Which change follows the principle of least privilege?

Least privilege means granting only the permissions required for a task, defined as specific actions on specific resources, so narrowing both the action and the resource is what applies it. Allowing invocation across the account's models scopes the action but leaves every model reachable. Allowing Bedrock management actions on that model scopes the resource but grants permissions the application never uses. AWS warns that managed policies might not grant least privilege for a specific use case.