AWS bedrock high security documentation change
Summary
Added Bedrock Mantle endpoint configuration and example VPC policy
Security assessment
Provides explicit security guidance for network access control through VPC endpoint policies
Diff
diff --git a/bedrock/latest/userguide/vpc-interface-endpoints.md b/bedrock/latest/userguide/vpc-interface-endpoints.md index 3804c60c2..cdc08ffd6 100644 --- a//bedrock/latest/userguide/vpc-interface-endpoints.md +++ b//bedrock/latest/userguide/vpc-interface-endpoints.md @@ -24,0 +25 @@ Category | Endpoint suffix +Amazon Bedrock Mantle API actions | `bedrock-mantle` @@ -41,0 +43,2 @@ Create an interface endpoint for Amazon Bedrock using any of the following servi + * `com.amazonaws.`region`.bedrock-mantle` + @@ -56,0 +60,2 @@ If you enable private DNS for the interface endpoint, you can make API requests + * `bedrock-mantle.`region`.api.aws` + @@ -107,0 +113,19 @@ JSON +###### Example: VPC endpoint policy for Amazon Bedrock Mantle actions + +The following is an example of a custom endpoint policy. When you attach this resource-based policy to your interface endpoint, it grants access to the listed Amazon Bedrock Mantle actions for all principals on all resources. + + + { + "Version":"2012-10-17", + "Statement": [ + { + "Principal": "*", + "Effect": "Allow", + "Action": [ + "bedrock-mantle:CreateInference" + ], + "Resource":"*" + } + ] + } +