AWS bedrock medium security documentation change

Service: bedrock · 2025-06-10 · Security-related medium

File: bedrock/latest/userguide/kb-direct-ingestion-prereq.md

Summary

Added 'bedrock:StartIngestionJob' permission to example IAM policy

Security assessment

Adding required IAM action to policy example addresses potential security gap where missing permission could lead to failed operations or insecure workarounds

Diff

diff --git a/bedrock/latest/userguide/kb-direct-ingestion-prereq.md b/bedrock/latest/userguide/kb-direct-ingestion-prereq.md
index e2d9a4c41..336aa9a9c 100644
--- a//bedrock/latest/userguide/kb-direct-ingestion-prereq.md
+++ b//bedrock/latest/userguide/kb-direct-ingestion-prereq.md
@@ -18,0 +19 @@ The following policy can be attached to an IAM role to allow it to perform direc
+                    "bedrock:StartIngestionJob",