feat: Update serverless.yml with new Bedrock permissions

awskrug · Aug 14, 2024 · 35d7594 · 35d7594
1 parent 89e88e4
commit 35d7594
Showing 1 changed file with 8 additions and 3 deletions.
diff --git a/serverless.yml b/serverless.yml
@@ -13,13 +13,18 @@ provider:
       Action:
         - dynamodb:*
       Resource:
-        - "arn:aws:dynamodb:*:*:table/${self:provider.environment.DYNAMODB_TABLE_NAME}"
+        - "arn:aws:dynamodb:::table/${self:provider.environment.DYNAMODB_TABLE_NAME}"
     - Effect: Allow
       Action:
         - bedrock:InvokeModel
       Resource:
-        - "arn:aws:bedrock:*::foundation-model/anthropic.claude-*"
-        - "arn:aws:bedrock:*::foundation-model/stability.stable-diffusion-*"
+        - "arn:aws:bedrock:::foundation-model/anthropic.claude-*"
+        - "arn:aws:bedrock:::foundation-model/stability.stable-diffusion-*"
+    - Effect: Allow
+      Action:
+        - bedrock:Retrieve
+      Resource:
+        - "arn:aws:bedrock:::knowledge-base/*"
 
 functions:
   mention: