aws-samples / aws-samples/bedrock-kb-rag-workshop

AmazonBedrockExecutionRoleForAgents_SageMakerQA does not have enough permissions run this workshops.

Open
#2 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
66
Forks
12
PR merge metrics
No merged PRs in 30d

Description

Hello,

I was running this workshops and ran into problems asking questions to Bedrock. I turns out that `AmazonBedrockExecutionRoleForAgents_SageMakerQA` has only permissions to use SageMaker.

I had to add following permission to run this workshop successfully;
- Invoke Bedrock Model
- `bedrock:Retrieve` on our knowledge base

I believe `template.yml` needs to be updated to add `bedrock:InvokeModel` permissions on foundation models, and the steps to add `bedrock:Retrieve` permission on a new knowledge base should be added in the instructions.

Thanks,

Contributor guide

Open the contributing guide

Research direction

Start by reviewing template.yml and the workshop instructions to see how AmazonBedrockExecutionRoleForAgents_SageMakerQA is defined and how knowledge bases are created. Done means the role can invoke Bedrock foundation models and the instructions explain how to grant bedrock:Retrieve access to a new knowledge base.

Written by the indexing model from the issue text.

Assessment

Tech stack
aws
Domain
cloud, security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.