SSPROD-57279 Add Bedrock Perm

Author: ismael-penacho-sysdig

modules/config-posture/main.tf

@@ -104,6 +104,42 @@ resource "aws_iam_role_policy" "cspm_role_policy" {
         Effect   = "Allow"
         Resource = "*"
       },
+      {
+        Sid      = "AccessAccountContactInfo"
+        Action   = "bedrock:ListAgents"
+        Effect   = "Allow"
+        Resource = "*"
+      },
+      {
+        Sid      = "AccessAccountContactInfo"
+        Action   = "bedrock:GetAgent"
+        Effect   = "Allow"
+        Resource = "*"
+      },
+      {
+        Sid      = "AccessAccountContactInfo"
+        Action   = "bedrock:ListKnowledgeBases"
+        Effect   = "Allow"
+        Resource = "*"
+      },
+      {
+        Sid      = "AccessAccountContactInfo"
+        Action   = "bedrock:GetKnowledgeBase"
+        Effect   = "Allow"
+        Resource = "*"
+      },
+      {
+        Sid      = "AccessAccountContactInfo"
+        Action   = "bedrock:ListGuardrails"
+        Effect   = "Allow"
+        Resource = "*"
+      },
+      {
+        Sid      = "AccessAccountContactInfo"
+        Action   = "bedrock:GetGuardrail"
+        Effect   = "Allow"
+        Resource = "*"
+      },
     ]
   })
 }

modules/config-posture/organizational.tf

@@ -72,6 +72,30 @@ Resources:
                 Action:
                   - "account:GetContactInformation"
                 Resource: "*"
+              - Sid: "ListAgents"
+                Effect: "Allow"
+                Action: "bedrock:ListAgents"
+                Resource: "*"
+              - Sid: "GetAgent"
+                Effect: "Allow"
+                Action: "bedrock:GetAgent"
+                Resource: "*"
+              - Sid: "ListKnowledgeBases"
+                Effect: "Allow"
+                Action: "bedrock:ListKnowledgeBases"
+                Resource: "*"
+              - Sid: "GetKnowledgeBase"
+                Effect: "Allow"
+                Action: "bedrock:GetKnowledgeBase"
+                Resource: "*"
+              - Sid: "ListGuardrails"
+                Effect: "Allow"
+                Action: "bedrock:ListGuardrails"
+                Resource: "*"
+              - Sid: "GetGuardrail"
+                Effect: "Allow"
+                Action: "bedrock:GetGuardrail"
+                Resource: "*"
 TEMPLATE
 }