Amazon Bedrock (bedrock)

Additions

Actions

• AssociateAgentKnowledgeBase
  
  • Description:  Grants permission to associate a knowledge base with an agent
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

• AssociateThirdPartyKnowledgeBase
  
  • Description:  Grants permission to use 3rd party platform to store knowledge data
  • Access:  Write
  • Conditions: 

    bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn

• CreateDataSource
  
  • Description:  Grants permission to create a data source
  • Access:  Write
  • Resources: 

    Name: knowledge-base

    Required: Yes

• CreateKnowledgeBase
  
  • Description:  Grants permission to create a knowledge base
  • Access:  Write
  • Resources: 

    Name: knowledge-base

    Required: Yes

• DeleteDataSource
  
  • Description:  Grants permission to delete a data source
  • Access:  Write
  • Resources: 

    Name: knowledge-base

    Required: Yes

• DeleteKnowledgeBase
  
  • Description:  Grants permission to delete a knowledge base
  • Access:  Write
  • Resources: 

    Name: knowledge-base

    Required: Yes

• DisassociateAgentKnowledgeBase
  
  • Description:  Grants permission to disassociate a knowledge base from the agent
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

• GetAgentKnowledgeBase
  
  • Description:  Grants permission to describe a knowledge base associated with an agent
  • Access:  Read
  • Resources: 

    Name: agent

    Required: Yes

• GetDataSource
  
  • Description:  Grants permission to retrieve an existing data source
  • Access:  Read
  • Resources: 

    Name: knowledge-base

    Required: Yes

• GetFoundationModel
  
  • Description:  Grants permission to get the properties associated with a Bedrock foundation model
  • Access:  Read
  • Resources: 

    Name: foundation-model

    Required: Yes

• GetIngestionJob
  
  • Description:  Grants permission to retrieve an existing ingestion job
  • Access:  Read
  • Resources: 

    Name: knowledge-base

    Required: Yes

• GetKnowledgeBase
  
  • Description:  Grants permission to retrieve an existing knowledge base
  • Access:  Read
  • Resources: 

    Name: knowledge-base

    Required: Yes

• ListAgentKnowledgeBases
  
  • Description:  Grants permission to list knowledge bases associated with an agent
  • Access:  List
  • Resources: 

    Name: agent

    Required: Yes

• ListDataSources
  
  • Description:  Grants permission to list existing data sources in an knowledge base
  • Access:  List
  • Resources: 

    Name: knowledge-base

    Required: Yes

• ListIngestionJobs
  
  • Description:  Grants permission to list ingestion jobs in a data source
  • Access:  List
  • Resources: 

    Name: knowledge-base

    Required: Yes

• ListKnowledgeBases
  
  • Description:  Grants permission to list existing knowledge bases
  • Access:  List
• QueryKnowledgeBase
  
  • Description:  Grants permission to retrieve ingested data from a knowledge base.
  • Access:  Read
  • Resources: 

    Name: knowledge-base

    Required: Yes

• StartIngestionJob
  
  • Description:  Grants permission to start an ingestion job
  • Access:  Write
  • Resources: 

    Name: knowledge-base

    Required: Yes

• UpdateAgentKnowledgeBase
  
  • Description:  Grants permission to update a knowledge base associated with an agent
  • Access:  Write
  • Resources: 

    Name: agent

    Required: Yes

• UpdateDataSource
  
  • Description:  Grants permission to update a data source
  • Access:  Write
  • Resources: 

    Name: knowledge-base

    Required: Yes

• UpdateKnowledgeBase
  
  • Description:  Grants permission to update a knowledge base
  • Access:  Write
  • Resources: 

    Name: knowledge-base

    Required: Yes

Resources

• knowledge-base
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/${KnowledgeBaseId}

Conditions

• bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn
  
  • Description:  Filters access by the secretArn containing the credentials of the third party platform
  • Type:  ARN