Policy: AmazonBedrockStudioPermissionsBoundary ARN: arn:aws:iam::aws:policy/AmazonBedrockStudioPermissionsBoundary Allowed Actions Actions Services aoss:APIAccessAll aoss bedrock:ApplyGuardrail bedrock bedrock:CreatePrompt bedrock bedrock:CreatePromptVersion bedrock bedrock:DeletePrompt bedrock bedrock:GetIngestionJob bedrock bedrock:GetPrompt bedrock bedrock:InvokeAgent bedrock bedrock:InvokeFlow bedrock bedrock:InvokeModel bedrock bedrock:InvokeModelWithResponseStream bedrock bedrock:ListIngestionJobs bedrock bedrock:ListPrompts bedrock bedrock:ListTagsForResource bedrock bedrock:Retrieve bedrock bedrock:RetrieveAndGenerate bedrock bedrock:StartIngestionJob bedrock bedrock:TagResource bedrock bedrock:UntagResource bedrock kms:Decrypt kms kms:Decrypt kms kms:GenerateDataKey kms kms:GenerateDataKey kms lambda:InvokeFunction lambda logs:CreateLogGroup logs logs:CreateLogStream logs logs:PutLogEvents logs s3:DeleteObject s3 s3:DeleteObjectVersion s3 s3:GetObject s3 s3:GetObjectVersion s3 s3:ListBucket s3 s3:ListBucketVersions s3 s3:PutObject s3 secretsmanager:DescribeSecret secretsmanager secretsmanager:GetSecretValue secretsmanager secretsmanager:PutSecretValue secretsmanager