Amazon Bedrock (bedrock)

Additions

Actions

• CreateModelImportJob
  
  • Description:  Grants permission to create a job for importing model into Bedrock
  • Access:  Write
  • Conditions: 

    aws:RequestTag/${TagKey}

    aws:TagKeys

• DeleteImportedModel
  
  • Description:  Grants permission to delete previously created Bedrock imported model
  • Access:  Write
  • Resources: 

    Name: imported-model

    Required: Yes

• GetImportedModel
  
  • Description:  Grants permission to get the properties associated with Bedrock imported model
  • Access:  Read
  • Resources: 

    Name: imported-model

    Required: Yes

• GetInferenceProfile
  
  • Description:  Grants permission to get the properties associated with an inference profile
  • Access:  Read
  • Resources: 

    Name: inference-profile

    Required: Yes

• GetModelImportJob
  
  • Description:  Grants permission to get the properties associated with a model import job and is used to get the status of a model import job
  • Access:  Read
  • Resources: 

    Name: model-import-job

    Required: Yes

• ListImportedModels
  
  • Description:  Grants permission to get list of Bedrock imported models
  • Access:  List
• ListInferenceProfiles
  
  • Description:  Grants permission to list inference profiles that you can use
  • Access:  List
• ListModelImportJobs
  
  • Description:  Grants permission to get list of model import jobs
  • Access:  List

Resources

• inference-profile
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/${ResourceId}
• model-import-job
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• imported-model
  
  • Arn:  arn:${Partition}:bedrock:${Region}:${Account}:imported-model/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• bedrock:InferenceProfileArn
  
  • Description:  Filters access by the specified inference profile
  • Type:  ARN

Updates

Actions

• InvokeModel
  
  Resources
  
  • ＋ imported-model
  • ＋ inference-profile
  Conditions
  
  • ＋ bedrock:InferenceProfileArn
• InvokeModelWithResponseStream
  
  Resources
  
  • ＋ imported-model
  • ＋ inference-profile
  Conditions
  
  • ＋ bedrock:InferenceProfileArn
• ListTagsForResource
  
  Resources
  
  • ＋ imported-model
  • ＋ model-import-job
• TagResource
  
  Resources
  
  • ＋ imported-model
  • ＋ model-import-job
• UntagResource
  
  Resources
  
  • ＋ imported-model
  • ＋ model-import-job