@cloud-copilot/iam-data

{ "allowvendedlogdeliveryforresource": { "name": "AllowVendedLogDeliveryForResource", "isPermissionOnly": true, "description": "Grants permission to configure vended log delivery for a knowledge base", "accessLevel": "Permissions management", "resourceTypes": [ { "name": "knowledge-base", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "applyguardrail": { "name": "ApplyGuardrail", "description": "Grants permission to apply a guardrail", "accessLevel": "Read", "resourceTypes": [ { "name": "guardrail", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "guardrail-profile", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateagentcollaborator": { "name": "AssociateAgentCollaborator", "description": "Grants permission to associate another existing agent as a collaborator to an existing agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associateagentknowledgebase": { "name": "AssociateAgentKnowledgeBase", "description": "Grants permission to associate a knowledge base with an agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "associatethirdpartyknowledgebase": { "name": "AssociateThirdPartyKnowledgeBase", "isPermissionOnly": true, "description": "Grants permission to use 3rd party platform to store knowledge data", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "bedrock:ThirdPartyKnowledgeBaseCredentialsSecretArn" ], "dependentActions": [] }, "batchdeleteevaluationjob": { "name": "BatchDeleteEvaluationJob", "description": "Grants permission to batch delete list of bedrock evaluation jobs", "accessLevel": "Write", "resourceTypes": [ { "name": "evaluation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createagent": { "name": "CreateAgent", "description": "Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createagentactiongroup": { "name": "CreateAgentActionGroup", "description": "Grants permission to create a new action group in an existing agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createagentalias": { "name": "CreateAgentAlias", "description": "Grants permission to create a new alias for an agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createblueprint": { "name": "CreateBlueprint", "description": "Grants permission to create a blueprint for custom output from data automation", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createblueprintversion": { "name": "CreateBlueprintVersion", "description": "Grants permission to create a new version for an existing blueprint", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createdataautomationproject": { "name": "CreateDataAutomationProject", "description": "Grants permission to create a data automation project", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createdatasource": { "name": "CreateDataSource", "description": "Grants permission to create a data source", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createevaluationjob": { "name": "CreateEvaluationJob", "description": "Grants permission to create a job for evaluation foundation models or custom models", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "default-prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createflow": { "name": "CreateFlow", "description": "Grants permission to create a prompt flow", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createflowalias": { "name": "CreateFlowAlias", "description": "Grants permission to create an alias of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createflowversion": { "name": "CreateFlowVersion", "description": "Grants permission to create an immutable version of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createfoundationmodelagreement": { "name": "CreateFoundationModelAgreement", "description": "Grants permission to create a new foundation model agreement", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createguardrail": { "name": "CreateGuardrail", "description": "Grants permission to create a new guardrail", "accessLevel": "Write", "resourceTypes": [ { "name": "guardrail-profile", "required": false, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createguardrailversion": { "name": "CreateGuardrailVersion", "description": "Grants permission to create a new guardrail version", "accessLevel": "Write", "resourceTypes": [ { "name": "guardrail", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createinferenceprofile": { "name": "CreateInferenceProfile", "description": "Grants permission to create inference profiles", "accessLevel": "Write", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createinvocation": { "name": "CreateInvocation", "description": "Grants permission to create a new invocation in an existing session", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "createknowledgebase": { "name": "CreateKnowledgeBase", "description": "Grants permission to create a knowledge base", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmarketplacemodelendpoint": { "name": "CreateMarketplaceModelEndpoint", "description": "Grants permission to create a marketplace model endpoint", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "createmodelcopyjob": { "name": "CreateModelCopyJob", "description": "Grants permission to create a job for copying a custom model across region or across account", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelcustomizationjob": { "name": "CreateModelCustomizationJob", "description": "Grants permission to create a job for customizing the model with your custom training data", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelevaluationjob": { "name": "CreateModelEvaluationJob", "description": "Grants permission to create a job for evaluation foundation models or custom models", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelimportjob": { "name": "CreateModelImportJob", "description": "Grants permission to create a job for importing model into Bedrock", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createmodelinvocationjob": { "name": "CreateModelInvocationJob", "description": "Grants permission to create a new model invocation job", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "model-invocation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createprompt": { "name": "CreatePrompt", "description": "Grants permission to create a prompt", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createpromptrouter": { "name": "CreatePromptRouter", "description": "Grants permission to create a custom prompt router", "accessLevel": "Write", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createpromptversion": { "name": "CreatePromptVersion", "description": "Grants permission to create a version of a prompt", "accessLevel": "Write", "resourceTypes": [ { "name": "prompt", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createprovisionedmodelthroughput": { "name": "CreateProvisionedModelThroughput", "description": "Grants permission to create a new provisioned model throughput", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "createsession": { "name": "CreateSession", "description": "Grants permission to create a new session", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "deleteagent": { "name": "DeleteAgent", "description": "Grants permission to delete an Agent that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentactiongroup": { "name": "DeleteAgentActionGroup", "description": "Grants permission to delete an actionGroup that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentalias": { "name": "DeleteAgentAlias", "description": "Grants permission to delete an AgentAlias that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentmemory": { "name": "DeleteAgentMemory", "description": "Grants permission to delete existing memory for an alias", "accessLevel": "Write", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteagentversion": { "name": "DeleteAgentVersion", "description": "Grants permission to delete an Agent Version that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteblueprint": { "name": "DeleteBlueprint", "description": "Grants permission to delete a blueprint for data automation", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletecustommodel": { "name": "DeleteCustomModel", "description": "Grants permission to delete a custom model that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedataautomationproject": { "name": "DeleteDataAutomationProject", "description": "Grants permission to delete a data automation project", "accessLevel": "Write", "resourceTypes": [ { "name": "data-automation-project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletedatasource": { "name": "DeleteDataSource", "description": "Grants permission to delete a data source", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteflow": { "name": "DeleteFlow", "description": "Grants permission to delete a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteflowalias": { "name": "DeleteFlowAlias", "description": "Grants permission to delete an alias of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteflowversion": { "name": "DeleteFlowVersion", "description": "Grants permission to delete a version of a prompt flow", "accessLevel": "Write", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletefoundationmodelagreement": { "name": "DeleteFoundationModelAgreement", "description": "Grants permission to delete a foundation model agreement that you created earlier", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteguardrail": { "name": "DeleteGuardrail", "description": "Grants permission to delete a guardrail or its version", "accessLevel": "Write", "resourceTypes": [ { "name": "guardrail", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteimportedmodel": { "name": "DeleteImportedModel", "description": "Grants permission to delete previously created Bedrock imported model", "accessLevel": "Write", "resourceTypes": [ { "name": "imported-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteinferenceprofile": { "name": "DeleteInferenceProfile", "description": "Grants permission to delete inference profiles", "accessLevel": "Write", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteknowledgebase": { "name": "DeleteKnowledgeBase", "description": "Grants permission to delete a knowledge base", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteknowledgebasedocuments": { "name": "DeleteKnowledgeBaseDocuments", "description": "Grants permission to delete documents from a knowledge base", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemarketplacemodelagreement": { "name": "DeleteMarketplaceModelAgreement", "description": "Grants permission to unsubscribe from a bedrock marketplace enabled AWS marketplace model", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deletemarketplacemodelendpoint": { "name": "DeleteMarketplaceModelEndpoint", "description": "Grants permission to delete a marketplace model endpoint", "accessLevel": "Write", "resourceTypes": [ { "name": "bedrock-marketplace-model-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletemodelinvocationloggingconfiguration": { "name": "DeleteModelInvocationLoggingConfiguration", "description": "Grants permission to delete an existing Invocation logging configuration", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "deleteprompt": { "name": "DeletePrompt", "description": "Grants permission to delete a prompt or its version", "accessLevel": "Write", "resourceTypes": [ { "name": "prompt", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "prompt-version", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletepromptrouter": { "name": "DeletePromptRouter", "description": "Grants permission to delete a custom prompt router", "accessLevel": "Write", "resourceTypes": [ { "name": "prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteprovisionedmodelthroughput": { "name": "DeleteProvisionedModelThroughput", "description": "Grants permission to delete a provisioned model throughput that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "provisioned-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deleteresourcepolicy": { "name": "DeleteResourcePolicy", "isPermissionOnly": true, "description": "Deletes a previously created Bedrock resource policy", "accessLevel": "Write", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deletesession": { "name": "DeleteSession", "description": "Grants permission to delete a Session that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "deregistermarketplacemodelendpoint": { "name": "DeregisterMarketplaceModelEndpoint", "description": "Grants permission to deregister a marketplace model endpoint to make it unusable in Bedrock Marketplace", "accessLevel": "Write", "resourceTypes": [ { "name": "bedrock-marketplace-model-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "detectgeneratedcontent": { "name": "DetectGeneratedContent", "description": "Grants permission to detect if the provided content is generated using Amazon Bedrock", "accessLevel": "Read", "resourceTypes": [ { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateagentcollaborator": { "name": "DisassociateAgentCollaborator", "description": "Grants permission to diassociate a collaborator that you associated earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "disassociateagentknowledgebase": { "name": "DisassociateAgentKnowledgeBase", "description": "Grants permission to disassociate a knowledge base from the agent", "accessLevel": "Write", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "endsession": { "name": "EndSession", "description": "Grants permission to end a Session that you created earlier", "accessLevel": "Write", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "generatequery": { "name": "GenerateQuery", "description": "Grants permission to generate queries associated with user input", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getagent": { "name": "GetAgent", "description": "Grants permission to retrieve an existing agent", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentactiongroup": { "name": "GetAgentActionGroup", "description": "Grants permission to retrieve an existing action group", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentalias": { "name": "GetAgentAlias", "description": "Grants permission to retrieve an existing alias", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentcollaborator": { "name": "GetAgentCollaborator", "description": "Grants permission to retrieve an existing collaborator", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentknowledgebase": { "name": "GetAgentKnowledgeBase", "description": "Grants permission to describe a knowledge base associated with an agent", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentmemory": { "name": "GetAgentMemory", "description": "Grants permission to retrieve existing memory for an alias", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getagentversion": { "name": "GetAgentVersion", "description": "Grants permission to retrieve an existing version of an agent", "accessLevel": "Read", "resourceTypes": [ { "name": "agent", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getasyncinvoke": { "name": "GetAsyncInvoke", "description": "Grants permission to get the properties associated with an asynchronous invocation that you have submitted", "accessLevel": "Read", "resourceTypes": [ { "name": "async-invoke", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getblueprint": { "name": "GetBlueprint", "description": "Grants permission to retrieve an existing blueprint for data automation", "accessLevel": "Read", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getblueprintrecommendation": { "name": "GetBlueprintRecommendation", "isPermissionOnly": true, "description": "Grants permission to retrieve blueprint recommendation", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getcustommodel": { "name": "GetCustomModel", "description": "Grants permission to get the properties associated with a Bedrock custom model that you have created", "accessLevel": "Read", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataautomationproject": { "name": "GetDataAutomationProject", "description": "Grants permission to retrieve an existing data automation project", "accessLevel": "Read", "resourceTypes": [ { "name": "data-automation-project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdataautomationstatus": { "name": "GetDataAutomationStatus", "description": "Grants permission to retrieve the status of a data automation invocation job", "accessLevel": "Read", "resourceTypes": [ { "name": "data-automation-invocation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getdatasource": { "name": "GetDataSource", "description": "Grants permission to retrieve an existing data source", "accessLevel": "Read", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getevaluationjob": { "name": "GetEvaluationJob", "description": "Grants permission to get the properties associated with a evaluation job. Use this operation to get the status of a evaluation job", "accessLevel": "Read", "resourceTypes": [ { "name": "evaluation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getexecutionflowsnapshot": { "name": "GetExecutionFlowSnapshot", "description": "Grants permission to retrieve the flow definition for a flow execution", "accessLevel": "Read", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-execution", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflow": { "name": "GetFlow", "description": "Grants permission to retrieve an existing prompt flow", "accessLevel": "Read", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflowalias": { "name": "GetFlowAlias", "description": "Grants permission to retrieve an existing alias of a prompt flow", "accessLevel": "Read", "resourceTypes": [ { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflowexecution": { "name": "GetFlowExecution", "description": "Grants permission to retrieve an existing execution of a flow alias", "accessLevel": "Read", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "flow-execution", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getflowversion": { "name": "GetFlowVersion", "description": "Grants permission to retrieve an existing version of a prompt flow", "accessLevel": "Read", "resourceTypes": [ { "name": "flow", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfoundationmodel": { "name": "GetFoundationModel", "description": "Grants permission to get the properties associated with a Bedrock foundation model", "accessLevel": "Read", "resourceTypes": [ { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getfoundationmodelavailability": { "name": "GetFoundationModelAvailability", "description": "Grants permission to get the availability of a foundation model", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getguardrail": { "name": "GetGuardrail", "description": "Grants permission to retrieve a guardrail or its version", "accessLevel": "Read", "resourceTypes": [ { "name": "guardrail", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getimportedmodel": { "name": "GetImportedModel", "description": "Grants permission to get the properties associated with Bedrock imported model", "accessLevel": "Read", "resourceTypes": [ { "name": "imported-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinferenceprofile": { "name": "GetInferenceProfile", "description": "Grants permission to get the properties associated with an inference profile", "accessLevel": "Read", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getingestionjob": { "name": "GetIngestionJob", "description": "Grants permission to retrieve an existing ingestion job", "accessLevel": "Read", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getinvocationstep": { "name": "GetInvocationStep", "description": "Grants permission to get an invocation step from a session", "accessLevel": "Read", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getknowledgebase": { "name": "GetKnowledgeBase", "description": "Grants permission to retrieve an existing knowledge base", "accessLevel": "Read", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getknowledgebasedocuments": { "name": "GetKnowledgeBaseDocuments", "description": "Grants permission to get details for documents in a knowledge base", "accessLevel": "Read", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmarketplacemodelendpoint": { "name": "GetMarketplaceModelEndpoint", "description": "Grants permission to get the properties of a marketplace model endpoint", "accessLevel": "Read", "resourceTypes": [ { "name": "bedrock-marketplace-model-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmodelcopyjob": { "name": "GetModelCopyJob", "description": "Grants permission to get the properties associated with a model-copy job. Use this operation to get the status of a model-copy job", "accessLevel": "Read", "resourceTypes": [ { "name": "model-copy-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmodelcustomizationjob": { "name": "GetModelCustomizationJob", "description": "Grants permission to get the properties associated with a model-customization job. Use this operation to get the status of a model-customization job", "accessLevel": "Read", "resourceTypes": [ { "name": "model-customization-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmodelevaluationjob": { "name": "GetModelEvaluationJob", "description": "Grants permission to get the properties associated with a model-evaluation job. Use this operation to get the status of a model-evaluation job", "accessLevel": "Read", "resourceTypes": [ { "name": "model-evaluation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmodelimportjob": { "name": "GetModelImportJob", "description": "Grants permission to get the properties associated with a model import job and is used to get the status of a model import job", "accessLevel": "Read", "resourceTypes": [ { "name": "model-import-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmodelinvocationjob": { "name": "GetModelInvocationJob", "description": "Grants permission to retrieve a model invocation job", "accessLevel": "Read", "resourceTypes": [ { "name": "model-invocation-job", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getmodelinvocationloggingconfiguration": { "name": "GetModelInvocationLoggingConfiguration", "description": "Grants permission to retrieve an existing Invocation logging configuration", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "getprompt": { "name": "GetPrompt", "description": "Grants permission to retrieve an existing prompt or its version", "accessLevel": "Read", "resourceTypes": [ { "name": "prompt", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "prompt-version", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getpromptrouter": { "name": "GetPromptRouter", "description": "Grants permission to get the properties associated with a prompt router", "accessLevel": "Read", "resourceTypes": [ { "name": "default-prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getprovisionedmodelthroughput": { "name": "GetProvisionedModelThroughput", "description": "Grants permission to retrieve a provisioned model throughput", "accessLevel": "Read", "resourceTypes": [ { "name": "provisioned-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getresourcepolicy": { "name": "GetResourcePolicy", "isPermissionOnly": true, "description": "Gets the resource policy document for a Bedrock resource", "accessLevel": "Read", "resourceTypes": [ { "name": "custom-model", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getsession": { "name": "GetSession", "description": "Grants permission to retrieve an existing session", "accessLevel": "Read", "resourceTypes": [ { "name": "session", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "getusecaseformodelaccess": { "name": "GetUseCaseForModelAccess", "description": "Grants permission to retrieve a use case for model access", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "ingestknowledgebasedocuments": { "name": "IngestKnowledgeBaseDocuments", "description": "Grants permission to directly ingest documents into a knowledge base", "accessLevel": "Write", "resourceTypes": [ { "name": "knowledge-base", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "invokeagent": { "name": "InvokeAgent", "description": "Grants permission to send user input (text-only) to the alias of an agent for Bedrock", "accessLevel": "Read", "resourceTypes": [ { "name": "agent-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "invokeblueprintrecommendationasync": { "name": "InvokeBlueprintRecommendationAsync", "isPermissionOnly": true, "description": "Grants permission to invoke blueprint recommendations asynchronously", "accessLevel": "Write", "resourceTypes": [ { "name": "data-automation-profile", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "invokebuilder": { "name": "InvokeBuilder", "isPermissionOnly": true, "description": "Grants permission to use the conversational builder which aids in building supported bedrock resources", "accessLevel": "Write", "resourceTypes": [], "conditionKeys": [], "dependentActions": [] }, "invokedataautomationasync": { "name": "InvokeDataAutomationAsync", "description": "Grants permission to invoke a Bedrock data automation job", "accessLevel": "Write", "resourceTypes": [ { "name": "blueprint", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "data-automation-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "data-automation-project", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [ "aws:RequestTag/${TagKey}", "aws:TagKeys" ], "dependentActions": [] }, "invokeflow": { "name": "InvokeFlow", "description": "Grants permission to invoke a prompt flow with user input", "accessLevel": "Read", "resourceTypes": [ { "name": "flow-alias", "required": true, "conditionKeys": [], "dependentActions": [] } ], "conditionKeys": [], "dependentActions": [] }, "invokeinlineagent": { "name": "InvokeInlineAgent", "description": "Grants permission to send user input (text-only) to the inline agent for Bedrock", "accessLevel": "Read", "resourceTypes": [], "conditionKeys": [ "bedrock:InlineAgentName" ], "dependentActions": [] }, "invokemodel": { "name": "InvokeModel", "description": "Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body", "accessLevel": "Read", "resourceTypes": [ { "name": "application-inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "async-invoke", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "bedrock-marketplace-model-endpoint", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "default-prompt-router", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "foundation-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "imported-model", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "inference-profile", "required": true, "conditionKeys": [], "dependentActions": [] }, { "name": "prompt-router", "required":