AI/ML Security Assessment Report

Unique Check IDs

109

Distinct Check_ID values represented

Report Rows

406

Visible rows across 3 regions

Open Action Items

Direct failed service rows

Lens / Compliance Rows

196

1 failed; may map to service rows

Failed High

3 of 27 direct high rows passed

Failed Medium / Low

1/0

Direct Medium / Low failed rows

Priority Recommendations

Marketplace Subscription Access Check

Bedrock

Cross-Account Guardrails Enforcement Check

Bedrock

AgentCore Service-Linked Role Missing

AgentCore

Severity Legend

View full methodology

Severity	Meaning	Recommended Action
High	Direct security risk - IAM/access control gaps, missing audit trails, guardrail bypasses that could lead to unauthorized access or data exposure	Remediate within 7 days
Medium	Defense-in-depth gaps - encryption, logging, or configuration issues that reduce security posture	Remediate within 30 days
Low	Best practice deviations - optimization opportunities that improve security hygiene	Remediate within 90 days
Informational	Not applicable, unavailable, no resources found, or advisory-only rows	No action required

Risk Distribution

Direct Service Scored Row Results by Severity

HIGH

11.1%

3 of 27 scored rows passed

MEDIUM

38.5%

10 of 26 scored rows passed

LOW

30.0%

3 of 10 scored rows passed

Overall

25.4%

16 of 63 scored rows passed

Direct Failed Rows by Region / Scope

eu-west-1

0 High · 0 Med · 0 Low

us-east-1

0 High · 0 Med · 0 Low

us-west-2

0 High · 0 Med · 0 Low

Global

4 High · 1 Med · 0 Low

Findings by Assessment Area

Bedrock

4 Failed · 2 Passed

SageMaker

0 Failed · 13 Passed

AgentCore

1 Failed · 1 Passed

Agentic AI Security

1 Failed · 1 Passed · 73 N/A

Financial Services Risk

0 Failed · 0 Passed · 3 N/A

OWASP Top 10 LLM

121

0 Failed · 9 Passed · 112 N/A

All Security Findings

Account ID	Region	Check ID	Finding	Severity	Status
`123456789012`	`eu-west-1`	`BR-02`	Amazon Bedrock private connectivity check Details and remediation Details No regional Bedrock resources found to assess private connectivity Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-04`	Bedrock Model Invocation Logging Check Details and remediation Details No regional Bedrock resources found to monitor with invocation logging Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-05`	Bedrock Guardrails Check Details and remediation Details No regional Bedrock resources found to protect with guardrails Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-06`	Bedrock CloudTrail Logging Check Details and remediation Details No regional Bedrock resources found to audit with Bedrock-specific CloudTrail coverage Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-07`	Bedrock Prompt Management Check Details and remediation Details Prompt Management feature is not being used. This may lead to inconsistent prompt handling and suboptimal model responses. Resolution Implement Prompt Management to: 1. Create and version your prompts 2. Test different prompt variants 3. Share prompts across your organization 4. Maintain consistent prompt templates Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-08`	Bedrock Agent IAM Roles Check Details and remediation Details No Bedrock agents found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-09`	Bedrock Knowledge Base Encryption Check Details and remediation Details No Knowledge Bases found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-10`	Bedrock Guardrail IAM Enforcement Check Details and remediation Details No guardrails configured - IAM enforcement check not applicable Resolution Configure Bedrock Guardrails first, then enforce their use via IAM policies Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-11`	Bedrock Custom Model Encryption Check Details and remediation Details No custom/fine-tuned models found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-12`	Bedrock Invocation Log Encryption Check Details and remediation Details Model invocation logging to S3 is not configured Resolution If logging is enabled to CloudWatch only, ensure CloudWatch log group uses CMK encryption Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-13`	Bedrock Flows Guardrails Check Details and remediation Details No Bedrock Flows found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-16`	Guardrail Tier Validation Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create Bedrock guardrails with Standard tier for enhanced content filtering and protection Reference	Medium	N/A
`123456789012`	`eu-west-1`	`BR-17`	Custom Model Customer-Managed KMS Encryption Check Details and remediation Details No custom (fine-tuned) Bedrock models found in this region Resolution When creating custom models, specify a customer-managed KMS key for encryption to maintain control over encryption keys Reference	High	N/A
`123456789012`	`eu-west-1`	`BR-18`	Model Evaluation Implementation Check Details and remediation Details No regional Bedrock resources found to assess with model evaluation jobs Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-19`	Prompt Flow Validation Check Details and remediation Details No Bedrock prompt flows configured in this region Resolution When creating prompt flows, use the ValidateFlowDefinition API to validate flow definitions before deployment Reference	Medium	N/A
`123456789012`	`eu-west-1`	`BR-20`	Knowledge Base Customer-Managed KMS Encryption Check Details and remediation Details No Bedrock knowledge bases found in this region Resolution When creating knowledge bases, specify customer-managed KMS keys for both vector store and data source encryption Reference	High	N/A
`123456789012`	`eu-west-1`	`BR-21`	Agent Action Group IAM Least Privilege Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents with action groups, ensure Lambda execution roles follow least privilege principles Reference	High	N/A
`123456789012`	`eu-west-1`	`BR-22`	Model Invocation Throttling Limits Check Details and remediation Details No regional Bedrock resources found to assess model invocation throttling quotas Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-23`	Guardrail Content Filter Coverage Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with all content filters enabled (hate, insults, sexual, violence) with appropriate thresholds Reference	High	N/A
`123456789012`	`eu-west-1`	`BR-24`	Automated Reasoning Policy Implementation Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with Automated Reasoning policies for formal verification of model responses Reference	Medium	N/A
`123456789012`	`eu-west-1`	`BR-25`	RAG Evaluation Jobs Check Details and remediation Details No Bedrock knowledge bases found in this region Resolution When implementing RAG applications, configure evaluation jobs to assess context relevance, response correctness, and prevent hallucinations Reference	Low	N/A
`123456789012`	`eu-west-1`	`BR-26`	Guardrail Sensitive Information Filter Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with sensitive-information filters (PII entities and/or regex patterns) to detect and redact sensitive data in prompts and model responses Reference	High	N/A
`123456789012`	`eu-west-1`	`BR-27`	Guardrail Contextual Grounding Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with contextual grounding checks to detect hallucinations (ungrounded responses) and irrelevant answers, especially for RAG applications Reference	Medium	N/A
`123456789012`	`eu-west-1`	`BR-28`	Agent Guardrail Association Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents, associate a Bedrock guardrail so agent inputs and responses are filtered for harmful content, PII, and denied topics Reference	High	N/A
`123456789012`	`eu-west-1`	`BR-29`	Agent Idle Session TTL Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents, set a conservative idleSessionTTLInSeconds to limit how long an idle session remains resumable Reference	Low	N/A
`123456789012`	`eu-west-1`	`BR-30`	Imported Model Customer-Managed KMS Encryption Check Details and remediation Details Unable to check Imported model encryption check: An error occurred (AccessDeniedException) when calling the ListImportedModels operation: Your account is not authorized to invoke this API operation. Resolution Amazon Bedrock Custom Model Import is not enabled or available for this account in this region. No IAM change is required; the check applies only once model import is in use. Reference	Low	N/A
`123456789012`	`eu-west-1`	`BR-31`	Batch Inference Output Encryption Check Details and remediation Details No Bedrock batch inference (model invocation) jobs found in this region Resolution When creating batch inference jobs, set outputDataConfig.s3OutputDataConfig.s3EncryptionKeyId to a customer-managed KMS key to encrypt the job output Reference	Medium	N/A
`123456789012`	`eu-west-1`	`BR-32`	Bedrock CloudWatch Alarm Check Details and remediation Details No regional Bedrock resources found to monitor with CloudWatch alarms Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`BR-33`	Amazon Inspector Lambda Code Scanning Check Details and remediation Details No Lambda functions with Bedrock indicators were found in eu-west-1; Inspector Lambda code-scanning coverage was not assessed for Bedrock-calling Lambda workloads. Resolution No action required. If Bedrock-calling Lambda functions exist, ensure their function name, ARN, description, handler, role, or environment variables contain a Bedrock identifier that the assessment can detect, or evaluate Inspector coverage manually. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-07`	Agentic AI Model Invocation Logging Details and remediation Details Agentic AI security domain: Auditability & Observability. Agents can take multi-step actions, so prompt, response, and guardrail traces need to be available for investigation. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Amazon Bedrock model invocation logging and retain logs according to your incident response and data governance requirements. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-08`	Agentic AI API Audit Trail Details and remediation Details Agentic AI security domain: Auditability & Observability. Agent activity must be attributable through CloudTrail events for Bedrock control plane and runtime operations. Source check BR-06: No regional Bedrock resources found to audit with Bedrock-specific CloudTrail coverage Resolution Enable CloudTrail trails with management event logging and validate that Bedrock API activity is captured. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-10`	Agentic AI Adversarial Evaluation Coverage Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Agentic applications should be tested for adversarial prompts and unsafe behaviors before production use. Source check BR-18: No regional Bedrock resources found to assess with model evaluation jobs Resolution Configure model or application evaluations that include adversarial, safety, and security-relevant test cases. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-11`	Agentic AI Prompt Flow Validation Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Validated prompt flows reduce the risk that malformed orchestration logic causes unsafe agent behavior. Source check BR-19: No Bedrock prompt flows configured in this region Resolution Validate Bedrock flow definitions before deployment and remediate validation findings before publishing new versions. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-06`	Agentic AI Tool Execution Least Privilege Details and remediation Details Agentic AI security domain: Tool Authorization. Agent action groups are tool execution boundaries; over-permissive roles can let an agent perform unintended operations. Source check BR-21: No Bedrock agents configured in this region Resolution Restrict action group Lambda roles and referenced IAM permissions to the specific tools, resources, and actions required. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-12`	Agentic AI Invocation Abuse Controls Details and remediation Details Agentic AI security domain: Abuse & Cost Protection. Autonomous agents can amplify token usage through retries, loops, or high-volume tool workflows. Source check BR-22: No regional Bedrock resources found to assess model invocation throttling quotas Resolution Configure service quotas, throttling limits, and alerting to detect and limit abnormal model invocation patterns. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-02`	Agentic AI Harmful Content Guardrail Coverage Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Agents should use guardrails that filter harmful content in both intermediate and final responses. Source check BR-23: No Bedrock guardrails configured in this region Resolution Configure guardrails with appropriate content filters and thresholds for all agent-facing workloads. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-04`	Agentic AI Automated Reasoning Guardrails Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Automated reasoning policies help verify agent responses against deterministic business or safety rules. Source check BR-24: No Bedrock guardrails configured in this region Resolution Configure automated reasoning policies on guardrails where formal response validation is required. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-03`	Agentic AI Sensitive Information Protection Details and remediation Details Agentic AI security domain: Memory & Data Privacy. Agents can receive and produce sensitive data across conversations, tool calls, and retrieved context. Source check BR-26: No Bedrock guardrails configured in this region Resolution Configure guardrail sensitive-information filters for PII entities and custom sensitive-data patterns. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-05`	Agentic AI Grounding Controls Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Grounding checks reduce the chance that an agent acts on hallucinated or irrelevant context. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable contextual grounding checks on guardrails for RAG and tool-using agent workflows. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-01`	Agentic AI Agent Guardrail Association Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Bedrock agents should have guardrails associated so autonomous interactions are filtered consistently. Source check BR-28: No Bedrock agents configured in this region Resolution Associate an approved Bedrock guardrail with each Bedrock agent and prepare the agent after updating. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-13`	Agentic AI Session Boundary Details and remediation Details Agentic AI security domain: Bounded Autonomy. Long-lived idle sessions widen the window for session reuse and unintended continuation of agent context. Source check BR-29: No Bedrock agents configured in this region Resolution Set a conservative idleSessionTTLInSeconds value for agents based on application session requirements. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-14`	Agentic AI Operational Abuse Alarms Details and remediation Details Agentic AI security domain: Abuse & Cost Protection. CloudWatch alarms help detect anomalous invocation errors, throttling, or volume caused by autonomous workflows. Source check BR-32: No regional Bedrock resources found to monitor with CloudWatch alarms Resolution Configure CloudWatch alarms for Bedrock invocation errors, throttles, latency, and token or request volume where metrics are available. Reference	Informational	N/A
`123456789012`	`Global`	`BR-01`	AmazonBedrockFullAccess role check Details and remediation Details No roles found with AmazonBedrockFullAccess policy Resolution No action required Reference	High	Passed
`123456789012`	`Global`	`BR-03`	Marketplace Subscription Access Check Details and remediation Details Role 'aws-elasticbeanstalk-ec2-role' has overly permissive marketplace subscription access through policy 'AWSElasticBeanstalkMulticontainerDocker' Resolution Ensure that users have access to only the models that you want user to be able to subscribe to based on your organizational policies. For example, you may want users to have access to only text based models and not image and video generation model. This can also help to keep cost in check. Reference	High	Failed
`123456789012`	`Global`	`BR-03`	Marketplace Subscription Access Check Details and remediation Details Role 'RescoAppStack-Ec2Role2FD9A272-UB7xzDXt03Lg' has overly permissive marketplace subscription access through policy 'AWSElasticBeanstalkWebTier' Resolution Ensure that users have access to only the models that you want user to be able to subscribe to based on your organizational policies. For example, you may want users to have access to only text based models and not image and video generation model. This can also help to keep cost in check. Reference	High	Failed
`123456789012`	`Global`	`BR-03`	Marketplace Subscription Access Check Details and remediation Details Role 'xray-sample-SampleInstanceProfileRole-1WB21O2X8T7ZV' has overly permissive marketplace subscription access through policy 'AWSElasticBeanstalkWebTier' Resolution Ensure that users have access to only the models that you want user to be able to subscribe to based on your organizational policies. For example, you may want users to have access to only text based models and not image and video generation model. This can also help to keep cost in check. Reference	High	Failed
`123456789012`	`us-east-1`	`BR-02`	Amazon Bedrock private connectivity check Details and remediation Details No regional Bedrock resources found to assess private connectivity Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-04`	Bedrock Model Invocation Logging Check Details and remediation Details No regional Bedrock resources found to monitor with invocation logging Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-05`	Bedrock Guardrails Check Details and remediation Details No regional Bedrock resources found to protect with guardrails Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-06`	Bedrock CloudTrail Logging Check Details and remediation Details No regional Bedrock resources found to audit with Bedrock-specific CloudTrail coverage Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-07`	Bedrock Prompt Management Check Details and remediation Details Prompt Management feature is not being used. This may lead to inconsistent prompt handling and suboptimal model responses. Resolution Implement Prompt Management to: 1. Create and version your prompts 2. Test different prompt variants 3. Share prompts across your organization 4. Maintain consistent prompt templates Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-08`	Bedrock Agent IAM Roles Check Details and remediation Details No Bedrock agents found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-09`	Bedrock Knowledge Base Encryption Check Details and remediation Details No Knowledge Bases found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-10`	Bedrock Guardrail IAM Enforcement Check Details and remediation Details No guardrails configured - IAM enforcement check not applicable Resolution Configure Bedrock Guardrails first, then enforce their use via IAM policies Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-11`	Bedrock Custom Model Encryption Check Details and remediation Details No custom/fine-tuned models found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-12`	Bedrock Invocation Log Encryption Check Details and remediation Details Model invocation logging to S3 is not configured Resolution If logging is enabled to CloudWatch only, ensure CloudWatch log group uses CMK encryption Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-13`	Bedrock Flows Guardrails Check Details and remediation Details No Bedrock Flows found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`Global`	`BR-15`	Cross-Account Guardrails Enforcement Check Details and remediation Details Bedrock Guardrails policy type is not enabled at the organization level. Cross-account guardrails cannot be enforced without enabling this policy type. Resolution Enable Bedrock Guardrails policy type in AWS Organizations to enforce consistent safety controls across all accounts. Use AWS Organizations console or CLI to enable the policy type. Reference	High	Failed
`123456789012`	`us-east-1`	`BR-16`	Guardrail Tier Validation Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create Bedrock guardrails with Standard tier for enhanced content filtering and protection Reference	Medium	N/A
`123456789012`	`us-east-1`	`BR-17`	Custom Model Customer-Managed KMS Encryption Check Details and remediation Details No custom (fine-tuned) Bedrock models found in this region Resolution When creating custom models, specify a customer-managed KMS key for encryption to maintain control over encryption keys Reference	High	N/A
`123456789012`	`us-east-1`	`BR-18`	Model Evaluation Implementation Check Details and remediation Details No regional Bedrock resources found to assess with model evaluation jobs Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-19`	Prompt Flow Validation Check Details and remediation Details No Bedrock prompt flows configured in this region Resolution When creating prompt flows, use the ValidateFlowDefinition API to validate flow definitions before deployment Reference	Medium	N/A
`123456789012`	`us-east-1`	`BR-20`	Knowledge Base Customer-Managed KMS Encryption Check Details and remediation Details No Bedrock knowledge bases found in this region Resolution When creating knowledge bases, specify customer-managed KMS keys for both vector store and data source encryption Reference	High	N/A
`123456789012`	`us-east-1`	`BR-21`	Agent Action Group IAM Least Privilege Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents with action groups, ensure Lambda execution roles follow least privilege principles Reference	High	N/A
`123456789012`	`us-east-1`	`BR-22`	Model Invocation Throttling Limits Check Details and remediation Details No regional Bedrock resources found to assess model invocation throttling quotas Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-23`	Guardrail Content Filter Coverage Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with all content filters enabled (hate, insults, sexual, violence) with appropriate thresholds Reference	High	N/A
`123456789012`	`us-east-1`	`BR-24`	Automated Reasoning Policy Implementation Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with Automated Reasoning policies for formal verification of model responses Reference	Medium	N/A
`123456789012`	`us-east-1`	`BR-25`	RAG Evaluation Jobs Check Details and remediation Details No Bedrock knowledge bases found in this region Resolution When implementing RAG applications, configure evaluation jobs to assess context relevance, response correctness, and prevent hallucinations Reference	Low	N/A
`123456789012`	`us-east-1`	`BR-26`	Guardrail Sensitive Information Filter Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with sensitive-information filters (PII entities and/or regex patterns) to detect and redact sensitive data in prompts and model responses Reference	High	N/A
`123456789012`	`us-east-1`	`BR-27`	Guardrail Contextual Grounding Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with contextual grounding checks to detect hallucinations (ungrounded responses) and irrelevant answers, especially for RAG applications Reference	Medium	N/A
`123456789012`	`us-east-1`	`BR-28`	Agent Guardrail Association Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents, associate a Bedrock guardrail so agent inputs and responses are filtered for harmful content, PII, and denied topics Reference	High	N/A
`123456789012`	`us-east-1`	`BR-29`	Agent Idle Session TTL Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents, set a conservative idleSessionTTLInSeconds to limit how long an idle session remains resumable Reference	Low	N/A
`123456789012`	`us-east-1`	`BR-30`	Imported Model Customer-Managed KMS Encryption Check Details and remediation Details No imported custom Bedrock models found in this region Resolution When importing models, specify a customer-managed KMS key for encryption to maintain control over encryption keys Reference	High	N/A
`123456789012`	`us-east-1`	`BR-31`	Batch Inference Output Encryption Check Details and remediation Details No Bedrock batch inference (model invocation) jobs found in this region Resolution When creating batch inference jobs, set outputDataConfig.s3OutputDataConfig.s3EncryptionKeyId to a customer-managed KMS key to encrypt the job output Reference	Medium	N/A
`123456789012`	`us-east-1`	`BR-32`	Bedrock CloudWatch Alarm Check Details and remediation Details No regional Bedrock resources found to monitor with CloudWatch alarms Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`BR-33`	Amazon Inspector Lambda Code Scanning Check Details and remediation Details Amazon Inspector Lambda standard scanning and Lambda code scanning are both ENABLED in us-east-1. Detected 1 Lambda function(s) with Bedrock indicators: aiml-security-aiml-sec-123456789012-BedrockAssessment. Resolution No action required. Reference	Medium	Passed
`123456789012`	`us-east-1`	`AG-07`	Agentic AI Model Invocation Logging Details and remediation Details Agentic AI security domain: Auditability & Observability. Agents can take multi-step actions, so prompt, response, and guardrail traces need to be available for investigation. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Amazon Bedrock model invocation logging and retain logs according to your incident response and data governance requirements. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-08`	Agentic AI API Audit Trail Details and remediation Details Agentic AI security domain: Auditability & Observability. Agent activity must be attributable through CloudTrail events for Bedrock control plane and runtime operations. Source check BR-06: No regional Bedrock resources found to audit with Bedrock-specific CloudTrail coverage Resolution Enable CloudTrail trails with management event logging and validate that Bedrock API activity is captured. Reference	Informational	N/A
`123456789012`	`Global`	`AG-09`	Agentic AI Guardrail Enforcement Boundary Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Organization-level guardrail enforcement helps prevent agents from bypassing required safety controls across accounts. Source check BR-15: Bedrock Guardrails policy type is not enabled at the organization level. Cross-account guardrails cannot be enforced without enabling this policy type. Resolution Use IAM and organization controls to require approved guardrails for model and agent invocations where supported. Reference	High	Failed
`123456789012`	`us-east-1`	`AG-10`	Agentic AI Adversarial Evaluation Coverage Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Agentic applications should be tested for adversarial prompts and unsafe behaviors before production use. Source check BR-18: No regional Bedrock resources found to assess with model evaluation jobs Resolution Configure model or application evaluations that include adversarial, safety, and security-relevant test cases. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-11`	Agentic AI Prompt Flow Validation Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Validated prompt flows reduce the risk that malformed orchestration logic causes unsafe agent behavior. Source check BR-19: No Bedrock prompt flows configured in this region Resolution Validate Bedrock flow definitions before deployment and remediate validation findings before publishing new versions. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-06`	Agentic AI Tool Execution Least Privilege Details and remediation Details Agentic AI security domain: Tool Authorization. Agent action groups are tool execution boundaries; over-permissive roles can let an agent perform unintended operations. Source check BR-21: No Bedrock agents configured in this region Resolution Restrict action group Lambda roles and referenced IAM permissions to the specific tools, resources, and actions required. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-12`	Agentic AI Invocation Abuse Controls Details and remediation Details Agentic AI security domain: Abuse & Cost Protection. Autonomous agents can amplify token usage through retries, loops, or high-volume tool workflows. Source check BR-22: No regional Bedrock resources found to assess model invocation throttling quotas Resolution Configure service quotas, throttling limits, and alerting to detect and limit abnormal model invocation patterns. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-02`	Agentic AI Harmful Content Guardrail Coverage Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Agents should use guardrails that filter harmful content in both intermediate and final responses. Source check BR-23: No Bedrock guardrails configured in this region Resolution Configure guardrails with appropriate content filters and thresholds for all agent-facing workloads. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-04`	Agentic AI Automated Reasoning Guardrails Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Automated reasoning policies help verify agent responses against deterministic business or safety rules. Source check BR-24: No Bedrock guardrails configured in this region Resolution Configure automated reasoning policies on guardrails where formal response validation is required. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-03`	Agentic AI Sensitive Information Protection Details and remediation Details Agentic AI security domain: Memory & Data Privacy. Agents can receive and produce sensitive data across conversations, tool calls, and retrieved context. Source check BR-26: No Bedrock guardrails configured in this region Resolution Configure guardrail sensitive-information filters for PII entities and custom sensitive-data patterns. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-05`	Agentic AI Grounding Controls Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Grounding checks reduce the chance that an agent acts on hallucinated or irrelevant context. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable contextual grounding checks on guardrails for RAG and tool-using agent workflows. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-01`	Agentic AI Agent Guardrail Association Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Bedrock agents should have guardrails associated so autonomous interactions are filtered consistently. Source check BR-28: No Bedrock agents configured in this region Resolution Associate an approved Bedrock guardrail with each Bedrock agent and prepare the agent after updating. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-13`	Agentic AI Session Boundary Details and remediation Details Agentic AI security domain: Bounded Autonomy. Long-lived idle sessions widen the window for session reuse and unintended continuation of agent context. Source check BR-29: No Bedrock agents configured in this region Resolution Set a conservative idleSessionTTLInSeconds value for agents based on application session requirements. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-14`	Agentic AI Operational Abuse Alarms Details and remediation Details Agentic AI security domain: Abuse & Cost Protection. CloudWatch alarms help detect anomalous invocation errors, throttling, or volume caused by autonomous workflows. Source check BR-32: No regional Bedrock resources found to monitor with CloudWatch alarms Resolution Configure CloudWatch alarms for Bedrock invocation errors, throttles, latency, and token or request volume where metrics are available. Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-02`	Amazon Bedrock private connectivity check Details and remediation Details No regional Bedrock resources found to assess private connectivity Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-04`	Bedrock Model Invocation Logging Check Details and remediation Details No regional Bedrock resources found to monitor with invocation logging Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-05`	Bedrock Guardrails Check Details and remediation Details No regional Bedrock resources found to protect with guardrails Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-06`	Bedrock CloudTrail Logging Check Details and remediation Details No regional Bedrock resources found to audit with Bedrock-specific CloudTrail coverage Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-07`	Bedrock Prompt Management Check Details and remediation Details Prompt Management feature is not being used. This may lead to inconsistent prompt handling and suboptimal model responses. Resolution Implement Prompt Management to: 1. Create and version your prompts 2. Test different prompt variants 3. Share prompts across your organization 4. Maintain consistent prompt templates Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-08`	Bedrock Agent IAM Roles Check Details and remediation Details No Bedrock agents found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-09`	Bedrock Knowledge Base Encryption Check Details and remediation Details No Knowledge Bases found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-10`	Bedrock Guardrail IAM Enforcement Check Details and remediation Details No guardrails configured - IAM enforcement check not applicable Resolution Configure Bedrock Guardrails first, then enforce their use via IAM policies Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-11`	Bedrock Custom Model Encryption Check Details and remediation Details No custom/fine-tuned models found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-12`	Bedrock Invocation Log Encryption Check Details and remediation Details Model invocation logging to S3 is not configured Resolution If logging is enabled to CloudWatch only, ensure CloudWatch log group uses CMK encryption Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-13`	Bedrock Flows Guardrails Check Details and remediation Details No Bedrock Flows found in the account Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-16`	Guardrail Tier Validation Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create Bedrock guardrails with Standard tier for enhanced content filtering and protection Reference	Medium	N/A
`123456789012`	`us-west-2`	`BR-17`	Custom Model Customer-Managed KMS Encryption Check Details and remediation Details No custom (fine-tuned) Bedrock models found in this region Resolution When creating custom models, specify a customer-managed KMS key for encryption to maintain control over encryption keys Reference	High	N/A
`123456789012`	`us-west-2`	`BR-18`	Model Evaluation Implementation Check Details and remediation Details No regional Bedrock resources found to assess with model evaluation jobs Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-19`	Prompt Flow Validation Check Details and remediation Details No Bedrock prompt flows configured in this region Resolution When creating prompt flows, use the ValidateFlowDefinition API to validate flow definitions before deployment Reference	Medium	N/A
`123456789012`	`us-west-2`	`BR-20`	Knowledge Base Customer-Managed KMS Encryption Check Details and remediation Details No Bedrock knowledge bases found in this region Resolution When creating knowledge bases, specify customer-managed KMS keys for both vector store and data source encryption Reference	High	N/A
`123456789012`	`us-west-2`	`BR-21`	Agent Action Group IAM Least Privilege Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents with action groups, ensure Lambda execution roles follow least privilege principles Reference	High	N/A
`123456789012`	`us-west-2`	`BR-22`	Model Invocation Throttling Limits Check Details and remediation Details No regional Bedrock resources found to assess model invocation throttling quotas Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-23`	Guardrail Content Filter Coverage Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with all content filters enabled (hate, insults, sexual, violence) with appropriate thresholds Reference	High	N/A
`123456789012`	`us-west-2`	`BR-24`	Automated Reasoning Policy Implementation Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with Automated Reasoning policies for formal verification of model responses Reference	Medium	N/A
`123456789012`	`us-west-2`	`BR-25`	RAG Evaluation Jobs Check Details and remediation Details No Bedrock knowledge bases found in this region Resolution When implementing RAG applications, configure evaluation jobs to assess context relevance, response correctness, and prevent hallucinations Reference	Low	N/A
`123456789012`	`us-west-2`	`BR-26`	Guardrail Sensitive Information Filter Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with sensitive-information filters (PII entities and/or regex patterns) to detect and redact sensitive data in prompts and model responses Reference	High	N/A
`123456789012`	`us-west-2`	`BR-27`	Guardrail Contextual Grounding Check Details and remediation Details No Bedrock guardrails configured in this region Resolution Create guardrails with contextual grounding checks to detect hallucinations (ungrounded responses) and irrelevant answers, especially for RAG applications Reference	Medium	N/A
`123456789012`	`us-west-2`	`BR-28`	Agent Guardrail Association Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents, associate a Bedrock guardrail so agent inputs and responses are filtered for harmful content, PII, and denied topics Reference	High	N/A
`123456789012`	`us-west-2`	`BR-29`	Agent Idle Session TTL Check Details and remediation Details No Bedrock agents configured in this region Resolution When creating agents, set a conservative idleSessionTTLInSeconds to limit how long an idle session remains resumable Reference	Low	N/A
`123456789012`	`us-west-2`	`BR-30`	Imported Model Customer-Managed KMS Encryption Check Details and remediation Details No imported custom Bedrock models found in this region Resolution When importing models, specify a customer-managed KMS key for encryption to maintain control over encryption keys Reference	High	N/A
`123456789012`	`us-west-2`	`BR-31`	Batch Inference Output Encryption Check Details and remediation Details No Bedrock batch inference (model invocation) jobs found in this region Resolution When creating batch inference jobs, set outputDataConfig.s3OutputDataConfig.s3EncryptionKeyId to a customer-managed KMS key to encrypt the job output Reference	Medium	N/A
`123456789012`	`us-west-2`	`BR-32`	Bedrock CloudWatch Alarm Check Details and remediation Details No regional Bedrock resources found to monitor with CloudWatch alarms Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`BR-33`	Amazon Inspector Lambda Code Scanning Check Details and remediation Details No Lambda functions with Bedrock indicators were found in us-west-2; Inspector Lambda code-scanning coverage was not assessed for Bedrock-calling Lambda workloads. Resolution No action required. If Bedrock-calling Lambda functions exist, ensure their function name, ARN, description, handler, role, or environment variables contain a Bedrock identifier that the assessment can detect, or evaluate Inspector coverage manually. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-07`	Agentic AI Model Invocation Logging Details and remediation Details Agentic AI security domain: Auditability & Observability. Agents can take multi-step actions, so prompt, response, and guardrail traces need to be available for investigation. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Amazon Bedrock model invocation logging and retain logs according to your incident response and data governance requirements. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-08`	Agentic AI API Audit Trail Details and remediation Details Agentic AI security domain: Auditability & Observability. Agent activity must be attributable through CloudTrail events for Bedrock control plane and runtime operations. Source check BR-06: No regional Bedrock resources found to audit with Bedrock-specific CloudTrail coverage Resolution Enable CloudTrail trails with management event logging and validate that Bedrock API activity is captured. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-10`	Agentic AI Adversarial Evaluation Coverage Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Agentic applications should be tested for adversarial prompts and unsafe behaviors before production use. Source check BR-18: No regional Bedrock resources found to assess with model evaluation jobs Resolution Configure model or application evaluations that include adversarial, safety, and security-relevant test cases. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-11`	Agentic AI Prompt Flow Validation Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Validated prompt flows reduce the risk that malformed orchestration logic causes unsafe agent behavior. Source check BR-19: No Bedrock prompt flows configured in this region Resolution Validate Bedrock flow definitions before deployment and remediate validation findings before publishing new versions. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-06`	Agentic AI Tool Execution Least Privilege Details and remediation Details Agentic AI security domain: Tool Authorization. Agent action groups are tool execution boundaries; over-permissive roles can let an agent perform unintended operations. Source check BR-21: No Bedrock agents configured in this region Resolution Restrict action group Lambda roles and referenced IAM permissions to the specific tools, resources, and actions required. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-12`	Agentic AI Invocation Abuse Controls Details and remediation Details Agentic AI security domain: Abuse & Cost Protection. Autonomous agents can amplify token usage through retries, loops, or high-volume tool workflows. Source check BR-22: No regional Bedrock resources found to assess model invocation throttling quotas Resolution Configure service quotas, throttling limits, and alerting to detect and limit abnormal model invocation patterns. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-02`	Agentic AI Harmful Content Guardrail Coverage Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Agents should use guardrails that filter harmful content in both intermediate and final responses. Source check BR-23: No Bedrock guardrails configured in this region Resolution Configure guardrails with appropriate content filters and thresholds for all agent-facing workloads. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-04`	Agentic AI Automated Reasoning Guardrails Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Automated reasoning policies help verify agent responses against deterministic business or safety rules. Source check BR-24: No Bedrock guardrails configured in this region Resolution Configure automated reasoning policies on guardrails where formal response validation is required. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-03`	Agentic AI Sensitive Information Protection Details and remediation Details Agentic AI security domain: Memory & Data Privacy. Agents can receive and produce sensitive data across conversations, tool calls, and retrieved context. Source check BR-26: No Bedrock guardrails configured in this region Resolution Configure guardrail sensitive-information filters for PII entities and custom sensitive-data patterns. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-05`	Agentic AI Grounding Controls Details and remediation Details Agentic AI security domain: Prompt & Input Protection. Grounding checks reduce the chance that an agent acts on hallucinated or irrelevant context. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable contextual grounding checks on guardrails for RAG and tool-using agent workflows. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-01`	Agentic AI Agent Guardrail Association Details and remediation Details Agentic AI security domain: Guardrail Enforcement. Bedrock agents should have guardrails associated so autonomous interactions are filtered consistently. Source check BR-28: No Bedrock agents configured in this region Resolution Associate an approved Bedrock guardrail with each Bedrock agent and prepare the agent after updating. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-13`	Agentic AI Session Boundary Details and remediation Details Agentic AI security domain: Bounded Autonomy. Long-lived idle sessions widen the window for session reuse and unintended continuation of agent context. Source check BR-29: No Bedrock agents configured in this region Resolution Set a conservative idleSessionTTLInSeconds value for agents based on application session requirements. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-14`	Agentic AI Operational Abuse Alarms Details and remediation Details Agentic AI security domain: Abuse & Cost Protection. CloudWatch alarms help detect anomalous invocation errors, throttling, or volume caused by autonomous workflows. Source check BR-32: No regional Bedrock resources found to monitor with CloudWatch alarms Resolution Configure CloudWatch alarms for Bedrock invocation errors, throttles, latency, and token or request volume where metrics are available. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-01`	SageMaker Internet Access Check Details and remediation Details No SageMaker notebook instances or domains found to check Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-02`	SageMaker SSO Configuration Check Details and remediation Details No SageMaker domains found, or all domains use SSO with IAM Identity Center configured Resolution No action required Reference	Medium	Passed
`123456789012`	`eu-west-1`	`SM-03`	Data Protection Check Details and remediation Details No SageMaker resources found to check for data protection Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-04`	GuardDuty Enabled Details and remediation Details Amazon GuardDuty is properly enabled and monitoring for security threats in SageMaker workloads. Resolution No action required Reference	Medium	Passed
`123456789012`	`eu-west-1`	`SM-05`	SageMaker Model Registry Issue Details and remediation Details No model package groups found Resolution Implement model versioning using SageMaker Model Registry to track model lineage, approve model versions, and manage model deployment Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-05`	SageMaker Feature Store Issue Details and remediation Details No feature groups found Resolution Utilize SageMaker Feature Store to create, share, and manage features for machine learning development and production Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-05`	SageMaker Pipelines Issue Details and remediation Details No ML pipelines found Resolution Implement SageMaker Pipelines to automate and manage ML workflows, including data preparation, training, and model deployment Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-06`	SageMaker Clarify No Clarify Usage Details and remediation Details No SageMaker Clarify jobs found Resolution Implement SageMaker Clarify for model explainability and bias detection Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-07`	SageMaker Model Monitor No Model Monitoring Details and remediation Details No Model Monitor schedules found Resolution Configure comprehensive model monitoring schedules Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-08`	Model Registry Registry Not Used Details and remediation Details Model Registry is not being utilized Resolution Implement proper model versioning and approval workflows Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-09`	SageMaker Notebook Root Access Check Details and remediation Details No notebook instances found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-10`	SageMaker Notebook VPC Deployment Check Details and remediation Details No notebook instances found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-11`	SageMaker Model Network Isolation Check Details and remediation Details No models found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-12`	SageMaker Endpoint Instance Count Check Details and remediation Details No InService endpoints found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-13`	SageMaker Monitoring Network Isolation Check Details and remediation Details No monitoring schedules found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-14`	SageMaker Model Repository Access Check Details and remediation Details No models found or all use default Platform access Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-15`	SageMaker Feature Store Encryption Check Details and remediation Details No feature groups with offline stores found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-16`	SageMaker Data Quality Job Encryption Check Details and remediation Details No data quality job definitions found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-17`	SageMaker Processing Job Encryption Check Details and remediation Details No processing jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-18`	SageMaker Transform Job Encryption Check Details and remediation Details No transform jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-19`	SageMaker Hyperparameter Tuning Job Encryption Check Details and remediation Details No hyperparameter tuning jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-20`	SageMaker Compilation Job Encryption Check Details and remediation Details No compilation jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-21`	SageMaker AutoML Job Network Isolation Check Details and remediation Details No AutoML jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-22`	Model Approval Workflow Check Details and remediation Details No model package groups found. Model Registry is not being used for model governance. Resolution Implement Model Registry to track model versions and enforce approval workflows before production deployment. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`SM-23`	Model Drift Detection Check Details and remediation Details No InService endpoints found to monitor. Resolution No action required Reference	Medium	Passed
`123456789012`	`eu-west-1`	`SM-24`	A/B Testing and Shadow Deployment Check Details and remediation Details No InService endpoints found. Resolution No action required Reference	Low	Passed
`123456789012`	`eu-west-1`	`SM-25`	ML Lineage Tracking - Experiments Not Used Details and remediation Details No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Implement SageMaker Experiments to track ML training runs, hyperparameters, metrics, and model artifacts. This enables reproducibility and auditability. Reference	Informational	N/A
`123456789012`	`Global`	`SM-02`	SageMaker IAM Permissions Check Details and remediation Details No issues found with IAM permissions and no stale access detected Resolution No action required Reference	High	Passed
`123456789012`	`us-east-1`	`SM-01`	SageMaker Internet Access Check Details and remediation Details No SageMaker notebook instances or domains found to check Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-02`	SageMaker SSO Configuration Check Details and remediation Details No SageMaker domains found, or all domains use SSO with IAM Identity Center configured Resolution No action required Reference	Medium	Passed
`123456789012`	`us-east-1`	`SM-03`	Data Protection Check Details and remediation Details No SageMaker resources found to check for data protection Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-04`	GuardDuty Enabled Details and remediation Details Amazon GuardDuty is properly enabled and monitoring for security threats in SageMaker workloads. Resolution No action required Reference	Medium	Passed
`123456789012`	`us-east-1`	`SM-05`	SageMaker Model Registry Issue Details and remediation Details No model package groups found Resolution Implement model versioning using SageMaker Model Registry to track model lineage, approve model versions, and manage model deployment Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-05`	SageMaker Feature Store Issue Details and remediation Details No feature groups found Resolution Utilize SageMaker Feature Store to create, share, and manage features for machine learning development and production Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-05`	SageMaker Pipelines Issue Details and remediation Details No ML pipelines found Resolution Implement SageMaker Pipelines to automate and manage ML workflows, including data preparation, training, and model deployment Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-06`	SageMaker Clarify No Clarify Usage Details and remediation Details No SageMaker Clarify jobs found Resolution Implement SageMaker Clarify for model explainability and bias detection Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-07`	SageMaker Model Monitor No Model Monitoring Details and remediation Details No Model Monitor schedules found Resolution Configure comprehensive model monitoring schedules Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-08`	Model Registry Registry Not Used Details and remediation Details Model Registry is not being utilized Resolution Implement proper model versioning and approval workflows Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-09`	SageMaker Notebook Root Access Check Details and remediation Details No notebook instances found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-10`	SageMaker Notebook VPC Deployment Check Details and remediation Details No notebook instances found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-11`	SageMaker Model Network Isolation Check Details and remediation Details No models found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-12`	SageMaker Endpoint Instance Count Check Details and remediation Details No InService endpoints found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-13`	SageMaker Monitoring Network Isolation Check Details and remediation Details No monitoring schedules found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-14`	SageMaker Model Repository Access Check Details and remediation Details No models found or all use default Platform access Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-15`	SageMaker Feature Store Encryption Check Details and remediation Details No feature groups with offline stores found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-16`	SageMaker Data Quality Job Encryption Check Details and remediation Details No data quality job definitions found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-17`	SageMaker Processing Job Encryption Check Details and remediation Details No processing jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-18`	SageMaker Transform Job Encryption Check Details and remediation Details No transform jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-19`	SageMaker Hyperparameter Tuning Job Encryption Check Details and remediation Details No hyperparameter tuning jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-20`	SageMaker Compilation Job Encryption Check Details and remediation Details No compilation jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-21`	SageMaker AutoML Job Network Isolation Check Details and remediation Details No AutoML jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-22`	Model Approval Workflow Check Details and remediation Details No model package groups found. Model Registry is not being used for model governance. Resolution Implement Model Registry to track model versions and enforce approval workflows before production deployment. Reference	Informational	N/A
`123456789012`	`us-east-1`	`SM-23`	Model Drift Detection Check Details and remediation Details No InService endpoints found to monitor. Resolution No action required Reference	Medium	Passed
`123456789012`	`us-east-1`	`SM-24`	A/B Testing and Shadow Deployment Check Details and remediation Details No InService endpoints found. Resolution No action required Reference	Low	Passed
`123456789012`	`us-east-1`	`SM-25`	ML Lineage Tracking - Experiments Not Used Details and remediation Details No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Implement SageMaker Experiments to track ML training runs, hyperparameters, metrics, and model artifacts. This enables reproducibility and auditability. Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-01`	SageMaker Internet Access Check Details and remediation Details No SageMaker notebook instances or domains found to check Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-02`	SageMaker SSO Configuration Check Details and remediation Details No SageMaker domains found, or all domains use SSO with IAM Identity Center configured Resolution No action required Reference	Medium	Passed
`123456789012`	`us-west-2`	`SM-03`	Data Protection Check Details and remediation Details No SageMaker resources found to check for data protection Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-04`	GuardDuty Enabled Details and remediation Details Amazon GuardDuty is properly enabled and monitoring for security threats in SageMaker workloads. Resolution No action required Reference	Medium	Passed
`123456789012`	`us-west-2`	`SM-05`	SageMaker Model Registry Issue Details and remediation Details No model package groups found Resolution Implement model versioning using SageMaker Model Registry to track model lineage, approve model versions, and manage model deployment Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-05`	SageMaker Feature Store Issue Details and remediation Details No feature groups found Resolution Utilize SageMaker Feature Store to create, share, and manage features for machine learning development and production Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-05`	SageMaker Pipelines Issue Details and remediation Details No ML pipelines found Resolution Implement SageMaker Pipelines to automate and manage ML workflows, including data preparation, training, and model deployment Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-06`	SageMaker Clarify No Clarify Usage Details and remediation Details No SageMaker Clarify jobs found Resolution Implement SageMaker Clarify for model explainability and bias detection Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-07`	SageMaker Model Monitor No Model Monitoring Details and remediation Details No Model Monitor schedules found Resolution Configure comprehensive model monitoring schedules Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-08`	Model Registry Registry Not Used Details and remediation Details Model Registry is not being utilized Resolution Implement proper model versioning and approval workflows Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-09`	SageMaker Notebook Root Access Check Details and remediation Details No notebook instances found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-10`	SageMaker Notebook VPC Deployment Check Details and remediation Details No notebook instances found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-11`	SageMaker Model Network Isolation Check Details and remediation Details No models found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-12`	SageMaker Endpoint Instance Count Check Details and remediation Details No InService endpoints found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-13`	SageMaker Monitoring Network Isolation Check Details and remediation Details No monitoring schedules found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-14`	SageMaker Model Repository Access Check Details and remediation Details No models found or all use default Platform access Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-15`	SageMaker Feature Store Encryption Check Details and remediation Details No feature groups with offline stores found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-16`	SageMaker Data Quality Job Encryption Check Details and remediation Details No data quality job definitions found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-17`	SageMaker Processing Job Encryption Check Details and remediation Details No processing jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-18`	SageMaker Transform Job Encryption Check Details and remediation Details No transform jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-19`	SageMaker Hyperparameter Tuning Job Encryption Check Details and remediation Details No hyperparameter tuning jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-20`	SageMaker Compilation Job Encryption Check Details and remediation Details No compilation jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-21`	SageMaker AutoML Job Network Isolation Check Details and remediation Details No AutoML jobs found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-22`	Model Approval Workflow Check Details and remediation Details No model package groups found. Model Registry is not being used for model governance. Resolution Implement Model Registry to track model versions and enforce approval workflows before production deployment. Reference	Informational	N/A
`123456789012`	`us-west-2`	`SM-23`	Model Drift Detection Check Details and remediation Details No InService endpoints found to monitor. Resolution No action required Reference	Medium	Passed
`123456789012`	`us-west-2`	`SM-24`	A/B Testing and Shadow Deployment Check Details and remediation Details No InService endpoints found. Resolution No action required Reference	Low	Passed
`123456789012`	`us-west-2`	`SM-25`	ML Lineage Tracking - Experiments Not Used Details and remediation Details No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Implement SageMaker Experiments to track ML training runs, hyperparameters, metrics, and model artifacts. This enables reproducibility and auditability. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-01`	AgentCore VPC Configuration Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-04`	AgentCore Observability Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-05`	AgentCore Encryption Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-06`	AgentCore Browser Tool Recording Check Details and remediation Details No AgentCore Runtimes found to check browser tool configuration Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-07`	AgentCore Memory Configuration Check Details and remediation Details No Memory resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-13`	AgentCore Gateway Configuration Check Details and remediation Details No Gateway resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-08`	AgentCore VPC Endpoints Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-10`	AgentCore Resource-Based Policies Check Details and remediation Details No AgentCore resources found to check for resource-based policies Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-11`	AgentCore Policy Engine Encryption Check Details and remediation Details No Policy Engines found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AC-12`	AgentCore Gateway Encryption Check Details and remediation Details No Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-24`	Agentic AI Gateway Inbound Authorization Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-25`	Agentic AI Gateway Tool Policy Enforcement Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-26`	Agentic AI Gateway Error Detail Exposure Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-27`	Agentic AI Gateway WAF Protection Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-15`	Agentic AI Runtime Network Boundary Details and remediation Details Agentic AI security domain: Bounded Autonomy. Agent runtimes should execute inside explicit network boundaries to reduce unintended external reachability. Source check AC-01: No AgentCore resources found Resolution Configure AgentCore runtimes with appropriate VPC settings and restrict network paths to required services. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-18`	Agentic AI AgentCore Observability Details and remediation Details Agentic AI security domain: Auditability & Observability. AgentCore observability provides the telemetry needed to investigate runtime, tool, memory, and gateway behavior. Source check AC-04: No AgentCore resources found Resolution Enable CloudWatch Logs, tracing, and AgentCore observability for runtime and gateway resources where supported. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-19`	Agentic AI Memory Data Protection Details and remediation Details Agentic AI security domain: Memory & Data Privacy. Agent memory can contain sensitive user or business context and should use customer-controlled encryption where required. Source check AC-07: No Memory resources found Resolution Configure AgentCore memory resources with customer-managed KMS keys and review memory access permissions. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-20`	Agentic AI Private AgentCore Connectivity Details and remediation Details Agentic AI security domain: Bounded Autonomy. Private service connectivity reduces exposure for agents that access AgentCore control or runtime services. Source check AC-08: No AgentCore resources found Resolution Create required VPC endpoints for AgentCore services and validate endpoint availability. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-21`	Agentic AI Resource Policy Boundary Details and remediation Details Agentic AI security domain: Agent Identity & Access. Resource-based policies add a second authorization boundary for AgentCore runtimes and gateways. Source check AC-10: No AgentCore resources found to check for resource-based policies Resolution Attach resource-based policies to AgentCore resources to constrain principals, accounts, and network sources. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-22`	Agentic AI Policy Engine Data Protection Details and remediation Details Agentic AI security domain: Tool Authorization. Policy engines contain authorization logic for tool calls and should be protected with appropriate encryption controls. Source check AC-11: No Policy Engines found Resolution Configure policy engines with customer-managed KMS keys where enhanced key control is required. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`AG-23`	Agentic AI Gateway Data Protection Details and remediation Details Agentic AI security domain: Tool Authorization. Gateway configuration can include tool schemas, target definitions, and integration metadata. Source check AC-12: No Gateways found Resolution Configure AgentCore gateways with customer-managed KMS keys where enhanced key control is required. Reference	Informational	N/A
`123456789012`	`Global`	`AC-02`	AgentCore IAM Full Access Check Details and remediation Details No roles with overly permissive AgentCore access found Resolution No action required Reference	High	Passed
`123456789012`	`Global`	`AC-03`	AgentCore Unused Permissions Details and remediation Details The following principals have AgentCore permissions but have never accessed the service: role 'AIMLSecurityMemberRole', role 'CloudSeerTrustedServiceRole' Resolution Review and remove unused AgentCore permissions following least privilege principle Reference	Informational	N/A
`123456789012`	`Global`	`AC-09`	AgentCore Service-Linked Role Missing Details and remediation Details Service-linked role 'AWSServiceRoleForBedrockAgentCoreNetwork' does not exist. VPC configuration for AgentCore Runtimes will fail without this role. Resolution The service-linked role is automatically created when you configure VPC for an AgentCore Runtime. Ensure IAM permissions allow service-linked role creation. Reference	Medium	Failed
`123456789012`	`us-east-1`	`AC-01`	AgentCore VPC Configuration Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-04`	AgentCore Observability Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-05`	AgentCore Encryption Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-06`	AgentCore Browser Tool Recording Check Details and remediation Details No AgentCore Runtimes found to check browser tool configuration Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-07`	AgentCore Memory Configuration Check Details and remediation Details No Memory resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-13`	AgentCore Gateway Configuration Check Details and remediation Details No Gateway resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-08`	AgentCore VPC Endpoints Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-10`	AgentCore Resource-Based Policies Check Details and remediation Details No AgentCore resources found to check for resource-based policies Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-11`	AgentCore Policy Engine Encryption Check Details and remediation Details No Policy Engines found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AC-12`	AgentCore Gateway Encryption Check Details and remediation Details No Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-24`	Agentic AI Gateway Inbound Authorization Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-25`	Agentic AI Gateway Tool Policy Enforcement Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-26`	Agentic AI Gateway Error Detail Exposure Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-27`	Agentic AI Gateway WAF Protection Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`Global`	`AG-16`	Agentic AI AgentCore Least Privilege Details and remediation Details Agentic AI security domain: Agent Identity & Access. Over-permissive AgentCore principals can let agents or operators bypass intended autonomy and tool boundaries. Source check AC-02: No roles with overly permissive AgentCore access found Resolution Replace full-access AgentCore permissions with least-privilege IAM policies scoped to required resources and actions. Reference	High	Passed
`123456789012`	`Global`	`AG-17`	Agentic AI Stale AgentCore Access Details and remediation Details Agentic AI security domain: Agent Identity & Access. Unused AgentCore permissions increase the blast radius of compromised principals. Source check AC-03: The following principals have AgentCore permissions but have never accessed the service: role 'AIMLSecurityMemberRole', role 'CloudSeerTrustedServiceRole' Resolution Remove or restrict stale AgentCore permissions for principals that no longer need access. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-15`	Agentic AI Runtime Network Boundary Details and remediation Details Agentic AI security domain: Bounded Autonomy. Agent runtimes should execute inside explicit network boundaries to reduce unintended external reachability. Source check AC-01: No AgentCore resources found Resolution Configure AgentCore runtimes with appropriate VPC settings and restrict network paths to required services. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-18`	Agentic AI AgentCore Observability Details and remediation Details Agentic AI security domain: Auditability & Observability. AgentCore observability provides the telemetry needed to investigate runtime, tool, memory, and gateway behavior. Source check AC-04: No AgentCore resources found Resolution Enable CloudWatch Logs, tracing, and AgentCore observability for runtime and gateway resources where supported. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-19`	Agentic AI Memory Data Protection Details and remediation Details Agentic AI security domain: Memory & Data Privacy. Agent memory can contain sensitive user or business context and should use customer-controlled encryption where required. Source check AC-07: No Memory resources found Resolution Configure AgentCore memory resources with customer-managed KMS keys and review memory access permissions. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-20`	Agentic AI Private AgentCore Connectivity Details and remediation Details Agentic AI security domain: Bounded Autonomy. Private service connectivity reduces exposure for agents that access AgentCore control or runtime services. Source check AC-08: No AgentCore resources found Resolution Create required VPC endpoints for AgentCore services and validate endpoint availability. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-21`	Agentic AI Resource Policy Boundary Details and remediation Details Agentic AI security domain: Agent Identity & Access. Resource-based policies add a second authorization boundary for AgentCore runtimes and gateways. Source check AC-10: No AgentCore resources found to check for resource-based policies Resolution Attach resource-based policies to AgentCore resources to constrain principals, accounts, and network sources. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-22`	Agentic AI Policy Engine Data Protection Details and remediation Details Agentic AI security domain: Tool Authorization. Policy engines contain authorization logic for tool calls and should be protected with appropriate encryption controls. Source check AC-11: No Policy Engines found Resolution Configure policy engines with customer-managed KMS keys where enhanced key control is required. Reference	Informational	N/A
`123456789012`	`us-east-1`	`AG-23`	Agentic AI Gateway Data Protection Details and remediation Details Agentic AI security domain: Tool Authorization. Gateway configuration can include tool schemas, target definitions, and integration metadata. Source check AC-12: No Gateways found Resolution Configure AgentCore gateways with customer-managed KMS keys where enhanced key control is required. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-01`	AgentCore VPC Configuration Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-04`	AgentCore Observability Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-05`	AgentCore Encryption Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-06`	AgentCore Browser Tool Recording Check Details and remediation Details No AgentCore Runtimes found to check browser tool configuration Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-07`	AgentCore Memory Configuration Check Details and remediation Details No Memory resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-13`	AgentCore Gateway Configuration Check Details and remediation Details No Gateway resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-08`	AgentCore VPC Endpoints Check Details and remediation Details No AgentCore resources found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-10`	AgentCore Resource-Based Policies Check Details and remediation Details No AgentCore resources found to check for resource-based policies Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-11`	AgentCore Policy Engine Encryption Check Details and remediation Details No Policy Engines found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AC-12`	AgentCore Gateway Encryption Check Details and remediation Details No Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-24`	Agentic AI Gateway Inbound Authorization Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-25`	Agentic AI Gateway Tool Policy Enforcement Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-26`	Agentic AI Gateway Error Detail Exposure Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-27`	Agentic AI Gateway WAF Protection Details and remediation Details No AgentCore Gateways found Resolution No action required Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-15`	Agentic AI Runtime Network Boundary Details and remediation Details Agentic AI security domain: Bounded Autonomy. Agent runtimes should execute inside explicit network boundaries to reduce unintended external reachability. Source check AC-01: No AgentCore resources found Resolution Configure AgentCore runtimes with appropriate VPC settings and restrict network paths to required services. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-18`	Agentic AI AgentCore Observability Details and remediation Details Agentic AI security domain: Auditability & Observability. AgentCore observability provides the telemetry needed to investigate runtime, tool, memory, and gateway behavior. Source check AC-04: No AgentCore resources found Resolution Enable CloudWatch Logs, tracing, and AgentCore observability for runtime and gateway resources where supported. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-19`	Agentic AI Memory Data Protection Details and remediation Details Agentic AI security domain: Memory & Data Privacy. Agent memory can contain sensitive user or business context and should use customer-controlled encryption where required. Source check AC-07: No Memory resources found Resolution Configure AgentCore memory resources with customer-managed KMS keys and review memory access permissions. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-20`	Agentic AI Private AgentCore Connectivity Details and remediation Details Agentic AI security domain: Bounded Autonomy. Private service connectivity reduces exposure for agents that access AgentCore control or runtime services. Source check AC-08: No AgentCore resources found Resolution Create required VPC endpoints for AgentCore services and validate endpoint availability. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-21`	Agentic AI Resource Policy Boundary Details and remediation Details Agentic AI security domain: Agent Identity & Access. Resource-based policies add a second authorization boundary for AgentCore runtimes and gateways. Source check AC-10: No AgentCore resources found to check for resource-based policies Resolution Attach resource-based policies to AgentCore resources to constrain principals, accounts, and network sources. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-22`	Agentic AI Policy Engine Data Protection Details and remediation Details Agentic AI security domain: Tool Authorization. Policy engines contain authorization logic for tool calls and should be protected with appropriate encryption controls. Source check AC-11: No Policy Engines found Resolution Configure policy engines with customer-managed KMS keys where enhanced key control is required. Reference	Informational	N/A
`123456789012`	`us-west-2`	`AG-23`	Agentic AI Gateway Data Protection Details and remediation Details Agentic AI security domain: Tool Authorization. Gateway configuration can include tool schemas, target definitions, and integration metadata. Source check AC-12: No Gateways found Resolution Configure AgentCore gateways with customer-managed KMS keys where enhanced key control is required. Reference	Informational	N/A
`123456789012`	`us-east-1`	`FS-00`	FinServ Regional Scope Not Applicable Details and remediation Details No regional Bedrock, AgentCore, or SageMaker resources were found in us-east-1; FinServ GenAI risk checks were not applied to this region. Resolution No action required unless GenAI workloads are expected in this region. Reference	Informational	N/A
`123456789012`	`us-west-2`	`FS-00`	FinServ Regional Scope Not Applicable Details and remediation Details No regional Bedrock, AgentCore, or SageMaker resources were found in us-west-2; FinServ GenAI risk checks were not applied to this region. Resolution No action required unless GenAI workloads are expected in this region. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`FS-00`	FinServ Regional Scope Not Applicable Details and remediation Details No regional Bedrock, AgentCore, or SageMaker resources were found in eu-west-1; FinServ GenAI risk checks were not applied to this region. Resolution No action required unless GenAI workloads are expected in this region. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-01`	OWASP LLM01: Model Invocation Logging Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Bedrock model invocation logging to S3 and/or CloudWatch Logs so injection attempts and their surrounding context are captured for detection and post-incident analysis. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-07`	OWASP LLM07: Model Invocation Logging Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Bedrock model invocation logging so prompt-extraction attempts against the system prompt are auditable after the fact. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-07`	OWASP LLM07: Bedrock Prompt Management Adoption Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-07: Prompt Management feature is not being used. This may lead to inconsistent prompt handling and suboptimal model responses. Resolution Manage system prompts through Amazon Bedrock Prompt Management rather than inline code or Lambda env vars so prompts are versioned, IAM-scoped, and auditable — reducing the blast radius of a prompt-leakage incident. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-07`	OWASP LLM07: Guardrail Standard Tier for Prompt Leakage Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-16: No Bedrock guardrails configured in this region Resolution Set guardrail contentPolicy.tier.tierName to STANDARD; Standard tier additionally detects prompt-leakage attacks. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-09`	OWASP LLM09: Model Evaluation Jobs Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-18: No regional Bedrock resources found to assess with model evaluation jobs Resolution Run Bedrock model evaluation jobs that include correctness and safety datasets. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-08`	OWASP LLM08: Managed Knowledge-Base CMK Encryption Details and remediation Details OWASP category: LLM08:2025 Vector and Embedding Weaknesses. Source check BR-20: No Bedrock knowledge bases found in this region Resolution Configure the Bedrock Managed Knowledge Base to use a customer-managed KMS key for storage encryption. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-06`	OWASP LLM06: Agent Action-Group Least Privilege Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-21: No Bedrock agents configured in this region Resolution Restrict agent action-group Lambda roles to only the specific actions and resources needed for each tool. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-10`	OWASP LLM10: Service Quota Throttling Limits Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check BR-22: No regional Bedrock resources found to assess model invocation throttling quotas Resolution Customise Bedrock TPM / RPM service quotas above the account default to establish an explicit consumption ceiling. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-01`	OWASP LLM01: Guardrail Content Filter Coverage Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-23: No Bedrock guardrails configured in this region Resolution Enable Bedrock guardrail content filters (HATE, VIOLENCE, SEXUAL, INSULTS, MISCONDUCT) at MEDIUM strength or higher, and set the PROMPT_ATTACK filter at STANDARD tier. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-04`	OWASP LLM04: RAG Evaluation Coverage Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check BR-25: No Bedrock knowledge bases found in this region Resolution Run Bedrock RAG evaluation jobs against knowledge bases regularly to detect degraded retrieval or poisoned context. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-09`	OWASP LLM09: RAG Evaluation for Faithfulness Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-25: No Bedrock knowledge bases found in this region Resolution Include faithfulness and correctness metrics in RAG evaluation jobs to catch misinformation before deploying knowledge-base updates. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-02`	OWASP LLM02: Guardrail PII / Regex Filters Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check BR-26: No Bedrock guardrails configured in this region Resolution Configure guardrail sensitiveInformationPolicy with PII entities and regex patterns; set outputAction=ANONYMIZE or BLOCK. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-01`	OWASP LLM01: Contextual Grounding Guardrail Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable Bedrock guardrail contextual grounding checks to reduce the surface for indirect prompt injection through retrieved context. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-04`	OWASP LLM04: Contextual Grounding on Retrieved Data Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable contextual grounding guardrail filters so retrieved context that diverges from ground truth is filtered before reaching the model. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-09`	OWASP LLM09: Contextual Grounding for Faithfulness Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-27: No Bedrock guardrails configured in this region Resolution Set the contextual grounding filter threshold to at least 0.70 to reduce hallucinated responses. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-06`	OWASP LLM06: Bedrock Agent Guardrail Association Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-28: No Bedrock agents configured in this region Resolution Attach an approved Bedrock guardrail to every Bedrock agent so autonomous actions are filtered consistently. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-06`	OWASP LLM06: Agent Idle Session TTL Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-29: No Bedrock agents configured in this region Resolution Set idleSessionTTLInSeconds to a conservative value (e.g., <= 3600) so long-lived agent sessions cannot be reused. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: Imported-Model KMS Provenance Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check BR-30: Unable to check Imported model encryption check: An error occurred (AccessDeniedException) when calling the ListImportedModels operation: Your account is not authorized to invoke this API operation. Resolution Encrypt imported Bedrock models with a customer-managed KMS key to preserve provenance and access control across model artefacts. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-10`	OWASP LLM10: CloudWatch Consumption Alarms Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check BR-32: No regional Bedrock resources found to monitor with CloudWatch alarms Resolution Create CloudWatch alarms on Bedrock InvocationThrottles, InputTokenCount, OutputTokenCount, and EstimatedTPMQuotaUsage. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: Inspector Lambda Code Scanning Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check BR-33: No Lambda functions with Bedrock indicators were found in eu-west-1; Inspector Lambda code-scanning coverage was not assessed for Bedrock-calling Lambda workloads. Resolution Enable Amazon Inspector Lambda standard scanning and Lambda code scanning so vulnerable dependencies and hardcoded secrets in Bedrock-calling Lambda functions are detected as part of the GenAI supply chain. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: SageMaker Internet Exposure Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-01: No SageMaker notebook instances or domains found to check Resolution Disable direct internet access on SageMaker notebooks and configure domains for VPC-only access to reduce supply-chain exposure from unmanaged network paths. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-02`	OWASP LLM02: SageMaker Data Encryption Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check SM-03: No SageMaker resources found to check for data protection Resolution Configure SageMaker notebooks, domains, and training jobs to use customer-managed KMS keys and encryption in transit for sensitive training and inference data. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-09`	OWASP LLM09: SageMaker Clarify Evaluation Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-06: No SageMaker Clarify jobs found Resolution Use SageMaker Clarify to evaluate bias and explainability for models whose generated outputs can influence user decisions. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-04`	OWASP LLM04: SageMaker Model Monitor Coverage Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-07: No Model Monitor schedules found Resolution Configure active SageMaker Model Monitor schedules so data-quality and model-quality regressions caused by poisoned inputs or drift are detected. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-09`	OWASP LLM09: SageMaker Model Monitor Coverage Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-07: No Model Monitor schedules found Resolution Configure SageMaker Model Monitor schedules for production models so quality regressions that can produce incorrect outputs are detected. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: SageMaker Notebook VPC Deployment Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-10: No notebook instances found Resolution Deploy SageMaker notebook instances inside a VPC so package, data, and model artifact access can be controlled through private network paths. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: SageMaker Model Network Isolation Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-11: No models found Resolution Enable network isolation on SageMaker models so inference containers cannot make unmanaged outbound calls that alter dependencies or exfiltrate model artifacts. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-10`	OWASP LLM10: SageMaker Model Outbound Network Control Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check SM-11: No models found Resolution Enable SageMaker model network isolation to prevent deployed model containers from making uncontrolled outbound calls that can amplify consumption or abuse downstream services. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: SageMaker Container Repository Access Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-14: No models found or all use default Platform access Resolution Configure SageMaker models to pull container images from private ECR repositories through VPC repository access instead of platform or public registry paths. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-02`	OWASP LLM02: SageMaker Feature Store Encryption Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check SM-15: No feature groups with offline stores found Resolution Encrypt SageMaker Feature Store offline stores with customer-managed KMS keys so sensitive feature data is protected at rest. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: SageMaker AutoML Network Isolation Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-21: No AutoML jobs found Resolution Enable network isolation on AutoML jobs so generated training containers cannot fetch unapproved dependencies or send data over unmanaged network paths. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-04`	OWASP LLM04: SageMaker Model Approval Workflow Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-22: No model package groups found. Model Registry is not being used for model governance. Resolution Require SageMaker Model Registry approval workflows before production deployment so poisoned or unreviewed model versions are not promoted automatically. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-09`	OWASP LLM09: SageMaker Model Approval Workflow Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-22: No model package groups found. Model Registry is not being used for model governance. Resolution Use SageMaker Model Registry approval workflows to ensure model behavior, intended use, and validation evidence are reviewed before production release. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-04`	OWASP LLM04: SageMaker Model Drift Detection Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-23: No InService endpoints found to monitor. Resolution Enable SageMaker Model Monitor drift detection for production endpoints so poisoning, data drift, and model-quality degradation are identified. Reference	Medium	Passed
`123456789012`	`eu-west-1`	`OW-09`	OWASP LLM09: SageMaker Model Drift Detection Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-23: No InService endpoints found to monitor. Resolution Configure data-quality and model-quality monitoring for SageMaker endpoints so degraded model behavior that can produce misinformation is detected. Reference	Medium	Passed
`123456789012`	`eu-west-1`	`OW-03`	OWASP LLM03: SageMaker ML Lineage Tracking Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-25: No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Use SageMaker Experiments and lineage associations to track training runs, parameters, artifacts, and model package provenance across the ML supply chain. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-04`	OWASP LLM04: SageMaker ML Lineage Tracking Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-25: No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Track SageMaker training lineage from source data through model artifacts so poisoned data or model versions can be traced and remediated. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-06`	OWASP LLM06: AgentCore Resource-Based Policies Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check AC-10: No AgentCore resources found to check for resource-based policies Resolution Attach resource-based policies to AgentCore runtimes and gateways so caller identities are constrained. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-11`	OWASP LLM07: System Prompt Embedded in Lambda Env Var Details and remediation Details No Lambda functions found in eu-west-1; nothing to inspect. Resolution No action required. Reference	Informational	N/A
`123456789012`	`eu-west-1`	`OW-12`	OWASP LLM07: System-Prompt-Disclosure Denied Topic Details and remediation Details No Bedrock guardrails configured in eu-west-1; nothing to inspect. Resolution No action required. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-01`	OWASP LLM01: Model Invocation Logging Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Bedrock model invocation logging to S3 and/or CloudWatch Logs so injection attempts and their surrounding context are captured for detection and post-incident analysis. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-07`	OWASP LLM07: Model Invocation Logging Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Bedrock model invocation logging so prompt-extraction attempts against the system prompt are auditable after the fact. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-07`	OWASP LLM07: Bedrock Prompt Management Adoption Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-07: Prompt Management feature is not being used. This may lead to inconsistent prompt handling and suboptimal model responses. Resolution Manage system prompts through Amazon Bedrock Prompt Management rather than inline code or Lambda env vars so prompts are versioned, IAM-scoped, and auditable — reducing the blast radius of a prompt-leakage incident. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-07`	OWASP LLM07: Guardrail Standard Tier for Prompt Leakage Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-16: No Bedrock guardrails configured in this region Resolution Set guardrail contentPolicy.tier.tierName to STANDARD; Standard tier additionally detects prompt-leakage attacks. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-09`	OWASP LLM09: Model Evaluation Jobs Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-18: No regional Bedrock resources found to assess with model evaluation jobs Resolution Run Bedrock model evaluation jobs that include correctness and safety datasets. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-08`	OWASP LLM08: Managed Knowledge-Base CMK Encryption Details and remediation Details OWASP category: LLM08:2025 Vector and Embedding Weaknesses. Source check BR-20: No Bedrock knowledge bases found in this region Resolution Configure the Bedrock Managed Knowledge Base to use a customer-managed KMS key for storage encryption. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-06`	OWASP LLM06: Agent Action-Group Least Privilege Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-21: No Bedrock agents configured in this region Resolution Restrict agent action-group Lambda roles to only the specific actions and resources needed for each tool. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-10`	OWASP LLM10: Service Quota Throttling Limits Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check BR-22: No regional Bedrock resources found to assess model invocation throttling quotas Resolution Customise Bedrock TPM / RPM service quotas above the account default to establish an explicit consumption ceiling. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-01`	OWASP LLM01: Guardrail Content Filter Coverage Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-23: No Bedrock guardrails configured in this region Resolution Enable Bedrock guardrail content filters (HATE, VIOLENCE, SEXUAL, INSULTS, MISCONDUCT) at MEDIUM strength or higher, and set the PROMPT_ATTACK filter at STANDARD tier. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-04`	OWASP LLM04: RAG Evaluation Coverage Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check BR-25: No Bedrock knowledge bases found in this region Resolution Run Bedrock RAG evaluation jobs against knowledge bases regularly to detect degraded retrieval or poisoned context. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-09`	OWASP LLM09: RAG Evaluation for Faithfulness Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-25: No Bedrock knowledge bases found in this region Resolution Include faithfulness and correctness metrics in RAG evaluation jobs to catch misinformation before deploying knowledge-base updates. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-02`	OWASP LLM02: Guardrail PII / Regex Filters Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check BR-26: No Bedrock guardrails configured in this region Resolution Configure guardrail sensitiveInformationPolicy with PII entities and regex patterns; set outputAction=ANONYMIZE or BLOCK. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-01`	OWASP LLM01: Contextual Grounding Guardrail Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable Bedrock guardrail contextual grounding checks to reduce the surface for indirect prompt injection through retrieved context. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-04`	OWASP LLM04: Contextual Grounding on Retrieved Data Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable contextual grounding guardrail filters so retrieved context that diverges from ground truth is filtered before reaching the model. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-09`	OWASP LLM09: Contextual Grounding for Faithfulness Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-27: No Bedrock guardrails configured in this region Resolution Set the contextual grounding filter threshold to at least 0.70 to reduce hallucinated responses. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-06`	OWASP LLM06: Bedrock Agent Guardrail Association Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-28: No Bedrock agents configured in this region Resolution Attach an approved Bedrock guardrail to every Bedrock agent so autonomous actions are filtered consistently. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-06`	OWASP LLM06: Agent Idle Session TTL Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-29: No Bedrock agents configured in this region Resolution Set idleSessionTTLInSeconds to a conservative value (e.g., <= 3600) so long-lived agent sessions cannot be reused. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: Imported-Model KMS Provenance Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check BR-30: No imported custom Bedrock models found in this region Resolution Encrypt imported Bedrock models with a customer-managed KMS key to preserve provenance and access control across model artefacts. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-10`	OWASP LLM10: CloudWatch Consumption Alarms Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check BR-32: No regional Bedrock resources found to monitor with CloudWatch alarms Resolution Create CloudWatch alarms on Bedrock InvocationThrottles, InputTokenCount, OutputTokenCount, and EstimatedTPMQuotaUsage. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: Inspector Lambda Code Scanning Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check BR-33: Amazon Inspector Lambda standard scanning and Lambda code scanning are both ENABLED in us-east-1. Detected 1 Lambda function(s) with Bedrock indicators: aiml-security-aiml-sec-123456789012-BedrockAssessment. Resolution Enable Amazon Inspector Lambda standard scanning and Lambda code scanning so vulnerable dependencies and hardcoded secrets in Bedrock-calling Lambda functions are detected as part of the GenAI supply chain. Reference	Medium	Passed
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: SageMaker Internet Exposure Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-01: No SageMaker notebook instances or domains found to check Resolution Disable direct internet access on SageMaker notebooks and configure domains for VPC-only access to reduce supply-chain exposure from unmanaged network paths. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-02`	OWASP LLM02: SageMaker Data Encryption Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check SM-03: No SageMaker resources found to check for data protection Resolution Configure SageMaker notebooks, domains, and training jobs to use customer-managed KMS keys and encryption in transit for sensitive training and inference data. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-09`	OWASP LLM09: SageMaker Clarify Evaluation Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-06: No SageMaker Clarify jobs found Resolution Use SageMaker Clarify to evaluate bias and explainability for models whose generated outputs can influence user decisions. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-04`	OWASP LLM04: SageMaker Model Monitor Coverage Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-07: No Model Monitor schedules found Resolution Configure active SageMaker Model Monitor schedules so data-quality and model-quality regressions caused by poisoned inputs or drift are detected. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-09`	OWASP LLM09: SageMaker Model Monitor Coverage Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-07: No Model Monitor schedules found Resolution Configure SageMaker Model Monitor schedules for production models so quality regressions that can produce incorrect outputs are detected. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: SageMaker Notebook VPC Deployment Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-10: No notebook instances found Resolution Deploy SageMaker notebook instances inside a VPC so package, data, and model artifact access can be controlled through private network paths. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: SageMaker Model Network Isolation Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-11: No models found Resolution Enable network isolation on SageMaker models so inference containers cannot make unmanaged outbound calls that alter dependencies or exfiltrate model artifacts. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-10`	OWASP LLM10: SageMaker Model Outbound Network Control Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check SM-11: No models found Resolution Enable SageMaker model network isolation to prevent deployed model containers from making uncontrolled outbound calls that can amplify consumption or abuse downstream services. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: SageMaker Container Repository Access Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-14: No models found or all use default Platform access Resolution Configure SageMaker models to pull container images from private ECR repositories through VPC repository access instead of platform or public registry paths. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-02`	OWASP LLM02: SageMaker Feature Store Encryption Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check SM-15: No feature groups with offline stores found Resolution Encrypt SageMaker Feature Store offline stores with customer-managed KMS keys so sensitive feature data is protected at rest. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: SageMaker AutoML Network Isolation Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-21: No AutoML jobs found Resolution Enable network isolation on AutoML jobs so generated training containers cannot fetch unapproved dependencies or send data over unmanaged network paths. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-04`	OWASP LLM04: SageMaker Model Approval Workflow Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-22: No model package groups found. Model Registry is not being used for model governance. Resolution Require SageMaker Model Registry approval workflows before production deployment so poisoned or unreviewed model versions are not promoted automatically. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-09`	OWASP LLM09: SageMaker Model Approval Workflow Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-22: No model package groups found. Model Registry is not being used for model governance. Resolution Use SageMaker Model Registry approval workflows to ensure model behavior, intended use, and validation evidence are reviewed before production release. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-04`	OWASP LLM04: SageMaker Model Drift Detection Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-23: No InService endpoints found to monitor. Resolution Enable SageMaker Model Monitor drift detection for production endpoints so poisoning, data drift, and model-quality degradation are identified. Reference	Medium	Passed
`123456789012`	`us-east-1`	`OW-09`	OWASP LLM09: SageMaker Model Drift Detection Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-23: No InService endpoints found to monitor. Resolution Configure data-quality and model-quality monitoring for SageMaker endpoints so degraded model behavior that can produce misinformation is detected. Reference	Medium	Passed
`123456789012`	`us-east-1`	`OW-03`	OWASP LLM03: SageMaker ML Lineage Tracking Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-25: No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Use SageMaker Experiments and lineage associations to track training runs, parameters, artifacts, and model package provenance across the ML supply chain. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-04`	OWASP LLM04: SageMaker ML Lineage Tracking Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-25: No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Track SageMaker training lineage from source data through model artifacts so poisoned data or model versions can be traced and remediated. Reference	Informational	N/A
`123456789012`	`Global`	`OW-06`	OWASP LLM06: AgentCore IAM Least Privilege Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check AC-02: No roles with overly permissive AgentCore access found Resolution Remove AmazonBedrockAgentCoreFullAccess (or equivalents) from identities that only need read/execute permissions. Reference	High	Passed
`123456789012`	`us-east-1`	`OW-06`	OWASP LLM06: AgentCore Resource-Based Policies Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check AC-10: No AgentCore resources found to check for resource-based policies Resolution Attach resource-based policies to AgentCore runtimes and gateways so caller identities are constrained. Reference	Informational	N/A
`123456789012`	`us-east-1`	`OW-11`	OWASP LLM07: System Prompt Embedded in Lambda Env Var Details and remediation Details No Lambda function env vars in us-east-1 match the embedded-system-prompt heuristic (>= 200 chars containing prompt-shaped tokens). Resolution No action required. Reference	Medium	Passed
`123456789012`	`us-east-1`	`OW-12`	OWASP LLM07: System-Prompt-Disclosure Denied Topic Details and remediation Details No Bedrock guardrails configured in us-east-1; nothing to inspect. Resolution No action required. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-01`	OWASP LLM01: Model Invocation Logging Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Bedrock model invocation logging to S3 and/or CloudWatch Logs so injection attempts and their surrounding context are captured for detection and post-incident analysis. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-07`	OWASP LLM07: Model Invocation Logging Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-04: No regional Bedrock resources found to monitor with invocation logging Resolution Enable Bedrock model invocation logging so prompt-extraction attempts against the system prompt are auditable after the fact. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-07`	OWASP LLM07: Bedrock Prompt Management Adoption Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-07: Prompt Management feature is not being used. This may lead to inconsistent prompt handling and suboptimal model responses. Resolution Manage system prompts through Amazon Bedrock Prompt Management rather than inline code or Lambda env vars so prompts are versioned, IAM-scoped, and auditable — reducing the blast radius of a prompt-leakage incident. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-07`	OWASP LLM07: Guardrail Standard Tier for Prompt Leakage Details and remediation Details OWASP category: LLM07:2025 System Prompt Leakage. Source check BR-16: No Bedrock guardrails configured in this region Resolution Set guardrail contentPolicy.tier.tierName to STANDARD; Standard tier additionally detects prompt-leakage attacks. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-09`	OWASP LLM09: Model Evaluation Jobs Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-18: No regional Bedrock resources found to assess with model evaluation jobs Resolution Run Bedrock model evaluation jobs that include correctness and safety datasets. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-08`	OWASP LLM08: Managed Knowledge-Base CMK Encryption Details and remediation Details OWASP category: LLM08:2025 Vector and Embedding Weaknesses. Source check BR-20: No Bedrock knowledge bases found in this region Resolution Configure the Bedrock Managed Knowledge Base to use a customer-managed KMS key for storage encryption. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-06`	OWASP LLM06: Agent Action-Group Least Privilege Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-21: No Bedrock agents configured in this region Resolution Restrict agent action-group Lambda roles to only the specific actions and resources needed for each tool. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-10`	OWASP LLM10: Service Quota Throttling Limits Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check BR-22: No regional Bedrock resources found to assess model invocation throttling quotas Resolution Customise Bedrock TPM / RPM service quotas above the account default to establish an explicit consumption ceiling. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-01`	OWASP LLM01: Guardrail Content Filter Coverage Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-23: No Bedrock guardrails configured in this region Resolution Enable Bedrock guardrail content filters (HATE, VIOLENCE, SEXUAL, INSULTS, MISCONDUCT) at MEDIUM strength or higher, and set the PROMPT_ATTACK filter at STANDARD tier. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-04`	OWASP LLM04: RAG Evaluation Coverage Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check BR-25: No Bedrock knowledge bases found in this region Resolution Run Bedrock RAG evaluation jobs against knowledge bases regularly to detect degraded retrieval or poisoned context. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-09`	OWASP LLM09: RAG Evaluation for Faithfulness Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-25: No Bedrock knowledge bases found in this region Resolution Include faithfulness and correctness metrics in RAG evaluation jobs to catch misinformation before deploying knowledge-base updates. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-02`	OWASP LLM02: Guardrail PII / Regex Filters Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check BR-26: No Bedrock guardrails configured in this region Resolution Configure guardrail sensitiveInformationPolicy with PII entities and regex patterns; set outputAction=ANONYMIZE or BLOCK. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-01`	OWASP LLM01: Contextual Grounding Guardrail Details and remediation Details OWASP category: LLM01:2025 Prompt Injection. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable Bedrock guardrail contextual grounding checks to reduce the surface for indirect prompt injection through retrieved context. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-04`	OWASP LLM04: Contextual Grounding on Retrieved Data Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check BR-27: No Bedrock guardrails configured in this region Resolution Enable contextual grounding guardrail filters so retrieved context that diverges from ground truth is filtered before reaching the model. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-09`	OWASP LLM09: Contextual Grounding for Faithfulness Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check BR-27: No Bedrock guardrails configured in this region Resolution Set the contextual grounding filter threshold to at least 0.70 to reduce hallucinated responses. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-06`	OWASP LLM06: Bedrock Agent Guardrail Association Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-28: No Bedrock agents configured in this region Resolution Attach an approved Bedrock guardrail to every Bedrock agent so autonomous actions are filtered consistently. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-06`	OWASP LLM06: Agent Idle Session TTL Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check BR-29: No Bedrock agents configured in this region Resolution Set idleSessionTTLInSeconds to a conservative value (e.g., <= 3600) so long-lived agent sessions cannot be reused. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: Imported-Model KMS Provenance Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check BR-30: No imported custom Bedrock models found in this region Resolution Encrypt imported Bedrock models with a customer-managed KMS key to preserve provenance and access control across model artefacts. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-10`	OWASP LLM10: CloudWatch Consumption Alarms Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check BR-32: No regional Bedrock resources found to monitor with CloudWatch alarms Resolution Create CloudWatch alarms on Bedrock InvocationThrottles, InputTokenCount, OutputTokenCount, and EstimatedTPMQuotaUsage. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: Inspector Lambda Code Scanning Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check BR-33: No Lambda functions with Bedrock indicators were found in us-west-2; Inspector Lambda code-scanning coverage was not assessed for Bedrock-calling Lambda workloads. Resolution Enable Amazon Inspector Lambda standard scanning and Lambda code scanning so vulnerable dependencies and hardcoded secrets in Bedrock-calling Lambda functions are detected as part of the GenAI supply chain. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: SageMaker Internet Exposure Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-01: No SageMaker notebook instances or domains found to check Resolution Disable direct internet access on SageMaker notebooks and configure domains for VPC-only access to reduce supply-chain exposure from unmanaged network paths. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-02`	OWASP LLM02: SageMaker Data Encryption Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check SM-03: No SageMaker resources found to check for data protection Resolution Configure SageMaker notebooks, domains, and training jobs to use customer-managed KMS keys and encryption in transit for sensitive training and inference data. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-09`	OWASP LLM09: SageMaker Clarify Evaluation Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-06: No SageMaker Clarify jobs found Resolution Use SageMaker Clarify to evaluate bias and explainability for models whose generated outputs can influence user decisions. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-04`	OWASP LLM04: SageMaker Model Monitor Coverage Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-07: No Model Monitor schedules found Resolution Configure active SageMaker Model Monitor schedules so data-quality and model-quality regressions caused by poisoned inputs or drift are detected. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-09`	OWASP LLM09: SageMaker Model Monitor Coverage Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-07: No Model Monitor schedules found Resolution Configure SageMaker Model Monitor schedules for production models so quality regressions that can produce incorrect outputs are detected. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: SageMaker Notebook VPC Deployment Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-10: No notebook instances found Resolution Deploy SageMaker notebook instances inside a VPC so package, data, and model artifact access can be controlled through private network paths. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: SageMaker Model Network Isolation Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-11: No models found Resolution Enable network isolation on SageMaker models so inference containers cannot make unmanaged outbound calls that alter dependencies or exfiltrate model artifacts. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-10`	OWASP LLM10: SageMaker Model Outbound Network Control Details and remediation Details OWASP category: LLM10:2025 Unbounded Consumption. Source check SM-11: No models found Resolution Enable SageMaker model network isolation to prevent deployed model containers from making uncontrolled outbound calls that can amplify consumption or abuse downstream services. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: SageMaker Container Repository Access Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-14: No models found or all use default Platform access Resolution Configure SageMaker models to pull container images from private ECR repositories through VPC repository access instead of platform or public registry paths. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-02`	OWASP LLM02: SageMaker Feature Store Encryption Details and remediation Details OWASP category: LLM02:2025 Sensitive Information Disclosure. Source check SM-15: No feature groups with offline stores found Resolution Encrypt SageMaker Feature Store offline stores with customer-managed KMS keys so sensitive feature data is protected at rest. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: SageMaker AutoML Network Isolation Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-21: No AutoML jobs found Resolution Enable network isolation on AutoML jobs so generated training containers cannot fetch unapproved dependencies or send data over unmanaged network paths. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-04`	OWASP LLM04: SageMaker Model Approval Workflow Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-22: No model package groups found. Model Registry is not being used for model governance. Resolution Require SageMaker Model Registry approval workflows before production deployment so poisoned or unreviewed model versions are not promoted automatically. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-09`	OWASP LLM09: SageMaker Model Approval Workflow Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-22: No model package groups found. Model Registry is not being used for model governance. Resolution Use SageMaker Model Registry approval workflows to ensure model behavior, intended use, and validation evidence are reviewed before production release. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-04`	OWASP LLM04: SageMaker Model Drift Detection Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-23: No InService endpoints found to monitor. Resolution Enable SageMaker Model Monitor drift detection for production endpoints so poisoning, data drift, and model-quality degradation are identified. Reference	Medium	Passed
`123456789012`	`us-west-2`	`OW-09`	OWASP LLM09: SageMaker Model Drift Detection Details and remediation Details OWASP category: LLM09:2025 Misinformation. Source check SM-23: No InService endpoints found to monitor. Resolution Configure data-quality and model-quality monitoring for SageMaker endpoints so degraded model behavior that can produce misinformation is detected. Reference	Medium	Passed
`123456789012`	`us-west-2`	`OW-03`	OWASP LLM03: SageMaker ML Lineage Tracking Details and remediation Details OWASP category: LLM03:2025 Supply Chain. Source check SM-25: No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Use SageMaker Experiments and lineage associations to track training runs, parameters, artifacts, and model package provenance across the ML supply chain. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-04`	OWASP LLM04: SageMaker ML Lineage Tracking Details and remediation Details OWASP category: LLM04:2025 Data and Model Poisoning. Source check SM-25: No SageMaker Experiments found. ML Lineage tracking through Experiments is not being utilized. Resolution Track SageMaker training lineage from source data through model artifacts so poisoned data or model versions can be traced and remediated. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-06`	OWASP LLM06: AgentCore Resource-Based Policies Details and remediation Details OWASP category: LLM06:2025 Excessive Agency. Source check AC-10: No AgentCore resources found to check for resource-based policies Resolution Attach resource-based policies to AgentCore runtimes and gateways so caller identities are constrained. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-11`	OWASP LLM07: System Prompt Embedded in Lambda Env Var Details and remediation Details No Lambda functions found in us-west-2; nothing to inspect. Resolution No action required. Reference	Informational	N/A
`123456789012`	`us-west-2`	`OW-12`	OWASP LLM07: System-Prompt-Disclosure Denied Topic Details and remediation Details No Bedrock guardrails configured in us-west-2; nothing to inspect. Resolution No action required. Reference	Informational	N/A

Amazon Bedrock Findings

Failed

Open findings

Passed
2
Controls met

N/A

Not applicable

Total

Rows in report

Amazon SageMaker Findings

Failed

Open findings

Passed
13
Controls met

N/A

Not applicable

Total

Rows in report

Amazon Bedrock AgentCore Findings

Failed

Open findings

Passed
1
Controls met

N/A

Not applicable

Total

Rows in report

Agentic AI Security Findings

Scope: API-provable Agentic AI security controls mapped to the AWS Well-Architected Agentic AI Lens security guidance. Human-in-the-loop governance is referenced in methodology but not scored automatically unless an AWS API can prove the control.

Failed

Open findings

Passed
1
Controls met

N/A

Not applicable

Total

Rows in report

Financial Services GenAI Risk Findings

Scope: this assessment records findings against each resolved CloudFormation TargetRegions entry. These checks are based on the AWS User Guide to Governance, Risk, and Compliance for Responsible AI Adoption. Severities follow a documented Likelihood × Impact methodology.

Failed

Open findings

Passed
0
Controls met

N/A

Not applicable

Total

Rows in report

OWASP Top 10 for LLM Findings

Scope: mapping-based derivation from existing BR/SM/AC/AG/FS checks plus two net-new checks for LLM07 (System Prompt Leakage). Each finding's OWASP category (LLM01–LLM10) is encoded in the Finding_Details text. Preliminary and illustrative — validate mappings with your Security/Compliance team before using as evidence.

Failed

Open findings

Passed
9
Controls met

N/A

112

Not applicable

Total

121

Rows in report

Assessment Methodology

Assessment Notes

Point-in-time: Security posture changes as resources are modified. Scope limited: Passed checks verify tested controls only. Context matters: Adjust severity for compliance requirements and environment type.

Assessment Scope

Amazon Bedrock

Amazon SageMaker

Amazon Bedrock AgentCore

Agentic AI Security

Agentic AI Security Lens Mapping

Industry

Financial Services GenAI Risk

By Compliance Standard

OWASP Top 10 LLM

Bedrock, SageMaker, and AgentCore checks are based on the AWS Well-Architected Framework Generative AI Lens. Agentic AI Security references the AWS Well-Architected Agentic AI Lens. Controls that cannot be proven using AWS APIs, including semantic human-in-the-loop workflow quality, are not automatically scored. Financial Services GenAI Risk checks are based on the AWS User Guide to Governance, Risk, and Compliance for Responsible AI Adoption. OWASP Top 10 LLM references OWASP Top 10 LLM.

Security Assessment Overview

Priority Recommendations

Severity Legend

Direct Service Scored Row Results by Severity

Direct Failed Rows by Region / Scope

Findings by Assessment Area

Assessment Notes

Assessment Scope