Amazon Bedrock (bedrock)

2024-07-12

24 new actions, 4 new resources | 3 updated actions

Additions

    Actions
  • CreateFlow
    • Description:  Grants permission to create a prompt flow
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateFlowAlias
    • Description:  Grants permission to create an alias of a prompt flow
    • Access:  Write
    • Resources: 

      Name: flow

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreateFlowVersion
    • Description:  Grants permission to create an immutable version of a prompt flow
    • Access:  Write
    • Resources: 

      Name: flow

      Required: Yes

  • CreatePrompt
    • Description:  Grants permission to create a prompt
    • Access:  Write
    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • CreatePromptVersion
    • Description:  Grants permission to create a version of a prompt
    • Access:  Write
    • Resources: 

      Name: prompt

      Required: Yes

    • Conditions: 

      aws:RequestTag/${TagKey}

      aws:TagKeys

  • DeleteAgentMemory
    • Description:  Grants permission to delete existing memory for an alias
    • Access:  Write
    • Resources: 

      Name: agent-alias

      Required: Yes

  • DeleteFlow
    • Description:  Grants permission to delete a prompt flow
    • Access:  Write
    • Resources: 

      Name: flow

      Required: Yes

  • DeleteFlowAlias
    • Description:  Grants permission to delete an alias of a prompt flow
    • Access:  Write
    • Resources: 

      Name: flow-alias

      Required: Yes

  • DeleteFlowVersion
    • Description:  Grants permission to delete a version of a prompt flow
    • Access:  Write
    • Resources: 

      Name: flow

      Required: Yes

  • DeletePrompt
    • Description:  Grants permission to delete a prompt or its version
    • Access:  Write
    • Resources: 

      Name: prompt

      Required: Yes

      Name: prompt-version

      Required: Yes

  • GetAgentMemory
    • Description:  Grants permission to retrieve existing memory for an alias
    • Access:  Read
    • Resources: 

      Name: agent-alias

      Required: Yes

  • GetFlow
    • Description:  Grants permission to retrieve an existing prompt flow
    • Access:  Read
    • Resources: 

      Name: flow

      Required: Yes

  • GetFlowAlias
    • Description:  Grants permission to retrieve an existing alias of a prompt flow
    • Access:  Read
    • Resources: 

      Name: flow-alias

      Required: Yes

  • GetFlowVersion
    • Description:  Grants permission to retrieve an existing version of a prompt flow
    • Access:  Read
    • Resources: 

      Name: flow

      Required: Yes

  • GetPrompt
    • Description:  Grants permission to retrieve an existing prompt or its version
    • Access:  Read
    • Resources: 

      Name: prompt

      Required: Yes

      Name: prompt-version

      Required: Yes

  • InvokeFlow
    • Description:  Grants permission to invoke a prompt flow with user input
    • Access:  Read
    • Resources: 

      Name: flow-alias

      Required: Yes

  • ListFlowAliases
    • Description:  Grants permission to list existing aliases of a prompt flow
    • Access:  List
    • Resources: 

      Name: flow

      Required: Yes

  • ListFlowVersions
    • Description:  Grants permission to list existing versions of a prompt flow
    • Access:  List
    • Resources: 

      Name: flow

      Required: Yes

  • ListFlows
    • Description:  Grants permission to list existing prompt flows
    • Access:  List
  • ListPrompts
    • Description:  Grants permission to list existing prompts
    • Access:  List
  • PrepareFlow
    • Description:  Grants permission to apply the latest changes made to a prompt flow, so that they are reflected at runtime
    • Access:  Write
    • Resources: 

      Name: flow

      Required: Yes

  • UpdateFlow
    • Description:  Grants permission to update a prompt flow
    • Access:  Write
    • Resources: 

      Name: flow

      Required: Yes

  • UpdateFlowAlias
    • Description:  Grants permission to update the configuration of an alias of a prompt flow
    • Access:  Write
    • Resources: 

      Name: flow-alias

      Required: Yes

  • UpdatePrompt
    • Description:  Grants permission to update a prompt
    • Access:  Write
    • Resources: 

      Name: prompt

      Required: Yes

    Resources
  • flow
    • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • flow-alias
    • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • prompt
    • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}
    • Conditions: 

      aws:ResourceTag/${TagKey}

  • prompt-version
    • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}:${PromptVersion}
    • Conditions: 

      aws:ResourceTag/${TagKey}

Updates

    Actions
  • ListTagsForResource
      Resources
    • + flow
    • + flow-alias
    • + prompt
    • + prompt-version
  • TagResource
      Resources
    • + flow
    • + flow-alias
    • + prompt
    • + prompt-version
  • UntagResource
      Resources
    • + flow
    • + flow-alias
    • + prompt
    • + prompt-version