AWS bedrock documentation change

Service: bedrock · 2025-07-25 · Documentation low

File: bedrock/latest/userguide/kb-permissions.md

Summary

Updated ARN regions to us-east-1 in multiple IAM policy examples and fixed JSON formatting

Security assessment

Changes involve standardizing region references in resource ARNs and formatting adjustments. No evidence of addressing security vulnerabilities or adding new security features.

Diff

diff --git a/bedrock/latest/userguide/kb-permissions.md b/bedrock/latest/userguide/kb-permissions.md
index d9c901901..cfba62cb9 100644
--- a//bedrock/latest/userguide/kb-permissions.md
+++ b//bedrock/latest/userguide/kb-permissions.md
@@ -90 +90,2 @@ JSON
-        "Statement": [{
+        "Statement": [
+            {
@@ -101 +102 @@ JSON
-                    "AWS:SourceArn": "arn:aws:bedrock:${Region}:${AccountId}:knowledge-base/*"
+                        "AWS:SourceArn": "arn:aws:bedrock:us-east-1:${AccountId}:knowledge-base/*"
@@ -104 +105,2 @@ JSON
-        }]
+            }
+        ]
@@ -136,3 +138,3 @@ JSON
-                    "arn:aws:bedrock:${Region}::foundation-model/amazon.titan-embed-text-v1",
-                    "arn:aws:bedrock:${Region}::foundation-model/cohere.embed-english-v3",
-                    "arn:aws:bedrock:${Region}::foundation-model/cohere.embed-multilingual-v3"
+                    "arn:aws:bedrock:us-east-1::foundation-model/amazon.titan-embed-text-v1",
+                    "arn:aws:bedrock:us-east-1::foundation-model/cohere.embed-english-v3",
+                    "arn:aws:bedrock:us-east-1::foundation-model/cohere.embed-multilingual-v3"
@@ -440 +442,2 @@ JSON
-        "Statement": [{
+        "Statement": [
+            {
@@ -446 +449,3 @@ JSON
-                "arn:aws:aoss:${Region}:${AccountId}:collection/${CollectionId}"
+                    "arn:aws:aoss:us-east-1:${AccountId}:collection/${CollectionId}"
+                ]
+            }
@@ -448 +452,0 @@ JSON
-        }]
@@ -508 +512 @@ JSON
-                "arn:aws:rds:${Region}:${AccountId}:cluster:${DbClusterId}"
+                    "arn:aws:rds:us-east-1:${AccountId}:cluster:${DbClusterId}"
@@ -519 +523,3 @@ JSON
-                "arn:aws:rds:${Region}:${AccountId}:cluster:${DbClusterId}"
+                    "arn:aws:rds:us-east-1:${AccountId}:cluster:${DbClusterId}"
+                ]
+            }
@@ -521 +526,0 @@ JSON
-        }]
@@ -549 +554,3 @@ JSON
-                "arn:aws:neptune-graph:${Region}:${AccountId}:graph/${GraphId}"
+                    "arn:aws:neptune-graph:us-east-1:${AccountId}:graph/${GraphId}"
+                ]
+            }
@@ -551 +557,0 @@ JSON
-        }]
@@ -585 +591 @@ JSON
-          "Resource": "arn:aws:s3vectors:${Region}:${AccountId}:bucket/${BucketName}/index/${IndexName}"
+                "Resource": "arn:aws:s3vectors:us-east-1:${AccountId}:bucket/${BucketName}/index/${IndexName}"
@@ -604 +610,2 @@ JSON
-        "Statement": [{
+        "Statement": [
+            {
@@ -610 +617,3 @@ JSON
-                "arn:aws:secretsmanager:${Region}:${AccountId}:secret:${SecretId}"
+                    "arn:aws:secretsmanager:us-east-1:${AccountId}:secret:${SecretId}"
+                ]
+            }
@@ -612 +620,0 @@ JSON
-        }]
@@ -639 +647 @@ JSON
-                  "arn:aws:kms:${Region}:${AccountId}:key/${KeyId}"
+                    "arn:aws:kms:us-east-1:${AccountId}:key/${KeyId}"