Add nag suppressions for Bedrock execution role

kris-szlapa · kris-szlapa · commit 0bdc6fd3cf7f · 2025-07-22T17:01:00.000Z
diff --git a/packages/cdk/nagSuppressions.ts b/packages/cdk/nagSuppressions.ts
@@ -152,9 +152,11 @@ export const nagSuppressions = (stack: Stack) => {
           "Resource::*",
           "Resource::<OsCollection.Arn>/*",
           "Resource::arn:aws:aoss:eu-west-2:123456789012:collection/*",
+          "Resource::arn:aws:aoss:eu-west-2:591291862413:collection/*",
           "Action::s3:Delete*",
           "Action::bedrock:Delete*",
-          "Resource::arn:aws:bedrock:eu-west-2:123456789012:knowledge-base/*"
+          "Resource::arn:aws:bedrock:eu-west-2:123456789012:knowledge-base/*",
+          "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*"
         ]
       }
     ]

Original file line number	Diff line number	Diff line change
`@@ -152,9 +152,11 @@ export const nagSuppressions = (stack: Stack) => {`
`152`	`152`	`"Resource::*",`
`153`	`153`	`"Resource::<OsCollection.Arn>/*",`
`154`	`154`	`"Resource::arn:aws:aoss:eu-west-2:123456789012:collection/*",`
	`155`	`+ "Resource::arn:aws:aoss:eu-west-2:591291862413:collection/*",`
`155`	`156`	`"Action::s3:Delete*",`
`156`	`157`	`"Action::bedrock:Delete*",`
`157`		`- "Resource::arn:aws:bedrock:eu-west-2:123456789012:knowledge-base/*"`
	`158`	`+ "Resource::arn:aws:bedrock:eu-west-2:123456789012:knowledge-base/*",`
	`159`	`+ "Resource::arn:aws:bedrock:eu-west-2:591291862413:knowledge-base/*"`
`158`	`160`	`]`
`159`	`161`	`}`
`160`	`162`	`]`