---
title: AgentEnsureOptions
description: "What ensureImage builds or reuses from: the daemon binary, the build role, and where the artifact goes."
---

What `ensureImage` builds or reuses from: the daemon binary, the build role, and where
the artifact goes.

## Properties

### binary

```ts
binary: Uint8Array;
```

The daemon binary's bytes, zipped into the artifact.

***

### buildRoleArn

```ts
buildRoleArn: string;
```

The build role, which must read the bucket and grant logs on `/aws/lambda-microvms/*`.

***

### s3Bucket

```ts
s3Bucket: string;
```

The bucket the artifact is uploaded to, in the VM's region.

***

### s3KeyPrefix?

```ts
optional s3KeyPrefix?: string;
```

A key prefix inside the bucket, or absent for the bucket root.

## Provenance

This page is generated from `bindings/microvms-js/index.d.ts` by TypeDoc 0.28.20 and typedoc-plugin-markdown 4.13.1, run from `site/scripts/gen-reference.mjs` on every `pnpm run sync`, so an edit made here is overwritten by the next run.

To change the page, change the doc comment in the binding's Rust source, then regenerate the declarations with `mise run dts`. `mise run dts:check` fails when the committed file no longer matches the source.