Managing grants - Amazon Bedrock
Editing grant namesDeactivating grantsDeleting grantsAPI

Managing grants

After creating grants, you may need to modify, deactivate, or delete them based on changing organizational needs.

Editing grant names

Console

You can change the name of a grant to add more detail or improve organization.

To edit a grant name

  1. Open the AWS License Manager console at https://console.aws.amazon.com/license-manager/.

  2. In the navigation pane, choose Granted Licenses.

  3. Choose the license that contains the grant you want to edit.

  4. In the Grants section, choose the radio button next to the grant.

  5. Choose Edit.

  6. Update the Grant name field.

  7. Choose Save changes.

Deactivating grants

You may want to temporarily revoke access to a third-party Bedrock model without permanently deleting the grant. Deactivating a grant moves it to a Disabled state.

Console

To deactivate a grant

  1. Open the AWS License Manager console at https://console.aws.amazon.com/license-manager/.

  2. In the navigation pane, choose Granted Licenses.

  3. Choose the license that contains the grant you want to deactivate.

  4. In the Grants section, choose the grant name.

  5. Choose Deactivate.

  6. Type "deactivate" in the confirmation box.

  7. Choose Deactivate.

Important

Deactivating a grant does not impact any active workloads or model invocations that are currently running. However, new requests to invoke the model will be denied after deactivation.

Deleting grants

If you want to permanently revoke access to a third-party Bedrock model, you can delete the grant. This action is terminal and cannot be undone.

To delete a grant

  1. Open the AWS License Manager console at https://console.aws.amazon.com/license-manager/.

  2. In the navigation pane, choose Granted Licenses.

  3. Choose the license that contains the grant you want to delete.

  4. In the Grants section, choose the grant name.

  5. Choose Delete.

  6. Type "delete" in the confirmation box.

  7. Choose Delete.

Once deleted, the recipient account will no longer be able to activate new instances or invoke the third-party Bedrock model using that grant. Active model invocations will continue to run until completion.

Note

If you delete a grant in error, you can create a new grant to the same account. The new grant will be independent of the deleted grant.

API

You can deactivate grants using the CreateGrantVersion API with status set to DISABLED, and delete grants using the DeleteGrant API.