AWS bedrock documentation change
Summary
Added Redshift schema permission grant requirement for new schemas
Security assessment
Introduces documentation about granting USAGE permissions for database schemas, which relates to access control security practices but does not indicate a specific security issue resolution.
Diff
diff --git a/bedrock/latest/userguide/knowledge-base-prereq-structured-db-access.md index 749f015b2..e406577fd 100644 --- a/bedrock/latest/userguide/knowledge-base-prereq-structured-db-access.md +++ b/bedrock/latest/userguide/knowledge-base-prereq-structured-db-access.md @@ -79,0 +80,4 @@ AWS Secrets Manager username + 3. If you created a new schema in the Redshift database, run the following command to grant an identity permissions against the new schema. + + GRANT USAGE ON SCHEMA ${schemaName} TO "IAMR:${serviceRole}"; +