Adding permissions for cross-region inference

ministryofjustice · Jan 31, 2025 · 4356831 · 4356831
1 parent 79d484c
commit 4356831
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/...m/aws/analytical-platform-data-production/tooling-iam/tooling-integration-iam-policies.tf b/...m/aws/analytical-platform-data-production/tooling-iam/tooling-integration-iam-policies.tf
@@ -5,6 +5,7 @@ data "aws_iam_policy_document" "bedrock_integration" {
   statement {
     sid    = "AnalyticalPlatformBedrockIntegration"
     effect = "Allow"
+
     actions = [
       "bedrock:ListFoundationModels",
       "bedrock:GetFoundationModel",
@@ -53,8 +54,11 @@ data "aws_iam_policy_document" "bedrock_integration" {
       "bedrock:CreateModelInvocationJob",
       "bedrock:GetModelInvocationJob",
       "bedrock:ListModelInvocationJobs",
+      "bedrock:GetInferenceProfile",
+      "bedrock:DeleteInferenceProfile",
       "bedrock:StopModelInvocationJob"
     ]
+
     resources = ["*"]
     condition {
       test     = "StringEquals"