AWS wellarchitected documentation change
Summary
Added guidance for implementing generative AI governance frameworks through Cloud Center of Excellence (CCoE), including security controls, data governance, compliance tracking, and risk assessment.
Security assessment
The change introduces new documentation about security controls for AI components (data governance, compliance tracking, risk assessment) but doesn't reference any specific security vulnerability or incident. It's a proactive expansion of security best practices for emerging technology.
Diff
diff --git a/wellarchitected/latest/financial-services-industry-lens/fsisec01.md b/wellarchitected/latest/financial-services-industry-lens/fsisec01.md index b23c57d67..6acac8ceb 100644 --- a//wellarchitected/latest/financial-services-industry-lens/fsisec01.md +++ b//wellarchitected/latest/financial-services-industry-lens/fsisec01.md @@ -9 +9 @@ FSISEC01-BP01 Consider and leverage a Cloud Center of Excellence (CCoE)FSISEC01- -Cloud infrastructure provides more agility and responsiveness than traditional IT environments. This requires organizations to think differently about how they design, build, and manage applications. Cloud resources can be disposable. Because it is a pay-per-use model, it often requires a strong integration between IT governance and organizational governance. Financial services companies need to operate in a cloud environment that's agile and safe at the same time. +Cloud infrastructure provides more agility and responsiveness than traditional IT environments. This requires organizations to think differently about how they design, build, and manage applications. Cloud resources can be disposable. Because it is a pay-per-use model, it often requires a strong integration between IT governance and organizational governance. Financial services companies need to operate in a cloud environment that's agile and safe at the same time. With the adoption of generative AI capabilities, organizations need to implement comprehensive security controls across AI components while maintaining agility and innovation. @@ -14,0 +15,19 @@ When it comes to cloud adoption and governance, CCoEs (also referred as Cloud En +When implementing generative AI workloads, CCoEs should establish comprehensive governance frameworks that encompass: + + * AI model lifecycle management and approval processes + + * Data governance for training datasets and model inputs + + * Model performance monitoring and drift detection + + * Compliance tracking for AI regulatory requirements + + * Risk assessment frameworks for AI model deployment + + * Guardrails to control system behaviors + + * Standardized resource management for prompts and models + + + +