Amazon Bedrock (bedrock)

2023-09-27

21 new actions, 1 new resource, 1 new condition

Additions

    Actions
  • AssociateAgentKnowledgeBase
    • Description:  Grants permission to associate a knowledge base with an agent
    • Access:  Write
    • Resources: 

      Name: agent

      Required: Yes

  • AssociateThirdPartyKnowledgeBase
    • Description:  Grants permission to use 3rd party platform to store knowledge data
    • Access:  Write
    • Conditions: 

      bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn
  • CreateDataSource
    • Description:  Grants permission to create a data source
    • Access:  Write
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • CreateKnowledgeBase
    • Description:  Grants permission to create a knowledge base
    • Access:  Write
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • DeleteDataSource
    • Description:  Grants permission to delete a data source
    • Access:  Write
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • DeleteKnowledgeBase
    • Description:  Grants permission to delete a knowledge base
    • Access:  Write
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • DisassociateAgentKnowledgeBase
    • Description:  Grants permission to disassociate a knowledge base from the agent
    • Access:  Write
    • Resources: 

      Name: agent

      Required: Yes

  • GetAgentKnowledgeBase
    • Description:  Grants permission to describe a knowledge base associated with an agent
    • Access:  Read
    • Resources: 

      Name: agent

      Required: Yes

  • GetDataSource
    • Description:  Grants permission to retrieve an existing data source
    • Access:  Read
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • GetFoundationModel
    • Description:  Grants permission to get the properties associated with a Bedrock foundation model
    • Access:  Read
    • Resources: 

      Name: foundation-model

      Required: Yes

  • GetIngestionJob
    • Description:  Grants permission to retrieve an existing ingestion job
    • Access:  Read
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • GetKnowledgeBase
    • Description:  Grants permission to retrieve an existing knowledge base
    • Access:  Read
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • ListAgentKnowledgeBases
    • Description:  Grants permission to list knowledge bases associated with an agent
    • Access:  List
    • Resources: 

      Name: agent

      Required: Yes

  • ListDataSources
    • Description:  Grants permission to list existing data sources in an knowledge base
    • Access:  List
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • ListIngestionJobs
    • Description:  Grants permission to list ingestion jobs in a data source
    • Access:  List
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • ListKnowledgeBases
    • Description:  Grants permission to list existing knowledge bases
    • Access:  List
  • QueryKnowledgeBase
    • Description:  Grants permission to retrieve ingested data from a knowledge base.
    • Access:  Read
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • StartIngestionJob
    • Description:  Grants permission to start an ingestion job
    • Access:  Write
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • UpdateAgentKnowledgeBase
    • Description:  Grants permission to update a knowledge base associated with an agent
    • Access:  Write
    • Resources: 

      Name: agent

      Required: Yes

  • UpdateDataSource
    • Description:  Grants permission to update a data source
    • Access:  Write
    • Resources: 

      Name: knowledge-base

      Required: Yes

  • UpdateKnowledgeBase
    • Description:  Grants permission to update a knowledge base
    • Access:  Write
    • Resources: 

      Name: knowledge-base

      Required: Yes

    Resources
  • knowledge-base
    • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/${KnowledgeBaseId}