Amazon Bedrock (bedrock)

Additions

Actions

• CreateFlow
  
  • Description:  Grants permission to create a prompt flow
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateFlowAlias
  
  • Description:  Grants permission to create an alias of a prompt flow
  • Access:  Write
  • Resources: 

    Name: flow

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateFlowVersion
  
  • Description:  Grants permission to create an immutable version of a prompt flow
  • Access:  Write
  • Resources: 

    Name: flow

    Required: Yes

• CreatePrompt
  
  • Description:  Grants permission to create a prompt
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreatePromptVersion
  
  • Description:  Grants permission to create a version of a prompt
  • Access:  Write
  • Resources: 

    Name: prompt

    Required: Yes

  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteAgentMemory
  
  • Description:  Grants permission to delete existing memory for an alias
  • Access:  Write
  • Resources: 

    Name: agent-alias

    Required: Yes

• DeleteFlow
  
  • Description:  Grants permission to delete a prompt flow
  • Access:  Write
  • Resources: 

    Name: flow

    Required: Yes

• DeleteFlowAlias
  
  • Description:  Grants permission to delete an alias of a prompt flow
  • Access:  Write
  • Resources: 

    Name: flow-alias

    Required: Yes

• DeleteFlowVersion
  
  • Description:  Grants permission to delete a version of a prompt flow
  • Access:  Write
  • Resources: 

    Name: flow

    Required: Yes

• DeletePrompt
  
  • Description:  Grants permission to delete a prompt or its version
  • Access:  Write
  • Resources: 

    Name: prompt

    Required: Yes

    Name: prompt-version

    Required: Yes

• GetAgentMemory
  
  • Description:  Grants permission to retrieve existing memory for an alias
  • Access:  Read
  • Resources: 

    Name: agent-alias

    Required: Yes

• GetFlow
  
  • Description:  Grants permission to retrieve an existing prompt flow
  • Access:  Read
  • Resources: 

    Name: flow

    Required: Yes

• GetFlowAlias
  
  • Description:  Grants permission to retrieve an existing alias of a prompt flow
  • Access:  Read
  • Resources: 

    Name: flow-alias

    Required: Yes

• GetFlowVersion
  
  • Description:  Grants permission to retrieve an existing version of a prompt flow
  • Access:  Read
  • Resources: 

    Name: flow

    Required: Yes

• GetPrompt
  
  • Description:  Grants permission to retrieve an existing prompt or its version
  • Access:  Read
  • Resources: 

    Name: prompt

    Required: Yes

    Name: prompt-version

    Required: Yes

• InvokeFlow
  
  • Description:  Grants permission to invoke a prompt flow with user input
  • Access:  Read
  • Resources: 

    Name: flow-alias

    Required: Yes

• ListFlowAliases
  
  • Description:  Grants permission to list existing aliases of a prompt flow
  • Access:  List
  • Resources: 

    Name: flow

    Required: Yes

• ListFlowVersions
  
  • Description:  Grants permission to list existing versions of a prompt flow
  • Access:  List
  • Resources: 

    Name: flow

    Required: Yes

• ListFlows
  
  • Description:  Grants permission to list existing prompt flows
  • Access:  List
• ListPrompts
  
  • Description:  Grants permission to list existing prompts
  • Access:  List
• PrepareFlow
  
  • Description:  Grants permission to apply the latest changes made to a prompt flow, so that they are reflected at runtime
  • Access:  Write
  • Resources: 

    Name: flow

    Required: Yes

• UpdateFlow
  
  • Description:  Grants permission to update a prompt flow
  • Access:  Write
  • Resources: 

    Name: flow

    Required: Yes

• UpdateFlowAlias
  
  • Description:  Grants permission to update the configuration of an alias of a prompt flow
  • Access:  Write
  • Resources: 

    Name: flow-alias

    Required: Yes

• UpdatePrompt
  
  • Description:  Grants permission to update a prompt
  • Access:  Write
  • Resources: 

    Name: prompt

    Required: Yes

Resources

• flow
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• flow-alias
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• prompt
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• prompt-version
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}:${PromptVersion}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Updates

Actions

• ListTagsForResource
  
  Resources
  
  • ＋ flow
  • ＋ flow-alias
  • ＋ prompt
  • ＋ prompt-version
• TagResource
  
  Resources
  
  • ＋ flow
  • ＋ flow-alias
  • ＋ prompt
  • ＋ prompt-version
• UntagResource
  
  Resources
  
  • ＋ flow
  • ＋ flow-alias
  • ＋ prompt
  • ＋ prompt-version