A municipal trail-register kiosk should let the kiosk role call one Amazon Bedrock model and nothing else — not list buckets, not change IAM, not open every foundation model in the account. Which control is that?

Short Explanation

Think of a trail kiosk that should call one Bedrock model and nothing else. That is least-privilege IAM. Admin-on-everything, a dashboard, and temperature are not that lock.

Full Explanation

IAM least privilege for AI invocations means the kiosk role can call one Bedrock model and nothing else. An admin-on-everything role, a dashboard, and temperature are not that control.

×