Using new templates

Author: ismael-penacho-sysdig

modules/foundational.cft.yaml

@@ -176,6 +176,18 @@ Resources:
           - Effect: Allow
             Action: account:GetContactInformation
             Resource: '*'
+          - Effect: "Allow"
+            Action: "bedrock:ListAgents"
+            Resource: "*"
+          - Effect: "Allow"
+            Action: "bedrock:GetAgent"
+            Resource: "*"
+          - Effect: "Allow"
+            Action: "bedrock:ListKnowledgeBases"
+            Resource: "*"
+          - Effect: "Allow"
+            Action: "bedrock:GetKnowledgeBase"
+            Resource: "*"
   OnboardingRole:
     Type: AWS::IAM::Role
     Properties:
@@ -329,6 +341,18 @@ Resources:
                   - Effect: "Allow"
                     Action: "account:GetContactInformation"
                     Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:ListAgents"
+                    Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:GetAgent"
+                    Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:ListKnowledgeBases"
+                    Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:GetKnowledgeBase"
+                    Resource: "*"
           OnboardingRole:
             Type: AWS::IAM::Role
             Properties:

templates_cspm/CloudAgentlessRole.yaml

@@ -73,12 +73,6 @@ Resources:
               - Effect: "Allow"
                 Action: "account:GetContactInformation"
                 Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListAgents"
-                Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListKnowledgeBases"
-                Resource: "*"
 
 Outputs:
   RoleARN:

templates_cspm/OrgCloudAgentlessRole.yaml

@@ -75,12 +75,6 @@ Resources:
               - Effect: "Allow"
                 Action: "account:GetContactInformation"
                 Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListAgents"
-                Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListKnowledgeBases"
-                Resource: "*"
   RoleStackSet:
     Type: AWS::CloudFormation::StackSet
     Properties:
@@ -163,9 +157,3 @@ Resources:
                       - Effect: "Allow"
                         Action: "account:GetContactInformation"
                         Resource: "*"
-                      - Effect: "Allow"
-                        Action: "bedrock:ListAgents"
-                        Resource: "*"
-                      - Effect: "Allow"
-                        Action: "bedrock:ListKnowledgeBases"
-                        Resource: "*"

templates_cspm_cloudlogs/FullInstall.yaml

@@ -86,12 +86,6 @@ Resources:
               - Effect: "Allow"
                 Action: "account:GetContactInformation"
                 Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListAgents"
-                Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListKnowledgeBases"
-                Resource: "*"
   CloudLogsRole:
     Type: "AWS::IAM::Role"
     Properties:

templates_cspm_cloudlogs/OrgFullInstall.yaml

@@ -91,12 +91,6 @@ Resources:
               - Effect: "Allow"
                 Action: "account:GetContactInformation"
                 Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListAgents"
-                Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListKnowledgeBases"
-                Resource: "*"
   CloudLogsRole:
     Type: "AWS::IAM::Role"
     Properties:
@@ -219,9 +213,3 @@ Resources:
                       - Effect: "Allow"
                         Action: "account:GetContactInformation"
                         Resource: "*"
-                      - Effect: "Allow"
-                        Action: "bedrock:ListAgents"
-                        Resource: "*"
-                      - Effect: "Allow"
-                        Action: "bedrock:ListKnowledgeBases"
-                        Resource: "*"

templates_cspm_eventbridge/FullInstall.yaml

@@ -122,12 +122,6 @@ Resources:
               - Effect: "Allow"
                 Action: "account:GetContactInformation"
                 Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListAgents"
-                Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListKnowledgeBases"
-                Resource: "*"
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:

templates_cspm_eventbridge/OrgFullInstall.yaml

@@ -169,12 +169,6 @@ Resources:
               - Effect: "Allow"
                 Action: "account:GetContactInformation"
                 Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListAgents"
-                Resource: "*"
-              - Effect: "Allow"
-                Action: "bedrock:ListKnowledgeBases"
-                Resource: "*"
   EventBridgeRole:
     Type: AWS::IAM::Role
     Properties:
@@ -300,12 +294,6 @@ Resources:
                       - Effect: "Allow"
                         Action: "account:GetContactInformation"
                         Resource: "*"
-                      - Effect: "Allow"
-                        Action: "bedrock:ListAgents"
-                        Resource: "*"
-                      - Effect: "Allow"
-                        Action: "bedrock:ListKnowledgeBases"
-                        Resource: "*"
           EventBridgeRole:
             Type: AWS::IAM::Role
             Properties: