Check ID: bedrock_guardrail_sensitive_information_filter_enabled
Provider: AWS
Service: bedrock
Severity: HIGH
Categories: gen-ai
Resource type: Other

​
What this check verifies

Bedrock guardrails use sensitive information filters to block or mask detected PII and custom pattern matches in prompts and responses. The evaluation looks for guardrails with this filtering configured.

​
Risk

Absent filtering, prompts or outputs can reveal PII, credentials, or financial records, compromising confidentiality.
  • Exposed tokens enable unauthorized access and data tampering (integrity)
  • Disclosed customer details facilitate fraud and identity theft, with potential lateral movement

​
Recommendation

Enable and tune sensitive information filters for inputs and outputs.
  • Use BLOCK for high-risk disclosures; ANONYMIZE when context is needed
  • Add custom regex for org-specific IDs
  • Apply least privilege and data minimization
  • Test regularly and monitor outcomes as part of defense-in-depth

​
Remediation

aws bedrock update-guardrail --guardrail-identifier <example_resource_id> --sensitive-information-policy-config '{"piiEntitiesConfig":[{"type":"EMAIL","action":"ANONYMIZE"}]}'

​
References

​
Where this check fires

This check runs on every scheduled scan against your AWS account. Findings appear at Cloud Security → Findings filterable by Check ID = bedrock_guardrail_sensitive_information_filter_enabled. To re-evaluate after a fix, hit Run now on the account’s schedule under Cloud Security → Schedules — the next scan re-checks this control and marks the finding fixed or keeps it persistent.
← Back to AWS checks