# Actions, resources, and condition keys for Amazon Bedrock
Amazon Bedrock (service prefix: `bedrock`) provides the following service-specific resources, actions, and condition context keys for use in IAM permission policies.
References:
+ Learn how to [configure this service](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html).
+ View a list of the [API operations available for this service](https://docs.aws.amazon.com/bedrock/latest/APIReference/).
+ Learn how to secure this service and its resources by [using IAM](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) permission policies.
**Topics**
+ [Actions defined by Amazon Bedrock](#amazonbedrock-actions-as-permissions)
+ [Resource types defined by Amazon Bedrock](#amazonbedrock-resources-for-iam-policies)
+ [Condition keys for Amazon Bedrock](#amazonbedrock-policy-keys)
## Actions defined by Amazon Bedrock
You can specify the following actions in the `Action` element of an IAM policy statement. Use policies to grant permissions to perform an operation in AWS. When you use an action in a policy, you usually allow or deny access to the API operation or CLI command with the same name. However, in some cases, a single action controls access to more than one operation. Alternatively, some operations require several different actions.
The **Access level** column of the Actions table describes how the action is classified (List, Read, Permissions management, or Tagging). This classification can help you understand the level of access that an action grants when you use it in a policy. For more information about access levels, see [Access levels in policy summaries](https://docs.aws.amazon.com/IAM/latest/UserGuide/access_policies_understand-policy-summary-access-level-summaries.html).
The **Resource types** column of the Actions table indicates whether each action supports resource-level permissions. If there is no value for this column, you must specify all resources ("\*") to which the policy applies in the `Resource` element of your policy statement. If the column includes a resource type, then you can specify an ARN of that type in a statement with that action. If the action has one or more required resources, the caller must have permission to use the action with those resources. Required resources are indicated in the table with an asterisk (\*). If you limit resource access with the `Resource` element in an IAM policy, you must include an ARN or pattern for each required resource type. Some actions support multiple resource types. If the resource type is optional (not indicated as required), then you can choose to use one of the optional resource types.
The **Condition keys** column of the Actions table includes keys that you can specify in a policy statement's `Condition` element. For more information on the condition keys that are associated with resources for the service, see the **Condition keys** column of the Resource types table.
The **Dependent actions** column of the Actions table shows additional permissions that may be required to successfully call an action. These permissions may be needed in addition to the permission for the action itself. When an action specifies dependent actions, those dependencies may apply to additional resources defined for that action, not only the first resource listed in the table.
**Note**
Resource condition keys are listed in the [Resource types](#amazonbedrock-resources-for-iam-policies) table. You can find a link to the resource type that applies to an action in the **Resource types (\*required)** column of the Actions table. The resource type in the Resource types table includes the **Condition keys** column, which are the resource condition keys that apply to an action in the Actions table.
For details about the columns in the following table, see [Actions table](reference_policies_actions-resources-contextkeys.html#actions_table).
****
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) [permission only]**
- **Description:** Grants permission to configure vended log delivery for a knowledge base
- **Access level:** Permissions management
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to apply a guardrail
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail-profile](#amazonbedrock-guardrail-profile) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_AssociateAgentCollaborator.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_AssociateAgentCollaborator.html) **
- **Description:** Grants permission to associate another existing agent as a collaborator to an existing agent
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_AssociateAgentKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_AssociateAgentKnowledgeBase.html) **
- **Description:** Grants permission to associate a knowledge base with an agent
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) [permission only]**
- **Description:** Grants permission to use 3rd party platform to store knowledge data
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-bedrock_ThirdPartyKnowledgeBaseCredentialsSecretArn](#amazonbedrock-bedrock_ThirdPartyKnowledgeBaseCredentialsSecretArn)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_BatchDeleteEvaluationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_BatchDeleteEvaluationJob.html) **
- **Description:** Grants permission to batch delete list of bedrock evaluation jobs
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-evaluation-job](#amazonbedrock-evaluation-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to use bearer token
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-bedrock_BearerTokenType](#amazonbedrock-bedrock_BearerTokenType)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to cancel a build workflow for an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html) **
- **Description:** Grants permission to copy a blueprint from one stage to another
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_CountTokens.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_CountTokens.html) **
- **Description:** Grants permission to count the number of tokens in an input prompt
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgent.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgent.html) **
- **Description:** Grants permission to create a new agent and a test agent alias pointing to the DRAFT agent version
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgentActionGroup.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgentActionGroup.html) **
- **Description:** Grants permission to create a new action group in an existing agent
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgentAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateAgentAlias.html) **
- **Description:** Grants permission to create a new alias for an agent
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to create a new automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to create a test case for an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to create a new automated reasoning policy version
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateBlueprint.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateBlueprint.html) **
- **Description:** Grants permission to create a blueprint for custom output from data automation
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateBlueprintVersion.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateBlueprintVersion.html) **
- **Description:** Grants permission to create a new version for an existing blueprint
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateCustomModel.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateCustomModel.html) **
- **Description:** Grants permission to create a custom model into Bedrock
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateCustomModelDeployment.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateCustomModelDeployment.html) **
- **Description:** Grants permission to create a custom model deployment for custom model
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateDataAutomationLibrary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateDataAutomationLibrary.html) **
- **Description:** Grants permission to create a Data Automation Library
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateDataAutomationProject.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_CreateDataAutomationProject.html) **
- **Description:** Grants permission to create a data automation project
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateDataSource.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateDataSource.html) **
- **Description:** Grants permission to create a data source
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateEvaluationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateEvaluationJob.html) **
- **Description:** Grants permission to create a job for evaluation foundation models or custom models
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-default-prompt-router](#amazonbedrock-default-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateFlow.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateFlow.html) **
- **Description:** Grants permission to create a prompt flow
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateFlowAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateFlowAlias.html) **
- **Description:** Grants permission to create an alias of a prompt flow
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateFlowVersion.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateFlowVersion.html) **
- **Description:** Grants permission to create an immutable version of a prompt flow
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to create a new foundation model agreement
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to create a new guardrail
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail-profile](#amazonbedrock-guardrail-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to create a new guardrail version
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateInferenceProfile.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateInferenceProfile.html) **
- **Description:** Grants permission to create inference profiles
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-inference-profile](#amazonbedrock-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_CreateInvocation.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_CreateInvocation.html) **
- **Description:** Grants permission to create a new invocation in an existing session
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreateKnowledgeBase.html) **
- **Description:** Grants permission to create a knowledge base
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [API_CreateMarketplaceModelEndpoint](API_CreateMarketplaceModelEndpoint) **
- **Description:** Grants permission to create a marketplace model endpoint
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelCopyJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelCopyJob.html) **
- **Description:** Grants permission to create a job for copying a custom model across region or across account
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelCustomizationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelCustomizationJob.html) **
- **Description:** Grants permission to create a job for customizing the model with your custom training data
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelEvaluationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelEvaluationJob.html) **
- **Description:** Grants permission to create a job for evaluation foundation models or custom models
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelImportJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelImportJob.html) **
- **Description:** Grants permission to create a job for importing model into Bedrock
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelInvocationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateModelInvocationJob.html) **
- **Description:** Grants permission to create a new model invocation job
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-invocation-job](#amazonbedrock-model-invocation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreatePrompt.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreatePrompt.html) **
- **Description:** Grants permission to create a prompt
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreatePromptRouter.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreatePromptRouter.html) **
- **Description:** Grants permission to create a custom prompt router
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-inference-profile](#amazonbedrock-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreatePromptVersion.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_CreatePromptVersion.html) **
- **Description:** Grants permission to create a version of a prompt
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateProvisionedModelThroughput.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_CreateProvisionedModelThroughput.html) **
- **Description:** Grants permission to create a new provisioned model throughput
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_CreateSession.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_CreateSession.html) **
- **Description:** Grants permission to create a new session
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgent.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgent.html) **
- **Description:** Grants permission to delete an Agent that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgentActionGroup.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgentActionGroup.html) **
- **Description:** Grants permission to delete an actionGroup that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgentAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgentAlias.html) **
- **Description:** Grants permission to delete an AgentAlias that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_DeleteAgentMemory.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_DeleteAgentMemory.html) **
- **Description:** Grants permission to delete existing memory for an alias
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgentVersion.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteAgentVersion.html) **
- **Description:** Grants permission to delete an Agent Version that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to delete an automated reasoning policy or its version
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to delete a build workflow for an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to delete a test case for an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_DeleteBlueprint.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_DeleteBlueprint.html) **
- **Description:** Grants permission to delete a blueprint for data automation
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteCustomModel.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteCustomModel.html) **
- **Description:** Grants permission to delete a custom model that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteCustomModelDeployment.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteCustomModelDeployment.html) **
- **Description:** Grants permission to delete a custom model deployment that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_DeleteDataAutomationLibrary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_DeleteDataAutomationLibrary.html) **
- **Description:** Grants permission to delete a Data Automation Library
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_DeleteDataAutomationProject.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_DeleteDataAutomationProject.html) **
- **Description:** Grants permission to delete a data automation project
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteDataSource.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteDataSource.html) **
- **Description:** Grants permission to delete a data source
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteEnforcedGuardrailConfiguration.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteEnforcedGuardrailConfiguration.html) **
- **Description:** Grants permission to delete account-level enforced guardrail configuration
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteFlow.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteFlow.html) **
- **Description:** Grants permission to delete a prompt flow
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteFlowAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteFlowAlias.html) **
- **Description:** Grants permission to delete an alias of a prompt flow
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteFlowVersion.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteFlowVersion.html) **
- **Description:** Grants permission to delete a version of a prompt flow
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to delete a foundation model agreement that you created earlier
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to delete a guardrail or its version
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteImportedModel.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteImportedModel.html) **
- **Description:** Grants permission to delete previously created Bedrock imported model
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-imported-model](#amazonbedrock-imported-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteInferenceProfile.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteInferenceProfile.html) **
- **Description:** Grants permission to delete inference profiles
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteKnowledgeBase.html) **
- **Description:** Grants permission to delete a knowledge base
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteKnowledgeBaseDocuments.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeleteKnowledgeBaseDocuments.html) **
- **Description:** Grants permission to delete documents from a knowledge base
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to unsubscribe from a bedrock marketplace enabled AWS marketplace model
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [API_DeleteMarketplaceModelEndpoint](API_DeleteMarketplaceModelEndpoint) **
- **Description:** Grants permission to delete a marketplace model endpoint
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-bedrock-marketplace-model-endpoint](#amazonbedrock-bedrock-marketplace-model-endpoint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteModelInvocationLoggingConfiguration.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteModelInvocationLoggingConfiguration.html) **
- **Description:** Grants permission to delete an existing Invocation logging configuration
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeletePrompt.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DeletePrompt.html) **
- **Description:** Grants permission to delete a prompt or its version
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-version](#amazonbedrock-prompt-version) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeletePromptRouter.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeletePromptRouter.html) **
- **Description:** Grants permission to delete a custom prompt router
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteProvisionedModelThroughput.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteProvisionedModelThroughput.html) **
- **Description:** Grants permission to delete a provisioned model throughput that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteResourcePolicy.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_DeleteResourcePolicy.html) [permission only]**
- **Description:** Deletes a previously created Bedrock resource policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail-profile](#amazonbedrock-guardrail-profile) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_DeleteSession.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_DeleteSession.html) **
- **Description:** Grants permission to delete a Session that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [API_DeregisterMarketplaceModelEndpoint](API_DeregisterMarketplaceModelEndpoint) **
- **Description:** Grants permission to deregister a marketplace model endpoint to make it unusable in Bedrock Marketplace
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-bedrock-marketplace-model-endpoint](#amazonbedrock-bedrock-marketplace-model-endpoint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to detect if the provided content is generated using Amazon Bedrock
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DisassociateAgentCollaborator.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DisassociateAgentCollaborator.html) **
- **Description:** Grants permission to diassociate a collaborator that you associated earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DisassociateAgentKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_DisassociateAgentKnowledgeBase.html) **
- **Description:** Grants permission to disassociate a knowledge base from the agent
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_EndSession.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_EndSession.html) **
- **Description:** Grants permission to end a Session that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve an automated reasoning policy version artifact
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to generate queries associated with user input
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgent.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgent.html) **
- **Description:** Grants permission to retrieve an existing agent
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentActionGroup.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentActionGroup.html) **
- **Description:** Grants permission to retrieve an existing action group
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentAlias.html) **
- **Description:** Grants permission to retrieve an existing alias
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentCollaborator.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentCollaborator.html) **
- **Description:** Grants permission to retrieve an existing collaborator
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentKnowledgeBase.html) **
- **Description:** Grants permission to describe a knowledge base associated with an agent
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetAgentMemory.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetAgentMemory.html) **
- **Description:** Grants permission to retrieve existing memory for an alias
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentVersion.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetAgentVersion.html) **
- **Description:** Grants permission to retrieve an existing version of an agent
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetAsyncInvoke.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetAsyncInvoke.html) **
- **Description:** Grants permission to get the properties associated with an asynchronous invocation that you have submitted
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-async-invoke](#amazonbedrock-async-invoke)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve an automated reasoning policy or its version
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve annotations for a build workflow for an automated reasoning policy
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve a build workflow for an automated reasoning policy
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve assets for a build workflow for an automated reasoning policy
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve the next unreviewed generated scenario for a build workflow for an automated reasoning policy
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve a test case for an automated reasoning policy
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve result for a test case for an automated reasoning policy
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetBlueprint.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetBlueprint.html) **
- **Description:** Grants permission to retrieve an existing blueprint for data automation
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html) **
- **Description:** Grants permission to get the status of a blueprint optimization job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-blueprint-optimization-invocation](#amazonbedrock-blueprint-optimization-invocation)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) [permission only]**
- **Description:** Grants permission to retrieve blueprint recommendation
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetCustomModel.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetCustomModel.html) **
- **Description:** Grants permission to get the properties associated with a Bedrock custom model that you have created
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetCustomModelDeployment.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetCustomModelDeployment.html) **
- **Description:** Grants permission to get the properties associated with a custom model deployment. Use this operation to get the status of a custom model deployment
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationLibrary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationLibrary.html) **
- **Description:** Grants permission to retrieve an existing Data Automation Library
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationLibraryEntity.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationLibraryEntity.html) **
- **Description:** Grants permission to get a Data Automation Library entity
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationLibraryIngestionJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationLibraryIngestionJob.html) **
- **Description:** Grants permission to get details about a Data Automation Library ingestion job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library-ingestion-job](#amazonbedrock-data-automation-library-ingestion-job) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationProject.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_GetDataAutomationProject.html) **
- **Description:** Grants permission to retrieve an existing data automation project
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_GetDataAutomationStatus.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_GetDataAutomationStatus.html) **
- **Description:** Grants permission to retrieve the status of a data automation invocation job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-data-automation-invocation-job](#amazonbedrock-data-automation-invocation-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetDataSource.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetDataSource.html) **
- **Description:** Grants permission to retrieve an existing data source
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetEvaluationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetEvaluationJob.html) **
- **Description:** Grants permission to get the properties associated with a evaluation job. Use this operation to get the status of a evaluation job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-evaluation-job](#amazonbedrock-evaluation-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetExecutionFlowSnapshot.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetExecutionFlowSnapshot.html) **
- **Description:** Grants permission to retrieve the flow definition for a flow execution
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-execution](#amazonbedrock-flow-execution) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlow.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlow.html) **
- **Description:** Grants permission to retrieve an existing prompt flow
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlowAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlowAlias.html) **
- **Description:** Grants permission to retrieve an existing alias of a prompt flow
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetFlowExecution.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetFlowExecution.html) **
- **Description:** Grants permission to retrieve an existing execution of a flow alias
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-execution](#amazonbedrock-flow-execution) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlowVersion.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetFlowVersion.html) **
- **Description:** Grants permission to retrieve an existing version of a prompt flow
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetFoundationModel.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetFoundationModel.html) **
- **Description:** Grants permission to get the properties associated with a Bedrock foundation model
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to get the availability of a foundation model
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve a guardrail or its version
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetImportedModel.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetImportedModel.html) **
- **Description:** Grants permission to get the properties associated with Bedrock imported model
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-imported-model](#amazonbedrock-imported-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetInferenceProfile.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetInferenceProfile.html) **
- **Description:** Grants permission to get the properties associated with an inference profile
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-inference-profile](#amazonbedrock-inference-profile) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetIngestionJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetIngestionJob.html) **
- **Description:** Grants permission to retrieve an existing ingestion job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetInvocationStep.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetInvocationStep.html) **
- **Description:** Grants permission to get an invocation step from a session
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetKnowledgeBase.html) **
- **Description:** Grants permission to retrieve an existing knowledge base
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetKnowledgeBaseDocuments.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetKnowledgeBaseDocuments.html) **
- **Description:** Grants permission to get details for documents in a knowledge base
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [API_GetMarketplaceModelEndpoint](API_GetMarketplaceModelEndpoint) **
- **Description:** Grants permission to get the properties of a marketplace model endpoint
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-bedrock-marketplace-model-endpoint](#amazonbedrock-bedrock-marketplace-model-endpoint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelCopyJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelCopyJob.html) **
- **Description:** Grants permission to get the properties associated with a model-copy job. Use this operation to get the status of a model-copy job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-model-copy-job](#amazonbedrock-model-copy-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelCustomizationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelCustomizationJob.html) **
- **Description:** Grants permission to get the properties associated with a model-customization job. Use this operation to get the status of a model-customization job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-model-customization-job](#amazonbedrock-model-customization-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelEvaluationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelEvaluationJob.html) **
- **Description:** Grants permission to get the properties associated with a model-evaluation job. Use this operation to get the status of a model-evaluation job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-model-evaluation-job](#amazonbedrock-model-evaluation-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelImportJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelImportJob.html) **
- **Description:** Grants permission to get the properties associated with a model import job and is used to get the status of a model import job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-model-import-job](#amazonbedrock-model-import-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelInvocationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelInvocationJob.html) **
- **Description:** Grants permission to retrieve a model invocation job
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-model-invocation-job](#amazonbedrock-model-invocation-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelInvocationLoggingConfiguration.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetModelInvocationLoggingConfiguration.html) **
- **Description:** Grants permission to retrieve an existing Invocation logging configuration
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetPrompt.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_GetPrompt.html) **
- **Description:** Grants permission to retrieve an existing prompt or its version
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-version](#amazonbedrock-prompt-version) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetPromptRouter.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetPromptRouter.html) **
- **Description:** Grants permission to get the properties associated with a prompt router
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-default-prompt-router](#amazonbedrock-default-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetProvisionedModelThroughput.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetProvisionedModelThroughput.html) **
- **Description:** Grants permission to retrieve a provisioned model throughput
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetResourePolicy.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_GetResourePolicy.html) [permission only]**
- **Description:** Gets the resource policy document for a Bedrock resource
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail-profile](#amazonbedrock-guardrail-profile) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetSession.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_GetSession.html) **
- **Description:** Grants permission to retrieve an existing session
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to retrieve a use case for model access
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_IngestKnowledgeBaseDocuments.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_IngestKnowledgeBaseDocuments.html) **
- **Description:** Grants permission to directly ingest documents into a knowledge base
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeAgent.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeAgent.html) **
- **Description:** Grants permission to send user input (text-only) to the alias of an agent for Bedrock
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) [permission only]**
- **Description:** Grants permission to invoke an Automated Reasoning policy
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html) **
- **Description:** Grants permission to invoke an async job to perform blueprint optimization
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-profile](#amazonbedrock-data-automation-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) [permission only]**
- **Description:** Grants permission to invoke blueprint recommendations asynchronously
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-data-automation-profile](#amazonbedrock-data-automation-profile)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/userguide/agents-create-cb.html](https://docs.aws.amazon.com/bedrock/latest/userguide/agents-create-cb.html) [permission only]**
- **Description:** Grants permission to use the conversational builder which aids in building supported bedrock resources
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_InvokeDataAutomation.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_InvokeDataAutomation.html) **
- **Description:** Grants permission to invoke a call to Sync API of Bedrock data automation
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-profile](#amazonbedrock-data-automation-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_InvokeDataAutomationAsync.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation-runtime_InvokeDataAutomationAsync.html) **
- **Description:** Grants permission to invoke a Bedrock data automation job
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-profile](#amazonbedrock-data-automation-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_InvokeDataAutomationLibraryIngestionJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_InvokeDataAutomationLibraryIngestionJob.html) **
- **Description:** Grants permission to invoke a Data Automation Library ingestion job
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeFlow.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeFlow.html) **
- **Description:** Grants permission to invoke a prompt flow with user input
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeInlineAgent.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_InvokeInlineAgent.html) **
- **Description:** Grants permission to send user input (text-only) to the inline agent for Bedrock
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:** [#amazonbedrock-bedrock_InlineAgentName](#amazonbedrock-bedrock_InlineAgentName)
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModel.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModel.html) **
- **Description:** Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-async-invoke](#amazonbedrock-async-invoke) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-bedrock-marketplace-model-endpoint](#amazonbedrock-bedrock-marketplace-model-endpoint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-default-prompt-router](#amazonbedrock-default-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-imported-model](#amazonbedrock-imported-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-inference-profile](#amazonbedrock-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-system-tool](#amazonbedrock-system-tool) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-bedrock_InferenceProfileArn](#amazonbedrock-bedrock_InferenceProfileArn)
[#amazonbedrock-bedrock_PromptRouterArn](#amazonbedrock-bedrock_PromptRouterArn)
[#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
[#amazonbedrock-bedrock_GuardrailIdentifier](#amazonbedrock-bedrock_GuardrailIdentifier)
[#amazonbedrock-bedrock_ServiceTier](#amazonbedrock-bedrock_ServiceTier) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModelWithResponseStream.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModelWithResponseStream.html) **
- **Description:** Grants permission to invoke the specified Bedrock model to run inference using the input provided in the request body with streaming response
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-bedrock-marketplace-model-endpoint](#amazonbedrock-bedrock-marketplace-model-endpoint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-default-prompt-router](#amazonbedrock-default-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-imported-model](#amazonbedrock-imported-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-inference-profile](#amazonbedrock-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-system-tool](#amazonbedrock-system-tool) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-bedrock_InferenceProfileArn](#amazonbedrock-bedrock_InferenceProfileArn)
[#amazonbedrock-bedrock_PromptRouterArn](#amazonbedrock-bedrock_PromptRouterArn)
[#amazonbedrock-bedrock_GuardrailIdentifier](#amazonbedrock-bedrock_GuardrailIdentifier)
[#amazonbedrock-bedrock_ServiceTier](#amazonbedrock-bedrock_ServiceTier) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeTool.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeTool.html) **
- **Description:** Grants permission to invoke the specified Bedrock tool to run inference
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-system-tool](#amazonbedrock-system-tool)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentActionGroups.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentActionGroups.html) **
- **Description:** Grants permission to list action groups in an agent
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentAliases.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentAliases.html) **
- **Description:** Grants permission to list aliases for an agent
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentCollaborators.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentCollaborators.html) **
- **Description:** Grants permission to list collaborators for an agent
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentKnowledgeBases.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentKnowledgeBases.html) **
- **Description:** Grants permission to list knowledge bases associated with an agent
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentVersions.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgentVersions.html) **
- **Description:** Grants permission to list existing versions of an agent
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgents.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListAgents.html) **
- **Description:** Grants permission to list existing agents
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListAsyncInvokes.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListAsyncInvokes.html) **
- **Description:** Grants permission to get a list of asynchronous invocations that you have submitted
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to list automated reasoning policies or its versions
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to list build workflows for an automated reasoning policy
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to list test cases for an automated reasoning policy
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to list test result for an automated reasoning policy
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListBlueprints.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListBlueprints.html) **
- **Description:** Grants permission to list existing blueprints for data automation
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListCustomModelDeployments.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListCustomModelDeployments.html) **
- **Description:** Grants permission to get the list of custom model deployments that you have submitted
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListCustomModels.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListCustomModels.html) **
- **Description:** Grants permission to get a list of Bedrock custom models that you have created
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationLibraries.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationLibraries.html) **
- **Description:** Grants permission to list Data Automation Libraries
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationLibraryEntities.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationLibraryEntities.html) **
- **Description:** Grants permission to list Data Automation Library entities
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationLibraryIngestionJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationLibraryIngestionJobs.html) **
- **Description:** Grants permission to list Data Automation Library ingestion jobs
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationProjects.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_ListDataAutomationProjects.html) **
- **Description:** Grants permission to list existing data automation projects
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListDataSources.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListDataSources.html) **
- **Description:** Grants permission to list existing data sources in an knowledge base
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListEnforcedGuardrailsConfiguration.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListEnforcedGuardrailsConfiguration.html) **
- **Description:** Grants permission to list account-level enforced guardrail configurations
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListEvaluationJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListEvaluationJobs.html) **
- **Description:** Grants permission to get the list of evaluation jobs that you have submitted
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListFlowAliases.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListFlowAliases.html) **
- **Description:** Grants permission to list existing aliases of a prompt flow
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListFlowExecutionEvents.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListFlowExecutionEvents.html) **
- **Description:** Grants permission to retrieve events for a flow execution
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-execution](#amazonbedrock-flow-execution) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListFlowExecutions.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListFlowExecutions.html) **
- **Description:** Grants permission to list executions of a flow or a flow alias
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListFlowVersions.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListFlowVersions.html) **
- **Description:** Grants permission to list existing versions of a prompt flow
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListFlows.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListFlows.html) **
- **Description:** Grants permission to list existing prompt flows
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to get a list of foundation model agreement offers
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListFoundationModels.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListFoundationModels.html) **
- **Description:** Grants permission to list Bedrock foundation models that you can use
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to list guardrails or its versions
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListImportedModels.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListImportedModels.html) **
- **Description:** Grants permission to get list of Bedrock imported models
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListInferenceProfiles.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListInferenceProfiles.html) **
- **Description:** Grants permission to list inference profiles that you can use
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListIngestionJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListIngestionJobs.html) **
- **Description:** Grants permission to list ingestion jobs in a data source
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListInvocationSteps.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListInvocationSteps.html) **
- **Description:** Grants permission to get list of invocation step from a session
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListInvocations.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListInvocations.html) **
- **Description:** Grants permission to list invocations in a session
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListKnowledgeBaseDocuments.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListKnowledgeBaseDocuments.html) **
- **Description:** Grants permission to list documents in a knowledge base
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListKnowledgeBases.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListKnowledgeBases.html) **
- **Description:** Grants permission to list existing knowledge bases
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [API_ListMarketplaceModelEndpoints](API_ListMarketplaceModelEndpoints) **
- **Description:** Grants permission to list marketplace model endpoints that you can use
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelCopyJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelCopyJobs.html) **
- **Description:** Grants permission to get the list of model copy jobs that you have submitted
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelCustomizationJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelCustomizationJobs.html) **
- **Description:** Grants permission to get the list of model customization jobs that you have submitted
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelEvaluationJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelEvaluationJobs.html) **
- **Description:** Grants permission to get the list of model evaluation jobs that you have submitted
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelImportJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelImportJobs.html) **
- **Description:** Grants permission to get list of model import jobs
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelInvocationJobs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListModelInvocationJobs.html) **
- **Description:** Grants permission to list model invocation jobs that you created earlier
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListPromptRouters.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListPromptRouters.html) **
- **Description:** Grants permission to list prompt routers that you can use
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListPrompts.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ListPrompts.html) **
- **Description:** Grants permission to list existing prompts
- **Access level:** List
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListProvisionedModelThroughputs.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListProvisionedModelThroughputs.html) **
- **Description:** Grants permission to list provisioned model throughputs that you created earlier
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListSessions.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_ListSessions.html) **
- **Description:** Grants permission to list existing sessions
- **Access level:** List
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListTagsForResource.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_ListTagsForResource.html) **
- **Description:** Grants permission to list tags for a Bedrock resource
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-async-invoke](#amazonbedrock-async-invoke) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-blueprint-optimization-invocation](#amazonbedrock-blueprint-optimization-invocation) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-invocation-job](#amazonbedrock-data-automation-invocation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library-ingestion-job](#amazonbedrock-data-automation-library-ingestion-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-evaluation-job](#amazonbedrock-evaluation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-imported-model](#amazonbedrock-imported-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-copy-job](#amazonbedrock-model-copy-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-customization-job](#amazonbedrock-model-customization-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-evaluation-job](#amazonbedrock-model-evaluation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-import-job](#amazonbedrock-model-import-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-invocation-job](#amazonbedrock-model-invocation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-version](#amazonbedrock-prompt-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_OptimizePrompt.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_OptimizePrompt.html) **
- **Description:** Grants permission to optimize a prompt with user input
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PrepareAgent.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PrepareAgent.html) **
- **Description:** Grants permission to prepare an existing agent to receive runtime requests
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PrepareFlow.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PrepareFlow.html) **
- **Description:** Grants permission to apply the latest changes made to a prompt flow, so that they are reflected at runtime
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutEnforcedGuardrailConfiguration.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutEnforcedGuardrailConfiguration.html) **
- **Description:** Grants permission to set account-level enforced guardrail configuration
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to put entitlement to access a serverless foundation model. Do not use to restrict model access
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_PutInvocationStep.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_PutInvocationStep.html) **
- **Description:** Grants permission to put an invocation step into an invocation in session
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutModelInvocationLoggingConfiguration.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutModelInvocationLoggingConfiguration.html) **
- **Description:** Grants permission to create an existing Invocation logging configuration
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutResourcePolicy.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_PutResourcePolicy.html) [permission only]**
- **Description:** Adds a resource policy for a Bedrock resource
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail-profile](#amazonbedrock-guardrail-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_)
[#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html) **
- **Description:** Grants permission to put a use case for model access
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [API_RegisterMarketplaceModelEndpoint](API_RegisterMarketplaceModelEndpoint) **
- **Description:** Grants permission to register a sagemaker endpoint as a marketplace model endpoint
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-bedrock-marketplace-model-endpoint](#amazonbedrock-bedrock-marketplace-model-endpoint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) [permission only]**
- **Description:** Grants permission to render an existing prompt or its version
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-version](#amazonbedrock-prompt-version) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to rank documents based on user input
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to retrieve ingested data from a knowledge base
- **Access level:** Read
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to send user input to perform retrieval and generation
- **Access level:** Write
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to start a build workflow for an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to start a test workflow for an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_StartFlowExecution.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_StartFlowExecution.html) **
- **Description:** Grants permission to start an execution of a flow alias
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_StartIngestionJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_StartIngestionJob.html) **
- **Description:** Grants permission to start an ingestion job
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopEvaluationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopEvaluationJob.html) **
- **Description:** Grants permission to stop a evaluation job while in progress
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-evaluation-job](#amazonbedrock-evaluation-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_StopFlowExecution.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_StopFlowExecution.html) **
- **Description:** Grants permission to stop an execution of a flow alias
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-execution](#amazonbedrock-flow-execution) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_StopIngestionJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_StopIngestionJob.html) **
- **Description:** Grants permission to stop an ingestion job
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopModelCustomizationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopModelCustomizationJob.html) **
- **Description:** Grants permission to stop a Bedrock model customization job while in progress
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-model-customization-job](#amazonbedrock-model-customization-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopModelInvocationJob.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_StopModelInvocationJob.html) **
- **Description:** Grants permission to stop a model invocation job that you started earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-model-invocation-job](#amazonbedrock-model-invocation-job)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_TagResource.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_TagResource.html) **
- **Description:** Grants permission to Tag a Bedrock resource
- **Access level:** Tagging
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-async-invoke](#amazonbedrock-async-invoke) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-blueprint-optimization-invocation](#amazonbedrock-blueprint-optimization-invocation) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-invocation-job](#amazonbedrock-data-automation-invocation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library-ingestion-job](#amazonbedrock-data-automation-library-ingestion-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-evaluation-job](#amazonbedrock-evaluation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-imported-model](#amazonbedrock-imported-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-copy-job](#amazonbedrock-model-copy-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-customization-job](#amazonbedrock-model-customization-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-evaluation-job](#amazonbedrock-model-evaluation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-import-job](#amazonbedrock-model-import-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-invocation-job](#amazonbedrock-model-invocation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-version](#amazonbedrock-prompt-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys)
[#amazonbedrock-aws_RequestTag___TagKey_](#amazonbedrock-aws_RequestTag___TagKey_) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_UntagResource.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_UntagResource.html) **
- **Description:** Grants permission to Untag a Bedrock resource
- **Access level:** Tagging
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-application-inference-profile](#amazonbedrock-application-inference-profile) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-async-invoke](#amazonbedrock-async-invoke) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-blueprint-optimization-invocation](#amazonbedrock-blueprint-optimization-invocation) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-invocation-job](#amazonbedrock-data-automation-invocation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-library-ingestion-job](#amazonbedrock-data-automation-library-ingestion-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-evaluation-job](#amazonbedrock-evaluation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-imported-model](#amazonbedrock-imported-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-copy-job](#amazonbedrock-model-copy-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-customization-job](#amazonbedrock-model-customization-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-evaluation-job](#amazonbedrock-model-evaluation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-import-job](#amazonbedrock-model-import-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-model-invocation-job](#amazonbedrock-model-invocation-job) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-router](#amazonbedrock-prompt-router) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-prompt-version](#amazonbedrock-prompt-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** / **Condition keys:** [#amazonbedrock-aws_TagKeys](#amazonbedrock-aws_TagKeys) / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgent.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgent.html) **
- **Description:** Grants permission to update an existing agent
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentActionGroup.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentActionGroup.html) **
- **Description:** Grants permission to update an existing action group
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentAlias.html) **
- **Description:** Grants permission to update an existing alias
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent-alias](#amazonbedrock-agent-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentCollaborator.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentCollaborator.html) **
- **Description:** Grants permission to update an existing collaborator
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateAgentKnowledgeBase.html) **
- **Description:** Grants permission to update a knowledge base associated with an agent
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-agent](#amazonbedrock-agent) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to update an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to update annotations for a build workflow for an automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to update a test case for automated reasoning policy
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_UpdateBlueprint.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_UpdateBlueprint.html) **
- **Description:** Grants permission to update a blueprint for data automation
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_UpdateCustomModelDeployment.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_UpdateCustomModelDeployment.html) **
- **Description:** Grants permission to update an existing custom model deployment with a new custom model
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-custom-model-deployment](#amazonbedrock-custom-model-deployment) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_UpdateDataAutomationLibrary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_UpdateDataAutomationLibrary.html) **
- **Description:** Grants permission to update a Data Automation Library
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-data-automation-library](#amazonbedrock-data-automation-library)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_UpdateDataAutomationProject.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_data-automation_UpdateDataAutomationProject.html) **
- **Description:** Grants permission to update a data automation project
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-blueprint](#amazonbedrock-blueprint) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-data-automation-project](#amazonbedrock-data-automation-project) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateDataSource.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateDataSource.html) **
- **Description:** Grants permission to update a data source
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateFlow.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateFlow.html) **
- **Description:** Grants permission to update a prompt flow
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow](#amazonbedrock-flow)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateFlowAlias.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateFlowAlias.html) **
- **Description:** Grants permission to update the configuration of an alias of a prompt flow
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-flow-alias](#amazonbedrock-flow-alias)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) **
- **Description:** Grants permission to update a guardrail
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-guardrail](#amazonbedrock-guardrail) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy](#amazonbedrock-automated-reasoning-policy) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-automated-reasoning-policy-version](#amazonbedrock-automated-reasoning-policy-version) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-guardrail-profile](#amazonbedrock-guardrail-profile) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateKnowledgeBase.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdateKnowledgeBase.html) **
- **Description:** Grants permission to update a knowledge base
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-knowledge-base](#amazonbedrock-knowledge-base)
- **Condition keys:**
- **Dependent actions:**
- ** [API_UpdateMarketplaceModelEndpoint](API_UpdateMarketplaceModelEndpoint) **
- **Description:** Grants permission to update a marketplace model endpoint
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-bedrock-marketplace-model-endpoint](#amazonbedrock-bedrock-marketplace-model-endpoint)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdatePrompt.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_UpdatePrompt.html) **
- **Description:** Grants permission to update a prompt
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-prompt](#amazonbedrock-prompt)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_UpdateProvisionedModelThroughput.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_UpdateProvisionedModelThroughput.html) **
- **Description:** Grants permission to update a provisioned model throughput that you created earlier
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-custom-model](#amazonbedrock-custom-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-foundation-model](#amazonbedrock-foundation-model) / **Condition keys:** / **Dependent actions:**
- **Resource types (\*required):** [#amazonbedrock-provisioned-model](#amazonbedrock-provisioned-model) / **Condition keys:** / **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_UpdateSession.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_UpdateSession.html) **
- **Description:** Grants permission to update an existing session
- **Access level:** Write
- **Resource types (\*required):** [#amazonbedrock-session](#amazonbedrock-session)
- **Condition keys:**
- **Dependent actions:**
- ** [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ValidateFlowDefinition.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_ValidateFlowDefinition.html) **
- **Description:** Grants permission to validate prompt flow definitions
- **Access level:** Read
- **Resource types (\*required):**
- **Condition keys:**
- **Dependent actions:**
## Resource types defined by Amazon Bedrock
The following resource types are defined by this service and can be used in the `Resource` element of IAM permission policy statements. Each action in the [Actions table](#amazonbedrock-actions-as-permissions) identifies the resource types that can be specified with that action. A resource type can also define which condition keys you can include in a policy. These keys are displayed in the last column of the Resource types table. For details about the columns in the following table, see [Resource types table](reference_policies_actions-resources-contextkeys.html#resources_table).
****
| Resource types | ARN | Condition keys |
| --- | --- | --- |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}::foundation-model/${ResourceId} | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock::${Account}:system-tool/${ResourceId} | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:async-invoke/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:inference-profile/${ResourceId} | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:default-prompt-router/${ResourceId} | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:prompt-router/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:application-inference-profile/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:custom-model/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:provisioned-model/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:model-customization-job/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:agent/${AgentId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:agent-alias/${AgentId}/${AgentAliasId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:knowledge-base/${KnowledgeBaseId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:model-evaluation-job/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:evaluation-job/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:model-invocation-job/${JobIdentifier} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:guardrail/${GuardrailId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/userguide/guardrail-profiles-permissions.html](https://docs.aws.amazon.com/bedrock/latest/userguide/guardrail-profiles-permissions.html) | arn:${Partition}:bedrock:${Region}:${Account}:guardrail-profile/${ResourceId} | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/${AutomatedReasoningPolicyId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:automated-reasoning-policy/${AutomatedReasoningPolicyId}:${AutomatedReasoningPolicyVersion} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_FlowSummary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_FlowSummary.html) | arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_FlowAliasSummary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_FlowAliasSummary.html) | arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_FlowExecutionSummary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent-runtime_FlowExecutionSummary.html) | arn:${Partition}:bedrock:${Region}:${Account}:flow/${FlowId}/alias/${FlowAliasId}/execution/${FlowExecutionId} | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:model-copy-job/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PromptSummary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PromptSummary.html) | arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PromptSummary.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_agent_PromptSummary.html) | arn:${Partition}:bedrock:${Region}:${Account}:prompt/${PromptId}:${PromptVersion} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:model-import-job/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:imported-model/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:marketplace/model-endpoint/all-access | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:data-automation-project/${ProjectId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:blueprint/${BlueprintId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_Operations_Data_Automation_for_Amazon_Bedrock.html) | arn:${Partition}:bedrock:${Region}:${Account}:blueprint-optimization-invocation/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:data-automation-invocation/${JobId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:data-automation-profile/${ProfileId} | |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library/${DataAutomationLibraryId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:data-automation-library-ingestion-job/${IngestionJobId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:session/${SessionId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
| [https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html](https://docs.aws.amazon.com/bedrock/latest/APIReference/welcome.html) | arn:${Partition}:bedrock:${Region}:${Account}:custom-model-deployment/${ResourceId} | [#amazonbedrock-aws_ResourceTag___TagKey_](#amazonbedrock-aws_ResourceTag___TagKey_) |
## Condition keys for Amazon Bedrock
Amazon Bedrock defines the following condition keys that can be used in the `Condition` element of an IAM policy. You can use these keys to further refine the conditions under which the policy statement applies. For details about the columns in the following table, see [Condition keys table](reference_policies_actions-resources-contextkeys.html#context_keys_table).
To view the global condition keys that are available to all services, see [AWS global condition context keys](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html).
****
| Condition keys | Description | Type |
| --- | --- | --- |
| [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available) | Filters access by creating requests based on the allowed set of values for each of the mandatory tags | String |
| [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available) | Filters access by having actions based on the tag value associated with the resource | String |
| [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available) | Filters access by creating requests based on the presence of mandatory tags in the request | ArrayOfString |
| [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys) | Filters access by the Short-term or Long-term bearer tokens | String |
| [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys) | Filters access by the GuardrailIdentifier containing the GuardrailArn or the GuardrailArn:NumericVersion | ARN |
| [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available) | Filters access by the specified inference profile | ARN |
| [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys) | Filters access by the Inline Agent Names, this will be used in InvokeInlineAgent API names | String |
| [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available) | Filters access by the specified prompt router | ARN |
| [https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys](https://docs.aws.amazon.com/service-authorization/latest/reference/list_amazonbedrock.html#amazonbedrock-policy-keys) | Filters access by the specified ServiceTier | String |
| [https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available](https://docs.aws.amazon.com/IAM/latest/UserGuide/reference_policies_condition-keys.html#condition-keys-globally-available) | Filters access by the secretArn containing the credentials of the third party platform | ARN |