AWS bedrock documentation change
Summary
Added AWS GovCloud (US) access requirements including account ID linking and manual agreement creation
Security assessment
Documents region-specific security controls for government cloud compliance, but doesn't address a specific vulnerability. Enhances security documentation for regulated environments.
Diff
diff --git a/bedrock/latest/userguide/model-access.md b/bedrock/latest/userguide/model-access.md index 7ebbf5a08..7551105e1 100644 --- a//bedrock/latest/userguide/model-access.md +++ b//bedrock/latest/userguide/model-access.md @@ -4,0 +5,2 @@ +Grant permissions to request access to foundation models with a product IDAccess models in AWS GovCloud + @@ -7 +9 @@ -Access to Amazon Bedrock foundation models, with the exception of OpenAI gpt-oss-120b and gpt-oss-20b models, isn't granted by default. You can request access, or modify access, to foundation models only by using the Amazon Bedrock console. To access OpenAI gpt-oss-120b and gpt-oss-20b models, simply select the model from the model catalog in the Amazon Bedrock console and open it in the playground. +Access to all Amazon Bedrock foundation models is enabled by default with the correct AWS Marketplace permissions. To get started, simply select a model from the model catalog in the Amazon Bedrock console and open it in the playground or invoke the model using the [InvokeModel](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModel.html) or [Converse](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_Converse.html) API operations. For information about the different models supported in Amazon Bedrock, see [Amazon Bedrock foundation model information](https://docs.aws.amazon.com/bedrock/latest/userguide/foundation-models-reference.html). For information about model pricing, see [Amazon Bedrock Pricing](https://aws.amazon.com/bedrock/pricing/). @@ -9 +11 @@ Access to Amazon Bedrock foundation models, with the exception of OpenAI gpt-oss -###### Note +Access to all Amazon Bedrock foundation models is enabled by default with the correct AWS Marketplace permissions in all commercial AWS regions. For access to models in non-commercial regions, see Access Amazon Bedrock foundation models in AWS GovCloud (US). @@ -11 +13 @@ Access to Amazon Bedrock foundation models, with the exception of OpenAI gpt-oss -If you're new to Amazon Bedrock and this is your first time requesting model access, follow the steps at [Getting started with Amazon Bedrock](./getting-started.html) instead. +###### Note @@ -13 +15 @@ If you're new to Amazon Bedrock and this is your first time requesting model acc -To request or modify access to Amazon Bedrock foundation models, make sure that your IAM identity has sufficient permissions foundation models. Then, add or remove access to a model by following the instructions at [Add or remove access to Amazon Bedrock foundation models](./model-access-modify.html). +Anthropic requires first-time customers to submit use case details before invoking a model once per account or once at the organization's management account. You can submit use case details by selecting an Anthropic model from the model catalog in the Amazon Bedrock console or calling the `PutUseCaseForModelAccess` API command. Access to the model is granted immediately after use case details are successfully submitted. The form submission at the root account will be inherited by other accounts in the same AWS Organizations. @@ -17 +19,12 @@ To request or modify access to Amazon Bedrock foundation models, make sure that -Subscription to a model doesn't incur charges. For information about model pricing when using the model with other actions, refer to [Amazon Bedrock Pricing](https://aws.amazon.com/bedrock/pricing/). If an identity already has access to a model, you should control permissions to use the model rather than permissions to request access. +For 3P models, by invoking/using the model for the first time you are agreeing to the applicable End User License Agreement. For more information, see [AWS Service Terms](https://aws.amazon.com/service-terms/) and [Serverless Third-Party Model License Agreements](https://aws.amazon.com/legal/bedrock/third-party-models/). + +Organizations that need to review and agree to EULA before allowing model usage should: + + 1. Initially block model access using Service Control Policies (SCP) or IAM policies + + 2. Review the EULA terms + + 3. Enable model access through SCP/IAM policies only if you agree to the EULA terms + + + @@ -21 +34 @@ Subscription to a model doesn't incur charges. For information about model prici - * [Grant IAM permissions to request access to Amazon Bedrock foundation models with a product ID](./model-access-permissions.html) + * Grant IAM permissions to request access to Amazon Bedrock foundation models with a product ID @@ -25 +38,211 @@ Subscription to a model doesn't incur charges. For information about model prici - * [Add or remove access to Amazon Bedrock foundation models](./model-access-modify.html) + * Access Amazon Bedrock foundation models in AWS GovCloud (US) + + + + +## Grant IAM permissions to request access to Amazon Bedrock foundation models with a product ID + +You can manage model access permissions by creating custom IAM policies. To modify access to Amazon Bedrock foundation models, you first need to attach an identity-based IAM policy with the following [AWS Marketplace actions](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsmarketplace.html#awsmarketplace-actions-as-permissions) to the IAM role that allows access to Amazon Bedrock: + +Access to Amazon Bedrock serverless foundation models with a product ID is controlled by the following IAM actions: + +IAM action | Description | Applies to which models +---|---|--- +aws-marketplace:Subscribe | Allows an IAM entity to subscribe to AWS Marketplace products, including Amazon Bedrock foundation models. | Only Amazon Bedrock serverless models that have a product ID in AWS Marketplace. +aws-marketplace:Unsubscribe | Allows an IAM identity to unsubscribe from AWS Marketplace products, including Amazon Bedrock foundation models. | Only Amazon Bedrock serverless models that have a product ID in AWS Marketplace. +aws-marketplace:ViewSubscriptions | Allows an IAM identity to return a list of AWS Marketplace products, including Amazon Bedrock foundation models. | Only Amazon Bedrock serverless models that have a product ID in AWS Marketplace. + +###### Note + +For the `aws-marketplace:Subscribe` action only, you can use the `aws-marketplace:ProductId` [condition key](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsmarketplace.html#awsmarketplace-policy-keys) to restrict subscription to specific models. + +###### For an IAM identity to request access to models with a product ID + +The identity must have a policy attached that allows `aws-marketplace:Subscribe`. + +###### Note + +If an identity has already subscribed to a model in one AWS Region, the model becomes available for the identity to request access in all AWS Regions in which the model is available, even if `aws-marketplace:Subscribe` is denied for other Regions. + +For information on creating the policy, see [I already have an AWS account](./getting-started.html#getting-started-bedrock-role). + +For the `aws-marketplace:Subscribe` action only, you can use the `aws-marketplace:ProductId` [condition key](https://docs.aws.amazon.com/service-authorization/latest/reference/list_awsmarketplace.html#awsmarketplace-policy-keys) to restrict subscription to specific models. + +###### Note + +Models from the following providers aren't sold through AWS Marketplace and don't have product keys, so you can't scope the `aws-marketplace` actions to them: + + * Amazon + + * DeepSeek + + * Mistral AI + + * Meta + + * Qwen + + * OpenAI + + + + +You can, however, prevent the usage of these models by denying Amazon Bedrock actions and specifying these model IDs in the `Resource` field. For an example, see Prevent an identity from using a model after access has already been granted. + +Select a section to see IAM policy examples for a specific use case: + +###### Topics + + * Prevent an identity from requesting access to a model with a product ID + + * Prevent an identity from using a model after access has already been granted + + + + +### Prevent an identity from requesting access to a model with a product ID + +To prevent an IAM entity from requesting access to a specific model that has a product ID, attach an IAM policy to the user that denies the `aws-marketplace:Subscribe` action and scope the `Condition` field to the product ID of the model. + +For example, you can attach the following policy to an identity to prevent it from subscribing to the Anthropic Claude 3.5 Sonnet model: + +JSON + + +**** + + + + { + "Version":"2012-10-17", + "Statement": [ + { + "Effect": "Deny", + "Action": [ + "aws-marketplace:Subscribe" + ], + "Resource": "*", + "Condition": { + "ForAnyValue:StringEquals": { + "aws-marketplace:ProductId": [ + "prod-m5ilt4siql27k" + ] + } + } + } + ] + } + + +###### Note + +With this policy, the IAM entity will have access to any newly added models by default. + +If the identity has already subscribed to the model in at least one Region, this policy doesn't prevent access in other Regions. Instead, you can prevent its usage by seeing the example in Prevent an identity from using a model after access has already been granted. + +### Prevent an identity from using a model after access has already been granted + +If an IAM identity has already been granted access to a model, you can prevent usage of the model by denying all Amazon Bedrock actions and scoping the `Resource` field to the ARN of the foundation model. + +For example, you can attach the following policy to an identity to prevent it from using the Anthropic Claude 3.5 Sonnet model in all AWS Regions: + +JSON + + +**** + + + + { + "Version":"2012-10-17", + "Statement": [ + { + "Effect": "Deny", + "Action": [ + "bedrock:*" + ], + "Resource": [ + "arn:aws:bedrock:*::foundation-model/anthropic.claude-3-5-sonnet-20240620-v1:0" + ] + } + ] + } + + +## Access Amazon Bedrock foundation models in AWS GovCloud (US) + +Before you can use a foundation model in Amazon Bedrock, you must request access to it. If you no longer need access to a model, you can remove access from it. + +###### Note + +Models from the following providers aren't sold through AWS Marketplace and don't have product keys, so you can't scope the `aws-marketplace` actions to them: + + * Amazon + + * DeepSeek + + * Mistral AI + + * Meta + + * Qwen + + * OpenAI + + + + +You can, however, prevent the usage of these models by denying Amazon Bedrock actions and specifying these model IDs in the `Resource` field. For an example, see Prevent an identity from using a model after access has already been granted. + +Once access is provided to a model, it is available for all users in the AWS account. + +###### To add or remove access to foundation models