课程: Responsible AI on AWS: Bedrock Guardrails, Amazon Q Security, and SageMaker Clarify
免费学习该课程!
今天就开通帐号,24,700 门业界名师课程任您挑!
Amazon Bedrock security: Guardrails deep dive
课程: Responsible AI on AWS: Bedrock Guardrails, Amazon Q Security, and SageMaker Clarify
Amazon Bedrock security: Guardrails deep dive
- [Instructor] Amazon Bedrock implements a multi-layered security architecture that ensures defense in depth through authentication controls, guardrails, and also network security. And each layer operates independently while maintaining secure interfaces between components. Here, we have the authentication layer first that we'll take a look at, and the IAM roles enforce the principle of least privilege. So you hear this all the time with AWS PLP, and in this case it gives you access to the Bedrock API and resources and nothing more. We also have resource policies that are defined from the resource level, for granular access control. We have KMS encryption as well, which provides envelope encryption for data at rest and in transit. And then all authentication methods support long-term credentials and temporary session tokens as well. In the guardrails layer here, we have content filters that implement real-time scanning of prompts and responses. We have input validation that ensures…