update scp to as-deployed in lab

terraform · Mar 3, 2026 · be63231 · be63231
1 parent ff769e2
commit be63231
Showing 1 changed file with 15 additions and 5 deletions.
diff --git a/aws/documentation/services/bedrock/scp.md b/aws/documentation/services/bedrock/scp.md
@@ -53,13 +53,21 @@ This policy denies all Bedrock model invocations *unless* the resource matches y
         "bedrock:Converse"
       ],
       "NotResource": [
-        "arn:*:bedrock:*::foundation-model/meta.llama3-8b*",
-        "arn:*:bedrock:*::foundation-model/meta.llama3-70b*",
-        "arn:*:bedrock:*::foundation-model/anthropic.claude-4-5-sonnet*",
-        "arn:*:bedrock:*::foundation-model/anthropic.claude-3-haiku*",
+# foundation models
+        "arn:*:bedrock:*::foundation-model/amazon.titan*",
+        "arn:*:bedrock:*::foundation-model/anthropic.claude-sonnet-4-5-*",
         "arn:*:bedrock:*::foundation-model/anthropic.claude-3-7-sonnet*",
         "arn:*:bedrock:*::foundation-model/anthropic.claude-3-5-sonnet*",
-        "arn:*:bedrock:*::foundation-model/amazon.titan*"
+        "arn:*:bedrock:*::foundation-model/anthropic.claude-3-haiku*",
+        "arn:*:bedrock:*::foundation-model/meta.llama3-8b*",
+        "arn:*:bedrock:*::foundation-model/meta.llama3-70b*",
+# inference profiles
+        "arn:*:bedrock:*:*:inference-profile/*claude-3-5-sonnet-20240620*",
+        "arn:*:bedrock:*:*:inference-profile/*claude-3-7-sonnet*",
+        "arn:*:bedrock:*:*:inference-profile/*claude-sonnet-4-5-*",
+        "arn:*:bedrock:*:*:inference-profile/*claude-3-haiku*",
+# application inference profiles
+        "arn:*:bedrock:*:*:application-inference-profile/*"
       ]
     }
   ]
@@ -107,3 +115,5 @@ GovCloud handles Bedrock slightly differently than Commercial regions:
   - develop guide and document
 * 1.0.1 -- 2026-01-09
   - update SCP to one that partially works (from lab testing)
+* 1.0.2 -- 2026-03-03
+  - update SCP to as-deployed in lab