adam/seahaven-slack-bot
Archived
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions

fix: grant bedrock:GetGuardrail to agent execution role #39

Merged
amoussa1229 merged 1 commit from fix/guardrail-get-permission into main 2026-06-04 20:50:20 +00:00
Conversation 0 Commits 1 Files changed 1 +3 -1

1 commit

Author SHA1 Message Date
Adam Moussa
e5752e6a5d fix: grant bedrock:GetGuardrail to agent execution role 
The Bedrock Agents service fetches the guardrail config via GetGuardrail
before applying it. The role only had ApplyGuardrail, so every agent
invocation logged an AccessDenied and tripped the CIS 4.1
UnauthorizedAPICalls alarm.

Scoped to the same guardrail ARNs already granted for ApplyGuardrail.
Cross-reviewed (IAM change): APPROVE, no findings.
 2026-06-04 16:42:55 -04:00