Answer: AWS Identity and Access Management (IAM)

AWS Identity and Access Management (IAM) is the AWS service used to control and secure access to AWS services and resources, including Amazon Bedrock. With IAM, administrators can create users, groups, roles, and fine-grained policies that grant or deny permissions to call Bedrock APIs or assume roles that interact with Bedrock. IAM supports least-privilege access, temporary credentials (via STS), and integration with IAM roles for applications running on EC2, Lambda, or other AWS services. Amazon Macie is for data security and privacy (sensitive data discovery), Amazon Rekognition is a computer vision service, and AWS Config is for recording and evaluating resource configuration changes. None of those are used to manage access permissions to Bedrock.

Author: Jin H