Fix BDA profile ARN generation for multi-region support

Author: Bob Strahan

lib/idp_common_pkg/idp_common/bda/bda_service.py

@@ -29,7 +29,12 @@ def __init__(
             region = os.environ.get("AWS_REGION", "us-east-1")
             identity = session.client("sts").get_caller_identity()
             account_id = identity.get("Account")
-            self._dataAutomationProfileArn = f"arn:aws:bedrock:{region}:{account_id}:data-automation-profile/us.data-automation-v1"
+
+            # Extract region prefix (us, eu, ap, ca, sa, etc.) for profile ARN
+            region_prefix = region.split("-")[0]
+            profile_id = f"{region_prefix}.data-automation-v1"
+
+            self._dataAutomationProfileArn = f"arn:aws:bedrock:{region}:{account_id}:data-automation-profile/{profile_id}"
 
         self._bda_client = boto3.client("bedrock-data-automation-runtime")
 

patterns/pattern-1/template.yaml

@@ -744,10 +744,7 @@ Resources:
             Action: bedrock:InvokeDataAutomationAsync
             Resource: 
               - !Ref BDAProjectArn
-              - !Sub "arn:${AWS::Partition}:bedrock:us-east-1:${AWS::AccountId}:data-automation-profile/us.data-automation-v1"
-              - !Sub "arn:${AWS::Partition}:bedrock:us-east-2:${AWS::AccountId}:data-automation-profile/us.data-automation-v1"
-              - !Sub "arn:${AWS::Partition}:bedrock:us-west-1:${AWS::AccountId}:data-automation-profile/us.data-automation-v1"
-              - !Sub "arn:${AWS::Partition}:bedrock:us-west-2:${AWS::AccountId}:data-automation-profile/us.data-automation-v1"
+              - !Sub "arn:${AWS::Partition}:bedrock:*:${AWS::AccountId}:data-automation-profile/*.data-automation-v1"
 
   InvokeBDAFunctionLogGroup:
     Type: AWS::Logs::LogGroup