AWS Security ChangesHomeSearch

AWS bedrock documentation change

Service: bedrock · 2025-11-28 · Documentation low

File: bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md

Summary

Updated IAM policy example to include 'reserved' in bedrock:ServiceTier condition values.

Security assessment

Expands IAM policy documentation to cover additional service tiers but lacks evidence of addressing a specific security vulnerability. Improves security policy examples without indicating a prior flaw.

Diff

diff --git a/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md b/bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md
index e80b54aa0..2076152c6 100644
--- a//bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md
+++ b//bedrock/latest/userguide/security_iam_id-based-policy-examples-agent.md
@@ -139 +139 @@ The following example shows an identity-based policy that denies access to all s
-                        "bedrock:ServiceTier": ["priority", "default", "flex"]
+                        "bedrock:ServiceTier": ["reserved", "priority", "default", "flex"]