AmazonBedrockReadOnly

Summary

Provides read only access to Amazon Bedrock. The Amazon Bedrock User Guide says it grants read-only permissions to view all resources in Amazon Bedrock.

Permissions imported from the AWS Managed Policy Reference Guide; other sections reviewed against the listed AWS sources.

Identity

ARN

arn:aws:iam::aws:policy/AmazonBedrockReadOnlyCopy ARN

Default version

v7

Created

2023-12-06

Last edited

2026-02-12

Services

bedrock, sagemaker

Control-plane actions (109)

By access level: 48 List, 61 Read.

Data-plane actions (10)

By access level: 3 List, 7 Read.

Excluded and conditional actions

No patterns are excluded by NotAction or Deny statements.

Resource scope and attachment

Resource scope across granted actions: mixed.

Can be attached: Yes, to users, groups and roles.

Why this tier

• Grants only List and Read actions.

Guidance

Related policies

Same service

• AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicy
• AmazonBedrockFullAccess
• AmazonBedrockLimitedAccess
• AmazonBedrockMarketplaceAccess
• AmazonBedrockStudioPermissionsBoundary
• AmazonDataZoneBedrockModelConsumptionPolicy
• AmazonDataZoneBedrockModelManagementPolicy
• AmazonSageMakerCanvasAIServicesAccess

Same domain

• AgentRegistryFullAccess
• AgentRegistryReadOnlyAccess
• AIOpsAssistantIncidentReportPolicy
• AIOpsAssistantPolicy
• AIOpsConsoleAdminPolicy
• AIOpsOperatorAccess
• AIOpsReadOnlyAccess
• AmazonAugmentedAIFullAccess

Frequently asked questions

When should I attach AmazonBedrockReadOnly?

The Amazon Bedrock User Guide says you can attach it to your IAM identities to grant read-only permissions to view all resources in Amazon Bedrock. Attach it to people who need to see but not change Amazon Bedrock resources.

What does AmazonBedrockReadOnly grant?

It allows bedrock:Get* and bedrock:List* on all resources, six SageMaker describe and list actions on endpoint, endpoint-config and model resources when called via Amazon Bedrock, and SageMaker hub-content describe and list actions on the public hub.

What are the security risks of AmazonBedrockReadOnly?

The policy has no write actions, but bedrock:Get* and bedrock:List* apply to all resources. The IAM User Guide says AWS managed policies don't grant least privilege permissions, and AWS updates to the policy affect every identity it is attached to.

Policy JSON

Download policy.json

{
  "Version": "2012-10-17",
  "Statement": [
    {
      "Sid": "AmazonBedrockReadOnly",
      "Effect": "Allow",
      "Action": [
        "bedrock:Get*",
        "bedrock:List*"
      ],
      "Resource": "*"
    },
    {
      "Sid": "MarketplaceModelEndpointNonMutatingAPIs",
      "Effect": "Allow",
      "Action": [
        "sagemaker:DescribeEndpoint",
        "sagemaker:DescribeEndpointConfig",
        "sagemaker:DescribeModel",
        "sagemaker:DescribeInferenceComponent",
        "sagemaker:ListEndpoints",
        "sagemaker:ListTags"
      ],
      "Resource": [
        "arn:aws:sagemaker:*:*:endpoint/*",
        "arn:aws:sagemaker:*:*:endpoint-config/*",
        "arn:aws:sagemaker:*:*:model/*"
      ],
      "Condition": {
        "StringEquals": {
          "aws:CalledViaLast": "bedrock.amazonaws.com"
        }
      }
    },
    {
      "Sid": "DiscoveringMarketplaceModel",
      "Effect": "Allow",
      "Action": [
        "sagemaker:DescribeHubContent"
      ],
      "Resource": [
        "arn:aws:sagemaker:*:aws:hub-content/SageMakerPublicHub/Model/*",
        "arn:aws:sagemaker:*:aws:hub/SageMakerPublicHub"
      ]
    },
    {
      "Sid": "AllowMarketplaceModelsListing",
      "Effect": "Allow",
      "Action": [
        "sagemaker:ListHubContents"
      ],
      "Resource": "arn:aws:sagemaker:*:aws:hub/SageMakerPublicHub"
    }
  ]
}

Version history

Current version v7, edited by AWS on 2026-02-12. Version history is recorded from 2026-11-11. Earlier versions are in the IAM console under Policy versions.

Attach snippets

aws iam attach-role-policy --role-name ROLE_NAME --policy-arn arn:aws:iam::aws:policy/AmazonBedrockReadOnly
aws iam attach-user-policy --user-name USER_NAME --policy-arn arn:aws:iam::aws:policy/AmazonBedrockReadOnly
aws iam attach-group-policy --group-name GROUP_NAME --policy-arn arn:aws:iam::aws:policy/AmazonBedrockReadOnly

Resources:
  ExampleRole:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument: {}  # replace with your trust policy
      ManagedPolicyArns:
        - arn:aws:iam::aws:policy/AmazonBedrockReadOnly

resource "aws_iam_role_policy_attachment" "amazonbedrockreadonly" {
  role       = aws_iam_role.example.name
  policy_arn = "arn:aws:iam::aws:policy/AmazonBedrockReadOnly"
}

role.addManagedPolicy(
  iam.ManagedPolicy.fromAwsManagedPolicyName("AmazonBedrockReadOnly"),
);

Sources

• AmazonBedrockReadOnly (AWS Managed Policy Reference Guide) (retrieved 2026-11-13; supports summary, practicalScope, securityConsiderations, assignmentGuidance, faqs)
• AWS managed policies for Amazon Bedrock (Amazon Bedrock User Guide) (retrieved 2026-11-13; supports summary, useCases, securityConsiderations, assignmentGuidance, faqs)
• AWS managed policies for job functions (IAM User Guide) (retrieved 2026-11-12; supports bestPractices, faqs)
• Managed policies and inline policies (IAM User Guide) (retrieved 2026-11-12; supports securityConsiderations, faqs)

• Official AWS reference for AmazonBedrockReadOnly
• AWS service guide
• Report a data issue