Policy: AmazonBedrockReadOnly ARN: arn:aws:iam::aws:policy/AmazonBedrockReadOnly Allowed Actions Actions Services bedrock:Get* bedrock bedrock:List* bedrock sagemaker:DescribeEndpoint sagemaker sagemaker:DescribeEndpointConfig sagemaker sagemaker:DescribeHubContent sagemaker sagemaker:DescribeInferenceComponent sagemaker sagemaker:DescribeModel sagemaker sagemaker:ListEndpoints sagemaker sagemaker:ListHubContents sagemaker sagemaker:ListTags sagemaker