fix(bedrock): inference profiles permissions

[aws-rafams]

Fixes #991 (build run pending)

Usage (TS):

const modelId = 'anthropic.claude-3-7-sonnet-20250219-v1:0';
const model = BedrockFoundationModel.fromCdkFoundationModelId(
    { modelId: modelId },
    {
      supportsAgents: true,
      supportsCrossRegion: true,
    }
  );

  const inferenceProfile = CrossRegionInferenceProfile.fromConfig({
    geoRegion: CrossRegionInferenceProfileRegion.US,
    model: model,
  });

  new Agent(this, 'Agent', {
    name: 'test-agent-claude37',
    instruction: "You're a nice agent saying Konnichiwa in Hiragana at the start of every interaction",
    description: 'Agent description.',
    foundationModel: inferenceProfile,
    shouldPrepareAgent: true,
  });

The new policy:

No invocation errors:

---

By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of the project license.

[krokoko]

LGTM, fixed the build should be green soon

[codecov]

Codecov Report

Attention: Patch coverage is 75.00000% with 2 lines in your changes missing coverage. Please review.

Project coverage is 93.91%. Comparing base (c813d89) to head (1f69bdb).
Report is 1 commits behind head on main.

Files with missing lines	Patch %	Lines
...ference-profiles/cross-region-inference-profile.ts	0.00%	1 Missing ⚠️
src/cdk-lib/bedrock/models.ts	85.71%	1 Missing ⚠️

Additional details and impacted files

@@           Coverage Diff           @@
##             main     #994   +/-   ##
=======================================
  Coverage   93.91%   93.91%           
=======================================
  Files          62       62           
  Lines       18018    18023    +5     
  Branches      570      570           
=======================================
+ Hits        16921    16926    +5     
  Misses       1097     1097           

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

[mergify]

This pull request has been removed from the queue for the following reason: pull request dequeued.

Pull request #994 has been dequeued. The pull request could not be merged. This could be related to an activated branch protection or ruleset rule that prevents us from merging. (details: You're not authorized to push to this branch. Visit https://docs.github.com/repositories/configuring-branches-and-merges-in-your-repository/managing-protected-branches/about-protected-branches for more information.)

You should look at the reason for the failure and decide if the pull request needs to be fixed or if you want to requeue it.

If you want to requeue this pull request, you need to post a comment with the text: @mergifyio requeue