AmazonBedrockExecutionRoleForAgents_SageMakerQA does not have enough permissions run this workshops.

[atheanchu]

Hello,

I was running this workshops and ran into problems asking questions to Bedrock. I turns out that AmazonBedrockExecutionRoleForAgents_SageMakerQA has only permissions to use SageMaker.

I had to add following permission to run this workshop successfully;

• Invoke Bedrock Model
• bedrock:Retrieve on our knowledge base

I believe template.yml needs to be updated to add bedrock:InvokeModel permissions on foundation models, and the steps to add bedrock:Retrieve permission on a new knowledge base should be added in the instructions.

Thanks,