bedrock.yml

Actions:
  - Name: bedrock:ApplyGuardrail
  - Name: bedrock:AssociateAgentKnowledgeBase
  - Name: bedrock:CreateAgent
  - Name: bedrock:CreateAgentActionGroup
  - Name: bedrock:CreateAgentAlias
  - Name: bedrock:CreateDataSource
  - Name: bedrock:CreateEvaluationJob
  - Name: bedrock:CreateFlow
  - Name: bedrock:CreateFlowAlias
  - Name: bedrock:CreateFlowVersion
  - Name: bedrock:CreateGuardrail
  - Name: bedrock:CreateGuardrailVersion
  - Name: bedrock:CreateKnowledgeBase
  - Name: bedrock:CreateModelCustomizationJob
  - Name: bedrock:CreatePrompt
  - Name: bedrock:CreatePromptVersion
  - Name: bedrock:CreateProvisionedModelThroughput
  - Name: bedrock:DeleteAgent
  - Name: bedrock:DeleteAgentActionGroup
  - Name: bedrock:DeleteAgentAlias
  - Name: bedrock:DeleteAgentMemory
  - Name: bedrock:DeleteAgentVersion
  - Name: bedrock:DeleteCustomModel
  - Name: bedrock:DeleteDataSource
  - Name: bedrock:DeleteFlow
  - Name: bedrock:DeleteFlowAlias
  - Name: bedrock:DeleteFlowVersion
  - Name: bedrock:DeleteGuardrail
  - Name: bedrock:DeleteKnowledgeBase
  - Name: bedrock:DeleteModelInvocationLoggingConfiguration
  - Name: bedrock:DeletePrompt
  - Name: bedrock:DeleteProvisionedModelThroughput
  - Name: bedrock:DisassociateAgentKnowledgeBase
  - Name: bedrock:GetAgent
  - Name: bedrock:GetAgentActionGroup
  - Name: bedrock:GetAgentAlias
  - Name: bedrock:GetAgentKnowledgeBase
  - Name: bedrock:GetAgentMemory
  - Name: bedrock:GetAgentVersion
  - Name: bedrock:GetCustomModel
  - Name: bedrock:GetDataSource
  - Name: bedrock:GetEvaluationJob
  - Name: bedrock:GetFlow
  - Name: bedrock:GetFlowAlias
  - Name: bedrock:GetFlowVersion
  - Name: bedrock:GetFoundationModel
  - Name: bedrock:GetGuardrail
  - Name: bedrock:GetIngestionJob
  - Name: bedrock:GetKnowledgeBase
  - Name: bedrock:GetModelCustomizationJob
  - Name: bedrock:GetModelInvocationLoggingConfiguration
  - Name: bedrock:GetPrompt
  - Name: bedrock:GetProvisionedModelThroughput
  - Name: bedrock:InvokeAgent
  - Name: bedrock:InvokeFlow
  - Name: bedrock:InvokeModel
  - Name: bedrock:InvokeModelWithResponseStream
  - Name: bedrock:ListAgentActionGroups
  - Name: bedrock:ListAgentAliases
  - Name: bedrock:ListAgentKnowledgeBases
  - Name: bedrock:ListAgentVersions
  - Name: bedrock:ListAgents
  - Name: bedrock:ListCustomModels
  - Name: bedrock:ListDataSources
  - Name: bedrock:ListEvaluationJobs
  - Name: bedrock:ListFlowAliases
  - Name: bedrock:ListFlowVersions
  - Name: bedrock:ListFlows
  - Name: bedrock:ListFoundationModels
  - Name: bedrock:ListGuardrails
  - Name: bedrock:ListIngestionJobs
  - Name: bedrock:ListKnowledgeBases
  - Name: bedrock:ListModelCustomizationJobs
  - Name: bedrock:ListPrompts
  - Name: bedrock:ListProvisionedModelThroughputs
  - Name: bedrock:ListTagsForResource
  - Name: bedrock:PrepareAgent
  - Name: bedrock:PrepareFlow
  - Name: bedrock:PutModelInvocationLoggingConfiguration
  - Name: bedrock:Retrieve
  - Name: bedrock:RetrieveAndGenerate
  - Name: bedrock:StartIngestionJob
  - Name: bedrock:StopEvaluationJob
  - Name: bedrock:StopModelCustomizationJob
  - Name: bedrock:TagResource
  - Name: bedrock:UntagResource
  - Name: bedrock:UpdateAgent
  - Name: bedrock:UpdateAgentActionGroup
  - Name: bedrock:UpdateAgentAlias
  - Name: bedrock:UpdateAgentKnowledgeBase
  - Name: bedrock:UpdateDataSource
  - Name: bedrock:UpdateFlow
  - Name: bedrock:UpdateFlowAlias
  - Name: bedrock:UpdateGuardrail
  - Name: bedrock:UpdateKnowledgeBase
  - Name: bedrock:UpdatePrompt
  - Name: bedrock:UpdateProvisionedModelThroughput

  # actions with no corresponding API
  - Name: bedrock:AllowVendedLogDeliveryForResource
  - Name: bedrock:AssociateAgentCollaborator
  - Name: bedrock:AssociateThirdPartyKnowledgeBase
  - Name: bedrock:BatchDeleteEvaluationJob
  - Name: bedrock:CreateBlueprint
  - Name: bedrock:CreateBlueprintVersion
  - Name: bedrock:CreateDataAutomationProject
  - Name: bedrock:CreateFoundationModelAgreement
  - Name: bedrock:CreateInferenceProfile
  - Name: bedrock:CreateMarketplaceModelEndpoint
  - Name: bedrock:CreateModelCopyJob
  - Name: bedrock:CreateModelEvaluationJob
  - Name: bedrock:CreateModelImportJob
  - Name: bedrock:CreateModelInvocationJob
  - Name: bedrock:DeleteBlueprint
  - Name: bedrock:DeleteDataAutomationProject
  - Name: bedrock:DeleteFoundationModelAgreement
  - Name: bedrock:DeleteImportedModel
  - Name: bedrock:DeleteInferenceProfile
  - Name: bedrock:DeleteKnowledgeBaseDocuments
  - Name: bedrock:DeleteMarketplaceModelAgreement
  - Name: bedrock:DeleteMarketplaceModelEndpoint
  - Name: bedrock:DeleteResourcePolicy
  - Name: bedrock:DeregisterMarketplaceModelEndpoint
  - Name: bedrock:DetectGeneratedContent
  - Name: bedrock:DisassociateAgentCollaborator
  - Name: bedrock:GenerateQuery
  - Name: bedrock:GetAgentCollaborator
  - Name: bedrock:GetAsyncInvoke
  - Name: bedrock:GetBlueprint
  - Name: bedrock:GetBlueprintRecommendation
  - Name: bedrock:GetDataAutomationProject
  - Name: bedrock:GetDataAutomationStatus
  - Name: bedrock:GetFoundationModelAvailability
  - Name: bedrock:GetImportedModel
  - Name: bedrock:GetInferenceProfile
  - Name: bedrock:GetKnowledgeBaseDocuments
  - Name: bedrock:GetMarketplaceModelEndpoint
  - Name: bedrock:GetModelCopyJob
  - Name: bedrock:GetModelEvaluationJob
  - Name: bedrock:GetModelImportJob
  - Name: bedrock:GetModelInvocationJob
  - Name: bedrock:GetPromptRouter
  - Name: bedrock:GetResourcePolicy
  - Name: bedrock:GetUseCaseForModelAccess
  - Name: bedrock:IngestKnowledgeBaseDocuments
  - Name: bedrock:InvokeBlueprintRecommendationAsync
  - Name: bedrock:InvokeBuilder
  - Name: bedrock:InvokeDataAutomationAsync
  - Name: bedrock:InvokeInlineAgent
  - Name: bedrock:ListAgentCollaborators
  - Name: bedrock:ListAsyncInvokes
  - Name: bedrock:ListBlueprints
  - Name: bedrock:ListDataAutomationProjects
  - Name: bedrock:ListFoundationModelAgreementOffers
  - Name: bedrock:ListImportedModels
  - Name: bedrock:ListInferenceProfiles
  - Name: bedrock:ListKnowledgeBaseDocuments
  - Name: bedrock:ListMarketplaceModelEndpoints
  - Name: bedrock:ListModelCopyJobs
  - Name: bedrock:ListModelEvaluationJobs
  - Name: bedrock:ListModelImportJobs
  - Name: bedrock:ListModelInvocationJobs
  - Name: bedrock:ListPromptRouters
  - Name: bedrock:OptimizePrompt
  - Name: bedrock:PutFoundationModelEntitlement
  - Name: bedrock:PutResourcePolicy
  - Name: bedrock:PutUseCaseForModelAccess
  - Name: bedrock:RegisterMarketplaceModelEndpoint
  - Name: bedrock:RenderPrompt
  - Name: bedrock:Rerank
  - Name: bedrock:StopIngestionJob
  - Name: bedrock:StopModelInvocationJob
  - Name: bedrock:UpdateAgentCollaborator
  - Name: bedrock:UpdateBlueprint
  - Name: bedrock:UpdateDataAutomationProject
  - Name: bedrock:UpdateMarketplaceModelEndpoint
  - Name: bedrock:ValidateFlowDefinition

  # APIs without an IAM action
  - Name: bedrock:Converse
  - Name: bedrock:ConverseStream