AWS bedrock documentation change
Summary
Added new Bedrock agent collaboration-related IAM policy actions (AssociateAgentCollaborator, DisassociateAgentCollaborator, etc.)
Security assessment
Expands IAM policy examples with new collaboration management actions, enhancing security documentation but not addressing a specific vulnerability
Diff
diff --git a/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md index 3615614bd..cfcca37e2 100644 --- a/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md +++ b/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md @@ -58,0 +59 @@ To restrict permissions to only actions that are used in Amazon Bedrock Agents, + "bedrock:ListAgentKnowledgeBases", @@ -62 +63,6 @@ To restrict permissions to only actions that are used in Amazon Bedrock Agents, - "bedrock:InvokeAgent" + "bedrock:InvokeAgent", + "bedrock:AssociateAgentCollaborator", + "bedrock:DisassociateAgentCollaborator", + "bedrock:GetAgentCollaborator", + "bedrock:ListAgentCollaborators", + "bedrock:UpdateAgentCollaborator"