AWS bedrock documentation change

Service: bedrock · 2025-08-28 · Documentation low

File: bedrock/latest/userguide/inline-agent-prereq.md

Summary

Removed entire IAM policy example for inline agent permissions including model invocation, S3 access, guardrail access, and KMS permissions.

Security assessment

Removal of policy examples could impact security posture if users lose reference for proper permissions, but there's no evidence this addresses an active security issue. Appears to be documentation cleanup rather than security remediation.

Diff

diff --git a/bedrock/latest/userguide/inline-agent-prereq.md b/bedrock/latest/userguide/inline-agent-prereq.md
index 31cd388fb..5c41a7542 100644
--- a//bedrock/latest/userguide/inline-agent-prereq.md
+++ b//bedrock/latest/userguide/inline-agent-prereq.md
@@ -35,73 +34,0 @@ As a best practice for security purposes, replace the `${region}`, `${account-id
-JSON
-    
-
-****
-    
-    
-        {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "InvokeInlineAgent",
-                "Effect": "Allow",
-                "Action": "bedrock:InvokeInlineAgent"
-            },
-            {
-                "Sid": "InvokeFoundationModel",
-                "Effect": "Allow",
-                "Action": "bedrock:InvokeModel",
-                "Resource": "arn:aws:bedrock:us-east-1::foundation-model/ModelId"
-            },
-            {
-                "Sid": "S3AccessForKBAndActions",
-                "Effect": "Allow",
-                "Action": [
-                    "s3:GetObject",
-                    "s3:GetObjectMetadata"
-                ],
-                "Resource": "arn:aws:s3:::"
-            },
-            {
-                "Sid": "S3AccessForCodeInterpreter",
-                "Effect": "Allow",
-                "Action": [
-                    "s3:GetObjectVersion",
-                    "s3:GetObjectVersionAttributes",
-                    "s3:GetObjectAttributes"
-                ],
-                "Resource": "arn:aws:s3:::bucket/path/to/file"
-            },
-            {
-                "Sid": "KnowledgeBaseAccess",
-                "Effect": "Allow",
-                "Action": [
-                    "bedrock:Retrieve",
-                    "bedrock:RetrieveAndGenerate"
-                ],
-                "Resource": "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/knowledge-base-id"
-            },
-            {
-                "Sid": "GuardrailAccess",
-                "Effect": "Allow",
-                "Action": "bedrock:ApplyGuardrail",
-                "Resource": "arn:aws:bedrock:us-east-1:123456789012:guardrail/${guardrail-id}"
-            },
-            {
-                "Sid": "LambdaInvoke",
-                "Effect": "Allow",
-                "Action": "lambda:InvokeFunction",
-                "Resource": "arn:aws:lambda:us-east-1:123456789012:function:function-name"
-            },
-            {
-                "Sid": "KMSAccess",
-                "Effect": "Allow",
-                "Action": [
-                    "kms:GenerateDataKey*",
-                    "kms:Decrypt"
-                ],
-                "Resource": "arn:aws:kms:us-east-1:123456789012:key/${key-id}"
-            }
-        ]
-    }
-    
-