Amazon Bedrock (bedrock)

Additions

Actions

• CreateFoundationModelAgreement
  
  • Description:  Grants permission to create a new foundation model agreement
  • Access:  Write
• CreateProvisionedModelThroughput
  
  • Description:  Grants permission to create a new provisioned model throughput
  • Access:  Write
  • Resources: 

    Name: custom-model

    Required: Yes

    Name: foundation-model

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteFoundationModelAgreement
  
  • Description:  Grants permission to delete a foundation model agreement that you created earlier
  • Access:  Write
• DeleteModelInvocationLoggingConfiguration
  
  • Description:  Grants permission to delete an existing Invocation logging configuration
  • Access:  Write
• DeleteProvisionedModelThroughput
  
  • Description:  Grants permission to delete a provisioned model throughput that you created earlier
  • Access:  Write
  • Resources: 

    Name: provisioned-model

    Required: Yes

• GetFoundationModelAvailability
  
  • Description:  Grants permission to get the availability of a foundation model
  • Access:  Read
• GetModelInvocationLoggingConfiguration
  
  • Description:  Grants permission to retrieve an existing Invocation logging configuration
  • Access:  Read
• GetProvisionedModelThroughput
  
  • Description:  Grants permission to retrieve a provisioned model throughput
  • Access:  Read
  • Resources: 

    Name: provisioned-model

    Required: Yes

• GetUseCaseForModelAccess
  
  • Description:  Grants permission to retrieve a use case for model access
  • Access:  Read
• ListFoundationModelAgreementOffers
  
  • Description:  Grants permission to get a list of foundation model agreement offers
  • Access:  List
• ListProvisionedModelThroughputs
  
  • Description:  Grants permission to list provisioned model throughputs that you created earlier
  • Access:  List
• PutFoundationModelEntitlement
  
  • Description:  Grants permission to put entitlement to access a foundation model
  • Access:  Write
• PutModelInvocationLoggingConfiguration
  
  • Description:  Grants permission to create an existing Invocation logging configuration
  • Access:  Write
• PutUseCaseForModelAccess
  
  • Description:  Grants permission to put a use case for model access
  • Access:  Write
• UpdateProvisionedModelThroughput
  
  • Description:  Grants permission to update a provisioned model throughput that you created earlier
  • Access:  Write
  • Resources: 

    Name: custom-model

    Required: Yes

    Name: foundation-model

    Required: Yes

    Name: provisioned-model

    Required: Yes

Resources

• provisioned-model
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• CreateKnowledgeBase
  
  Resources
  
  • － knowledge-base
• InvokeModel
  
  Access
  
  • Write  ⟶  Read
  Resources
  
  • ＋ provisioned-model
• InvokeModelWithResponseStream
  
  Access
  
  • Write  ⟶  Read
  Resources
  
  • ＋ provisioned-model
• CreateAgentAlias
  
  Resources
  
  • ＋ {'name': 'agent', 'is_required': True}
  • － {'name': 'agent-alias', 'is_required': True}
• AssociateAgentKnowledgeBase
  
  Resources
  
  • ＋ knowledge-base
• DisassociateAgentKnowledgeBase
  
  Resources
  
  • ＋ knowledge-base
• GetAgentKnowledgeBase
  
  Resources
  
  • ＋ knowledge-base
• UpdateAgentKnowledgeBase
  
  Resources
  
  • ＋ knowledge-base
• CreateAgent
  
  Resources
  
  • － agent
  • － agent-alias
• CreateModelCustomizationJob
  
  Resources
  
  • － model-customization-job