Configure Iam Roles.user.prompt

# Configure IAM Roles for Bedrock Agents

**Agent:** AWS Security & Networking Agent  
**Category:** AWS Security  
**Complexity:** Advanced  
**Duration:** 2-3 hours

---

## Purpose

Create IAM roles and policies following least-privilege principles for AWS Bedrock Agents and related services.

---

## Instructions

Create IAM configuration with:

1. **Bedrock Agent execution role**
2. **Lambda execution role** (for action groups)
3. **Knowledge base access role**
4. **Least-privilege policies**
5. **Trust relationships**

---

## Expected Output