Amazon Bedrock (bedrock)

Additions

Actions

• CreateAgent
  
  • Description:  Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

    Name: agent-alias

    Required: Yes

• CreateAgentActionGroup
  
  • Description:  Grants permission to create a new action group in an existing agent
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

• CreateAgentAlias
  
  • Description:  Grants permission to create a new alias for an agent
  • Access:  Write
  • Resources: 

    Name: agent-alias

    Required: Yes

• CreateAgentDraftSnapshot
  
  • Description:  Grants permission to create a draft version snapshot for an agent
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

• GetAgent
  
  • Description:  Grants permission to retrieve an existing agent
  • Access:  Read
  • Resources: 

    Name: agent

    Required: Yes

• GetAgentActionGroup
  
  • Description:  Grants permission to retrieve an existing action group
  • Access:  Read
  • Resources: 

    Name: agent

    Required: Yes

• GetAgentAlias
  
  • Description:  Grants permission to retrieve an existing alias
  • Access:  Read
  • Resources: 

    Name: agent-alias

    Required: Yes

• GetAgentVersion
  
  • Description:  Grants permission to retrieve an existing version of an agent
  • Access:  Read
  • Resources: 

    Name: agent

    Required: Yes

• InvokeAgent
  
  • Description:  Grants permission to send user input (text-only) to the alias of an agent for Bedrock
  • Access:  Write
  • Resources: 

    Name: agent-alias

    Required: Yes

• ListAgentActionGroups
  
  • Description:  Grants permission to list action groups in an agent
  • Access:  List
  • Resources: 

    Name: agent

    Required: Yes

• ListAgentAliases
  
  • Description:  Grants permission to list aliases for an agent
  • Access:  List
  • Resources: 

    Name: agent

    Required: Yes

• ListAgentVersions
  
  • Description:  Grants permission to list existing versions of an agent
  • Access:  List
  • Resources: 

    Name: agent

    Required: Yes

• ListAgents
  
  • Description:  Grants permission to list existing agents
  • Access:  List
• UpdateAgent
  
  • Description:  Grants permission to update an existing agent
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

• UpdateAgentActionGroup
  
  • Description:  Grants permission to update an existing action group
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

• UpdateAgentAlias
  
  • Description:  Grants permission to update an existing alias
  • Access:  Write
  • Resources: 

    Name: agent-alias

    Required: Yes

Resources

• agent
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:agent/${AgentId}
• agent-alias
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/${AgentId}/${AgentAliasId}