AWS bedrock medium security documentation change
Summary
Updated FAQ answer about what happens when parent subscription expires - changed from 'continue to have model access' with public billing to 'will lose access to the model'
Security assessment
This change addresses an access control issue by clarifying that linked accounts lose model access when the parent subscription expires, rather than continuing with public billing rates. This prevents potential unauthorized or unexpected access to models after subscription expiration, which could lead to security and compliance issues if models were accessed without proper subscription.
Diff
diff --git a/bedrock/latest/userguide/managed-entitlements-faq.md b/bedrock/latest/userguide/managed-entitlements-faq.md index aa06eebc2..8d58a7170 100644 --- a//bedrock/latest/userguide/managed-entitlements-faq.md +++ b//bedrock/latest/userguide/managed-entitlements-faq.md @@ -83 +83 @@ A: No. Deleting a grant is permanent and cannot be undone. However, you can crea -A: The linked accounts will continue to have model access when parent subscription expires in the management account. However, they will be billed at public rates rather than any negotiated private offer pricing. +A: The linked accounts will lose access to the model when the parent subscription expires in the management account.