AWS bedrock documentation change

Service: bedrock · 2025-12-07 · Documentation medium

File: bedrock/latest/userguide/security-iam-awsmanpol.md

Summary

Added three new AWS managed IAM policies for Amazon Bedrock Mantle: FullAccess, ReadOnly, and InferenceAccess, defining permissions for Mantle operations and bearer token authentication.

Security assessment

Introduces documentation for new IAM policies that control access to Bedrock Mantle resources. While these are security-related access controls, there's no indication they address a specific vulnerability - they appear to document new service capabilities rather than remediate security issues.

Diff

diff --git a/bedrock/latest/userguide/security-iam-awsmanpol.md b/bedrock/latest/userguide/security-iam-awsmanpol.md
index b08fe6090..133815482 100644
--- a//bedrock/latest/userguide/security-iam-awsmanpol.md
+++ b//bedrock/latest/userguide/security-iam-awsmanpol.md
@@ -5 +5 @@
-AmazonBedrockFullAccessAmazonBedrockReadOnlyAmazonBedrockLimitedAccessAmazonBedrockMarketplaceAccessPolicy updates
+AmazonBedrockFullAccessAmazonBedrockReadOnlyAmazonBedrockLimitedAccessAmazonBedrockMarketplaceAccessAmazonBedrockMantleFullAccessAmazonBedrockMantleReadOnlyAmazonBedrockMantleInferenceAccessPolicy updates
@@ -26,0 +27,6 @@ Additionally, AWS supports managed policies for job functions that span multiple
+  * AWS managed policy: AmazonBedrockMantleFullAccess
+
+  * AWS managed policy: AmazonBedrockMantleReadOnly
+
+  * AWS managed policy: AmazonBedrockMantleInferenceAccess
+
@@ -367,0 +374,39 @@ You can attach the [AmazonBedrockMarketplaceAccess](https://docs.aws.amazon.com/
+## AWS managed policy: AmazonBedrockMantleFullAccess
+
+You can attach the [AmazonBedrockMantleFullAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonBedrockMantleFullAccess.html) policy to your IAM identities to grant full access to all Amazon Bedrock Mantle operations.
+
+**Permissions details**
+
+This policy includes the following permissions:
+
+  * `bedrock-mantle` (Amazon Bedrock Mantle) – Allows principals full access to all actions in the Amazon Bedrock Mantle service.
+
+
+
+
+## AWS managed policy: AmazonBedrockMantleReadOnly
+
+You can attach the [AmazonBedrockMantleReadOnly](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonBedrockMantleReadOnly.html) policy to your IAM identities to grant read-only permissions to view Amazon Bedrock Mantle resources and call with bearer token.
+
+**Permissions details**
+
+This policy includes the following permissions:
+
+  * `bedrock-mantle` (Amazon Bedrock Mantle) – Allows principals to get and list Amazon Bedrock Mantle project resources, and call with bearer token for authentication.
+
+
+
+
+## AWS managed policy: AmazonBedrockMantleInferenceAccess
+
+You can attach the [AmazonBedrockMantleInferenceAccess](https://docs.aws.amazon.com/aws-managed-policy/latest/reference/AmazonBedrockMantleInferenceAccess.html) policy to your IAM identities to grant permissions to run inference on Amazon Bedrock Mantle models.
+
+**Permissions details**
+
+This policy includes the following permissions:
+
+  * `bedrock-mantle` (Amazon Bedrock Mantle) – Allows principals to get and list Amazon Bedrock Mantle project resources, create inference requests, and call with bearer token for authentication.
+
+
+
+
@@ -373,0 +419,3 @@ Change | Description | Date
+AmazonBedrockMantleFullAccess – New policy |  Amazon Bedrock added a new policy to grant full access to all Amazon Bedrock Mantle operations. | December 3, 2025  
+AmazonBedrockMantleReadOnly – New policy |  Amazon Bedrock added a new policy to grant read-only access to Amazon Bedrock Mantle resources. | December 3, 2025  
+AmazonBedrockMantleInferenceAccess – New policy |  Amazon Bedrock added a new policy to grant inference access to Amazon Bedrock Mantle models. | December 3, 2025