AWS bedrock documentation change
Summary
Added documentation for two new AWS managed policies (AmazonBedrockLimitedAccess and AmazonBedrockMarketplaceAccess) detailing permissions for Bedrock service access, KMS key management, AWS Marketplace operations, and SageMaker integration with security condition keys
Security assessment
Introduces new IAM policies with granular permissions and security controls (aws:CalledViaLast, resource tagging) but does not address a specific security vulnerability. The changes document security features for controlled access to Bedrock and Marketplace resources.
Diff
diff --git a/bedrock/latest/userguide/security-iam-awsmanpol.md b/bedrock/latest/userguide/security-iam-awsmanpol.md index c8d8230ab..7fc6a5570 100644 --- a//bedrock/latest/userguide/security-iam-awsmanpol.md +++ b//bedrock/latest/userguide/security-iam-awsmanpol.md @@ -5 +5 @@ -AmazonBedrockFullAccessAmazonBedrockReadOnlyPolicy updates +AmazonBedrockFullAccessAmazonBedrockReadOnlyAmazonBedrockLimitedAccessAmazonBedrockMarketplaceAccessPolicy updates @@ -20,0 +21,4 @@ Additionally, AWS supports managed policies for job functions that span multiple + * AWS managed policy: AmazonBedrockLimitedAccess + + * AWS managed policy: AmazonBedrockMarketplaceAccess + @@ -312,0 +317,88 @@ This policy grants read-only permissions that allow users to view all resources +## AWS managed policy: AmazonBedrockLimitedAccess + +You can attach the [AmazonBedrockLimitedAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonBedrockLimitedAccess.html) policy to your IAM identities to allow it access to Amazon Bedrock services, AWS KMS key management, networking resources, and AWS Marketplace subscriptions for third-party foundation models. The policy includes the following statements: + + * The `BedrockAPIs` statement allows you to perform several operations in Amazon Bedrock including: + + * Passing the Amazon Bedrock API key when making API requests to the Amazon Bedrock service. + + * Describing information about resources. + + * Creating resources (guardrails, models, jobs). + + * Deleting resources. + + * Invoking models on all resources. + + * The `DescribeKey` statement allows you to view information about KMS keys across all regions and accounts, as long as the policies on the keys permit you to do so. + + * The `APIsWithAllResourceAccess` statement allows you to: + + * List IAM roles. + + * Describe Amazon VPC resources (VPCs, subnets, and security groups) across all resources. + + * The `MarketplaceOperationsFromBedrockFor3pModels` statement enables you to: + + * Subscribe to AWS Marketplace offerings. + + * View subscriptions. + + * Unsubscribe from AWS Marketplace offerings. + +###### Note + +The condition key `aws:CalledViaLast` restricts these actions to only when they are called through the Amazon Bedrock service. + + + + +## AWS managed policy: AmazonBedrockMarketplaceAccess + +You can attach the [AmazonBedrockMarketplaceAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonBedrockMarketplaceAccess.html) policy to your IAM identities to allow it to manage and use Amazon Bedrock marketplace model endpoints with SageMaker AI integration. The policy includes the following statements: + + * The `BedrockMarketplaceAPIs` statement allows you to create, delete, register, deregister, and update marketplace model endpoints in Amazon Bedrock on all resources. + + * The `MarketplaceModelEndpointMutatingAPIs` statement allows you to create and manage SageMaker AI endpoints, endpoint configurations, and models on specified resources. + + * Use the `aws:CalledViaLast` condition key to ensure that these actions are only performed when called through Bedrock. + + * Use the `aws:ResourceTag/sagemaker-sdk:bedrock` condition key to ensure that these actions are only performed on resources tagged as Amazon Bedrock-compatible. + + * The `MarketplaceModelEndpointAddTagsOperations` statement allows adding specific tags to SageMaker AI endpoints, endpoint configurations, and models on specified resources. + + * Use the `aws:TagKeys` condition key to restrict which tags can be added + + * Use the `aws:RequestTag/*` condition key to ensure tag values match specified patterns + + * The `MarketplaceModelEndpointDeleteTagsOperations` statement allows deleting specific tags from SageMaker AI endpoints, endpoint configurations, and models on specified resources. + + * Use the `aws:TagKeys` condition key to restrict which tags can be deleted + + * Use the `aws:ResourceTag/*` condition key to ensure deleted tags match specified patterns + + * The `MarketplaceModelEndpointNonMutatingAPIs` statement allows viewing and describing SageMaker AI endpoints, endpoint configurations, and models on specified resources. + + * Use `aws:CalledViaLast` condition key to ensure actions are only performed through the Amazon Bedrock service + + * The `MarketplaceModelEndpointInvokingOperations` statement allows invoking SageMaker AI endpoints on specified resources. + + * Use the `aws:CalledViaLast` condition key to ensure actions are only performed through the Amazon Bedrock service + + * Use the `aws:ResourceTag/sagemaker-sdk:bedrock` condition key to ensure actions are only performed on Bedrock-compatible resources + + * The `DiscoveringMarketplaceModel` statement allows decribing SageMaker AI hub content on specified resources. + + * The `AllowMarketplaceModelsListing` statement allows listing SageMaker AI hub contents on specified resources. + + * The `PassRoleToSageMaker` statement allows passing IAM roles to SageMaker AI and Amazon Bedrock on specified resources. + + * Use `iam:PassedToService` condition key to ensure roles are only passed to specified services. + + * The `PassRoleToBedrock` statement allows you to pass specific IAM roles to Amazon Bedrock on specified resources. + + * Use the `iam:PassedToService` condition key to ensure roles are only passed to the Amazon Bedrock service. + + + + @@ -318,0 +411,2 @@ Change | Description | Date +AmazonBedrockMarketplaceAccess – New policy | Amazon Bedrock added a new policy to grant customers permissions to access Amazon Bedrock Marketplace foundation models through a SageMaker AI endpoint. | June 13, 2025 +AmazonBedrockLimitedAccess – New policy | Amazon Bedrock added a new policy to grant customers basic permissions to access core actions in Amazon Bedrock. | June 13, 2025