| bedrock:CreateAgent | Admin |
| bedrock:CreateAgentActionGroup | Admin |
| bedrock:CreateAgentAlias | Admin |
| bedrock:CreateAgentDraftSnapshot | Admin |
| bedrock:CreateDataSource | Admin |
| bedrock:CreateFoundationModelAgreement | Admin |
| bedrock:CreateKnowledgeBase | Admin |
| bedrock:CreateModelCustomizationJob | Admin |
| bedrock:CreateProvisionedModelThroughput | Admin |
| bedrock:DeleteCustomModel | Admin |
| bedrock:DeleteDataSource | Admin |
| bedrock:DeleteFoundationModelAgreement | Admin |
| bedrock:DeleteKnowledgeBase | Admin |
| bedrock:DeleteModelInvocationLoggingConfiguration | Admin |
| bedrock:DeleteProvisionedModelThroughput | Admin |
| bedrock:PutFoundationModelEntitlement | Admin |
| bedrock:PutModelInvocationLoggingConfiguration | Admin |
| bedrock:PutUseCaseForModelAccess | Admin |
| bedrock:UpdateAgent | Admin |
| bedrock:UpdateAgentActionGroup | Admin |
| bedrock:UpdateAgentAlias | Admin |
| bedrock:UpdateAgentKnowledgeBase | Admin |
| bedrock:UpdateDataSource | Admin |
| bedrock:UpdateKnowledgeBase | Admin |
| bedrock:UpdateProvisionedModelThroughput | Admin |
| bedrock:AssociateAgentKnowledgeBase | Operator |
| bedrock:AssociateThirdPartyKnowledgeBase | Operator |
| bedrock:DisassociateAgentKnowledgeBase | Operator |
| bedrock:StartIngestionJob | Operator |
| bedrock:StopModelCustomizationJob | Operator |
| bedrock:TagResource | Operator |
| bedrock:UntagResource | Operator |
| bedrock:GetAgent | Metadata |
| bedrock:GetAgentActionGroup | Metadata |
| bedrock:GetAgentAlias | Metadata |
| bedrock:GetAgentKnowledgeBase | Metadata |
| bedrock:GetAgentVersion | Metadata |
| bedrock:GetCustomModel | Metadata |
| bedrock:GetDataSource | Metadata |
| bedrock:GetFoundationModel | Metadata |
| bedrock:GetFoundationModelAvailability | Metadata |
| bedrock:GetIngestionJob | Metadata |
| bedrock:GetKnowledgeBase | Metadata |
| bedrock:GetModelCustomizationJob | Metadata |
| bedrock:GetModelInvocationLoggingConfiguration | Metadata |
| bedrock:GetProvisionedModelThroughput | Metadata |
| bedrock:GetUseCaseForModelAccess | Metadata |
| bedrock:InvokeAgent | Metadata |
| bedrock:InvokeModel | Metadata |
| bedrock:InvokeModelWithResponseStream | Metadata |
| bedrock:ListAgentActionGroups | Metadata |
| bedrock:ListAgentAliases | Metadata |
| bedrock:ListAgentKnowledgeBases | Metadata |
| bedrock:ListAgents | Metadata |
| bedrock:ListAgentVersions | Metadata |
| bedrock:ListCustomModels | Metadata |
| bedrock:ListDataSources | Metadata |
| bedrock:ListFoundationModelAgreementOffers | Metadata |
| bedrock:ListFoundationModels | Metadata |
| bedrock:ListIngestionJobs | Metadata |
| bedrock:ListKnowledgeBases | Metadata |
| bedrock:ListModelCustomizationJobs | Metadata |
| bedrock:ListProvisionedModelThroughputs | Metadata |
| bedrock:ListTagsForResource | Metadata |
| bedrock:QueryKnowledgeBase | Metadata |
