255 actions in the bedrock service. Select an action to see its access level, resource ARNs, condition keys, and a copy-paste IAM policy.
Grants permission to perform agentic retrieve with streaming from retrievers
Grants permission to configure vended log delivery for a knowledge base
Grants permission to apply a guardrail
Grants permission to associate another existing agent as a collaborator to an existing agent
Grants permission to associate a knowledge base with an agent
Grants permission to use 3rd party platform to store knowledge data
Grants permission to delete one or more advanced prompt optimization jobs
Grants permission to batch delete list of bedrock evaluation jobs
Grants permission to use bearer token
Grants permission to cancel a build workflow for an automated reasoning policy
Grants permission to copy a blueprint from one stage to another
Grants permission to count the number of tokens in an input prompt
Grants permission to create an advanced prompt optimization job
Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version
Grants permission to create a new action group in an existing agent
Grants permission to create a new alias for an agent
Grants permission to create a new automated reasoning policy
Grants permission to create a test case for an automated reasoning policy
Grants permission to create a new automated reasoning policy version
Grants permission to create a blueprint for custom output from data automation
Grants permission to create a new version for an existing blueprint
Grants permission to create a custom model into Bedrock
Grants permission to create a custom model deployment for custom model
Grants permission to create a Data Automation Library
Grants permission to create a data automation project
Grants permission to create a data source
Grants permission to create a job for evaluation foundation models or custom models
Grants permission to create a prompt flow
Grants permission to create an alias of a prompt flow
Grants permission to create an immutable version of a prompt flow
Grants permission to create a new foundation model agreement
Grants permission to create a new guardrail
Grants permission to create a new guardrail version
Grants permission to create inference profiles
Grants permission to create a new invocation in an existing session
Grants permission to create a knowledge base
Grants permission to create a marketplace model endpoint
Grants permission to create a job for copying a custom model across region or across account
Grants permission to create a job for customizing the model with your custom training data
Grants permission to create a job for evaluation foundation models or custom models
Grants permission to create a job for importing model into Bedrock
Grants permission to create a new model invocation job
Grants permission to create a prompt
Grants permission to create a custom prompt router
Grants permission to create a version of a prompt
Grants permission to create a new provisioned model throughput
Grants permission to create a new session
Grants permission to delete an Agent that you created earlier
Grants permission to delete an actionGroup that you created earlier
Grants permission to delete an AgentAlias that you created earlier
Grants permission to delete existing memory for an alias
Grants permission to delete an Agent Version that you created earlier
Grants permission to delete an automated reasoning policy or its version
Grants permission to delete a build workflow for an automated reasoning policy
Grants permission to delete a test case for an automated reasoning policy
Grants permission to delete a blueprint for data automation
Grants permission to delete a custom model that you created earlier
Grants permission to delete a custom model deployment that you created earlier
Grants permission to delete a Data Automation Library
Grants permission to delete a data automation project
Grants permission to delete a data source
Grants permission to delete account-level enforced guardrail configuration
Grants permission to delete a prompt flow
Grants permission to delete an alias of a prompt flow
Grants permission to delete a version of a prompt flow
Grants permission to delete a foundation model agreement that you created earlier
Grants permission to delete a guardrail or its version
Grants permission to delete previously created Bedrock imported model
Grants permission to delete inference profiles
Grants permission to delete a knowledge base
Grants permission to delete documents from a knowledge base
Grants permission to unsubscribe from a bedrock marketplace enabled AWS marketplace model
Grants permission to delete a marketplace model endpoint
Grants permission to delete an existing Invocation logging configuration
Grants permission to delete a prompt or its version
Grants permission to delete a custom prompt router
Grants permission to delete a provisioned model throughput that you created earlier
Deletes a previously created Bedrock resource policy
Grants permission to delete a Session that you created earlier
Grants permission to deregister a marketplace model endpoint to make it unusable in Bedrock Marketplace
Grants permission to detect if the provided content is generated using Amazon Bedrock
Grants permission to diassociate a collaborator that you associated earlier
Grants permission to disassociate a knowledge base from the agent
Grants permission to end a Session that you created earlier
Grants permission to retrieve an automated reasoning policy version artifact
Grants permission to generate queries associated with user input
Returns the account-wide data retention mode for Amazon Bedrock
Grants permission to get information about an advanced prompt optimization job
Grants permission to retrieve an existing agent
Grants permission to retrieve an existing action group
Grants permission to retrieve an existing alias
Grants permission to retrieve an existing collaborator
Grants permission to describe a knowledge base associated with an agent
Grants permission to retrieve existing memory for an alias
Grants permission to retrieve an existing version of an agent
Grants permission to get the properties associated with an asynchronous invocation that you have submitted
Grants permission to retrieve an automated reasoning policy or its version
Grants permission to retrieve annotations for a build workflow for an automated reasoning policy
Grants permission to retrieve a build workflow for an automated reasoning policy
Grants permission to retrieve assets for a build workflow for an automated reasoning policy
Grants permission to retrieve the next unreviewed generated scenario for a build workflow for an automated reasoning policy
Grants permission to retrieve a test case for an automated reasoning policy
Grants permission to retrieve result for a test case for an automated reasoning policy
Grants permission to retrieve an existing blueprint for data automation
Grants permission to get the status of a blueprint optimization job
Grants permission to retrieve blueprint recommendation
Grants permission to get the properties associated with a Bedrock custom model that you have created
Grants permission to get the properties associated with a custom model deployment. Use this operation to get the status of a custom model deployment
Grants permission to retrieve an existing Data Automation Library
Grants permission to get a Data Automation Library entity
Grants permission to get details about a Data Automation Library ingestion job
Grants permission to retrieve an existing data automation project
Grants permission to retrieve the status of a data automation invocation job
Grants permission to retrieve an existing data source
Grants permission to retrieve a document
Grants permission to get the properties associated with a evaluation job. Use this operation to get the status of a evaluation job
Grants permission to retrieve the flow definition for a flow execution
Grants permission to retrieve an existing prompt flow
Grants permission to retrieve an existing alias of a prompt flow
Grants permission to retrieve an existing execution of a flow alias
Grants permission to retrieve an existing version of a prompt flow
Grants permission to get the properties associated with a Bedrock foundation model
Grants permission to get the availability of a foundation model
Grants permission to retrieve a guardrail or its version
Grants permission to get the properties associated with Bedrock imported model
Grants permission to get the properties associated with an inference profile
Grants permission to retrieve an existing ingestion job
Grants permission to get an invocation step from a session
Grants permission to retrieve an existing knowledge base
Grants permission to get details for documents in a knowledge base
Grants permission to get the properties of a marketplace model endpoint
Grants permission to get the properties associated with a model-copy job. Use this operation to get the status of a model-copy job
Grants permission to get the properties associated with a model-customization job. Use this operation to get the status of a model-customization job
Grants permission to get the properties associated with a model-evaluation job. Use this operation to get the status of a model-evaluation job
Grants permission to get the properties associated with a model import job and is used to get the status of a model import job
Grants permission to retrieve a model invocation job
Grants permission to retrieve an existing Invocation logging configuration
Grants permission to retrieve an existing prompt or its version
Grants permission to get the properties associated with a prompt router
Grants permission to retrieve a provisioned model throughput
Gets the resource policy document for a Bedrock resource
Grants permission to retrieve an existing session
Grants permission to retrieve a use case for model access
Grants permission to directly ingest documents into a knowledge base
Grants permission to send user input (text-only) to the alias of an agent for Bedrock
Grants permission to invoke an Automated Reasoning policy
Grants permission to invoke an async job to perform blueprint optimization
Grants permission to invoke blueprint recommendations asynchronously
Grants permission to use the conversational builder which aids in building supported bedrock resources
Grants permission to invoke a call to Sync API of Bedrock data automation
Grants permission to invoke a Bedrock data automation job
Grants permission to invoke a Data Automation Library ingestion job
Grants permission to invoke a prompt flow with user input
Grants permission to invoke guardrail checks
Grants permission to send user input (text-only) to the inline agent for Bedrock
Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body
Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body with streaming response
Grants permission to invoke the specified Bedrock tool to run inference
Grants permission to list the advanced prompt optimization jobs in your account
Grants permission to list action groups in an agent
Grants permission to list aliases for an agent
Grants permission to list collaborators for an agent
Grants permission to list knowledge bases associated with an agent
Grants permission to list existing agents
Grants permission to list existing versions of an agent
Grants permission to get a list of asynchronous invocations that you have submitted
Grants permission to list automated reasoning policies or its versions
Grants permission to list build workflows for an automated reasoning policy
Grants permission to list test cases for an automated reasoning policy
Grants permission to list test result for an automated reasoning policy
Grants permission to list existing blueprints for data automation
Grants permission to get the list of custom model deployments that you have submitted
Grants permission to get a list of Bedrock custom models that you have created
Grants permission to list Data Automation Libraries
Grants permission to list Data Automation Library entities
Grants permission to list Data Automation Library ingestion jobs
Grants permission to list existing data automation projects
Grants permission to list existing data sources in an knowledge base
Grants permission to list account-level enforced guardrail configurations
Grants permission to get the list of evaluation jobs that you have submitted
Grants permission to list existing aliases of a prompt flow
Grants permission to retrieve events for a flow execution
Grants permission to list executions of a flow or a flow alias
Grants permission to list existing prompt flows
Grants permission to list existing versions of a prompt flow
Grants permission to get a list of foundation model agreement offers
Grants permission to list Bedrock foundation models that you can use
Grants permission to list guardrails or its versions
Grants permission to get list of Bedrock imported models
Grants permission to list inference profiles that you can use
Grants permission to list ingestion jobs in a data source
Grants permission to list invocations in a session
Grants permission to get list of invocation step from a session
Grants permission to list documents in a knowledge base
Grants permission to list existing knowledge bases
Grants permission to list marketplace model endpoints that you can use
Grants permission to get the list of model copy jobs that you have submitted
Grants permission to get the list of model customization jobs that you have submitted
Grants permission to get the list of model evaluation jobs that you have submitted
Grants permission to get list of model import jobs
Grants permission to list model invocation jobs that you created earlier
Grants permission to list prompt routers that you can use
Grants permission to list existing prompts
Grants permission to list provisioned model throughputs that you created earlier
Grants permission to list existing sessions
Grants permission to list tags for a Bedrock resource
Grants permission to optimize a prompt with user input
Grants permission to prepare an existing agent to receive runtime requests
Grants permission to apply the latest changes made to a prompt flow, so that they are reflected at runtime
Sets the account-wide data retention mode for Amazon Bedrock
Grants permission to set account-level enforced guardrail configuration
Grants permission to put entitlement to access a serverless foundation model. Do not use to restrict model access
Grants permission to put an invocation step into an invocation in session
Grants permission to create an existing Invocation logging configuration
Adds a resource policy for a Bedrock resource
Grants permission to put a use case for model access
Grants permission to register a sagemaker endpoint as a marketplace model endpoint
Grants permission to render an existing prompt or its version
Grants permission to rank documents based on user input
Grants permission to retrieve ingested data from a knowledge base
Grants permission to send user input to perform retrieval and generation
Grants permission to start a build workflow for an automated reasoning policy
Grants permission to start a test workflow for an automated reasoning policy
Grants permission to start an execution of a flow alias
Grants permission to start an ingestion job
Grants permission to stop an advanced prompt optimization job while in progress
Grants permission to stop a evaluation job while in progress
Grants permission to stop an execution of a flow alias
Grants permission to stop an ingestion job
Grants permission to stop a Bedrock model customization job while in progress
Grants permission to stop a model invocation job that you started earlier
Grants permission to Tag a Bedrock resource
Grants permission to Untag a Bedrock resource
Grants permission to update an existing agent
Grants permission to update an existing action group
Grants permission to update an existing alias
Grants permission to update an existing collaborator
Grants permission to update a knowledge base associated with an agent
Grants permission to update an automated reasoning policy
Grants permission to update annotations for a build workflow for an automated reasoning policy
Grants permission to update a test case for automated reasoning policy
Grants permission to update a blueprint for data automation
Grants permission to update an existing custom model deployment with a new custom model
Grants permission to update a Data Automation Library
Grants permission to update a data automation project
Grants permission to update a data source
Grants permission to update a prompt flow
Grants permission to update the configuration of an alias of a prompt flow
Grants permission to update a guardrail
Grants permission to update a knowledge base
Grants permission to update a marketplace model endpoint
Grants permission to update a prompt
Grants permission to update a provisioned model throughput that you created earlier
Grants permission to update an existing session
Grants permission to validate prompt flow definitions