fix: Let integ tests pass gateway role

Author: clareliguori

e2e_tests/setup/integ-test-authentication.yaml

@@ -59,12 +59,17 @@ Resources:
       PolicyDocument:
         Version: "2012-10-17"
         Statement:
-          # Allow integration tests to manage CloudFormation stacks to deploy the example MCP servers
+          # Allow integration tests to manage CloudFormation stacks and Bedrock AgentCore Gateways to deploy the example MCP servers
           - Effect: Allow
             Action:
               - "cloudformation:*"
             Resource:
               - !Sub "arn:aws:cloudformation:${AWS::Region}:${AWS::AccountId}:stack/LambdaMcpServer-*"
+          - Effect: Allow
+            Action:
+              - "bedrock-agentcore:*"
+            Resource:
+              - !Sub "arn:aws:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:gateway/*"
           - Effect: Allow
             Action:
               - "ssm:GetParameter"
@@ -77,12 +82,7 @@ Resources:
               - "iam:PassRole"
             Resource:
               - !Sub "arn:aws:iam::${AWS::AccountId}:role/cdk-*-cfn-exec-role-${AWS::AccountId}-${AWS::Region}"
-          # Allow integration tests to manage Bedrock AgentCore Gateways to deploy example MCP server endpoints
-          - Effect: Allow
-            Action:
-              - "bedrock-agentcore:*"
-            Resource:
-              - !Sub "arn:aws:bedrock-agentcore:${AWS::Region}:${AWS::AccountId}:gateway/*"
+              - !Sub "arn:aws:iam::${AWS::AccountId}:role/mcp-lambda-example-agentcore-gateways"
           # Allow CDK to manage templates and assets in the CDK bucket
           - Effect: Allow
             Action: