Ravi Sir's Cards › AWS
Guardrails and IAM
What is a VPC: your own private network inside one AWS Region, example ThreeTierVpc 10.0.0.0/16.
Read card text
What this card says
Why do we need it?
Prompts can leak PII; wildcard model access is too broad.
What is it?
Bedrock Guardrails filter topics/PII patterns. IAM should allow InvokeModel only on the model ARNs you need.
Guardrails
How to do it
Attach a policy with bedrock:InvokeModel on one model ARN; add a Guardrail in console for the app use case.
Example
A denied model ID fails closed; a Guardrail blocks a disallowed topic before it reaches users.