@cloud-copilot/iam-data

{ "allowvendedlogdeliveryforresource": { "name": "AllowVendedLogDeliveryForResource", "isPermissionOnly": true, "description": "Grants permission to configure vended log delivery for a knowledge base", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "knowledge-base", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "applyguardrail": { "name": "ApplyGuardrail", "description": "Grants permission to apply a guardrail", "accessLevel": "Read", "resourceTypes": [ { "name": "guardrail", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "guardrail-profile", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateagentcollaborator": { "name": "AssociateAgentCollaborator", "description": "Grants permission to associate another existing agent as a collaborator to an existing agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateagentknowledgebase": { "name": "AssociateAgentKnowledgeBase", "description": "Grants permission to associate a knowledge base with an agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatethirdpartyknowledgebase": { "name": "AssociateThirdPartyKnowledgeBase", "isPermissionOnly": true, "description": "Grants permission to use 3rd party platform to store knowledge data", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn" ], "dependentActions": [] }, "batchdeleteevaluationjob": { "name": "BatchDeleteEvaluationJob", "description": "Grants permission to batch delete list of bedrock evaluation jobs", "accessLevel": "Write", "resourceTypes": [ { "name": "evaluation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "callwithbearertoken": { "name": "CallWithBearerToken", "description": "Grants permission to use bearer token", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "bedrock:BearerTokenType" ], "dependentActions": [] }, "cancelautomatedreasoningpolicybuildworkflow": { "name": "CancelAutomatedReasoningPolicyBuildWorkflow", "description": "Grants permission to cancel a build workflow for an automated reasoning policy", "accessLevel": "Write", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "copyblueprintstage": { "name": "CopyBlueprintStage", "description": "Grants permission to copy a blueprint from one stage to another", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "counttokens": { "name": "CountTokens", "description": "Grants permission to count the number of tokens in an input prompt", "accessLevel": "Read", "resourceTypes": [ { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createagent": { "name": "CreateAgent", "description": "Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createagentactiongroup": { "name": "CreateAgentActionGroup", "description": "Grants permission to create a new action group in an existing agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createagentalias": { "name": "CreateAgentAlias", "description": "Grants permission to create a new alias for an agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createautomatedreasoningpolicy": { "name": "CreateAutomatedReasoningPolicy", "description": "Grants permission to create a new automated reasoning policy", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createautomatedreasoningpolicytestcase": { "name": "CreateAutomatedReasoningPolicyTestCase", "description": "Grants permission to create a test case for an automated reasoning policy", "accessLevel": "Write", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createautomatedreasoningpolicyversion": { "name": "CreateAutomatedReasoningPolicyVersion", "description": "Grants permission to create a new automated reasoning policy version", "accessLevel": "Write", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createblueprint": { "name": "CreateBlueprint", "description": "Grants permission to create a blueprint for custom output from data automation", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createblueprintversion": { "name": "CreateBlueprintVersion", "description": "Grants permission to create a new version for an existing blueprint", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createcustommodel": { "name": "CreateCustomModel", "description": "Grants permission to create a custom model into Bedrock", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createcustommodeldeployment": { "name": "CreateCustomModelDeployment", "description": "Grants permission to create a custom model deployment for custom model", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdataautomationlibrary": { "name": "CreateDataAutomationLibrary", "description": "Grants permission to create a Data Automation Library", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdataautomationproject": { "name": "CreateDataAutomationProject", "description": "Grants permission to create a data automation project", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "data-automation-library", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdatasource": { "name": "CreateDataSource", "description": "Grants permission to create a data source", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createevaluationjob": { "name": "CreateEvaluationJob", "description": "Grants permission to create a job for evaluation foundation models or custom models", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "default-prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createflow": { "name": "CreateFlow", "description": "Grants permission to create a prompt flow", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createflowalias": { "name": "CreateFlowAlias", "description": "Grants permission to create an alias of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createflowversion": { "name": "CreateFlowVersion", "description": "Grants permission to create an immutable version of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createfoundationmodelagreement": { "name": "CreateFoundationModelAgreement", "description": "Grants permission to create a new foundation model agreement", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createguardrail": { "name": "CreateGuardrail", "description": "Grants permission to create a new guardrail", "accessLevel": "Write", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "automated-reasoning-policy-version", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "guardrail-profile", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createguardrailversion": { "name": "CreateGuardrailVersion", "description": "Grants permission to create a new guardrail version", "accessLevel": "Write", "resourceTypes": [ { "name": "guardrail", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createinferenceprofile": { "name": "CreateInferenceProfile", "description": "Grants permission to create inference profiles", "accessLevel": "Write", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createinvocation": { "name": "CreateInvocation", "description": "Grants permission to create a new invocation in an existing session", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createknowledgebase": { "name": "CreateKnowledgeBase", "description": "Grants permission to create a knowledge base", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmarketplacemodelendpoint": { "name": "CreateMarketplaceModelEndpoint", "description": "Grants permission to create a marketplace model endpoint", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createmodelcopyjob": { "name": "CreateModelCopyJob", "description": "Grants permission to create a job for copying a custom model across region or across account", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelcustomizationjob": { "name": "CreateModelCustomizationJob", "description": "Grants permission to create a job for customizing the model with your custom training data", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelevaluationjob": { "name": "CreateModelEvaluationJob", "description": "Grants permission to create a job for evaluation foundation models or custom models", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelimportjob": { "name": "CreateModelImportJob", "description": "Grants permission to create a job for importing model into Bedrock", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelinvocationjob": { "name": "CreateModelInvocationJob", "description": "Grants permission to create a new model invocation job", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "model-invocation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createprompt": { "name": "CreatePrompt", "description": "Grants permission to create a prompt", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createpromptrouter": { "name": "CreatePromptRouter", "description": "Grants permission to create a custom prompt router", "accessLevel": "Write", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createpromptversion": { "name": "CreatePromptVersion", "description": "Grants permission to create a version of a prompt", "accessLevel": "Write", "resourceTypes": [ { "name": "prompt", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createprovisionedmodelthroughput": { "name": "CreateProvisionedModelThroughput", "description": "Grants permission to create a new provisioned model throughput", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createsession": { "name": "CreateSession", "description": "Grants permission to create a new session", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteagent": { "name": "DeleteAgent", "description": "Grants permission to delete an Agent that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentactiongroup": { "name": "DeleteAgentActionGroup", "description": "Grants permission to delete an actionGroup that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentalias": { "name": "DeleteAgentAlias", "description": "Grants permission to delete an AgentAlias that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentmemory": { "name": "DeleteAgentMemory", "description": "Grants permission to delete existing memory for an alias", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentversion": { "name": "DeleteAgentVersion", "description": "Grants permission to delete an Agent Version that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteautomatedreasoningpolicy": { "name": "DeleteAutomatedReasoningPolicy", "description": "Grants permission to delete an automated reasoning policy or its version", "accessLevel": "Write", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "automated-reasoning-policy-version", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteautomatedreasoningpolicybuildworkflow": { "name": "DeleteAutomatedReasoningPolicyBuildWorkflow", "description": "Grants permission to delete a build workflow for an automated reasoning policy", "accessLevel": "Write", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteautomatedreasoningpolicytestcase": { "name": "DeleteAutomatedReasoningPolicyTestCase", "description": "Grants permission to delete a test case for an automated reasoning policy", "accessLevel": "Write", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteblueprint": { "name": "DeleteBlueprint", "description": "Grants permission to delete a blueprint for data automation", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecustommodel": { "name": "DeleteCustomModel", "description": "Grants permission to delete a custom model that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecustommodeldeployment": { "name": "DeleteCustomModelDeployment", "description": "Grants permission to delete a custom model deployment that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model-deployment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedataautomationlibrary": { "name": "DeleteDataAutomationLibrary", "description": "Grants permission to delete a Data Automation Library", "accessLevel": "Write", "resourceTypes": [ { "name": "data-automation-library", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedataautomationproject": { "name": "DeleteDataAutomationProject", "description": "Grants permission to delete a data automation project", "accessLevel": "Write", "resourceTypes": [ { "name": "data-automation-project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedatasource": { "name": "DeleteDataSource", "description": "Grants permission to delete a data source", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteenforcedguardrailconfiguration": { "name": "DeleteEnforcedGuardrailConfiguration", "description": "Grants permission to delete account-level enforced guardrail configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteflow": { "name": "DeleteFlow", "description": "Grants permission to delete a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteflowalias": { "name": "DeleteFlowAlias", "description": "Grants permission to delete an alias of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteflowversion": { "name": "DeleteFlowVersion", "description": "Grants permission to delete a version of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletefoundationmodelagreement": { "name": "DeleteFoundationModelAgreement", "description": "Grants permission to delete a foundation model agreement that you created earlier", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteguardrail": { "name": "DeleteGuardrail", "description": "Grants permission to delete a guardrail or its version", "accessLevel": "Write", "resourceTypes": [ { "name": "guardrail", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteimportedmodel": { "name": "DeleteImportedModel", "description": "Grants permission to delete previously created Bedrock imported model", "accessLevel": "Write", "resourceTypes": [ { "name": "imported-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteinferenceprofile": { "name": "DeleteInferenceProfile", "description": "Grants permission to delete inference profiles", "accessLevel": "Write", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteknowledgebase": { "name": "DeleteKnowledgeBase", "description": "Grants permission to delete a knowledge base", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteknowledgebasedocuments": { "name": "DeleteKnowledgeBaseDocuments", "description": "Grants permission to delete documents from a knowledge base", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemarketplacemodelagreement": { "name": "DeleteMarketplaceModelAgreement", "description": "Grants permission to unsubscribe from a bedrock marketplace enabled AWS marketplace model", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletemarketplacemodelendpoint": { "name": "DeleteMarketplaceModelEndpoint", "description": "Grants permission to delete a marketplace model endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "bedrock-marketplace-model-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemodelinvocationloggingconfiguration": { "name": "DeleteModelInvocationLoggingConfiguration", "description": "Grants permission to delete an existing Invocation logging configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteprompt": { "name": "DeletePrompt", "description": "Grants permission to delete a prompt or its version", "accessLevel": "Write", "resourceTypes": [ { "name": "prompt", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "prompt-version", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepromptrouter": { "name": "DeletePromptRouter", "description": "Grants permission to delete a custom prompt router", "accessLevel": "Write", "resourceTypes": [ { "name": "prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteprovisionedmodelthroughput": { "name": "DeleteProvisionedModelThroughput", "description": "Grants permission to delete a provisioned model throughput that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "provisioned-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "isPermissionOnly": true, "description": "Deletes a previously created Bedrock resource policy", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "guardrail", "required": false, "conditionKeys": [], "dependentActions": [] }, { "name": "guardrail-profile", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesession": { "name": "DeleteSession", "description": "Grants permission to delete a Session that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregistermarketplacemodelendpoint": { "name": "DeregisterMarketplaceModelEndpoint", "description": "Grants permission to deregister a marketplace model endpoint to make it unusable in Bedrock Marketplace", "accessLevel": "Write", "resourceTypes": [ { "name": "bedrock-marketplace-model-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "detectgeneratedcontent": { "name": "DetectGeneratedContent", "description": "Grants permission to detect if the provided content is generated using Amazon Bedrock", "accessLevel": "Read", "resourceTypes": [ { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateagentcollaborator": { "name": "DisassociateAgentCollaborator", "description": "Grants permission to diassociate a collaborator that you associated earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateagentknowledgebase": { "name": "DisassociateAgentKnowledgeBase", "description": "Grants permission to disassociate a knowledge base from the agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "endsession": { "name": "EndSession", "description": "Grants permission to end a Session that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "exportautomatedreasoningpolicyversion": { "name": "ExportAutomatedReasoningPolicyVersion", "description": "Grants permission to retrieve an automated reasoning policy version artifact", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "automated-reasoning-policy-version", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "generatequery": { "name": "GenerateQuery", "description": "Grants permission to generate queries associated with user input", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getagent": { "name": "GetAgent", "description": "Grants permission to retrieve an existing agent", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentactiongroup": { "name": "GetAgentActionGroup", "description": "Grants permission to retrieve an existing action group", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentalias": { "name": "GetAgentAlias", "description": "Grants permission to retrieve an existing alias", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentcollaborator": { "name": "GetAgentCollaborator", "description": "Grants permission to retrieve an existing collaborator", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentknowledgebase": { "name": "GetAgentKnowledgeBase", "description": "Grants permission to describe a knowledge base associated with an agent", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentmemory": { "name": "GetAgentMemory", "description": "Grants permission to retrieve existing memory for an alias", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentversion": { "name": "GetAgentVersion", "description": "Grants permission to retrieve an existing version of an agent", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getasyncinvoke": { "name": "GetAsyncInvoke", "description": "Grants permission to get the properties associated with an asynchronous invocation that you have submitted", "accessLevel": "Read", "resourceTypes": [ { "name": "async-invoke", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getautomatedreasoningpolicy": { "name": "GetAutomatedReasoningPolicy", "description": "Grants permission to retrieve an automated reasoning policy or its version", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "automated-reasoning-policy-version", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getautomatedreasoningpolicyannotations": { "name": "GetAutomatedReasoningPolicyAnnotations", "description": "Grants permission to retrieve annotations for a build workflow for an automated reasoning policy", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getautomatedreasoningpolicybuildworkflow": { "name": "GetAutomatedReasoningPolicyBuildWorkflow", "description": "Grants permission to retrieve a build workflow for an automated reasoning policy", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getautomatedreasoningpolicybuildworkflowresultassets": { "name": "GetAutomatedReasoningPolicyBuildWorkflowResultAssets", "description": "Grants permission to retrieve assets for a build workflow for an automated reasoning policy", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getautomatedreasoningpolicynextscenario": { "name": "GetAutomatedReasoningPolicyNextScenario", "description": "Grants permission to retrieve the next unreviewed generated scenario for a build workflow for an automated reasoning policy", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getautomatedreasoningpolicytestcase": { "name": "GetAutomatedReasoningPolicyTestCase", "description": "Grants permission to retrieve a test case for an automated reasoning policy", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getautomatedreasoningpolicytestresult": { "name": "GetAutomatedReasoningPolicyTestResult", "description": "Grants permission to retrieve result for a test case for an automated reasoning policy", "accessLevel": "Read", "resourceTypes": [ { "name": "automated-reasoning-policy", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getblueprint": { "name": "GetBlueprint", "description": "Grants permission to retrieve an existing blueprint for data automation", "accessLevel": "Read", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getblueprintoptimizationstatus": { "name": "GetBlueprintOptimizationStatus", "description": "Grants permission to get the status of a blueprint optimization job", "accessLevel": "Read", "resourceTypes": [ { "name": "blueprint-optimization-invocation", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getblueprintrecommendation": { "name": "GetBlueprintRecommendation", "isPermissionOnly": true, "description": "Grants permission to retrieve blueprint recommendation", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getcustommodel": { "name": "GetCustomModel", "description": "Grants permission to get the properties associated with a Bedrock custom model that you have created", "accessLevel": "Read", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getcustommodeldeployment": { "name": "GetCustomModelDeployment", "description": "Grants permission to get the properties associated with a custom model deployment. Use this operation to get the status of a custom model deployment", "accessLevel": "Read", "resourceTypes": [ { "name": "custom-model-deployment", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataautomationlibrary": { "name": "GetDataAutomationLibrary", "description": "Grants permission to retrieve an existing Data Automation Library", "accessLevel": "Read", "resourceTypes": [ { "name": "data-automation-library", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataautomationlibraryentity": { "name": "GetDataAutomationLibraryEntity", "description": "Grants permission to get a Data Automation Library entity", "accessLevel": "Read", "resourceTypes": [ { "name": "data-automation-library", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataautomationlibraryingestionjob": { "name": "GetDataAutomationLibraryIngestionJob", "description": "Grants permission to get details about a Data Automation Library ingestion job", "accessLevel": "Read", "resourceTypes": [ { "name": "data-automation-library", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "data-automation-library-ingestion-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataautomationproject": { "name": "GetDataAutomationProject", "description": "Grants permission to retrieve an existing data automation project", "accessLevel": "Read", "resourceTypes": [ { "name": "data-automation-project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataautomationstatus": { "name": "GetDataAutomationStatus", "description": "Grants permission to retrieve the status of a data automation invocation job", "accessLevel": "Read", "resourceTypes": [ { "name": "data-automation-invocation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdatasource": { "name": "GetDataSource", "description": "Grants permission to retrieve an existing data source", "accessLevel": "Read", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevaluationjob": { "name": "GetEvaluationJob", "description": "Grants permission to get the properties associated with a evaluation job. Use this operation to get the status of a evaluation job", "accessLevel": "Read", "resourceTypes": [ { "name": "evaluation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getexecutionflowsnapshot": { "name": "GetExecutionFlowSnapshot", "description": "Grants permission to retrieve the flow definition for a flow execution", "accessLevel": "Read", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-execution", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflow": { "name": "GetFlow", "description": "Grants permission to retrieve an existing prompt flow", "accessLevel": "Read", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflowalias": { "name": "GetFlowAlias", "description": "Grants permission to retrieve an existing alias of a prompt flow", "accessLevel": "Read", "resourceTypes": [ { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflowexecution": { "name": "GetFlowExecution", "description": "Grants permission to retrieve an existing execution of a flow alias", "accessLevel": "Read", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-execution", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflowversion": {