Configure Bedrock.InferenceProfile resource and add example

[larhauga]

Description of your changes

This change implements the bedrock inference profile resource enabling the creation of application inference profiles.

Fixes #1589

I have:

• Read and followed Crossplane's contribution process.
• Run make reviewable to ensure this PR is ready for review.
• Added backport release-x.y labels to auto-backport this PR if necessary.

How has this code been tested

Tested with make run in eu-central-1 aws region.

For testing this resource you will need to enable the models in the AWS account in accordance with https://docs.aws.amazon.com/bedrock/latest/userguide/model-access-modify.html

aws bedrock list-inference-profiles --type-equals APPLICATION --region eu-central-1
{
    "inferenceProfileSummaries": [
        {
            "inferenceProfileName": "llama-test-profile",
            "description": "Profile with tag for cost allocation tracking",
            "createdAt": "2025-01-16T08:58:00.978628+00:00",
            "updatedAt": "2025-01-16T08:58:00.978628+00:00",
            "inferenceProfileArn": "arn:aws:bedrock:eu-central-1:redacted:application-inference-profile/redacted",
            "models": [
                {
                    "modelArn": "arn:aws:bedrock:eu-central-1::foundation-model/meta.llama3-2-1b-instruct-v1:0"
                },
                {
                    "modelArn": "arn:aws:bedrock:eu-west-1::foundation-model/meta.llama3-2-1b-instruct-v1:0"
                },
                {
                    "modelArn": "arn:aws:bedrock:eu-west-3::foundation-model/meta.llama3-2-1b-instruct-v1:0"
                }
            ],
            "inferenceProfileId": "redacted",
            "status": "ACTIVE",
            "type": "APPLICATION"
        }
    ]
}

[turkenf]

/test-examples="examples/bedrock/v1beta1/inferenceprofile.yaml"

[larhauga]

@turkenf anything I can do to help with the failed build?

[turkenf]

Hi @larhauga,

We are grateful for your first PR, thank you for your efforts and patience here 🙌

@turkenf anything I can do to help with the failed build?

From what I can see in the uptest logs and as you mentioned in your PR description, the problem seems to be an permission error. There is nothing you can do at the moment. When I get the chance, I will define the relevant policy for the test account and review your PR.

    logger.go:42: 17:58:32 | case/0-apply |     - lastTransitionTime: "2025-01-17T17:57:48Z"
    logger.go:42: 17:58:32 | case/0-apply |       message: 'async create failed: resource creation call returned error diags:
    logger.go:42: 17:58:32 | case/0-apply |         creating Amazon Bedrock Inference Profile ("llama-app"): operation error Bedrock:
    logger.go:42: 17:58:32 | case/0-apply |         CreateInferenceProfile, https response error StatusCode: 403, RequestID: 4ba17e39-0ad5-442f-95e9-24ec9459e598,
    logger.go:42: 17:58:32 | case/0-apply |         AccessDeniedException: User: arn:aws:iam::153891904029:user/official-provider-testing
    logger.go:42: 17:58:32 | case/0-apply |         is not authorized to perform: bedrock:CreateInferenceProfile on resource:
    logger.go:42: 17:58:32 | case/0-apply |         arn:aws:bedrock:eu-central-1:964273356747:inference-profile/eu.meta.llama3-2-1b-instruct-v1:0
    logger.go:42: 17:58:32 | case/0-apply |         because no resource-based policy allows the bedrock:CreateInferenceProfile
    logger.go:42: 17:58:32 | case/0-apply |         action: operation error Bedrock: CreateInferenceProfile, https response error
    logger.go:42: 17:58:32 | case/0-apply |         StatusCode: 403, RequestID: 4ba17e39-0ad5-442f-95e9-24ec9459e598, AccessDeniedException:
    logger.go:42: 17:58:32 | case/0-apply |         User: arn:aws:iam::153891904029:user/official-provider-testing is not authorized
    logger.go:42: 17:58:32 | case/0-apply |         to perform: bedrock:CreateInferenceProfile on resource: arn:aws:bedrock:eu-central-1:964273356747:inference-profile/eu.meta.llama3-2-1b-instruct-v1:0
    logger.go:42: 17:58:32 | case/0-apply |         because no resource-based policy allows the bedrock:CreateInferenceProfile
    logger.go:42: 17:58:32 | case/0-apply |         action'