2024-04-24
          
        5 new actions, 1 new resource | 5 updated actions
  
    
        
          
            Additions
          
              
                Actions
                
                    - 
                        ApplyGuardrail
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to apply a guardrail
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: guardrail
       
        Required: Yes
       
 
- 
                        CreateEvaluationJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to create a job for evaluation foundation models or custom models
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: custom-model
       
        Required: Yes
       
        Name: foundation-model
       
        Required: Yes
       
- 
                                Conditions: 
                                
    aws:RequestTag/${TagKey} aws:TagKeys 
 
- 
                        GetEvaluationJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get the properties associated with a evaluation job. Use this operation to get the status of a evaluation job
                                
                              
- 
                                Access: 
                                
                                    Read
                                
                              
- 
                                Resources: 
                                
      
        Name: evaluation-job
       
        Required: Yes
       
 
- 
                        ListEvaluationJobs
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to get the list of evaluation jobs that you have submitted
                                
                              
- 
                                Access: 
                                
                                    List
                                
                              
 
- 
                        StopEvaluationJob
                        
 
                              - 
                                Description: 
                                
                                    Grants permission to stop a evaluation job while in progress
                                
                              
- 
                                Access: 
                                
                                    Write
                                
                              
- 
                                Resources: 
                                
      
        Name: evaluation-job
       
        Required: Yes
       
 
                Resources
                
                    - 
                        evaluation-job
                        
 
                              - 
                                Arn: 
                                
                                    arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/${ResourceId}
                                
                              
- 
                                Conditions: 
                                
    aws:ResourceTag/${TagKey}