SSPROD-57550 Add New Bedrock Perm (#76)

Co-authored-by: Ravina Dhruve <[email protected]>

Author: ismael-penacho-sysdig

modules/config-posture/main.tf

@@ -140,6 +140,12 @@ resource "aws_iam_role_policy" "cspm_role_policy" {
         Effect   = "Allow"
         Resource = "*"
       },
+      {
+        Sid      = "BedrockGetModelInvocationLoggingConfiguration"
+        Action   = "bedrock:GetModelInvocationLoggingConfiguration"
+        Effect   = "Allow"
+        Resource = "*"
+      },
     ]
   })
 }

modules/config-posture/organizational.tf

@@ -96,6 +96,10 @@ Resources:
                 Effect: "Allow"
                 Action: "bedrock:GetGuardrail"
                 Resource: "*"
+              - Sid: "GetModelInvocationLoggingConfiguration"
+                Effect: "Allow"
+                Action: "bedrock:GetModelInvocationLoggingConfiguration"
+                Resource: "*"
 TEMPLATE
 }