fix(aws): correct bedrock-agent regional availability (#9573)

prowler/CHANGELOG.md

@@ -28,6 +28,7 @@ All notable changes to the **Prowler SDK** are documented in this file.
 
 ### Fixed
 - Fix typo `trustboundaries` category to `trust-boundaries` [(#9536)](https://github.com/prowler-cloud/prowler/pull/9536)
+- Fix incorrect `bedrock-agent` regional availability, now using official AWS docs instead of copying from `bedrock`
 - Store MongoDB Atlas provider regions as lowercase [(#9554)](https://github.com/prowler-cloud/prowler/pull/9554)
 - Store GCP Cloud Storage bucket regions as lowercase [(#9567)](https://github.com/prowler-cloud/prowler/pull/9567)
 

prowler/providers/aws/aws_regions_by_service.json

@@ -1426,42 +1426,23 @@
     "bedrock-agent": {
       "regions": {
         "aws": [
-          "af-south-1",
-          "ap-east-2",
           "ap-northeast-1",
           "ap-northeast-2",
-          "ap-northeast-3",
           "ap-south-1",
-          "ap-south-2",
           "ap-southeast-1",
           "ap-southeast-2",
-          "ap-southeast-3",
-          "ap-southeast-4",
-          "ap-southeast-5",
-          "ap-southeast-7",
           "ca-central-1",
-          "ca-west-1",
           "eu-central-1",
           "eu-central-2",
-          "eu-north-1",
-          "eu-south-1",
-          "eu-south-2",
           "eu-west-1",
           "eu-west-2",
           "eu-west-3",
-          "il-central-1",
-          "me-central-1",
-          "me-south-1",
-          "mx-central-1",
           "sa-east-1",
           "us-east-1",
-          "us-east-2",
-          "us-west-1",
           "us-west-2"
         ],
         "aws-cn": [],
         "aws-us-gov": [
-          "us-gov-east-1",
           "us-gov-west-1"
         ]
       }

util/update_aws_services_regions.py

@@ -48,10 +48,32 @@ for page in get_parameters_by_path_paginator.paginate(
 logging.info("Updating subservices and the services not present in the original matrix")
 # macie2 --> macie
 regions_by_service["services"]["macie2"] = regions_by_service["services"]["macie"]
-# bedrock-agent --> bedrock
-regions_by_service["services"]["bedrock-agent"] = regions_by_service["services"][
-    "bedrock"
-]
+# bedrock-agent is not in SSM, and has different availability than bedrock
+# See: https://docs.aws.amazon.com/bedrock/latest/userguide/agents-supported.html
+regions_by_service["services"]["bedrock-agent"] = {
+    "regions": {
+        "aws": [
+            "ap-northeast-1",
+            "ap-northeast-2",
+            "ap-south-1",
+            "ap-southeast-1",
+            "ap-southeast-2",
+            "ca-central-1",
+            "eu-central-1",
+            "eu-central-2",
+            "eu-west-1",
+            "eu-west-2",
+            "eu-west-3",
+            "sa-east-1",
+            "us-east-1",
+            "us-west-2",
+        ],
+        "aws-cn": [],
+        "aws-us-gov": [
+            "us-gov-west-1",
+        ],
+    }
+}
 # cognito --> cognito-idp
 regions_by_service["services"]["cognito"] = regions_by_service["services"][
     "cognito-idp"