AWS Security ChangesHomeSearch

AWS bedrock documentation change

Service: bedrock · 2025-03-10 · Documentation low

File: bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md

Summary

Added new Bedrock agent collaboration-related IAM policy actions (AssociateAgentCollaborator, DisassociateAgentCollaborator, etc.)

Security assessment

Expands IAM policy examples with new collaboration management actions, enhancing security documentation but not addressing a specific vulnerability

Diff

diff --git a/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md
index 3615614bd..cfcca37e2 100644
--- a/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md
+++ b/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md
@@ -58,0 +59 @@ To restrict permissions to only actions that are used in Amazon Bedrock Agents,
+                    "bedrock:ListAgentKnowledgeBases",
@@ -62 +63,6 @@ To restrict permissions to only actions that are used in Amazon Bedrock Agents,
-                    "bedrock:InvokeAgent"
+                    "bedrock:InvokeAgent",
+                    "bedrock:AssociateAgentCollaborator",
+                    "bedrock:DisassociateAgentCollaborator",
+                    "bedrock:GetAgentCollaborator",
+                    "bedrock:ListAgentCollaborators",
+                    "bedrock:UpdateAgentCollaborator"