AWS bedrock documentation change

Service: bedrock · 2025-08-01 · Documentation low

File: bedrock/latest/userguide/flows-permissions.md

Summary

Standardized account IDs (123456789012) and region in flow permission policies

Security assessment

Updates permission policy examples for flows without addressing specific security issues

Diff

diff --git a/bedrock/latest/userguide/flows-permissions.md b/bedrock/latest/userguide/flows-permissions.md
index a5bef08a4..669e6add7 100644
--- a//bedrock/latest/userguide/flows-permissions.md
+++ b//bedrock/latest/userguide/flows-permissions.md
@@ -101 +101 @@ JSON
-                        "aws:SourceAccount": "${account-id}"
+                        "aws:SourceAccount": "123456789012"
@@ -104 +104 @@ JSON
-                        "AWS:SourceArn": "arn:aws:bedrock:us-east-1:${account-id}:flow/*"
+                        "AWS:SourceArn": "arn:aws:bedrock:us-east-1:123456789012:flow/*"
@@ -162 +162 @@ JSON
-                    "arn:aws:bedrock:${region}::foundation-model/${model-id}"
+                    "arn:aws:bedrock:us-east-1::foundation-model/${model-id}"
@@ -173 +173 @@ JSON
-                    "arn:aws:bedrock:${region}:${account-id}:provisioned-model/${model-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:provisioned-model/${model-id}"
@@ -184 +184 @@ JSON
-                    "arn:aws:bedrock:${region}:${account-id}:custom-model/${model-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:custom-model/${model-id}"
@@ -194 +194 @@ JSON
-                    "arn:aws:bedrock:${region}:${account-id}:prompt/${prompt-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:prompt/${prompt-id}"
@@ -205 +205 @@ JSON
-                    "arn:aws:bedrock:${region}:${account-id}:knowledge-base/knowledge-base-id"
+                    "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/knowledge-base-id"
@@ -215 +215 @@ JSON
-                    "arn:aws:bedrock:${region}:${account-id}:agent-alias/${agent-alias-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:agent-alias/${agent-alias-id}"
@@ -229 +229 @@ JSON
-                        "aws:ResourceAccount": "${account-id}"
+                        "aws:ResourceAccount": "123456789012"
@@ -245 +245 @@ JSON
-                        "aws:ResourceAccount": "${account-id}"
+                        "aws:ResourceAccount": "123456789012"
@@ -256 +256 @@ JSON
-                    "arn:${Partition}:bedrock:${Region}:${Account}:guardrail/${GuardrailId}"
+                    "arn:${Partition}:bedrock:us-east-1:123456789012:guardrail/${GuardrailId}"
@@ -266 +266 @@ JSON
-                    "arn:aws:lambda:${region}:${account-id}:function:${function-name}"
+                    "arn:aws:lambda:us-east-1:123456789012:function:${function-name}"
@@ -276 +276 @@ JSON
-                    "arn:aws:lex:${region}:${account-id}:bot-alias/${bot-id}/${bot-alias-id}"
+                    "arn:aws:lex:us-east-1:123456789012:bot-alias/${bot-id}/${bot-alias-id}"
@@ -287 +287 @@ JSON
-                    "arn:aws:kms:${region}:${account-id}:key/${key-id}"
+                    "arn:aws:kms:us-east-1:123456789012:key/${key-id}"
@@ -291 +291 @@ JSON
-                        "aws:ResourceAccount": "${account-id}"
+                        "aws:ResourceAccount": "123456789012"