Bedrock guardrail prompt attack filter is set to HIGH

Check ID: bedrock_guardrail_prompt_attack_filter_enabled
Provider: AWS
Service: bedrock
Severity: HIGH
Categories: gen-ai
Resource type: Other

What this check verifies

Bedrock guardrails have the Prompt attack filter set to HIGH strength to detect and block injection and jailbreak patterns. Guardrails missing this setting or using lower strengths are identified.

Risk

Without HIGH prompt-attack filtering, models are exposed to prompt injection/jailbreaks:

Confidentiality: coerced disclosure of sensitive data
Integrity: policy evasion and manipulated outputs
Operations: unintended tool execution and workflow tampering

Recommendation

Set the Prompt attack filter to HIGH and apply defense in depth:

Tag user/external inputs as untrusted for evaluation
Combine with denied topics and sensitive-info filters
Enforce least privilege and approvals for risky actions
Monitor guardrail hits and tune to reduce false negatives

Remediation

CLI
Terraform
Native IaC
Dashboard steps

aws bedrock update-guardrail --guardrail-identifier <guardrail_id> --content-policy-config 'filtersConfig=[{type=PROMPT_ATTACK,inputStrength=HIGH}]'

resource "aws_bedrock_guardrail" "<example_resource_name>" {
  name                      = "<example_resource_name>"
  blocked_input_messaging   = "Blocked"
  blocked_outputs_messaging = "Blocked"

  content_policy_config {
    filters_config {
      type           = "PROMPT_ATTACK"   # Critical: enables the Prompt Attack filter
      input_strength = "HIGH"            # Critical: sets filter strength to HIGH to pass the check
    }
  }
}

Resources:
  <example_resource_name>:
    Type: AWS::Bedrock::Guardrail
    Properties:
      Name: <example_resource_name>
      BlockedInputMessaging: "Blocked"
      BlockedOutputsMessaging: "Blocked"
      ContentPolicyConfig:
        FiltersConfig:
          - Type: PROMPT_ATTACK         # Critical: enables the Prompt Attack filter
            InputStrength: HIGH         # Critical: sets filter strength to HIGH to pass the check

References

Where this check fires

This check runs on every scheduled scan against your AWS account. Findings appear at Cloud Security → Findings filterable by Check ID = bedrock_guardrail_prompt_attack_filter_enabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.

← Back to AWS checks

No IAM role has AmazonBedrockFullAccess attached Bedrock guardrail blocks or masks sensitive information

​What this check verifies

​Risk

​Recommendation

​Remediation

​References

​Where this check fires

What this check verifies

Risk

Recommendation

Remediation

References

Where this check fires