# Grant the shared, cross-account `generic-engineer-role` inference-only Bedrock access
# so engineers can run `skill-eval --provider bedrock` against this account's models.
# Mirrors qa/pdp-backfill/bucket/generic-engineer-role.tf.

data "aws_iam_role" "generic_engineer_role" {
  name = "generic-engineer-role"
}

resource "aws_iam_role_policy_attachment" "generic_engineer_bedrock" {
  role       = data.aws_iam_role.generic_engineer_role.name
  policy_arn = aws_iam_policy.bedrock_invoke.arn
}