AWS bedrock documentation change
Summary
Updated documentation formatting, metric names, and CloudWatch monitoring instructions. Added explicit CloudWatch namespace and reorganized permission requirements.
Security assessment
The changes emphasize proper CloudWatch permissions requirements and access control documentation, but there's no evidence of addressing a specific security vulnerability. The updates improve security documentation clarity but don't resolve a known issue.
Diff
diff --git a/bedrock/latest/userguide/monitoring-guardrails-cw-metrics.md b/bedrock/latest/userguide/monitoring-guardrails-cw-metrics.md index a828a4cdc..e287e2106 100644 --- a//bedrock/latest/userguide/monitoring-guardrails-cw-metrics.md +++ b//bedrock/latest/userguide/monitoring-guardrails-cw-metrics.md @@ -5 +5 @@ -# Monitor Amazon Bedrock Guardrails using CloudWatch Metrics +# Monitor Amazon Bedrock Guardrails using CloudWatch metrics @@ -7 +7 @@ -The following table describes runtime metrics provided by guardrails that you can monitor with CloudWatch Metrics. +The following table describes runtime metrics provided by Amazon Bedrock Guardrails that you can monitor withAmazon CloudWatch metrics. @@ -13 +13 @@ Metric name | Unit | Description -Invocations | SampleCount | Number of requests to the ApplyGuardrail API operation +Invocations | SampleCount | Number of requests to the `ApplyGuardrail` API operation @@ -17 +17 @@ InvocationServerErrors | SampleCount | Number of invocations that result in AWS -InvocationThrottles | SampleCount | Number of invocations that the system throttled. Throttled requests and other invocation errors don't count as either Invocations or Errors. +InvocationThrottles | SampleCount | Number of invocations that the system throttled. Throttled requests don't count as invocations or errors @@ -70 +70 @@ GuardrailArn, GuardrailVersion | - * Guardrail Arn + * Guardrail ARN @@ -85 +85 @@ GuardrailArn, GuardrailVersion | -**Use CloudWatch metrics for guardrails** +**Get CloudWatch metrics for guardrails** @@ -89,3 +89 @@ You can get metrics for guardrails with the AWS Management Console, the AWS CLI, -###### Note - -You must have the appropriate CloudWatch permissions to monitor guardrails with CloudWatch. +The namespace for guardrail metrics in CloudWatch is `AWS/Bedrock/Guardrails`. @@ -93 +91 @@ You must have the appropriate CloudWatch permissions to monitor guardrails with -For more information, see [Authentication and Access Control for CloudWatch](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html) in the CloudWatch User Guide. +###### Note @@ -95 +93 @@ For more information, see [Authentication and Access Control for CloudWatch](htt -**View guardrails metrics in the CloudWatch Console** +You must have the appropriate CloudWatch permissions to monitor guardrails with CloudWatch. For more information, see [Authentication and Access Control for CloudWatch](https://docs.aws.amazon.com/AmazonCloudWatch/latest/monitoring/auth-and-access-control-cw.html) in the CloudWatch User Guide. @@ -97 +95 @@ For more information, see [Authentication and Access Control for CloudWatch](htt -To view metrics (in the CloudWatch console): +**View guardrails metrics in the CloudWatch console** @@ -101 +99 @@ To view metrics (in the CloudWatch console): - 2. Choose the AWS/Bedrock/Guardrails namespace. + 2. Choose the `AWS/Bedrock/Guardrails` namespace. @@ -114 +112 @@ Monitor knowledge bases using CloudWatch Logs -Monitor job state changes using EventBridge +Monitor Agents using CloudWatch Metrics