AWS wellarchitected documentation change
Summary
Added AI-specific security controls including Amazon Bedrock Guardrails, compliance templates for model governance, secure prompt management, and automated monitoring for AI outputs.
Security assessment
The change documents new security features for AI systems (content filtering, model access controls, output monitoring) but lacks evidence of addressing a specific security vulnerability. It enhances existing security documentation with AI-focused safeguards.
Diff
diff --git a/wellarchitected/latest/financial-services-industry-lens/fsisec02.md b/wellarchitected/latest/financial-services-industry-lens/fsisec02.md index 812480a63..b4371f6f0 100644 --- a//wellarchitected/latest/financial-services-industry-lens/fsisec02.md +++ b//wellarchitected/latest/financial-services-industry-lens/fsisec02.md @@ -17 +17,3 @@ AWS has services to help you identify, optimize and remediate resource configura -Ready-to-deploy templates are a quick and assertive way to measure what level of security is present in cloud environments. These templates are available both for best practices in technology such as database, serverless, and networking, and are aligned to frameworks that are widely accepted and recognized. Among the most suitable templates are [managed rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html), AWS Config [Conformance Packs](https://docs.aws.amazon.com/config/latest/developerguide/conformance-packs.html) in AWS Config, and [AWS Security Hub CSPM standards](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-available.html). FIs can benefit from Conformance Packs that are available and ready to be used for alignment to the financial services industry's standards and regulatory requirements, such as PCI-DSS, NYDFS, and FFIEC. +Ready-to-deploy templates are a quick and assertive way to measure what level of security is present in cloud environments. These templates are available both for best practices in technology such as database, serverless, and networking, and are aligned to frameworks that are widely + +accepted and recognized. Among the most suitable templates are [managed rules](https://docs.aws.amazon.com/config/latest/developerguide/managed-rules-by-aws-config.html), AWS Config [Conformance Packs](https://docs.aws.amazon.com/config/latest/developerguide/conformance-packs.html) in AWS Config, and [AWS Security Hub CSPM standards](https://docs.aws.amazon.com/securityhub/latest/userguide/standards-available.html). FIs can benefit from Conformance Packs that are available and ready to be used for alignment to the financial services industry's standards and regulatory requirements, such as PCI-DSS, NYDFS, and FFIEC. @@ -21 +23,14 @@ Ready-to-deploy templates are a quick and assertive way to measure what level of - * A Conformance Pack can be deployed as is or it can be edited to include your specific resources and use cases. For more information, see [Deploying a Conformance Pack Using the AWS Config Console](https://docs.aws.amazon.com/config/latest/developerguide/conformance-pack-console.html). + * Use Amazon Bedrock Guardrails for automated response validation and content filtering. + + * Use pre-configured security controls for AI service endpoints and model access. + + * Use compliance templates for AI model governance including model cards and documentation. + + * Deploy standard configurations for secure prompt management and version control. + + * Use automated monitoring for AI system outputs and potential security issues. + + + + + * A Conformance Pack can be deployed as is or it can be edited to include your specific resources and use cases. For more information, see [Deploying a Conformance Pack Using the AWS Config](https://docs.aws.amazon.com/config/latest/developerguide/conformance-pack-console.html) [Console](https://docs.aws.amazon.com/config/latest/developerguide/conformance-pack-console.html). @@ -26,0 +42,2 @@ Ready-to-deploy templates are a quick and assertive way to measure what level of + * Leverage Amazon Bedrock's Prompt Management catalog for secure prompt storage and version control. +