Connect Amazon Bedrock to Black Cat SSPM
Connect your Amazon Bedrock account so Black Cat can review the AI agents you have built, their execution roles, action groups, aliases and collaborators, knowledge bases, guardrails, prompt flows, the prompt library and your account's model invocation logging.
≈ 15 min · audit access · no write-capable permission
What Black Cat reads, and why
| Permission | What it lets Black Cat do | Status |
|---|---|---|
sts:GetCallerIdentity | Lets Black Cat confirm which AWS account it has been given access to. | Required |
bedrock:ListAgents, bedrock:GetAgent, bedrock:ListTagsForResource, bedrock:ListAgentActionGroups, bedrock:GetAgentActionGroup, bedrock:ListAgentKnowledgeBases, bedrock:ListAgentAliases, bedrock:ListAgentCollaborators | Lets Black Cat inventory your Bedrock agents with their owners, action groups (including code interpretation and shell access), attached knowledge bases, aliases and collaborating agents. | Required |
bedrock:ListKnowledgeBases, bedrock:GetKnowledgeBase, bedrock:ListFlows, bedrock:GetFlow, bedrock:ListPrompts | Lets Black Cat list every knowledge base in the account to spot orphans, read where each one stores your embedded data and which role it uses, and read your prompt flows and prompt library. | Required |
bedrock:ListGuardrails, bedrock:GetGuardrail, bedrock:GetModelInvocationLoggingConfiguration | Lets Black Cat check guardrail filter strength and whether model invocation logging is switched on. | Required |
iam:ListRolePolicies, iam:GetRolePolicy, iam:ListAttachedRolePolicies, iam:GetPolicy, iam:GetPolicyVersion | Lets Black Cat review the permissions an agent's execution role carries. | Required |
cloudtrail:LookupEvents | Optional — lets Black Cat attribute who created each agent when no owner tag is set. | Optional |
bedrock-agentcore:ListAgentRuntimes, bedrock-agentcore:GetAgentRuntime, bedrock-agentcore:ListHarnesses, bedrock-agentcore:GetHarness, bedrock-agentcore:ListGateways, bedrock-agentcore:GetGateway, bedrock-agentcore:ListGatewayTargets, bedrock-agentcore:GetGatewayTarget, bedrock-agentcore:ListGatewayRateLimits, bedrock-agentcore:ListMemories, bedrock-agentcore:GetMemory, bedrock-agentcore:ListApiKeyCredentialProviders, bedrock-agentcore:GetApiKeyCredentialProvider, bedrock-agentcore:ListOauth2CredentialProviders, bedrock-agentcore:GetOauth2CredentialProvider, bedrock-agentcore:ListPolicyEngineSummaries, bedrock-agentcore:ListPolicySummaries, bedrock-agentcore:ListBrowsers, bedrock-agentcore:GetBrowser, bedrock-agentcore:ListCodeInterpreters, bedrock-agentcore:GetCodeInterpreter, bedrock-agentcore:ListTagsForResource | Lets Black Cat inventory your AgentCore runtimes, harnesses, gateways and their targets, memories, credential providers, policy engines and custom sandboxes, with their network, authentication, encryption and role settings. | Required |
What you'll need
- Access key identifier Required — From the read-only IAM user you create for Black Cat in AWS.
- Secret access key Required — Issued with the access key identifier and shown only once by AWS.
- Bedrock region Required — The AWS region your Bedrock resources live in, for example eu-west-3. One connector per region.
- Role to assume — Optional — a cross-account read-only role Black Cat takes on instead of using the access key directly. Origin fetch mode only; edge scans cannot assume roles.
Where to create it
- Setup guide (Amazon Bedrock) ↗ (opens in new tab)
- Developer documentation (Amazon Bedrock) ↗ (opens in new tab)
What we check on Amazon Bedrock →