add bedrock perm (#151)

ismael-penacho-sysdig · web-flow · commit f3db8e5cb227 · 2025-04-28T10:56:36.000+02:00
* add bedrock perm

* delete ListCustomModels

* Using new templates

* delete extra end line

* update

* delete extra tab
diff --git a/modules/foundational.cft.yaml b/modules/foundational.cft.yaml
@@ -176,6 +176,18 @@ Resources:
           - Effect: Allow
             Action: account:GetContactInformation
             Resource: '*'
+          - Effect: "Allow"
+            Action: "bedrock:ListAgents"
+            Resource: "*"
+          - Effect: "Allow"
+            Action: "bedrock:GetAgent"
+            Resource: "*"
+          - Effect: "Allow"
+            Action: "bedrock:ListKnowledgeBases"
+            Resource: "*"
+          - Effect: "Allow"
+            Action: "bedrock:GetKnowledgeBase"
+            Resource: "*"
   OnboardingRole:
     Type: AWS::IAM::Role
     Properties:
@@ -329,6 +341,18 @@ Resources:
                   - Effect: "Allow"
                     Action: "account:GetContactInformation"
                     Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:ListAgents"
+                    Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:GetAgent"
+                    Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:ListKnowledgeBases"
+                    Resource: "*"
+                  - Effect: "Allow"
+                    Action: "bedrock:GetKnowledgeBase"
+                    Resource: "*"
           OnboardingRole:
             Type: AWS::IAM::Role
             Properties:
