Create Deny-bedrock-model-invocation-except-approved-models.json

Author: SwaraGandhi

Service-Specific-Controls/Deny-bedrock-model-invocation-except-approved-models.json

@@ -0,0 +1,14 @@
+{
+   "Version":"2012-10-17",
+   "Statement":[
+      {
+         "Effect":"Deny",
+         "Action":[
+            "bedrock:InvokeModel",
+            "bedrock:InvokeModelWithResponseStream",
+            "bedrock:PutFoundationModelEntitlement"
+         ],
+         "NotResource":"arn:aws:bedrock:*::foundation-model/<unique-identifier>.*"
+      }
+   ]
+}