Update Bedrock permissions in serverless.yml

awskrug · Aug 14, 2024 · 46935fa · 46935fa
1 parent feb8515
commit 46935fa
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/serverless.yml b/serverless.yml
@@ -13,18 +13,18 @@ provider:
       Action:
         - dynamodb:*
       Resource:
-        - "arn:aws:dynamodb:us-east-1:*:table/${self:provider.environment.DYNAMODB_TABLE_NAME}"
+        - "arn:aws:dynamodb:*:*:table/${self:provider.environment.DYNAMODB_TABLE_NAME}"
     - Effect: Allow
       Action:
         - bedrock:Retrieve
       Resource:
-        - "arn:aws:bedrock:us-east-1:*:knowledge-base/*"
+        - "arn:aws:bedrock:*:*:knowledge-base/*"
     - Effect: Allow
       Action:
         - bedrock:InvokeModel
       Resource:
-        - "arn:aws:bedrock:::foundation-model/anthropic.claude-*"
-        - "arn:aws:bedrock:::foundation-model/stability.stable-diffusion-*"
+        - "arn:aws:bedrock:*::foundation-model/anthropic.claude-*"
+        - "arn:aws:bedrock:*::foundation-model/stability.stable-diffusion-*"
 
 functions:
   mention: