AWS bedrock documentation change
Summary
Clarified error message wording and updated terminology for S3/KMS permissions
Security assessment
Changes are editorial improvements (wording updates, brand term corrections) with no evidence of addressing security vulnerabilities. The KMS permission clarification maintains existing security guidance without introducing new security content.
Diff
diff --git a/bedrock/latest/userguide/advanced-prompt-optimization-prereqs.md b/bedrock/latest/userguide/advanced-prompt-optimization-prereqs.md index 5e31e7bfd..d46698407 100644 --- a//bedrock/latest/userguide/advanced-prompt-optimization-prereqs.md +++ b//bedrock/latest/userguide/advanced-prompt-optimization-prereqs.md @@ -54 +54 @@ Cross-region inference profile | `bedrock:InvokeModelWithResponseStream` | `arn: -If model access is not enabled for a model in your account, the job will fail with: "No inference API is accessible for model. Verify that the role has permission to invoke the model." +If model access is not enabled for a model in your account, the job fails. The error message is: "No inference API is accessible for model. Verify that the role has permission to invoke the model." @@ -56 +56 @@ If model access is not enabled for a model in your account, the job will fail wi -### S3 bucket permissions +### Amazon S3 bucket permissions @@ -83 +83 @@ You can use AWS KMS customer-managed keys (CMKs) with Advanced Prompt Optimizati - * **S3 bucket encryption** – If your S3 bucket uses server-side encryption with a KMS key (SSE-KMS), your identity needs KMS permissions to read input from and write results to that bucket. + * **S3 bucket encryption** – If your S3 bucket uses server-side encryption with a KMS key (SSE-KMS), your identity needs AWS KMS permissions to read input from and write results to that bucket. @@ -90 +90 @@ You can use the same KMS key for both, or use separate keys. -The required KMS actions depend on how you use KMS: +The required AWS KMS actions depend on how you use AWS KMS: