Description

Detects Amazon Bedrock guardrails that do not have sensitive information filtering policies configured. Missing sensitive information filters could allow sensitive or personal data to be inadvertently exposed to foundation models, creating potential data privacy and security risks.

Detection Strategy

• Retrieves all Bedrock guardrails in the specified AWS region

• For each guardrail, checks if the sensitiveInformationPolicy configuration is present

• Reports a vulnerability if a guardrail is found without a sensitive information policy configured