AWS bedrock documentation change
Summary
Updated resource ARNs and changed IAM principal from array to string in service role policies.
Security assessment
Corrected IAM principal syntax in knowledge base policies. No security vulnerabilities addressed; changes ensure policy examples are syntactically valid.
Diff
diff --git a/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md b/bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md index d8d894bca..5456306d4 100644 --- a//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md +++ b//bedrock/latest/userguide/kb-osm-permissions-slr-rbp.md @@ -29 +29 @@ JSON - "Resource": "arn:aws:bedrock:us-east-1:123456789012:domain/<domainName>" + "Resource": "arn:aws:bedrock:us-east-1:123456789012:domain/DomainName" @@ -144,3 +144 @@ JSON - "AWS": [ - "arn:aws:es:123456789012:role/service-role/KnowledgeBaseServiceRoleName" - ] + "AWS": "arn:aws:es:us-east-1:123456789012:role/service-role/KnowledgeBaseServiceRoleName" @@ -161,3 +159 @@ JSON - "AWS": [ - "arn:aws:es:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName" - ] + "AWS": "arn:aws:es:us-east-1:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName" @@ -173,3 +169 @@ JSON - "AWS": [ - "arn:aws:es:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName" - ] + "AWS": "arn:aws:es:us-east-1:123456789012:(role|service-role)/KnowledgeBaseServiceRoleName"