AWS config documentation change

Service: config · 2025-05-28 · Documentation low

File: config/latest/developerguide/security-iam-awsmanpol.md

Summary

Added Bedrock permissions to AWS_ConfigRole and AWSConfigServiceRolePolicy

Security assessment

Expands IAM policy permissions for Amazon Bedrock integration. No security context provided - appears to be feature enablement rather than security improvement

Diff

diff --git a/config/latest/developerguide/security-iam-awsmanpol.md b/config/latest/developerguide/security-iam-awsmanpol.md
index 4394486ff..4ab10d29c 100644
--- a//config/latest/developerguide/security-iam-awsmanpol.md
+++ b//config/latest/developerguide/security-iam-awsmanpol.md
@@ -78,0 +79,2 @@ Change | Description | Date
+AWS_ConfigRole – Add "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource"  |  This policy now supports additional permissions for Amazon Bedrock. | May 27, 2025  
+AWSConfigServiceRolePolicy – Add "bedrock:GetGuardrail", "bedrock:GetInferenceProfile", "bedrock:GetKnowledgeBase", "bedrock:ListGuardrails", "bedrock:ListInferenceProfiles", "bedrock:ListKnowledgeBases", "bedrock:ListTagsForResource"  |  This policy now supports additional permissions for Amazon Bedrock. | May 27, 2025