Policy: SageMakerStudioBedrockAgentServiceRolePolicy ARN: arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockAgentServiceRolePolicy Allowed Actions Actions Services bedrock:ApplyGuardrail bedrock bedrock:GetInferenceProfile bedrock bedrock:InvokeModel bedrock bedrock:InvokeModel bedrock bedrock:InvokeModelWithResponseStream bedrock bedrock:InvokeModelWithResponseStream bedrock bedrock:Retrieve bedrock bedrock:RetrieveAndGenerate bedrock kms:Decrypt kms kms:Decrypt kms lambda:InvokeFunction lambda s3:GetObject s3 s3:GetObjectAttributes s3 s3:GetObjectVersion s3 s3:GetObjectVersionAttributes s3