governance

Register agents, configure Cedar policies, and set routing patterns.

21|5|Updated Mar 30, 2026
One-click install
npx skills add https://github.com/aws-samples/sample-agent-greenhouse --skill governance-aws-samples
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: governance
Source: https://github.com/aws-samples/sample-agent-greenhouse/tree/main/src/platform_agent/plato/skills/governance
Command: npx skills add https://github.com/aws-samples/sample-agent-greenhouse --skill governance-aws-samples

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Governance for agent platforms often struggles with consistent registration, policy management, and routing governance across domains. This Skill provides a structured approach to register agents, manage Cedar policies, configure message routing patterns, and enforce platform standards.

Core Features & Use Cases

  • Agent registration with roles, capabilities, and tenant isolation
  • Cedar policy management and routing configuration
  • Compliance enforcement and governance guardrails across the control plane
  • Use Case: When onboarding a new domain agent, this skill helps set up governance baseline quickly and applies standard policies.

Quick Start

Register a new agent, apply baseline Cedar policies, and configure routing patterns for the tenant.

Frequently Asked Questions about governance

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I register an agent and apply Cedar policies for tenant isolation?

To register an agent and apply Cedar policies, you configure the agent's roles and capabilities, then apply baseline policy templates to enforce tenant isolation and default-deny rules across domains. This establishes compliant, auditable agent behavior.

What is agent governance and how does routing configuration enforce it?

Agent governance is the structured approach to registering agents, managing Cedar policies, and configuring message routing patterns across domains. Routing configuration enforces this by directing messages according to governance guardrails for platform-wide oversight.

How do I set up default-deny policies across multiple tenant domains?

You set up default-deny policies across domains by applying Cedar policy templates during agent onboarding. This baseline configuration ensures tenant isolation and enforces compliance guardrails throughout the control plane.

Can I apply policy templates to streamline governance for new domain agents?

Yes, you can apply policy templates to streamline governance for new domain agents. This quickly establishes a governance baseline by applying standard Cedar policies and routing patterns to ensure compliant agent behavior.

What's the best way to configure routing patterns for compliant agent behavior?

The best way to configure routing patterns for compliant agent behavior is to use a governance skill that applies policy templates and routing guardrails. This ensures message routing aligns with default-deny policies and tenant isolation rules.