Skip to content

Commit aef6bd3

Browse files
ismael-penacho-sysdigismael-penacho-sysdig
committed
add bedrock perm
1 parent d5baab4 commit aef6bd3

File tree

6 files changed

+82
-1
lines changed

6 files changed

+82
-1
lines changed

‎templates_cspm/CloudAgentlessRole.yaml‎

Lines changed: 10 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -73,7 +73,16 @@ Resources:
7373
- Effect: "Allow"
7474
Action: "account:GetContactInformation"
7575
Resource: "*"
76-
76+
- Effect: "Allow"
77+
Action: "bedrock:ListAgents"
78+
Resource: "*"
79+
- Effect: "Allow"
80+
Action: "bedrock:ListCustomModels"
81+
Resource: "*"
82+
- Effect: "Allow"
83+
Action: "bedrock:ListKnowledgeBases"
84+
Resource: "*"
85+
7786
Outputs:
7887
RoleARN:
7988
Description: ARN of the role created

‎templates_cspm/OrgCloudAgentlessRole.yaml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -75,6 +75,15 @@ Resources:
7575
- Effect: "Allow"
7676
Action: "account:GetContactInformation"
7777
Resource: "*"
78+
- Effect: "Allow"
79+
Action: "bedrock:ListAgents"
80+
Resource: "*"
81+
- Effect: "Allow"
82+
Action: "bedrock:ListCustomModels"
83+
Resource: "*"
84+
- Effect: "Allow"
85+
Action: "bedrock:ListKnowledgeBases"
86+
Resource: "*"
7887
RoleStackSet:
7988
Type: AWS::CloudFormation::StackSet
8089
Properties:
@@ -154,3 +163,12 @@ Resources:
154163
- Effect: "Allow"
155164
Action: "account:GetContactInformation"
156165
Resource: "*"
166+
- Effect: "Allow"
167+
Action: "bedrock:ListAgents"
168+
Resource: "*"
169+
- Effect: "Allow"
170+
Action: "bedrock:ListCustomModels"
171+
Resource: "*"
172+
- Effect: "Allow"
173+
Action: "bedrock:ListKnowledgeBases"
174+
Resource: "*"

‎templates_cspm_cloudlogs/FullInstall.yaml‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -86,6 +86,15 @@ Resources:
8686
- Effect: "Allow"
8787
Action: "account:GetContactInformation"
8888
Resource: "*"
89+
- Effect: "Allow"
90+
Action: "bedrock:ListAgents"
91+
Resource: "*"
92+
- Effect: "Allow"
93+
Action: "bedrock:ListCustomModels"
94+
Resource: "*"
95+
- Effect: "Allow"
96+
Action: "bedrock:ListKnowledgeBases"
97+
Resource: "*"
8998
CloudLogsRole:
9099
Type: "AWS::IAM::Role"
91100
Properties:

‎templates_cspm_cloudlogs/OrgFullInstall.yaml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -91,6 +91,15 @@ Resources:
9191
- Effect: "Allow"
9292
Action: "account:GetContactInformation"
9393
Resource: "*"
94+
- Effect: "Allow"
95+
Action: "bedrock:ListAgents"
96+
Resource: "*"
97+
- Effect: "Allow"
98+
Action: "bedrock:ListCustomModels"
99+
Resource: "*"
100+
- Effect: "Allow"
101+
Action: "bedrock:ListKnowledgeBases"
102+
Resource: "*"
94103
CloudLogsRole:
95104
Type: "AWS::IAM::Role"
96105
Properties:
@@ -208,3 +217,12 @@ Resources:
208217
- Effect: "Allow"
209218
Action: "account:GetContactInformation"
210219
Resource: "*"
220+
- Effect: "Allow"
221+
Action: "bedrock:ListAgents"
222+
Resource: "*"
223+
- Effect: "Allow"
224+
Action: "bedrock:ListCustomModels"
225+
Resource: "*"
226+
- Effect: "Allow"
227+
Action: "bedrock:ListKnowledgeBases"
228+
Resource: "*"

‎templates_cspm_eventbridge/FullInstall.yaml‎

Lines changed: 9 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -98,6 +98,15 @@ Resources:
9898
- Effect: "Allow"
9999
Action: "account:GetContactInformation"
100100
Resource: "*"
101+
- Effect: "Allow"
102+
Action: "bedrock:ListAgents"
103+
Resource: "*"
104+
- Effect: "Allow"
105+
Action: "bedrock:ListCustomModels"
106+
Resource: "*"
107+
- Effect: "Allow"
108+
Action: "bedrock:ListKnowledgeBases"
109+
Resource: "*"
101110
EventBridgeRole:
102111
Type: AWS::IAM::Role
103112
Properties:

‎templates_cspm_eventbridge/OrgFullInstall.yaml‎

Lines changed: 18 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -142,6 +142,15 @@ Resources:
142142
- Effect: "Allow"
143143
Action: "account:GetContactInformation"
144144
Resource: "*"
145+
- Effect: "Allow"
146+
Action: "bedrock:ListAgents"
147+
Resource: "*"
148+
- Effect: "Allow"
149+
Action: "bedrock:ListCustomModels"
150+
Resource: "*"
151+
- Effect: "Allow"
152+
Action: "bedrock:ListKnowledgeBases"
153+
Resource: "*"
145154
EventBridgeRole:
146155
Type: AWS::IAM::Role
147156
Properties:
@@ -263,6 +272,15 @@ Resources:
263272
- Effect: "Allow"
264273
Action: "account:GetContactInformation"
265274
Resource: "*"
275+
- Effect: "Allow"
276+
Action: "bedrock:ListAgents"
277+
Resource: "*"
278+
- Effect: "Allow"
279+
Action: "bedrock:ListCustomModels"
280+
Resource: "*"
281+
- Effect: "Allow"
282+
Action: "bedrock:ListKnowledgeBases"
283+
Resource: "*"
266284
EventBridgeRole:
267285
Type: AWS::IAM::Role
268286
Properties:

0 commit comments

Comments
 (0)