21.5.3 Creating an IAM Policy to Access Amazon Bedrock LLMs

Use the AWS Management Console to create an IAM policy for MySQL HeatWave GenAI to access Amazon Bedrock LLMs.

This task requires the following:

• Access to AWS Management Console.

Do the following to create an IAM policy:

1. Open the AWS Management Console and sign in with your credentials.
2. In the AWS Management Console home page, click Services, and click Security, Identity, & Compliance, and then click IAM.
3. In the navigation pane of the Console, under Access management, click Policies, and then click Create policy.
   It opens the Specify permissions page.
4. In the Specify permissions page, in the Policy editor section, click JSON, and enter the following permissions to access the Amazon Bedrock LLMs supported by MySQL HeatWave GenAI. For more information on policies, see Generate policies.

   {
     "Version": "2012-10-17",
     "Statement": [
       {
         "Sid": "AuthenticatedInvokeModelBedrockPolicy",
         "Action": [
           "bedrock:InvokeModel"
         ],
         "Effect": "Allow",
         "Resource": [
           "arn:aws:bedrock:us-east-1::foundation-model/meta.*",
           "arn:aws:bedrock:us-east-1::foundation-model/cohere.*"
         ]
       },
       {
         "Sid": "AuthenticatedListFoundationModelsBedrockPolicy",
         "Action": [
           "bedrock:ListFoundationModels"
         ],
         "Effect": "Allow",
         "Resource" : "*"
       }
     ]
   }

5. Resolve any warnings or errors generated during permissions validation, and then click Next.
6. In the Review and create page, in the Policy details section, enter the following:
   • Policy name: Specify a name to identify this policy.
   • Description: (Optional) Specify a description of the policy.
7. Click Create policy.