From 36c3916b755c605994f891840d906285fb02fc5c Mon Sep 17 00:00:00 2001
From: Joel Balcaen <jobalcaen+github@gmail.com>
Date: Thu, 25 Apr 2024 15:06:37 -0300
Subject: [PATCH] add permission

---
 lambdas/bedrock_invoker/lambda.tf | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/lambdas/bedrock_invoker/lambda.tf b/lambdas/bedrock_invoker/lambda.tf
index 3fc2f1f..99540bc 100644
--- a/lambdas/bedrock_invoker/lambda.tf
+++ b/lambdas/bedrock_invoker/lambda.tf
@@ -39,7 +39,8 @@ module "lambda_function_container_image" {
         "bedrock:InvokeModel"
       ]
       resources = [
-        "arn:aws:bedrock:*:${data.aws_caller_identity.current.account_id}:model/*"
+        "arn:aws:bedrock:*:${data.aws_caller_identity.current.account_id}:model/*",
+        "arn:aws:bedrock:*:${data.aws_caller_identity.current.account_id}:foundation-model/*"
       ]
     }