Permissions for @turbot/aws-bedrock
Taking a look at permissions and associated grant levels for each permission for Bedrock:
| Permission | Grant Level | Help |
|---|---|---|
| bedrock:AssociateAgentKnowledgeBase | Operator | |
| bedrock:AssociateThirdPartyKnowledgeBase | Operator | |
| bedrock:CreateAgent | Admin | |
| bedrock:CreateAgentActionGroup | Admin | |
| bedrock:CreateAgentAlias | Admin | |
| bedrock:CreateAgentDraftSnapshot | Admin | |
| bedrock:CreateDataSource | Admin | |
| bedrock:CreateFoundationModelAgreement | Admin | |
| bedrock:CreateKnowledgeBase | Admin | |
| bedrock:CreateModelCustomizationJob | Admin | |
| bedrock:CreateProvisionedModelThroughput | Admin | |
| bedrock:DeleteCustomModel | Admin | |
| bedrock:DeleteDataSource | Admin | |
| bedrock:DeleteFoundationModelAgreement | Admin | |
| bedrock:DeleteKnowledgeBase | Admin | |
| bedrock:DeleteModelInvocationLoggingConfiguration | Admin | |
| bedrock:DeleteProvisionedModelThroughput | Admin | |
| bedrock:DisassociateAgentKnowledgeBase | Operator | |
| bedrock:GetAgent | Metadata | |
| bedrock:GetAgentActionGroup | Metadata | |
| bedrock:GetAgentAlias | Metadata | |
| bedrock:GetAgentKnowledgeBase | Metadata | |
| bedrock:GetAgentVersion | Metadata | |
| bedrock:GetCustomModel | Metadata | |
| bedrock:GetDataSource | Metadata | |
| bedrock:GetFoundationModel | Metadata | |
| bedrock:GetFoundationModelAvailability | Metadata | |
| bedrock:GetIngestionJob | Metadata | |
| bedrock:GetKnowledgeBase | Metadata | |
| bedrock:GetModelCustomizationJob | Metadata | |
| bedrock:GetModelInvocationLoggingConfiguration | Metadata | |
| bedrock:GetProvisionedModelThroughput | Metadata | |
| bedrock:GetUseCaseForModelAccess | Metadata | |
| bedrock:InvokeAgent | Metadata | |
| bedrock:InvokeModel | Metadata | |
| bedrock:InvokeModelWithResponseStream | Metadata | |
| bedrock:ListAgentActionGroups | Metadata | |
| bedrock:ListAgentAliases | Metadata | |
| bedrock:ListAgentKnowledgeBases | Metadata | |
| bedrock:ListAgents | Metadata | |
| bedrock:ListAgentVersions | Metadata | |
| bedrock:ListCustomModels | Metadata | |
| bedrock:ListDataSources | Metadata | |
| bedrock:ListFoundationModelAgreementOffers | Metadata | |
| bedrock:ListFoundationModels | Metadata | |
| bedrock:ListIngestionJobs | Metadata | |
| bedrock:ListKnowledgeBases | Metadata | |
| bedrock:ListModelCustomizationJobs | Metadata | |
| bedrock:ListProvisionedModelThroughputs | Metadata | |
| bedrock:ListTagsForResource | Metadata | |
| bedrock:PutFoundationModelEntitlement | Admin | |
| bedrock:PutModelInvocationLoggingConfiguration | Admin | |
| bedrock:PutUseCaseForModelAccess | Admin | |
| bedrock:QueryKnowledgeBase | Metadata | |
| bedrock:StartIngestionJob | Operator | |
| bedrock:StopModelCustomizationJob | Operator | |
| bedrock:TagResource | Operator | |
| bedrock:UntagResource | Operator | |
| bedrock:UpdateAgent | Admin | |
| bedrock:UpdateAgentActionGroup | Admin | |
| bedrock:UpdateAgentAlias | Admin | |
| bedrock:UpdateAgentKnowledgeBase | Admin | |
| bedrock:UpdateDataSource | Admin | |
| bedrock:UpdateKnowledgeBase | Admin | |
| bedrock:UpdateProvisionedModelThroughput | Admin |