Amazon Bedrock AgentsとAWS Chatbotを使用したSlack生成AIチャットボットをCloudFormationで実装してみた

Parameters:
  FoundationModeId:
    Type: String
    Description: The Id of the foundation model.
    Default: "anthropic.claude-3-5-sonnet-20240620-v1:0"
  SlackChannelId:
    Type: String
    Description: The ID of the Slack channel.
    NoEcho: true
  SlackWorkspaceId:
    Type: String
    Description: The ID of the Slack workspace.
    NoEcho: true

Resources:
  BedrockAgentPolicy:
    Type: AWS::IAM::ManagedPolicy
    Properties:
      ManagedPolicyName: !Sub "AmazonBedrockExecutionPolicyForAgents_${AWS::StackName}"
      PolicyDocument:
        Version: 2012-10-17
        Statement:
          - Effect: Allow
            Action:
              - bedrock:InvokeModel
            Resource:
              - !Sub arn:aws:bedrock:${AWS::Region}::foundation-model/${FoundationModeId}

  BedrockAgentRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub "AmazonBedrockExecutionRoleForAgents_${AWS::StackName}"
      ManagedPolicyArns:
        - !Ref BedrockAgentPolicy
      AssumeRolePolicyDocument:
        Version: 2012-10-17
        Statement:
          - Effect: Allow
            Principal:
              Service: bedrock.amazonaws.com
            Action: sts:AssumeRole
            Condition:
              StringEquals:
                aws:SourceAccount: !Ref "AWS::AccountId"
              ArnLike:
                aws:SourceArn: !Sub "arn:aws:bedrock:${AWS::Region}:${AWS::AccountId}:agent/*"

  BedrockAgent:
    Type: AWS::Bedrock::Agent
    Properties:
      AgentName: !Sub "${AWS::StackName}-agent"
      AgentResourceRoleArn: !GetAtt BedrockAgentRole.Arn
      FoundationModel: !Ref FoundationModeId
      Instruction: "あなたはSlack用のチャットボットです。ユーザーと同じ言語で、親切に応対してください。"
      AutoPrepare: true

  BedrockAgentAlias:
    Type: AWS::Bedrock::AgentAlias
    Properties:
      AgentAliasName: !Sub "${AWS::StackName}-agent-alias-v1"
      AgentId: !Ref BedrockAgent

  ChatbotRole:
    Type: AWS::IAM::Role
    Properties:
      RoleName: !Sub ${AWS::StackName}-chatbot-role
      AssumeRolePolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: "Allow"
            Principal:
              Service: "chatbot.amazonaws.com"
            Action: "sts:AssumeRole"
      ManagedPolicyArns:
        - !Ref ChatbotPolicy

  ChatbotPolicy:
    Type: AWS::IAM::ManagedPolicy
    Properties:
      ManagedPolicyName: !Sub ${AWS::StackName}-chatbot-policy
      PolicyDocument:
        Version: "2012-10-17"
        Statement:
          - Effect: "Allow"
            Action:
              - "Bedrock:InvokeAgent"
            Resource: !GetAtt BedrockAgentAlias.AgentAliasArn

  SlackChatbot:
    Type: AWS::Chatbot::SlackChannelConfiguration
    Properties:
      ConfigurationName: !Sub ${AWS::StackName}-slack-chatbot
      IamRoleArn: !GetAtt ChatbotRole.Arn
      LoggingLevel: INFO
      SlackChannelId: !Ref SlackChannelId
      SlackWorkspaceId: !Ref SlackWorkspaceId

Outputs:
  AgentArn:
    Description: The ARN of the agent.
    Value: !GetAtt BedrockAgent.AgentArn
  AgentAliasId:
    Description: The ID of the agent alias.
    Value: !GetAtt BedrockAgentAlias.AgentAliasId