AWS lexv2 documentation change

Service: lexv2 · 2025-08-28 · Documentation low

File: lexv2/latest/dg/bedrock-agent-intent-permissions.md

Summary

Removed example IAM policy for Bedrock Agent integration permissions

Security assessment

Removal of policy example without explicit security context. Could streamline documentation but no evidence of vulnerability mitigation.

Diff

diff --git a/lexv2/latest/dg/bedrock-agent-intent-permissions.md b/lexv2/latest/dg/bedrock-agent-intent-permissions.md
index ee0b818b9..40dfc5316 100644
--- a//lexv2/latest/dg/bedrock-agent-intent-permissions.md
+++ b//lexv2/latest/dg/bedrock-agent-intent-permissions.md
@@ -15,59 +14,0 @@ When you enable the feature with the Amazon Lex console the policy will get auto
-JSON
-    
-
-****
-    
-    
-        {
-        "Version": "2012-10-17",
-        "Statement": [
-            {
-                "Sid": "Permissions to access Amazon Bedrock Agent",
-                "Effect": "Allow",
-                "Action": [
-                    "bedrock:InvokeAgent"
-                ],
-                "Resource": [
-                    "arn:aws:bedrock:region:accountId:agent-alias/agentId/aliasId"
-                ],
-                "Condition": {
-                    "StringEquals": {
-                        "aws:ResourceAccount": "accountId"
-                    }
-                }
-            },
-            {
-                "Sid": "Permissions to access Knowledge Base in Amazon Bedrock",
-                "Effect": "Allow",
-                "Action": [
-                    "bedrock:RetrieveAndGenerate"
-                ],
-                "Resource": [
-                    "arn:aws:bedrock:region:accountId:knowledge-base/knowledgeBaseId"
-                ],
-                "Condition": {
-                    "StringEquals": {
-                        "aws:ResourceAccount": "accountId"
-                    }
-                }
-            },
-            {
-                "Sid": "Permissions to invoke Amazon Bedrock foundation models",
-                "Effect": "Allow",
-                "Action": [
-                    "bedrock:InvokeModel"
-                ],
-                "Resource": [
-                    "arn:aws:bedrock:region::foundation-model/modelId"
-                ],
-                "Condition": {
-                    "StringEquals": {
-                        "aws:ResourceAccount": "accountId"
-                    }
-                }
-            }
-        ]
-    }
-                    
-    
-