AWS Security ChangesHomeSearch

AWS bedrock documentation change

Service: bedrock · 2026-04-25 · Documentation low

File: bedrock/latest/userguide/rerank-prereq.md

Summary

Updated model access reference link and added specific IAM permission requirements for third-party models (Cohere Rerank)

Security assessment

This change clarifies that third-party models require specific AWS Marketplace permissions (ViewSubscriptions and Subscribe) in addition to model access. This adds security documentation about required IAM permissions but doesn't indicate any security vulnerability being fixed.

Diff

diff --git a/bedrock/latest/userguide/rerank-prereq.md b/bedrock/latest/userguide/rerank-prereq.md
index 22e1b1376..f36371f56 100644
--- a//bedrock/latest/userguide/rerank-prereq.md
+++ b//bedrock/latest/userguide/rerank-prereq.md
@@ -11 +11 @@ A user requires the following permissions to use reranking:
-  * Access to the reranking models that they plan to use. For more information, see [Access Amazon Bedrock foundation models](./model-access.html).
+  * Access to the reranking models that they plan to use. For more information, see [Request access to models](./model-access.html). For third-party models (such as Cohere Rerank), your IAM role also needs `aws-marketplace:ViewSubscriptions` and `aws-marketplace:Subscribe` permissions. For more information, see [Use product ID condition keys to control access](./model-access-product-ids.html).