Amazon Bedrock Powered by AWS Mantle (bedrock-mantle)

Additions

Actions

• AssociateCustomizedModel
  
  • Description:  Grants permission to associate a customized model with a project
  • Access:  Write
  • Resources: 

    Name: customized-model

    Required: Yes

    Name: project

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    bedrock-mantle:ProjectArn

    bedrock-mantle:CustomizedModelArn

• CreateCustomizedModel
  
  • Description:  Grants permission to import a customized model with custom weights
  • Access:  Write
  • Resources: 

    Name: customized-model

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:RequestTag/${TagKey}

    aws:TagKeys

• CreateReservation
  
  • Description:  Grants permission to create a capacity reservation for a model
  • Access:  Write
  • Resources: 

    Name: project

    Required: Yes

    Name: reservation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    aws:RequestTag/${TagKey}

    aws:TagKeys

    bedrock-mantle:ProjectArn

    bedrock-mantle:ReservationArn

• DeleteCustomizedModel
  
  • Description:  Grants permission to delete a customized model
  • Access:  Write
  • Resources: 

    Name: customized-model

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• DeleteReservation
  
  • Description:  Grants permission to delete a capacity reservation
  • Access:  Write
  • Resources: 

    Name: project

    Required: Yes

    Name: reservation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    bedrock-mantle:ProjectArn

    bedrock-mantle:ReservationArn

• DisassociateCustomizedModel
  
  • Description:  Grants permission to disassociate a customized model from a project
  • Access:  Write
  • Resources: 

    Name: customized-model

    Required: Yes

    Name: project

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    bedrock-mantle:ProjectArn

    bedrock-mantle:CustomizedModelArn

• GetCustomizedModel
  
  • Description:  Grants permission to get customized model
  • Access:  Read
  • Resources: 

    Name: customized-model

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• GetReservation
  
  • Description:  Grants permission to get reservation
  • Access:  Read
  • Resources: 

    Name: reservation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

• ListCustomizedModelAssociations
  
  • Description:  Grants permission to list project associations for a customized model
  • Access:  List
  • Resources: 

    Name: customized-model

    Required: Yes

• ListCustomizedModels
  
  • Description:  Grants permission to list customized models
  • Access:  List
  • Resources: 

    Name: customized-model

    Required: Yes

• ListReservations
  
  • Description:  Grants permission to list reservations
  • Access:  List
  • Resources: 

    Name: reservation

    Required: Yes

• UpdateReservation
  
  • Description:  Grants permission to update reservation
  • Access:  Write
  • Resources: 

    Name: project

    Required: Yes

    Name: reservation

    Required: Yes

  • Conditions: 

    aws:ResourceTag/${TagKey}

    bedrock-mantle:ProjectArn

    bedrock-mantle:ReservationArn

Resources

• customized-model
  
  • Arn:  arn:${Partition}:bedrock-mantle:${Region}:${Account}:customized-model/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

• reservation
  
  • Arn:  arn:${Partition}:bedrock-mantle:${Region}:${Account}:reservation/${ResourceId}
  • Conditions: 

    aws:ResourceTag/${TagKey}

Conditions

• bedrock-mantle:CustomizedModelArn
  
  • Description:  Filters access by the ARN of the customized model being associated or referenced in cross-resource operations
  • Type:  String
• bedrock-mantle:ProjectArn
  
  • Description:  Filters access by the ARN of the project being associated or referenced in cross-resource operations
  • Type:  String
• bedrock-mantle:ReservationArn
  
  • Description:  Filters access by the ARN of the reservation being referenced in cross-resource operations
  • Type:  String