I just tried to use one of the Amazon Nova models in AWS, and I got the following error message:
User: arn:aws:sts::XXXXXXXXXXXX:assumed-role/AWSReservedSSO_AccessLevelGoesHere_bec5d7da6a6db396/andy@example.com
Action: bedrock:InvokeModelWithResponseStream
On resource(s): arn:aws:bedrock:us-west-2::foundation-model/amazon.nova-micro-v1:0
Context: a service control policy explicitly denies the actionAfter some tooling around, I noticed that the error message was listing us-west-2 in the error message, even though I was working in us-east-2. This led me down a little rabbit hole that ultimately led to Cross-Region Inference for Amazon Bedrock. Fortunately, that article links to a nice solution.