AWS Managed Policies Explorer

Home About

AWS Managed Policies. A maze of twisty passages all alike. Explore them here. If it looks like a button, it's clickable. Always up to date.

Service: Amazon Bedrock

Short Name:

bedrock

ARN Format:arn:aws:bedrock:${Region}:${Account}:${ResourceType}/${ResourceId}

ARN Regex:^arn:aws:bedrock:.*:.*:.+

ReadOnlyAccess

…

AmazonBedrockReadOnly

Action	Reference	Description
bedrock:ListAgentActionGroups	Docs	Grants permission to list action groups in an agent
bedrock:ListAgentAliases	Docs	Grants permission to list aliases for an agent
bedrock:ListAgentKnowledgeBases	Docs	Grants permission to list knowledge bases associated with an agent
bedrock:ListAgents	Docs	Grants permission to list existing agents
bedrock:ListAgentVersions	Docs	Grants permission to list existing versions of an agent
bedrock:ListCustomModels	Docs	Grants permission to get a list of Bedrock custom models that you have created
bedrock:ListDataSources	Docs	Grants permission to list existing data sources in an knowledge base
bedrock:ListFoundationModelAgreementOffers	Docs	Grants permission to get a list of foundation model agreement offers
bedrock:ListFoundationModels	Docs	Grants permission to list Bedrock foundation models that you can use
bedrock:ListGuardrails	Docs	Grants permission to list guardrails or its versions
bedrock:ListIngestionJobs	Docs	Grants permission to list ingestion jobs in a data source
bedrock:ListKnowledgeBases	Docs	Grants permission to list existing knowledge bases
bedrock:ListModelCustomizationJobs	Docs	Grants permission to get the list of model customization jobs that you have submitted
bedrock:ListModelEvaluationJobs	Docs	Grants permission to get the list of model evaluation jobs that you have submitted
bedrock:ListModelInvocationJobs	Docs	Grants permission to list model invocation jobs that you created earlier
bedrock:ListProvisionedModelThroughputs	Docs	Grants permission to list provisioned model throughputs that you created earlier
bedrock:GetAgent	Docs	Grants permission to retrieve an existing agent
bedrock:GetAgentActionGroup	Docs	Grants permission to retrieve an existing action group
bedrock:GetAgentAlias	Docs	Grants permission to retrieve an existing alias
bedrock:GetAgentKnowledgeBase	Docs	Grants permission to describe a knowledge base associated with an agent
bedrock:GetAgentVersion	Docs	Grants permission to retrieve an existing version of an agent
bedrock:GetCustomModel	Docs	Grants permission to get the properties associated with a Bedrock custom model that you have created
bedrock:GetDataSource	Docs	Grants permission to retrieve an existing data source
bedrock:GetFoundationModel	Docs	Grants permission to get the properties associated with a Bedrock foundation model
bedrock:GetFoundationModelAvailability	Docs	Grants permission to get the availability of a foundation model
bedrock:GetGuardrail	Docs	Grants permission to retrieve a guardrail or its version
bedrock:GetIngestionJob	Docs	Grants permission to retrieve an existing ingestion job
bedrock:GetKnowledgeBase	Docs	Grants permission to retrieve an existing knowledge base
bedrock:GetModelCustomizationJob	Docs	Grants permission to get the properties associated with a model-customization job. Use this operation to get the status of a model-customization job
bedrock:GetModelEvaluationJob	Docs	Grants permission to get the properties associated with a model-evaluation job. Use this operation to get the status of a model-evaluation job
bedrock:GetModelInvocationJob	Docs	Grants permission to retrieve a model invocation job
bedrock:GetModelInvocationLoggingConfiguration	Docs	Grants permission to retrieve an existing Invocation logging configuration
bedrock:GetProvisionedModelThroughput	Docs	Grants permission to retrieve a provisioned model throughput
bedrock:GetUseCaseForModelAccess	Docs	Grants permission to retrieve a use case for model access
bedrock:InvokeAgent	Docs	Grants permission to send user input (text-only) to the alias of an agent for Bedrock
bedrock:InvokeModel	Docs	Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body
bedrock:InvokeModelWithResponseStream	Docs	Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body with streaming response
bedrock:ListTagsForResource	Docs	Grants permission to list tags for a Bedrock resource
bedrock:Retrieve	Docs	Grants permission to retrieve ingested data from a knowledge base
bedrock:TagResource	Docs	Grants permission to Tag a Bedrock resource
bedrock:UntagResource	Docs	Grants permission to Untag a Bedrock resource
bedrock:AssociateAgentKnowledgeBase	Docs	Grants permission to associate a knowledge base with an agent
bedrock:AssociateThirdPartyKnowledgeBase	Docs	Grants permission to use 3rd party platform to store knowledge data
bedrock:CreateAgent	Docs	Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version
bedrock:CreateAgentActionGroup	Docs	Grants permission to create a new action group in an existing agent
bedrock:CreateAgentAlias	Docs	Grants permission to create a new alias for an agent
bedrock:CreateDataSource	Docs	Grants permission to create a data source
bedrock:CreateFoundationModelAgreement	Docs	Grants permission to create a new foundation model agreement
bedrock:CreateGuardrail	Docs	Grants permission to create a new guardrail
bedrock:CreateGuardrailVersion	Docs	Grants permission to create a new guardrail version
bedrock:CreateKnowledgeBase	Docs	Grants permission to create a knowledge base
bedrock:CreateModelCustomizationJob	Docs	Grants permission to create a job for customizing the model with your custom training data
bedrock:CreateModelEvaluationJob	Docs	Grants permission to create a job for evaluation foundation models or custom models
bedrock:CreateModelInvocationJob	Docs	Grants permission to create a new model invocation job
bedrock:CreateProvisionedModelThroughput	Docs	Grants permission to create a new provisioned model throughput
bedrock:DeleteAgent	Docs	Grants permission to delete an Agent that you created earlier
bedrock:DeleteAgentActionGroup	Docs	Grants permission to delete an actionGroup that you created earlier
bedrock:DeleteAgentAlias	Docs	Grants permission to delete an AgentAlias that you created earlier
bedrock:DeleteAgentVersion	Docs	Grants permission to delete an Agent Version that you created earlier
bedrock:DeleteCustomModel	Docs	Grants permission to delete a custom model that you created earlier
bedrock:DeleteDataSource	Docs	Grants permission to delete a data source
bedrock:DeleteFoundationModelAgreement	Docs	Grants permission to delete a foundation model agreement that you created earlier
bedrock:DeleteGuardrail	Docs	Grants permission to delete a guardrail or its version
bedrock:DeleteKnowledgeBase	Docs	Grants permission to delete a knowledge base
bedrock:DeleteModelInvocationLoggingConfiguration	Docs	Grants permission to delete an existing Invocation logging configuration
bedrock:DeleteProvisionedModelThroughput	Docs	Grants permission to delete a provisioned model throughput that you created earlier
bedrock:DisassociateAgentKnowledgeBase	Docs	Grants permission to disassociate a knowledge base from the agent
bedrock:PrepareAgent	Docs	Grants permission to prepare an existing agent to receive runtime requests
bedrock:PutFoundationModelEntitlement	Docs	Grants permission to put entitlement to access a foundation model
bedrock:PutModelInvocationLoggingConfiguration	Docs	Grants permission to create an existing Invocation logging configuration
bedrock:PutUseCaseForModelAccess	Docs	Grants permission to put a use case for model access
bedrock:RetrieveAndGenerate	Docs	Grants permission to send user input to perform retrieval and generation
bedrock:StartIngestionJob	Docs	Grants permission to start an ingestion job
bedrock:StopModelCustomizationJob	Docs	Grants permission to stop a Bedrock model customization job while in progress
bedrock:StopModelInvocationJob	Docs	Grants permission to stop a model invocation job that you started earlier
bedrock:UpdateAgent	Docs	Grants permission to update an existing agent
bedrock:UpdateAgentActionGroup	Docs	Grants permission to update an existing action group
bedrock:UpdateAgentAlias	Docs	Grants permission to update an existing alias
bedrock:UpdateAgentKnowledgeBase	Docs	Grants permission to update a knowledge base associated with an agent
bedrock:UpdateDataSource	Docs	Grants permission to update a data source
bedrock:UpdateGuardrail	Docs	Grants permission to update a guardrail
bedrock:UpdateKnowledgeBase	Docs	Grants permission to update a knowledge base
bedrock:UpdateProvisionedModelThroughput	Docs	Grants permission to update a provisioned model throughput that you created earlier

aws:RequestTag/${TagKey}aws:ResourceTag/${TagKey}aws:TagKeysbedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn