No IAM role has AmazonBedrockFullAccess attached

Check ID: bedrock_full_access_policy_attached
Provider: AWS
Service: bedrock
Severity: HIGH
Categories: gen-ai, identity-access
Resource type: AwsIamRole

What this check verifies

IAM roles (excluding service roles) are evaluated for attachment of the AWS-managed AmazonBedrockFullAccess policy. This policy grants unrestricted access to all Amazon Bedrock actions and resources.

Risk

The AmazonBedrockFullAccess policy grants broad permissions across all Bedrock resources. If a role with this policy is compromised, an attacker could:

Invoke any model to exfiltrate data or generate harmful content
Modify guardrails, logging, and security configurations
Incur significant costs through unrestricted model invocations

Recommendation

Apply least privilege: replace AmazonBedrockFullAccess with a custom policy granting only the specific Bedrock actions required. Use permissions boundaries and SCPs to limit the scope of Bedrock permissions. Regularly review access with IAM Access Analyzer to identify and remove unused privileges.

Remediation

CLI
Terraform
Native IaC
Dashboard steps

aws iam detach-role-policy --role-name <ROLE_NAME> --policy-arn arn:aws:iam::aws:policy/AmazonBedrockFullAccess

# IAM Role without AmazonBedrockFullAccess
resource "aws_iam_role" "<example_resource_name>" {
  assume_role_policy = <<POLICY
{
  "Version": "2012-10-17",
  "Statement": [{
    "Effect": "Allow",
    "Principal": {"Service": "ec2.amazonaws.com"},
    "Action": "sts:AssumeRole"
  }]
}
POLICY

  managed_policy_arns = []  # Critical: ensures AmazonBedrockFullAccess is NOT attached
}

# CloudFormation: IAM Role without AmazonBedrockFullAccess
Resources:
  <example_resource_name>:
    Type: AWS::IAM::Role
    Properties:
      AssumeRolePolicyDocument:
        Version: '2012-10-17'
        Statement:
          - Effect: Allow
            Principal:
              Service: ec2.amazonaws.com
            Action: sts:AssumeRole
      ManagedPolicyArns: []  # Critical: ensure AmazonBedrockFullAccess is NOT attached

References

Where this check fires

This check runs on every scheduled scan against your AWS account. Findings appear at Cloud Security → Findings filterable by Check ID = bedrock_full_access_policy_attached. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

← Back to AWS checks

Amazon Bedrock API key is expired Bedrock guardrail prompt attack filter is set to HIGH

​What this check verifies

​Risk

​Recommendation

​Remediation

​References

​Where this check fires

What this check verifies

Risk

Recommendation

Remediation

References

Where this check fires