From 35d7594f96464872d20fdbf09d6533d8eee47850 Mon Sep 17 00:00:00 2001
From: nalbam <me@nalbam.com>
Date: Wed, 14 Aug 2024 12:43:18 +0900
Subject: [PATCH] feat: Update serverless.yml with new Bedrock permissions

---
 serverless.yml | 11 ++++++++---
 1 file changed, 8 insertions(+), 3 deletions(-)

diff --git a/serverless.yml b/serverless.yml
index a91047d..14af61a 100644
--- a/serverless.yml
+++ b/serverless.yml
@@ -13,13 +13,18 @@ provider:
       Action:
         - dynamodb:*
       Resource:
-        - "arn:aws:dynamodb:*:*:table/${self:provider.environment.DYNAMODB_TABLE_NAME}"
+        - "arn:aws:dynamodb:::table/${self:provider.environment.DYNAMODB_TABLE_NAME}"
     - Effect: Allow
       Action:
         - bedrock:InvokeModel
       Resource:
-        - "arn:aws:bedrock:*::foundation-model/anthropic.claude-*"
-        - "arn:aws:bedrock:*::foundation-model/stability.stable-diffusion-*"
+        - "arn:aws:bedrock:::foundation-model/anthropic.claude-*"
+        - "arn:aws:bedrock:::foundation-model/stability.stable-diffusion-*"
+    - Effect: Allow
+      Action:
+        - bedrock:Retrieve
+      Resource:
+        - "arn:aws:bedrock:::knowledge-base/*"
 
 functions:
   mention: