output "bedrock_policy_arn" {
  description = "ARN of the inference-only Bedrock managed policy. Attach to any role that runs evals."
  value       = aws_iam_policy.bedrock_invoke.arn
}

output "generic_engineer_role_name" {
  description = "The shared cross-account engineer role the Bedrock policy is attached to."
  value       = data.aws_iam_role.generic_engineer_role.name
}