Amazon Bedrock
by Amazon Web Services, Inc.
Fully managed foundation model platform with a unified API, agents, knowledge bases, and guardrails
Overview
Amazon Bedrock is a fully managed service that provides foundation models from leading AI companies and Amazon through a unified API. It supports building generative AI applications with security, privacy, and responsible AI capabilities, including model evaluation, RAG with knowledge bases, agents, and guardrails. Bedrock offers a serverless experience for experimentation, customization, and deployment without managing infrastructure.
Amazon Bedrock does not store customer input or output data, share data with third-party model providers, or use it to train models. Model invocations stay within the AWS network using dedicated deployment accounts that model providers cannot access.
AWS CLI references for all Bedrock service namespaces: control-plane operations (models, guardrails, customization, logging), agent management (agents, action groups, prompts, knowledge bases), agent runtime (invoke agents, sessions, KB queries), and inference runtime (invoke models, apply guardrails, async invocations).
Security Topics
Detailed guidance organized by security domain. Each topic includes authoritative sources, configuration responsibilities, and verification commands.
Identity & Access Management
IAM policies, least-privilege access, cross-service security, and privilege escalation prevention for Bedrock.
Data Encryption & KMS
KMS key management, encryption at rest and in transit, and S3 bucket security for Bedrock data.
Network Security
VPC endpoints, PrivateLink configuration, and network architecture for private Bedrock access.
Guardrails & Responsible AI
Content filtering, PII detection, prompt injection protection, and responsible AI practices.
Logging, Monitoring & Compliance
CloudWatch logging, Config Rules, threat detection, incident response, and compliance configuration.
Agents & Knowledge Bases
Bedrock Agents, Knowledge Bases, runtime sessions, and model evaluation commands.
Related Controls
Security controls from various frameworks that relate to Amazon Bedrock.