Property reference

`sn_ai_security.bedrock_priviledge.permission_policy`

The sn_ai_security.bedrock_priviledge.permission_policy property determines if both IAM policies and Bedrock boundary configurations are checked for privileged operations. Setting it to false enhances security by preventing unauthorized access and privilege escalation risks.

Default: Not stated
Type: Not stated
Application: Not stated

Key questions about this property

The answers below summarize the purpose, scope, default effect, and review scenarios for this property.

What does it do?	This property configures the application to validate both IAM policies and Bedrock boundaries for role privileges, ensuring tighter security controls.
What area does it affect?	Access control security
What does the default mean?	No default value is stated in the ServiceNow documentation.
When should you review it?	Review this property when configuring security settings for Amazon Bedrock access or during security audits.

Property record

Facts stated in the ServiceNow documentation. No out of the box record has been read from an instance yet.

Property name	`sn_ai_security.bedrock_priviledge.permission_policy`
Type	Not stated
Application	Not stated
Default value	Not stated
Description	Not stated

Sources

Official references and nearby text excerpts where this property appears.

Brazil docs View supporting context

Context preview Snippet 1

... Bedrock boundaries restrict the scope of permissions granted by IAM policies. For example, a boundary can limit the bedrock:InvokeModel permission to only the Haiku 3.5 model and specific regions. The sn_ai_security.bedrock_priviledge.permission_policy system property determines whether an application checks both the IAM policy and the Bedrock boundary configuration to verify whether a role is allowed to perform a privileged operation. When set ...

More in `Other namespaces`

Other properties in the same namespace.

sn_ai_asset_mgmt.new_playbook_opt_in This property determines whether the new AI asset management playbook is activated for use, allowing for custo sn_ai_search_admin.ais_assist_installation_initiated_indexing_completed This boolean property tracks the completion status of the indexing process initiated by the AI Search Admin in sn_ai_search_admin.auto_enable_hybrid_search_message_dismissed This boolean property controls the automatic dismissal of the hybrid search message in the AI Search Admin Con sn_ai_security.analyzer_max_record_age_hours This property sets the maximum age, in hours, for AI asset invocation records considered in AI Control Tower's sn_aiops_dashboard.ITOM.Dashboard.Avg_time_saved_by_automation_in_min It specifies the average time saved by automation in minutes, impacting the Time saved by alert automation ind sn_aiops_dashboard.ITOM.Dashboard.MTTR_for_time_saved_by_grouping_in_min It configures the estimated time saved by grouping alerts, impacting how quickly incidents are processed in th sn_ais_assist.u_question_regex This property sets a Java regular expression that filters search queries eligible for Knowledge base articles sn_aiux_builder.aiux.enable_experience_acl_check_for_builder It determines whether ACL checks are enforced when using the AI Experience Framework Builder, impacting user a

All 361 properties in Other namespaces →