AWS bedrock-agentcore documentation change

Service: bedrock-agentcore · 2026-05-07 · Documentation low

File: bedrock-agentcore/latest/devguide/ab-testing-prereqs.md

Summary

Restructured IAM policy to separate logs:DescribeLogGroups permission

Security assessment

Policy reorganization without substantive permission changes. No security vulnerabilities addressed.

Diff

diff --git a/bedrock-agentcore/latest/devguide/ab-testing-prereqs.md b/bedrock-agentcore/latest/devguide/ab-testing-prereqs.md
index 11dd38fa2..88549c2ca 100644
--- a//bedrock-agentcore/latest/devguide/ab-testing-prereqs.md
+++ b//bedrock-agentcore/latest/devguide/ab-testing-prereqs.md
@@ -100,0 +101,8 @@ Example permissions policy:
+            {
+                "Sid": "CloudWatchLogsDescribe",
+                "Effect": "Allow",
+                "Action": [
+                    "logs:DescribeLogGroups"
+                ],
+                "Resource": "*"
+            },
@@ -105 +112,0 @@ Example permissions policy:
-                    "logs:DescribeLogGroups",