add new policy for bedrock api key

Author: liwadman

Service-Specific-Controls/deny_bedrock_api_keys_longer_than_30_days.json

@@ -0,0 +1,18 @@
+{
+  "Version": "2012-10-17",
+  "Statement": [
+    {
+      "Effect": "Deny",
+      "Action": "iam:CreateServiceSpecificCredential",
+      "Resource": "*",
+      "Condition": {
+        "StringEquals": {
+          "iam:ServiceSpecificCredentialServiceName": "bedrock.amazonaws.com"
+        },
+        "NumericGreaterThanEquals": {
+          "iam:ServiceSpecificCredentialAgeDays": "30"
+        }
+      }
+    }
+  ]
+}