pengjunjie/langflow
1
0
Fork 1
mirror of https://github.com/langflow-ai/langflow.git synced 2026-07-25 12:25:33 +08:00
Code Issues Packages Projects Releases Wiki Activity

add: Bedrock Kendra policy statement

Browse Source
This commit is contained in:
nsxshota
2023-11-21 16:26:19 +09:00
parent 5474505531
commit 342c920637
1 changed files with 20 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

21
deploy/scripts/cdk/lib/construct/network.ts
View File

@ -148,13 +148,32 @@ export class Network extends Construct {
'logs:PutLogEvents',
],
});
// Bedrock roll
const BedrockPolicyStatement = new iam.PolicyStatement({
sid: 'allowBedrockAccess',
resources: ['*'],
actions: [
'bedrock:*',
],
});
// Kendra roll
const KendraPolicyStatement = new iam.PolicyStatement({
sid: 'allowKendraAccess',
resources: ['*'],
actions: [
'kendra:*'
],
});
this.backendTaskRole = new iam.Role(this, 'BackendTaskRole', {
assumedBy: new iam.ServicePrincipal('ecs-tasks.amazonaws.com'),
});
// ECS Exec Policyの付与
this.backendTaskRole.addToPolicy(ECSExecPolicyStatement);
// KendraとBedrockのアクセス権付与
// this.backendTaskRole.addToPolicy();
this.backendTaskRole.addToPolicy(KendraPolicyStatement);
this.backendTaskRole.addToPolicy(BedrockPolicyStatement);
this.frontendTaskRole = new iam.Role(this, 'FrontendTaskRole', {