Remove other policies

Author: kris-szlapa

packages/cdk/stacks/EpsAssistMeStack.ts

@@ -376,6 +376,14 @@ export class EpsAssistMeStack extends Stack {
       ]
     })
 
+    // ==== Lambda self-invoke policy (needed for Slack Bolt lazy handlers) ====
+    // const slackLambdaSelfInvokePolicy = new PolicyStatement({
+    //   actions: ["lambda:InvokeFunction"],
+    //   resources: [
+    //     slackBotLambda.function.functionArn
+    //   ]
+    // })
+
     // ==== Lambda environment variables ====
     const lambdaEnv: {[key: string]: string} = {
       RAG_MODEL_ID: "anthropic.claude-3-sonnet-20240229-v1:0",
@@ -405,38 +413,9 @@ export class EpsAssistMeStack extends Stack {
       additionalPolicies: []
     })
 
-    // ==== Lambda self-invoke policy (needed for Slack Bolt lazy handlers) ====
-    const slackLambdaSelfInvokePolicy = new PolicyStatement({
-      actions: ["lambda:InvokeFunction"],
-      resources: [
-        slackBotLambda.function.functionArn
-      ]
-    })
-
-    // ==== Bedrock model invocation policy ====
-    const slackLambdaBedrockModelPolicy = new PolicyStatement({
-      actions: ["bedrock:InvokeModel"],
-      resources: [`arn:aws:bedrock:${region}::foundation-model/${lambdaEnv.RAG_MODEL_ID}`]
-    })
-
-    // ==== Bedrock KB retrieve and retrieveAndGenerate policy ====
-    const slackLambdaBedrockKbPolicy = new PolicyStatement({
-      actions: ["bedrock:Retrieve", "bedrock:RetrieveAndGenerate"],
-      resources: [`arn:aws:bedrock:${region}:${account}:knowledge-base/${kb.attrKnowledgeBaseId}`]
-    })
-
-    // ==== Guardrail policy ====
-    const slackLambdaGuardrailPolicy = new PolicyStatement({
-      actions: ["bedrock:ApplyGuardrail"],
-      resources: [`arn:aws:bedrock:${region}:${account}:guardrail/*`]
-    })
-
     // ==== Attach all policies to SlackBot Lambda role ====
     slackBotLambda.function.addToRolePolicy(slackLambdaSSMPolicy)
-    slackBotLambda.function.addToRolePolicy(slackLambdaSelfInvokePolicy)
-    slackBotLambda.function.addToRolePolicy(slackLambdaBedrockModelPolicy)
-    slackBotLambda.function.addToRolePolicy(slackLambdaBedrockKbPolicy)
-    slackBotLambda.function.addToRolePolicy(slackLambdaGuardrailPolicy)
+    // slackBotLambda.function.addToRolePolicy(slackLambdaSelfInvokePolicy)
 
     // ==== API Gateway & Slack Route ====
     const apiGateway = new RestApiGateway(this, "EpsAssistApiGateway", {