Skip to content

chore: update bedrock IAM permissions in docs - #1166

Open
whysumedh wants to merge 1 commit into
mainfrom
bedrock-iam/docss
Open

whysumedh wants to merge 1 commit into
mainfrom
bedrock-iam/docss

Conversation

@whysumedh

Copy link
Copy Markdown
Member

No description provided.

Copilot AI balanced review requested due to automatic review settings November 11, 2026 01:17
@mintlify

mintlify Bot commented Nov 11, 2026 •

Copy link
Copy Markdown
Contributor

Preview deployment for your docs. Learn more about Mintlify Previews.

Project Status Preview Updated
portkey-docs 🟢 Ready View Preview Nov 11, 2026, 1:18 AM

💡 Tip: Enable Automations to automatically generate PRs for you.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The IAM guidance incorrectly scopes listing actions to specific ARNs, causing AccessDenied errors unless those actions retain wildcard resources in separate statements across the affected pages.

1 open issue
What changed in this PR

Updates Bedrock IAM guidance across Portkey, AI Gateway, and legacy documentation to include token-counting permissions and feature-specific policies.

Changes:

  • Adds bedrock:CountTokens to assumed-role, EKS, and AWS Marketplace policy examples.
  • Documents optional feature permissions and provides combined IAM policies.
  • Adds permission guidance to Count Tokens and Claude Code integration pages.
File Description
virtual_key_old/​product/​enterprise-offering/​cloud-marketplace/​aws.mdx Adds CountTokens to the legacy Marketplace policy.
virtual_key_old/​product/​ai-gateway/​virtual-keys/​bedrock-amazon-assumed-role.mdx Expands legacy assumed-role permissions guidance.
self-hosting/​hybrid-deployments/​aws/​marketplace.mdx Adds CountTokens to the Marketplace deployment policy.
self-hosting/​hybrid-deployments/​aws/​eks.mdx Adds CountTokens to the EKS policy.
product/​model-catalog/​connect-bedrock-with-amazon-assumed-role.mdx Adds token-counting and optional-feature policies.
product/​enterprise-offering/​cloud-marketplace/​aws.mdx Adds CountTokens to the enterprise Marketplace policy.
product/​ai-gateway/​virtual-keys/​bedrock-amazon-assumed-role.mdx Expands virtual-key assumed-role permissions guidance.
integrations/​llms/​bedrock/​count-tokens.mdx Documents the required CountTokens permission.
integrations/​libraries/​claude-code-bedrock.mdx Adds Claude Code IAM prerequisites.
aigw/​self-hosting/​hybrid-deployments/​aws/​eks.mdx Mirrors the EKS CountTokens permission.
aigw/​product/​model-catalog/​connect-bedrock-with-amazon-assumed-role.mdx Mirrors expanded model-catalog IAM guidance.
aigw/​product/​ai-gateway/​virtual-keys/​bedrock-amazon-assumed-role.mdx Mirrors expanded virtual-key IAM guidance.
aigw/​integrations/​libraries/​claude-code-bedrock.mdx Mirrors Claude Code IAM prerequisites.

Review effort: Balanced

}
```

Replace `<bucket>`, `<account_id>` and `<bedrock_service_role>` with your own values, and narrow each `Resource` to the model, inference profile and job ARNs you actually use.

This branch was successfully deployed

1 active deployment
staging — 188890b7 Deployed Nov 11, 2026 by mintlify[bot]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants