Policy: AWS > Bedrock > Settings > Model Invocation Logging Configuration > Logging Destination > Service Role ARN

ARN of an existing IAM service role in your AWS account that Amazon Bedrock will use for log delivery. This role must comply with AWS IAM role naming conventions and must already exist before use.

Targets

This policy targets the following resource types:

AWS > Bedrock > Settings

Primary Policy

This policy is used with the following primary policy:

AWS > Bedrock > Settings > Model Invocation Logging Configuration > Logging Destination

Controls

Setting this policy configures this control:

AWS > Bedrock > Settings > Model Invocation Logging Configuration

Policy Specification

Schema Type	`string`

In Your Workspace

Policy Settings by Type report

Developers

Category URI

tmod:@turbot/turbot#/control/categories/resourceLogging

Policy Type URI

tmod:@turbot/aws-bedrock#/policy/types/settingsModelInvocationLoggingConfigurationLoggingDestinationServiceRoleArn

GraphQL

query policyType(id: "tmod:@turbot/aws-bedrock#/policy/types/settingsModelInvocationLoggingConfigurationLoggingDestinationServiceRoleArn") { … }

query policySettings(filter: "policyTypeId:'tmod:@turbot/aws-bedrock#/policy/types/settingsModelInvocationLoggingConfigurationLoggingDestinationServiceRoleArn'") { … }

query policyValues(filter: "policyTypeId:'tmod:@turbot/aws-bedrock#/policy/types/settingsModelInvocationLoggingConfigurationLoggingDestinationServiceRoleArn'") { … }

CLI

Get Policy Type

turbot graphql policy-type --id "tmod:@turbot/aws-bedrock#/policy/types/settingsModelInvocationLoggingConfigurationLoggingDestinationServiceRoleArn"

Get Policy Settings

turbot graphql policy-settings --filter "policyTypeId:tmod:@turbot/aws-bedrock#/policy/types/settingsModelInvocationLoggingConfigurationLoggingDestinationServiceRoleArn"