add permission

FloRul · Apr 25, 2024 · 36c3916 · 36c3916
1 parent 00db297
commit 36c3916
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/lambdas/bedrock_invoker/lambda.tf b/lambdas/bedrock_invoker/lambda.tf
@@ -39,7 +39,8 @@ module "lambda_function_container_image" {
         "bedrock:InvokeModel"
       ]
       resources = [
-        "arn:aws:bedrock:*:${data.aws_caller_identity.current.account_id}:model/*"
+        "arn:aws:bedrock:*:${data.aws_caller_identity.current.account_id}:model/*",
+        "arn:aws:bedrock:*:${data.aws_caller_identity.current.account_id}:foundation-model/*"
       ]
     }