AWS Security ChangesHomeSearch

AWS AWSCloudFormation high security documentation change

Service: AWSCloudFormation · 2025-07-25 · Security-related high

File: AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-contentfilterconfig.md

Summary

Added detailed descriptions for content filter configuration properties including actions (BLOCK/NONE) for harmful content detection, evaluation enablement, and input/output modalities

Security assessment

The changes document security controls (BLOCK action) for handling harmful content and explain evaluation mechanisms. This directly relates to content filtering security features.

Diff

diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-contentfilterconfig.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-contentfilterconfig.md
index b2a2ad66a..06c54c68e 100644
--- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-contentfilterconfig.md
+++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-contentfilterconfig.md
@@ -67 +67,8 @@ To declare this entity in your AWS CloudFormation template, use the following sy
-Property description not available.
+Specifies the action to take when harmful content is detected. Supported values include:
+
+  * `BLOCK` – Block the content and replace it with blocked messaging.
+
+  * `NONE` – Take no action but return detection information in the trace response.
+
+
+
@@ -80 +87 @@ _Required_ : No
-Property description not available.
+Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response.
@@ -91 +98 @@ _Required_ : No
-Property description not available.
+The input modalities selected for the guardrail content filter configuration.
@@ -117 +124,8 @@ _Required_ : Yes
-Property description not available.
+Specifies the action to take when harmful content is detected in the output. Supported values include:
+
+  * `BLOCK` – Block the content and replace it with blocked messaging.
+
+  * `NONE` – Take no action but return detection information in the trace response.
+
+
+
@@ -130 +144 @@ _Required_ : No
-Property description not available.
+Specifies whether to enable guardrail evaluation on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response.
@@ -141 +155 @@ _Required_ : No
-Property description not available.
+The output modalities selected for the guardrail content filter configuration.