fix: update bedrock module (#41)

* update bedrock module
* bump aws-lambda-powertools
* update time for deployment
* powertools description
* readme number of resources
* add time to lambda and gutendex


Bumps [aws-lambda-powertools](https://github.com/aws-powertools/powertools-lambda-python) from 2.43.1 to 3.3.0.
- [Release notes](https://github.com/aws-powertools/powertools-lambda-python/releases)
- [Changelog](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/CHANGELOG.md)
- [Upgrade guide](https://github.com/aws-powertools/powertools-lambda-python/blob/develop/docs/upgrade.md)
- [Commits](aws-powertools/powertools-lambda-python@v2.43.1...v3.3.0)

---
updated-dependencies:
- dependency-name: aws-lambda-powertools
  dependency-type: direct:development
  update-type: version-update:semver-major
...

---------

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Scott Schreckengaust <scottschreckengaust@users.noreply.github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: scottschreckengaust

samples/bedrock-agent/README.md

@@ -110,14 +110,14 @@ _NOTE: The default architecture is `x86_64`, feel free to add `-var="architectur
     $ terraform apply
     ```
 
-The command above will deploy in your AWS account. With the default configuration of this sample, the observed deployment time was ~381 seconds (6.5 minutes).
+The command above will deploy in your AWS account. With the default configuration of this sample, the observed deployment time was ~451 seconds (7.5 minutes).
 
 To protect you against unintended changes that affect your security posture, the Terraform prompts you to approve before deploying them. You will need to answer "yes" to get the solution deployed.
 
 ```
 ...
 
-Apply complete! Resources: 27 added, 0 changed, 0 destroyed.
+Apply complete! Resources: 30 added, 0 changed, 0 destroyed.
 
 Outputs:
 

samples/bedrock-agent/lambda/action-group/gutendex.py

@@ -16,7 +16,7 @@
 def get_books_from_gutendex(n: int) -> dict:
     """Return the count and first n books from the /books API."""
     api_url = "https://gutendex.com"
-    response = requests.get(api_url + "/books", timeout=14) # keep a little less than the Lambda timeout
+    response = requests.get(api_url + "/books", timeout=44) # keep a little less than the Lambda timeout
     response.raise_for_status()
     books = response.json()
     return {"count": books["count"], "books": books["results"][:n]}

samples/bedrock-agent/lambda/action-group/index.py

@@ -20,8 +20,7 @@
 
 app = BedrockAgentResolver()
 
-
-@app.get("/top_books")
+@app.get(rule="/top_books", description="Get top books from gutendex")
 def get_top_books():
     return get_books_from_gutendex(5)
 

samples/bedrock-agent/lambda/action-group/poetry.lock

@@ -11,7 +11,7 @@ requests = "^2.32.0"
 
 
 [tool.poetry.group.dev.dependencies]
-aws-lambda-powertools = "^2.32.0"
+aws-lambda-powertools = "^3.3.0"
 
 [build-system]
 requires = ["poetry-core"]

samples/bedrock-agent/lambda/action-group/pyproject.toml

@@ -14,7 +14,7 @@ provider "opensearch" {
 module "bedrock" {
   #checkov:skip=CKV_TF_1:Terraform registry has no ability to use a commit hash
   source                       = "aws-ia/bedrock/aws"
-  version                      = "0.0.3"
+  version                      = "0.0.4"
   create_kb                    = true
   create_default_kb            = true
   create_agent                 = true
@@ -36,7 +36,7 @@ module "lambda" {
   handler       = "index.handler"
   runtime       = "python3.12"
   publish       = true
-  timeout       = 15
+  timeout       = 45
   architectures = ["${var.architecture}", ]
   layers        = ["arn:aws:lambda:${var.region}:017000801446:layer:AWSLambdaPowertoolsPythonV3-python312-${var.architecture}:4", ]
   source_path = [
@@ -46,3 +46,24 @@ module "lambda" {
     }
   ]
 }
+
+resource "aws_lambda_permission" "allow_bedrock_agent" {
+  action        = "lambda:InvokeFunction"
+  function_name = module.lambda.lambda_function_arn
+  principal     = "bedrock.amazonaws.com"
+  source_arn    = module.bedrock.bedrock_agent[0].agent_arn
+}
+
+resource "aws_iam_role_policy" "agent_policy" {
+  policy = jsonencode({
+    Version = "2012-10-17"
+    Statement = [
+      {
+        Effect   = "Allow"
+        Action   = "lambda:InvokeModel"
+        Resource = module.lambda.lambda_function_arn
+      }
+    ]
+  })
+  role = split("/", provider::aws::arn_parse(module.bedrock.bedrock_agent[0].agent_resource_role_arn).resource)[1]
+}

samples/bedrock-agent/main.tf

@@ -29,7 +29,7 @@ variable "foundation_model" {
   type        = string
   description = "The foundation model to use for the agent"
   nullable    = false
-  default     = "anthropic.claude-3-5-haiku-20241022-v1:0"
+  default     = "anthropic.claude-3-haiku-20240307-v1:0"
   validation {
     condition     = contains(data.aws_bedrock_foundation_models.test.model_summaries[*].model_id, var.foundation_model)
     error_message = "The foundational model is not found"