AWS bedrock medium security documentation change

Service: bedrock · 2025-05-03 · Security-related medium

File: bedrock/latest/userguide/custom-model-job-access-security.md

Summary

Added section about cross-region inference profile permissions for distillation jobs with IAM policy template

Security assessment

The change explicitly addresses access control requirements for cross-region model invocations, providing security-focused IAM policy guidance. It helps prevent unauthorized cross-region access by demonstrating proper permission scoping.

Diff

diff --git a/bedrock/latest/userguide/custom-model-job-access-security.md b/bedrock/latest/userguide/custom-model-job-access-security.md
index 622203a54..2d308b390 100644
--- a//bedrock/latest/userguide/custom-model-job-access-security.md
+++ b//bedrock/latest/userguide/custom-model-job-access-security.md
@@ -5 +5 @@
-Create an IAM service role for model customization(Optional) Encrypt model customization jobs and artifacts(Optional) Protect your model customization jobs using a VPC
+Create an IAM service role for model customization(Optional) Permissions to create a Distillation job with a cross-region inference profile(Optional) Encrypt model customization jobs and artifacts(Optional) Protect your model customization jobs using a VPC
@@ -118,0 +119,26 @@ To restrict access to a specific folder in a bucket, add an `s3:prefix` conditio
+## (Optional) Permissions to create a Distillation job with a cross-region inference profile
+
+To use a cross-region inference profile for a teacher model in a distillation job, the service role must have permissions to invoke the inference profile in an AWS Region, in addition to the model in each Region in the inference profile.
+
+For permissions to invoke with a cross-Region (system-defined) inference profile, use the following policy as a template for the permissions policy to attach to your service role:
+    
+    
+    {
+        "Version": "2012-10-17",
+        "Statement": [
+            {
+                "Sid": "CrossRegionInference",
+                "Effect": "Allow",
+                "Action": [  
+                    "bedrock:InvokeModel"
+                ],
+                "Resource": [
+                    "arn:aws:bedrock:${Region}:${AccountId}:inference-profile/${InferenceProfileId}",
+                    "arn:aws:bedrock:${Region1}::foundation-model/${ModelId}",
+                    "arn:aws:bedrock:${Region2}::foundation-model/${ModelId}",
+                ...
+                ]
+            }
+        ]
+    }
+