AWS AWSCloudFormation high security documentation change
Summary
Added PII handling documentation including ANONYMIZE/BLOCK actions and evaluation settings
Security assessment
Documents sensitive data protection measures (PII anonymization/blocking) which are critical for privacy and compliance. Explicit security controls for data protection.
Diff
diff --git a/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-piientityconfig.md b/AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-piientityconfig.md index 52a5da40b..317149eb3 100644 --- a//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-piientityconfig.md +++ b//AWSCloudFormation/latest/TemplateReference/aws-properties-bedrock-guardrail-piientityconfig.md @@ -57 +57,10 @@ _Required_ : Yes -Property description not available. +Specifies the action to take when harmful content is detected in the input. Supported values include: + + * `BLOCK` – Block the content and replace it with blocked messaging. + + * `ANONYMIZE` – Mask the content and replace it with identifier tags. + + * `NONE` – Take no action but return detection information in the trace response. + + + @@ -70 +79 @@ _Required_ : No -Property description not available. +Specifies whether to enable guardrail evaluation on the input. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response. @@ -81 +90,10 @@ _Required_ : No -Property description not available. +Specifies the action to take when harmful content is detected in the output. Supported values include: + + * `BLOCK` – Block the content and replace it with blocked messaging. + + * `ANONYMIZE` – Mask the content and replace it with identifier tags. + + * `NONE` – Take no action but return detection information in the trace response. + + + @@ -94 +112 @@ _Required_ : No -Property description not available. +Indicates whether guardrail evaluation is enabled on the output. When disabled, you aren't charged for the evaluation. The evaluation doesn't appear in the response.