AmazonDataZoneBedrockModelConsumptionPolicy - AWS 托管策略

本文属于机器翻译版本。若本译文内容与英语原文存在差异,则一律以英文原文为准。

AmazonDataZoneBedrockModelConsumptionPolicy

描述:提供使用 Amazon Bedrock 模型的权限,包括调用为特定亚马逊域名创建的 Amazon Bedrock 应用程序推理配置文件。 DataZone

AmazonDataZoneBedrockModelConsumptionPolicy 是一项 AWS 托管式策略

使用此策略

您可以将 AmazonDataZoneBedrockModelConsumptionPolicy 附加到您的用户、组和角色。

策略详细信息

  • 类型:服务角色策略

  • 创建时间:世界标准时间 2024 年 11 月 12 日 22:15

  • 编辑时间:世界标准时间 2025 年 5 月 28 日 18:52

  • ARN: arn:aws:iam::aws:policy/service-role/AmazonDataZoneBedrockModelConsumptionPolicy

策略版本

策略版本:v3(默认)

此策略的默认版本是定义策略权限的版本。当使用该策略的用户或角色请求访问 AWS 资源时, AWS 会检查策略的默认版本以确定是否允许该请求。

JSON 策略文档

{ "Version" : "2012-10-17", "Statement" : [ { "Sid" : "InvokeDomainInferenceProfiles", "Effect" : "Allow", "Action" : [ "bedrock:InvokeModel", "bedrock:InvokeModelWithResponseStream" ], "Resource" : "arn:aws:bedrock:*:*:application-inference-profile/*", "Condition" : { "StringEquals" : { "aws:ResourceTag/AmazonDataZoneDomain" : "${datazone:domainId}", "aws:ResourceAccount" : "${aws:PrincipalAccount}" }, "Null" : { "aws:ResourceTag/AmazonDataZoneProject" : "true" } } }, { "Sid" : "ListFoundationModels", "Effect" : "Allow", "Action" : [ "bedrock:ListFoundationModels" ], "Resource" : "*" }, { "Sid" : "BedrockCreateSessionWithTagsPermissions", "Effect" : "Allow", "Action" : [ "bedrock:CreateSession", "bedrock:TagResource" ], "Resource" : "arn:aws:bedrock:*:*:session/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "aws:RequestTag/AmazonDataZoneUser" : "${datazone:userId}", "aws:ResourceTag/AmazonDataZoneUser" : "${datazone:userId}", "aws:RequestTag/AmazonDataZoneDomain" : "${datazone:domainId}", "aws:ResourceTag/AmazonDataZoneDomain" : "${datazone:domainId}" }, "StringNotEquals" : { "aws:RequestTag/AmazonDataZoneUser" : "", "aws:ResourceTag/AmazonDataZoneUser" : "", "aws:RequestTag/AmazonDataZoneDomain" : "", "aws:ResourceTag/AmazonDataZoneDomain" : "" }, "ForAllValues:StringLike" : { "aws:TagKeys" : "AmazonDataZone*" }, "Null" : { "aws:RequestTag/AmazonDataZoneProject" : "true", "aws:ResourceTag/AmazonDataZoneProject" : "true" } } }, { "Sid" : "BedrockSessionPermissions", "Effect" : "Allow", "Action" : [ "bedrock:GetSession", "bedrock:UpdateSession", "bedrock:DeleteSession", "bedrock:EndSession", "bedrock:CreateInvocation", "bedrock:ListInvocations", "bedrock:PutInvocationStep", "bedrock:GetInvocationStep", "bedrock:ListInvocationSteps", "bedrock:ListTagsForResource" ], "Resource" : "arn:aws:bedrock:*:*:session/*", "Condition" : { "StringEquals" : { "aws:ResourceAccount" : "${aws:PrincipalAccount}", "aws:ResourceTag/AmazonDataZoneUser" : "${datazone:userId}", "aws:ResourceTag/AmazonDataZoneDomain" : "${datazone:domainId}" }, "StringNotEquals" : { "aws:ResourceTag/AmazonDataZoneUser" : "", "aws:ResourceTag/AmazonDataZoneDomain" : "" }, "Null" : { "aws:ResourceTag/AmazonDataZoneProject" : "true" } } }, { "Sid" : "BedrockListSessionsPermissions", "Effect" : "Allow", "Action" : "bedrock:ListSessions", "Resource" : "*" } ] }

了解更多信息