStream
                  - bedrock:Converse
                  - bedrock:ConverseStream
                Resource:
                  - "arn:aws:bedrock:*::foundation-model/anthropic.claude-fable-5*"
                  - "arn:aws:bedrock:*::foundation-model/anthropic.claude-opus-4*"
                  - !Sub "arn:aws:bedrock:*:${AWS::AccountId}:inference-profile/anthropic.claude-fable-5*"
                  - !Sub "arn:aws:bedrock:*:${AWS::AccountId}:inference-profile/anthropic.claude-opus-4*"
              - Sid: DenyExpensiveMantle
                Effect: Deny
                Action:
                  - bedrock-mantle:CreateInference
                Resource: "*"
                Condition:
                  StringEquals:
                    "bedrock-mantle:Model":
                      - "anthropic.claude-fable-5"
                      - "anthropic.claude-opus-4-8"
                      - "openai.gpt-5.5"

  ReviewHarness:
    Type: AWS::BedrockAgentCore::Harness
    DependsOn: HarnessExecutionRole
    Properties:
      HarnessName: multi_model_review
      ExecutionRoleArn: !GetAtt HarnessExecutionRole.Arn
      Model:
        BedrockModelConfig:
          ModelId: global.anthropic.claude-haiku-4-5-20251001-v1:0
          ApiFormat: converse_stream
      SystemPrompt:
        - Text: "あなたは多言語対応のAIアシスタントです。ユーザーの質問に簡潔に回答してください。"
      MaxIterations: 5
      AllowedTools: []
      TimeoutSeconds: 120
      Environment:
        AgentCoreRuntimeEnvironment:
          LifecycleConfiguration:
            IdleRuntimeSessionTimeout: 300
            MaxLifetime: 3600
          NetworkConfiguration:
            NetworkMode: PUBLIC

Outputs:
  HarnessArn:
    Value: !GetAtt ReviewHarness.Arn
  HarnessId:
    Value: !GetAtt ReviewHarness.HarnessId
  ExecutionRoleArn:
    Value: !GetAtt HarnessExecutionRole.Arn