Amazon Bedrock Guardrails supports cross-account safeguards with centralized control and management

Amazon Bedrock Guardrails, a service designed to enforce safeguards and policies across AWS accounts, has recently introduced cross-account safeguards. This new feature, now generally available, allows organizations to centralize the enforcement and management of safety controls across multiple AWS accounts within an AWS Organization.

The introduction of cross-account safeguards in Amazon Bedrock Guardrails offers significant benefits for organizations looking to maintain consistent security and compliance across their AWS infrastructure. By specifying a guardrail in a new Amazon Bedrock policy within the management account of an organization, administrators can ensure that configured safeguards are automatically enforced across all member entities for every model invocation with Amazon Bedrock.

This organization-wide implementation provides uniform protection for all accounts and generative AI applications, with centralized control and management. The new capability also offers flexibility, allowing organizations to apply account-level and application-specific controls tailored to their specific use case requirements.

Organization-level enforcements enable a single guardrail from the organization’s management account to be applied to all entities within the organization through policy settings. This guardrail automatically enforces filters across all member entities, including organizational units (OUs) and individual accounts, for all Amazon Bedrock model invocations.

In addition to organization-level enforcement, account-level enforcement allows administrators to automatically enforce configured safeguards across all Amazon Bedrock model invocations in their AWS account. The safeguards configured in the account-level guardrail apply to all inference API calls.

The centralized enforcement in Amazon Bedrock Guardrails supports the establishment of dependable, comprehensive protection through a single, unified approach. This not only ensures consistent adherence to corporate responsible AI requirements but also significantly reduces the administrative burden of monitoring individual accounts and applications. Security teams no longer need to oversee and verify configurations or compliance for each account independently.

To get started with centralized enforcement in Amazon Bedrock Guardrails, organizations can leverage both account-level and organization-level enforcement capabilities. This allows them to tailor their safeguards to meet specific security and compliance needs while maintaining a unified control framework across their AWS infrastructure.

In conclusion, the general availability of cross-account safeguards in Amazon Bedrock Guardrails represents a significant advancement in managing security and compliance across multiple AWS accounts within an organization. By centralizing enforcement and management, organizations can achieve consistent protection and reduce the administrative overhead associated with monitoring individual accounts and applications. This capability is particularly valuable for enterprises looking to implement responsible AI practices across their AWS environments.