Update all_config

Signed-off-by: Jacob Woffenden <jacob.woffenden@digital.justice.gov.uk>
moj-analytical-services · Jun 13, 2024 · 480c874 · 480c874
1 parent b658159
commit 480c874
Showing 1 changed file with 58 additions and 0 deletions.
diff --git a/tests/expected_policy/all_config.json b/tests/expected_policy/all_config.json
@@ -273,6 +273,64 @@
                 "arn:aws:kms:test_region:test_account:key/test_key",
                 "arn:aws:kms:test_region_2:test_account:key/test_key_2"
             ]
+        },
+        {
+            "Sid": "BedrockActions",
+            "Effect": "Allow",
+            "Action": [
+                "bedrock:ListFoundationModels",
+                "bedrock:GetFoundationModel",
+                "bedrock:InvokeModel",
+                "bedrock:InvokeModelWithResponseStream",
+                "bedrock:CreateModelCustomizationJob",
+                "bedrock:GetModelCustomizationJob",
+                "bedrock:GetFoundationModelAvailability",
+                "bedrock:ListModelCustomizationJobs",
+                "bedrock:StopModelCustomizationJob",
+                "bedrock:GetCustomModel",
+                "bedrock:ListCustomModels",
+                "bedrock:DeleteCustomModel",
+                "bedrock:CreateProvisionedModelThroughput",
+                "bedrock:UpdateProvisionedModelThroughput",
+                "bedrock:GetProvisionedModelThroughput",
+                "bedrock:DeleteProvisionedModelThroughput",
+                "bedrock:ListProvisionedModelThroughputs",
+                "bedrock:ListTagsForResource",
+                "bedrock:UntagResource",
+                "bedrock:TagResource",
+                "bedrock:CreateAgent",
+                "bedrock:UpdateAgent",
+                "bedrock:GetAgent",
+                "bedrock:ListAgents",
+                "bedrock:CreateActionGroup",
+                "bedrock:UpdateActionGroup",
+                "bedrock:GetActionGroup",
+                "bedrock:ListActionGroups",
+                "bedrock:CreateAgentDraftSnapshot",
+                "bedrock:GetAgentVersion",
+                "bedrock:ListAgentVersions",
+                "bedrock:CreateAgentAlias",
+                "bedrock:UpdateAgentAlias",
+                "bedrock:GetAgentAlias",
+                "bedrock:ListAgentAliases",
+                "bedrock:InvokeAgent",
+                "bedrock:PutFoundationModelEntitlement",
+                "bedrock:GetModelInvocationLoggingConfiguration",
+                "bedrock:PutModelInvocationLoggingConfiguration",
+                "bedrock:CreateFoundationModelAgreement",
+                "bedrock:DeleteFoundationModelAgreement",
+                "bedrock:ListFoundationModelAgreementOffers",
+                "bedrock:GetUseCaseForModelAccess"
+            ],
+            "Resource": ["*"],
+            "Condition": {
+                "StringEquals": {
+                    "aws:RequestedRegion": [
+                        "eu-central-1",
+                        "eu-west-3"
+                    ]
+                }   
+            }
         }
     ]
 }