AWS Security ChangesHomeSearch

AWS bedrock documentation change

Service: bedrock · 2025-04-20 · Documentation low

File: bedrock/latest/userguide/monitoring.md

Summary

Updated monitoring documentation to include Amazon S3 logging references, clarified successful request metrics, and expanded throttling behavior details

Security assessment

Adding S3 as a logging destination enhances monitoring capabilities which supports security best practices. The clarification about throttling behavior helps operational understanding but doesn't directly address vulnerabilities.

Diff

diff --git a/bedrock/latest/userguide/monitoring.md b/bedrock/latest/userguide/monitoring.md
index 461ddd081..f9c33bc00 100644
--- a//bedrock/latest/userguide/monitoring.md
+++ b//bedrock/latest/userguide/monitoring.md
@@ -15 +15 @@ For more information, see [What is Amazon CloudWatch](https://docs.aws.amazon.co
-  * [Monitor model invocation using CloudWatch Logs](./model-invocation-logging.html)
+  * [Monitor model invocation using CloudWatch Logs and Amazon S3](./model-invocation-logging.html)
@@ -38 +38 @@ Metric name | Unit | Description
-Invocations | SampleCount | Number of requests to the [Converse](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_Converse.html), [ConverseStream](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_ConverseStream.html), [InvokeModel](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModel.html), and [InvokeModelWithResponseStream](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModelWithResponseStream.html) API operations.  
+Invocations | SampleCount | Number of successful requests to the [Converse](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_Converse.html), [ConverseStream](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_ConverseStream.html), [InvokeModel](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModel.html), and [InvokeModelWithResponseStream](https://docs.aws.amazon.com/bedrock/latest/APIReference/API_runtime_InvokeModelWithResponseStream.html) API operations.  
@@ -42 +42 @@ InvocationServerErrors | SampleCount |  Number of invocations that result in AWS
-InvocationThrottles | SampleCount |  Number of invocations that the system throttled.  
+InvocationThrottles | SampleCount |  Number of invocations that the system throttled. Throttled requests and other invocation errors don't count as either Invocations or Errors. The number of throttles you see will depend on your retry settings in the SDK. For more information, see [Retry behavior](https://docs.aws.amazon.com/sdkref/latest/guide/feature-retry-behavior.html) in the AWS SDKs and Tools Reference Guide.   
@@ -94 +94 @@ Prompt injection security
-Monitor model invocation using CloudWatch Logs
+Monitor model invocation using CloudWatch Logs and Amazon S3