Policy: SageMakerStudioBedrockFlowServiceRolePolicy ARN: arn:aws:iam::aws:policy/service-role/SageMakerStudioBedrockFlowServiceRolePolicy Allowed Actions Actions Services bedrock:ApplyGuardrail bedrock bedrock:GetInferenceProfile bedrock bedrock:GetPrompt bedrock bedrock:InvokeAgent bedrock bedrock:InvokeModel bedrock bedrock:InvokeModel bedrock bedrock:Retrieve bedrock bedrock:RetrieveAndGenerate bedrock kms:Decrypt kms kms:Decrypt kms kms:Decrypt kms kms:GenerateDataKey kms kms:GenerateDataKey kms lambda:InvokeFunction lambda