AWSBedrockAgentCoreGatewayNetworkServiceRolePolicy

Last Modified

Mar 31, 2026

March 31, 2026 at 08:44 AM UTC

Version

v1

Total Versions

1

Created

Mar 28, 2026

Actions

8

Policy Document

View on GitHub
{
  "PolicyVersion": {
    "Document": {
      "Version": "2012-10-17",
      "Statement": [
        {
          "Sid": "AllowSLRActionsForLattice",
          "Effect": "Allow",
          "Action": [
            "iam:CreateServiceLinkedRole"
          ],
          "Resource": [
            "arn:aws:iam::*:role/aws-service-role/vpc-lattice.amazonaws.com/AWSServiceRoleForVpcLattice"
          ],
          "Condition": {
            "StringEquals": {
              "iam:AWSServiceName": "vpc-lattice.amazonaws.com"
            }
          }
        },
        {
          "Sid": "AllowResourceGatewayCreate",
          "Effect": "Allow",
          "Action": [
            "vpc-lattice:CreateResourceGateway",
            "vpc-lattice:TagResource"
          ],
          "Resource": [
            "arn:aws:vpc-lattice:*:*:resourcegateway/*"
          ],
          "Condition": {
            "StringEquals": {
              "aws:RequestTag/BedrockAgentCoreGatewayManaged": "true",
              "aws:ResourceTag/BedrockAgentCoreGatewayManaged": "true"
            }
          }
        },
        {
          "Sid": "AllowEC2PermissionsForResourceGatewayCreate",
          "Effect": "Allow",
          "Action": [
            "ec2:DescribeSubnets",
            "ec2:DescribeVpcs",
            "ec2:DescribeSecurityGroups"
          ],
          "Resource": [
            "*"
          ]
        },
        {
          "Sid": "AllowResourceGatewayDelete",
          "Effect": "Allow",
          "Action": [
            "vpc-lattice:DeleteResourceGateway",
            "vpc-lattice:GetResourceGateway"
          ],
          "Resource": [
            "*"
          ],
          "Condition": {
            "StringEquals": {
              "aws:ResourceTag/BedrockAgentCoreGatewayManaged": "true"
            }
          }
        }
      ]
    },
    "VersionId": "v1",
    "IsDefaultVersion": true,
    "CreateDate": "2026-03-28T22:12:08+00:00"
  }
}

Version History (1 recorded)

Raw history
v1new policy

8 actions added

f049ba5
Permissions management: iam:CreateServiceLinkedRole: iam:CreateServiceLinkedRole