Bedrock

Prefix bedrock, 269 actions · Domain AI & Machine Learning

22 AWS managed policies. 2 have reviewed guidance; the rest have authoritative permission data pending editorial review. 1 are service-linked role policies, shown with permission data only.

User access (3)

AmazonBedrockFullAccessAdmin
AmazonBedrockReadOnlyReader
SageMakerStudioUserIAMDefaultExecutionPolicyAdmin

Operator and limited (8)

AmazonBedrockAgentCoreMemoryBedrockModelInferenceExecutionRolePolicyOperator
AmazonBedrockLimitedAccessOperator
AmazonBedrockMarketplaceAccessOperator
AmazonBedrockStudioPermissionsBoundaryOperator
AmazonSageMakerCanvasAIServicesAccessOperator
AmazonSageMakerModelCustomizationCoreAccessOperator
AWSElasticBeanstalkMulticontainerDockerOperator
CloudWatchOmniModelInferencePolicyOperator

Service roles (10)

AmazonDataZoneBedrockModelConsumptionPolicyOperator
AmazonDataZoneBedrockModelManagementPolicyOperator
SageMakerStudioBedrockAgentServiceRolePolicyOperator
SageMakerStudioBedrockChatAgentUserRolePolicyOperator
SageMakerStudioBedrockEvaluationJobServiceRolePolicyOperator
SageMakerStudioBedrockFlowServiceRolePolicyOperator
SageMakerStudioBedrockKnowledgeBaseCustomResourcePolicyOperator
SageMakerStudioBedrockKnowledgeBaseServiceRolePolicyOperator
SageMakerStudioBedrockPromptUserRolePolicyOperator
SageMakerStudioProjectProvisioningRolePolicyOperator

Service-linked roles (1)

AWSBudgetsSpendLimitMemberRolePolicyOperator

Also grants Bedrock actions (31)

agenticretrievestream allowvendedlogdeliveryforresource applyguardrail associateagentcollaborator associateagentknowledgebase associatethirdpartyknowledgebase batchdeleteadvancedpromptoptimizationjob batchdeleteevaluationjob callwithbearertoken cancelautomatedreasoningpolicybuildworkflow cancelinvoke checkingesteddocumentacl copyblueprintstage counttokens createadvancedpromptoptimizationjob createagent createagentactiongroup createagentalias createautomatedreasoningpolicy createautomatedreasoningpolicytestcase createautomatedreasoningpolicyversion createblueprint createblueprintversion createcustommodel createcustommodeldeployment createdataautomationlibrary createdataautomationproject createdatasource createdatasourcetoken createevaluationjob createflow createflowalias createflowversion createfoundationmodelagreement createguardrail createguardrailversion createinferenceprofile createinvocation createknowledgebase createmarketplacemodelendpoint createmodelcopyjob createmodelcustomizationjob createmodelevaluationjob createmodelimportjob createmodelinvocationjob createprompt createpromptrouter createpromptversion createprovisionedmodelthroughput createretrievalinstruction createretrievalinstructionversion createsession deleteagent deleteagentactiongroup deleteagentalias deleteagentmemory deleteagentversion deleteautomatedreasoningpolicy deleteautomatedreasoningpolicybuildworkflow deleteautomatedreasoningpolicytestcase deleteblueprint deletecustommodel deletecustommodeldeployment deletedataautomationlibrary deletedataautomationproject deletedatasource deleteenforcedguardrailconfiguration deleteflow deleteflowalias deleteflowversion deletefoundationmodelagreement deleteguardrail deleteimportedmodel deleteinferenceprofile deleteinvoke deleteknowledgebase deleteknowledgebasedocuments deletemarketplacemodelagreement deletemarketplacemodelendpoint deletemodelinvocationloggingconfiguration deleteprompt deletepromptrouter deleteprovisionedmodelthroughput deleteresourcepolicy deleteretrievalinstruction deletesession deregistermarketplacemodelendpoint detectgeneratedcontent disassociateagentcollaborator disassociateagentknowledgebase endsession exportautomatedreasoningpolicyversion generatequery getaccountdataretention getadvancedpromptoptimizationjob getagent getagentactiongroup getagentalias getagentcollaborator getagentknowledgebase getagentmemory getagentversion getasyncinvoke getautomatedreasoningpolicy getautomatedreasoningpolicyannotations getautomatedreasoningpolicybuildworkflow getautomatedreasoningpolicybuildworkflowresultassets getautomatedreasoningpolicynextscenario getautomatedreasoningpolicytestcase getautomatedreasoningpolicytestresult getblueprint getblueprintoptimizationstatus getblueprintrecommendation getcustommodel getcustommodeldeployment getdataautomationlibrary getdataautomationlibraryentity getdataautomationlibraryingestionjob getdataautomationproject getdataautomationstatus getdatasource getdatasourceauthorizationurl getdocumentcontent getevaluationjob getexecutionflowsnapshot getflow getflowalias getflowexecution getflowversion getfoundationmodel getfoundationmodelavailability getguardrail getimportedmodel getinferenceprofile getingesteddocumentacl getingestionjob getinvocationstep getinvoke getknowledgebase getknowledgebasedocuments getmarketplacemodelendpoint getmodelcopyjob getmodelcustomizationjob getmodelevaluationjob getmodelimportjob getmodelinvocationjob getmodelinvocationloggingconfiguration getprompt getpromptrouter getprovisionedmodelthroughput getresourcepolicy getretrievalinstruction getsession getusecaseformodelaccess ingestknowledgebasedocuments invokeagent invokeautomatedreasoningpolicy invokeblueprintoptimizationasync invokeblueprintrecommendationasync invokebuilder invokedataautomation invokedataautomationasync invokedataautomationlibraryingestionjob invokeflow invokeguardrailchecks invokeinlineagent invokemodel invokemodelwithresponsestream invoketool listadvancedpromptoptimizationjobs listagentactiongroups listagentaliases listagentcollaborators listagentknowledgebases listagentversions listagents listasyncinvokes listautomatedreasoningpolicies listautomatedreasoningpolicybuildworkflows listautomatedreasoningpolicytestcases listautomatedreasoningpolicytestresults listblueprints listcustommodeldeployments listcustommodels listdataautomationlibraries listdataautomationlibraryentities listdataautomationlibraryingestionjobs listdataautomationprojects listdatasources listenforcedguardrailsconfiguration listevaluationjobs listflowaliases listflowexecutionevents listflowexecutions listflowversions listflows listfoundationmodelagreementoffers listfoundationmodels listguardrails listimportedmodels listinferenceprofiles listingestionjobs listinvocationsteps listinvocations listknowledgebasedocuments listknowledgebases listmarketplacemodelendpoints listmodelcopyjobs listmodelcustomizationjobs listmodelevaluationjobs listmodelimportjobs listmodelinvocationjobs listpromptrouters listprompts listprovisionedmodelthroughputs listretrievalinstructionversions listretrievalinstructions listsessions listtagsforresource optimizeprompt prepareagent prepareflow putaccountdataretention putenforcedguardrailconfiguration putfoundationmodelentitlement putinvocationstep putmodelinvocationloggingconfiguration putresourcepolicy putusecaseformodelaccess registermarketplacemodelendpoint renderprompt rerank retrieve retrieveandgenerate startautomatedreasoningpolicybuildworkflow startautomatedreasoningpolicytestworkflow startflowexecution startingestionjob stopadvancedpromptoptimizationjob stopevaluationjob stopflowexecution stopingestionjob stopmodelcustomizationjob stopmodelinvocationjob tagresource untagresource updateagent updateagentactiongroup updateagentalias updateagentcollaborator updateagentknowledgebase updateautomatedreasoningpolicy updateautomatedreasoningpolicyannotations updateautomatedreasoningpolicytestcase updateblueprint updatecustommodeldeployment updatedataautomationlibrary updatedataautomationproject updatedatasource updateflow updateflowalias updateguardrail updateknowledgebase updatemarketplacemodelendpoint updateprompt updateprovisionedmodelthroughput updateretrievalinstruction updatesession validateflowdefinition

Actions (269)

Bedrock actions that managed policies grant
Action	Access level	Policies granting without limits	Policies granting with resource or condition limits
bedrock:AgenticRetrieveStream	Read	10	1
bedrock:AllowVendedLogDeliveryForResource	Permissions management	9	2
bedrock:ApplyGuardrail	Read	10	6
bedrock:AssociateAgentCollaborator	Write	9	1
bedrock:AssociateAgentKnowledgeBase	Write	9	2
bedrock:AssociateThirdPartyKnowledgeBase	Write	9	1
bedrock:BatchDeleteAdvancedPromptOptimizationJob	Write	9	1
bedrock:BatchDeleteEvaluationJob	Write	10	4
bedrock:CallWithBearerToken	Read	11	1
bedrock:CancelAutomatedReasoningPolicyBuildWorkflow	Write	10	1
bedrock:CancelInvoke	Write	9	1
bedrock:CheckIngestedDocumentAcl	Read	11	1
bedrock:CopyBlueprintStage	Write	9	1
bedrock:CountTokens	Read	10	1
bedrock:CreateAdvancedPromptOptimizationJob	Write	9	1
bedrock:CreateAgent	Write	9	2
bedrock:CreateAgentActionGroup	Write	9	2
bedrock:CreateAgentAlias	Write	9	4
bedrock:CreateAutomatedReasoningPolicy	Write	10	1
bedrock:CreateAutomatedReasoningPolicyTestCase	Write	10	1
bedrock:CreateAutomatedReasoningPolicyVersion	Write	10	1
bedrock:CreateBlueprint	Write	9	2
bedrock:CreateBlueprintVersion	Write	9	2
bedrock:CreateCustomModel	Write	9	2
bedrock:CreateCustomModelDeployment	Write	9	1
bedrock:CreateDataAutomationLibrary	Write	9	1
bedrock:CreateDataAutomationProject	Write	9	2
bedrock:CreateDataSource	Write	9	2
bedrock:CreateDataSourceToken	Write	9	1
bedrock:CreateEvaluationJob	Write	10	4
bedrock:CreateFlow	Write	9	2
bedrock:CreateFlowAlias	Write	9	2
bedrock:CreateFlowVersion	Write	9	2
bedrock:CreateFoundationModelAgreement	Write	9	1
bedrock:CreateGuardrail	Write	10	2
bedrock:CreateGuardrailVersion	Write	10	2
bedrock:CreateInferenceProfile	Write	10	4
bedrock:CreateInvocation	Write	9	2
bedrock:CreateKnowledgeBase	Write	9	2
bedrock:CreateMarketplaceModelEndpoint	Write	10	1
bedrock:CreateModelCopyJob	Write	10	1
bedrock:CreateModelCustomizationJob	Write	10	2
bedrock:CreateModelEvaluationJob	Write	9	1
bedrock:CreateModelImportJob	Write	10	2
bedrock:CreateModelInvocationJob	Write	10	2
bedrock:CreatePrompt	Write	9	5
bedrock:CreatePromptRouter	Write	10	1
bedrock:CreatePromptVersion	Write	9	5
bedrock:CreateProvisionedModelThroughput	Write	10	2
bedrock:CreateRetrievalInstruction	Write	9	1
bedrock:CreateRetrievalInstructionVersion	Write	9	1
bedrock:CreateSession	Write	9	2
bedrock:DeleteAgent	Write	9	2
bedrock:DeleteAgentActionGroup	Write	9	2
bedrock:DeleteAgentAlias	Write	9	4
bedrock:DeleteAgentMemory	Write	9	1
bedrock:DeleteAgentVersion	Write	9	3
bedrock:DeleteAutomatedReasoningPolicy	Write	10	1
bedrock:DeleteAutomatedReasoningPolicyBuildWorkflow	Write	10	1
bedrock:DeleteAutomatedReasoningPolicyTestCase	Write	10	1
bedrock:DeleteBlueprint	Write	9	2
bedrock:DeleteCustomModel	Write	10	1
bedrock:DeleteCustomModelDeployment	Write	9	1
bedrock:DeleteDataAutomationLibrary	Write	9	1
bedrock:DeleteDataAutomationProject	Write	9	2
bedrock:DeleteDataSource	Write	9	2
bedrock:DeleteEnforcedGuardrailConfiguration	Write	9	1
bedrock:DeleteFlow	Write	9	2
bedrock:DeleteFlowAlias	Write	9	2
bedrock:DeleteFlowVersion	Write	9	2
bedrock:DeleteFoundationModelAgreement	Write	9	1
bedrock:DeleteGuardrail	Write	10	2
bedrock:DeleteImportedModel	Write	10	1
bedrock:DeleteInferenceProfile	Write	10	4
bedrock:DeleteInvoke	Write	9	1
bedrock:DeleteKnowledgeBase	Write	9	2
bedrock:DeleteKnowledgeBaseDocuments	Write	9	1
bedrock:DeleteMarketplaceModelAgreement	Write	9	1
bedrock:DeleteMarketplaceModelEndpoint	Write	10	1
bedrock:DeleteModelInvocationLoggingConfiguration	Write	9	1
bedrock:DeletePrompt	Write	9	5
bedrock:DeletePromptRouter	Write	10	1
bedrock:DeleteProvisionedModelThroughput	Write	10	2
bedrock:DeleteResourcePolicy	Write	9	1
bedrock:DeleteRetrievalInstruction	Write	9	1
bedrock:DeleteSession	Write	9	2
bedrock:DeregisterMarketplaceModelEndpoint	Write	10	1
bedrock:DetectGeneratedContent	Read	9	1
bedrock:DisassociateAgentCollaborator	Write	9	1
bedrock:DisassociateAgentKnowledgeBase	Write	9	2
bedrock:EndSession	Write	9	2
bedrock:ExportAutomatedReasoningPolicyVersion	Read	11	1
bedrock:GenerateQuery	Read	10	1
bedrock:GetAccountDataRetention	Read	15	1
bedrock:GetAdvancedPromptOptimizationJob	Read	15	1
bedrock:GetAgent	Read	22	6
bedrock:GetAgentActionGroup	Read	22	6
bedrock:GetAgentAlias	Read	22	7
bedrock:GetAgentCollaborator	Read	19	3
bedrock:GetAgentKnowledgeBase	Read	22	6
bedrock:GetAgentMemory	Read	14	2
bedrock:GetAgentVersion	Read	16	5
bedrock:GetAsyncInvoke	Read	17	1
bedrock:GetAutomatedReasoningPolicy	Read	19	2
bedrock:GetAutomatedReasoningPolicyAnnotations	Read	15	1
bedrock:GetAutomatedReasoningPolicyBuildWorkflow	Read	16	1
bedrock:GetAutomatedReasoningPolicyBuildWorkflowResultAssets	Read	14	1
bedrock:GetAutomatedReasoningPolicyNextScenario	Read	16	1
bedrock:GetAutomatedReasoningPolicyTestCase	Read	14	1
bedrock:GetAutomatedReasoningPolicyTestResult	Read	14	1
bedrock:GetBlueprint	Read	19	3
bedrock:GetBlueprintOptimizationStatus	Read	15	1
bedrock:GetBlueprintRecommendation	Read	15	1
bedrock:GetCustomModel	Read	18	4
bedrock:GetCustomModelDeployment	Read	16	1
bedrock:GetDataAutomationLibrary	Read	15	2
bedrock:GetDataAutomationLibraryEntity	Read	13	1
bedrock:GetDataAutomationLibraryIngestionJob	Read	15	1
bedrock:GetDataAutomationProject	Read	19	3
bedrock:GetDataAutomationStatus	Read	17	2
bedrock:GetDataSource	Read	22	4
bedrock:GetDataSourceAuthorizationUrl	Read	12	1
bedrock:GetDocumentContent	Read	13	1
bedrock:GetEvaluationJob	Read	20	4
bedrock:GetExecutionFlowSnapshot	Read	16	1
bedrock:GetFlow	Read	19	4
bedrock:GetFlowAlias	Read	19	4
bedrock:GetFlowExecution	Read	16	2
bedrock:GetFlowVersion	Read	19	4
bedrock:GetFoundationModel	Read	21	4
bedrock:GetFoundationModelAvailability	Read	17	3
bedrock:GetGuardrail	Read	22	4
bedrock:GetImportedModel	Read	17	2
bedrock:GetInferenceProfile	Read	20	10
bedrock:GetIngestedDocumentAcl	Read	15	1
bedrock:GetIngestionJob	Read	16	7
bedrock:GetInvocationStep	Read	14	3
bedrock:GetInvoke	Read	13	1
bedrock:GetKnowledgeBase	Read	22	5
bedrock:GetKnowledgeBaseDocuments	Read	15	1
bedrock:GetMarketplaceModelEndpoint	Read	16	1
bedrock:GetModelCopyJob	Read	16	1
bedrock:GetModelCustomizationJob	Read	18	2
bedrock:GetModelEvaluationJob	Read	14	1
bedrock:GetModelImportJob	Read	17	2
bedrock:GetModelInvocationJob	Read	18	1
bedrock:GetModelInvocationLoggingConfiguration	Read	21	2
bedrock:GetPrompt	Read	14	9
bedrock:GetPromptRouter	Read	19	2
bedrock:GetProvisionedModelThroughput	Read	18	3
bedrock:GetResourcePolicy	Read	15	1
bedrock:GetRetrievalInstruction	Read	12	1
bedrock:GetSession	Read	14	3
bedrock:GetUseCaseForModelAccess	Read	16	1
bedrock:IngestKnowledgeBaseDocuments	Write	9	1
bedrock:InvokeAgent	Read	9	6
bedrock:InvokeAutomatedReasoningPolicy	Read	10	1
bedrock:InvokeBlueprintOptimizationAsync	Write	9	1
bedrock:InvokeBlueprintRecommendationAsync	Write	9	1
bedrock:InvokeBuilder	Write	9	1
bedrock:InvokeDataAutomation	Write	9	1
bedrock:InvokeDataAutomationAsync	Write	9	2
bedrock:InvokeDataAutomationLibraryIngestionJob	Write	9	1
bedrock:InvokeFlow	Read	9	4
bedrock:InvokeGuardrailChecks	Read	9	1
bedrock:InvokeInlineAgent	Read	10	2
bedrock:InvokeModel	Read	11	16
bedrock:InvokeModelWithResponseStream	Read	11	12
bedrock:InvokeTool	Read	9	1
bedrock:ListAdvancedPromptOptimizationJobs	List	17	1
bedrock:ListAgentActionGroups	List	22	7
bedrock:ListAgentAliases	List	22	7
bedrock:ListAgentCollaborators	List	21	3
bedrock:ListAgentKnowledgeBases	List	22	7
bedrock:ListAgentVersions	List	19	5
bedrock:ListAgents	List	22	3
bedrock:ListAsyncInvokes	List	18	1
bedrock:ListAutomatedReasoningPolicies	List	21	3
bedrock:ListAutomatedReasoningPolicyBuildWorkflows	List	18	1
bedrock:ListAutomatedReasoningPolicyTestCases	List	17	1
bedrock:ListAutomatedReasoningPolicyTestResults	List	17	1
bedrock:ListBlueprints	List	21	3
bedrock:ListCustomModelDeployments	List	18	2
bedrock:ListCustomModels	List	21	3
bedrock:ListDataAutomationLibraries	List	17	2
bedrock:ListDataAutomationLibraryEntities	List	17	1
bedrock:ListDataAutomationLibraryIngestionJobs	List	17	1
bedrock:ListDataAutomationProjects	List	21	2
bedrock:ListDataSources	List	22	4
bedrock:ListEnforcedGuardrailsConfiguration	List	21	2
bedrock:ListEvaluationJobs	List	25	3
bedrock:ListFlowAliases	List	22	4
bedrock:ListFlowExecutionEvents	List	17	2
bedrock:ListFlowExecutions	List	18	2
bedrock:ListFlowVersions	List	22	4
bedrock:ListFlows	List	22	3
bedrock:ListFoundationModelAgreementOffers	List	18	1
bedrock:ListFoundationModels	List	33	3
bedrock:ListGuardrails	List	23	3
bedrock:ListImportedModels	List	19	1
bedrock:ListInferenceProfiles	List	25	3
bedrock:ListIngestionJobs	List	19	7
bedrock:ListInvocationSteps	List	18	3
bedrock:ListInvocations	List	17	3
bedrock:ListKnowledgeBaseDocuments	List	18	1
bedrock:ListKnowledgeBases	List	22	4
bedrock:ListMarketplaceModelEndpoints	Read	19	1
bedrock:ListModelCopyJobs	List	19	1
bedrock:ListModelCustomizationJobs	List	21	1
bedrock:ListModelEvaluationJobs	List	15	1
bedrock:ListModelImportJobs	List	19	2
bedrock:ListModelInvocationJobs	List	20	1
bedrock:ListPromptRouters	List	22	2
bedrock:ListPrompts	List	22	6
bedrock:ListProvisionedModelThroughputs	List	20	2
bedrock:ListRetrievalInstructionVersions	List	15	1
bedrock:ListRetrievalInstructions	List	15	1
bedrock:ListSessions	List	19	2
bedrock:ListTagsForResource	Read	23	8
bedrock:OptimizePrompt	Read	9	1
bedrock:PrepareAgent	Write	9	2
bedrock:PrepareFlow	Write	9	2
bedrock:PutAccountDataRetention	Write	9	1
bedrock:PutEnforcedGuardrailConfiguration	Write	9	1
bedrock:PutFoundationModelEntitlement	Write	9	1
bedrock:PutInvocationStep	Write	9	2
bedrock:PutModelInvocationLoggingConfiguration	Write	9	1
bedrock:PutResourcePolicy	Write	9	1
bedrock:PutUseCaseForModelAccess	Write	10	1
bedrock:RegisterMarketplaceModelEndpoint	Write	10	1
bedrock:RenderPrompt	Read	10	1
bedrock:Rerank	Write	9	1
bedrock:Retrieve	Read	10	6
bedrock:RetrieveAndGenerate	Write	13	2
bedrock:StartAutomatedReasoningPolicyBuildWorkflow	Write	10	1
bedrock:StartAutomatedReasoningPolicyTestWorkflow	Write	10	1
bedrock:StartFlowExecution	Write	9	1
bedrock:StartIngestionJob	Write	9	6
bedrock:StopAdvancedPromptOptimizationJob	Write	9	1
bedrock:StopEvaluationJob	Write	11	3
bedrock:StopFlowExecution	Write	9	1
bedrock:StopIngestionJob	Write	9	2
bedrock:StopModelCustomizationJob	Write	11	2
bedrock:StopModelInvocationJob	Write	11	2
bedrock:TagResource	Tagging	10	10
bedrock:UntagResource	Tagging	10	3
bedrock:UpdateAgent	Write	9	2
bedrock:UpdateAgentActionGroup	Write	9	2
bedrock:UpdateAgentAlias	Write	9	4
bedrock:UpdateAgentCollaborator	Write	9	1
bedrock:UpdateAgentKnowledgeBase	Write	9	2
bedrock:UpdateAutomatedReasoningPolicy	Write	10	1
bedrock:UpdateAutomatedReasoningPolicyAnnotations	Write	10	1
bedrock:UpdateAutomatedReasoningPolicyTestCase	Write	10	1
bedrock:UpdateBlueprint	Write	9	2
bedrock:UpdateCustomModelDeployment	Write	9	1
bedrock:UpdateDataAutomationLibrary	Write	9	1
bedrock:UpdateDataAutomationProject	Write	9	2
bedrock:UpdateDataSource	Write	9	2
bedrock:UpdateFlow	Write	9	2
bedrock:UpdateFlowAlias	Write	9	2
bedrock:UpdateGuardrail	Write	10	2
bedrock:UpdateKnowledgeBase	Write	9	2
bedrock:UpdateMarketplaceModelEndpoint	Write	10	1
bedrock:UpdatePrompt	Write	9	2
bedrock:UpdateProvisionedModelThroughput	Write	11	1
bedrock:UpdateRetrievalInstruction	Write	9	1
bedrock:UpdateSession	Write	9	2
bedrock:ValidateFlowDefinition	Read	11	2