AWS bedrock documentation change

Service: bedrock · 2025-08-22 · Documentation low

File: bedrock/latest/userguide/flows-permissions.md

Summary

Updated all resource ARNs to concrete examples, fixed action syntax error, and modified knowledge base permissions.

Security assessment

Standard documentation improvements for resource ARNs and policy syntax. Permission changes appear routine without security vulnerability context.

Diff

diff --git a/bedrock/latest/userguide/flows-permissions.md b/bedrock/latest/userguide/flows-permissions.md
index 669e6add7..b1605356a 100644
--- a//bedrock/latest/userguide/flows-permissions.md
+++ b//bedrock/latest/userguide/flows-permissions.md
@@ -162 +162 @@ JSON
-                    "arn:aws:bedrock:us-east-1::foundation-model/${model-id}"
+                    "arn:aws:bedrock:us-east-1::foundation-model/ModelId"
@@ -173 +173 @@ JSON
-                    "arn:aws:bedrock:us-east-1:123456789012:provisioned-model/${model-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:provisioned-model/ModelId"
@@ -184 +184 @@ JSON
-                    "arn:aws:bedrock:us-east-1:123456789012:custom-model/${model-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:custom-model/ModelId"
@@ -194 +194 @@ JSON
-                    "arn:aws:bedrock:us-east-1:123456789012:prompt/${prompt-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:prompt/PromptId"
@@ -201,2 +201 @@ JSON
-                    "bedrock:Retrieve",
-                    "bedrock:RetrieveAndGenerate"
+                    "bedrock:Retrieve"
@@ -205 +204 @@ JSON
-                    "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/knowledge-base-id"
+                    "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/KnowledgeBaseId"
@@ -215 +214 @@ JSON
-                    "arn:aws:bedrock:us-east-1:123456789012:agent-alias/${agent-alias-id}"
+                    "arn:aws:bedrock:us-east-1:123456789012:agent-alias/AgentId/AgentAliasId"
@@ -225 +224 @@ JSON
-                    "arn:aws:s3:::${bucket-name}/*"
+                    "arn:aws:s3:::amzn-s3-demo-bucket/*"
@@ -240,2 +239,2 @@ JSON
-                    "arn:aws:s3:::${bucket-name}",
-                    "arn:aws:s3:::${bucket-name}/*"
+                    "arn:aws:s3:::amzn-s3-demo-bucket",
+                    "arn:aws:s3:::amzn-s3-demo-bucket/*"
@@ -252 +251 @@ JSON
-                "Action": "Action": [
+                "Action": [
@@ -256 +255 @@ JSON
-                    "arn:${Partition}:bedrock:us-east-1:123456789012:guardrail/${GuardrailId}"
+                    "arn:aws:bedrock:us-east-1:123456789012:guardrail/GuardrailId"
@@ -266 +265 @@ JSON
-                    "arn:aws:lambda:us-east-1:123456789012:function:${function-name}"
+                    "arn:aws:lambda:us-east-1:123456789012:function:FunctionId"
@@ -276 +275 @@ JSON
-                    "arn:aws:lex:us-east-1:123456789012:bot-alias/${bot-id}/${bot-alias-id}"
+                    "arn:aws:lex:us-east-1:123456789012:bot-alias/BotId/BotAliasId"
@@ -287 +286 @@ JSON
-                    "arn:aws:kms:us-east-1:123456789012:key/${key-id}"
+                    "arn:aws:kms:us-east-1:123456789012:key/KeyId"