Skip to content

change 'security control' to 'safeguard' #298

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
merged 1 commit into from
Apr 24, 2025
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion aws_sra_examples/solutions/genai/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ This directory contains security solutions for implementing generative AI capabi
## Solutions

- [SRA Bedrock Organizations Solution](./bedrock_org/)
This solution provides an automated framework for deploying Bedrock organizational security controls.
This solution provides an automated framework for deploying Bedrock organizational safeguards.

- [SRA Bedrock Guardrails Solution](./bedrock_guardrails/)
This solution provides an automated framework for deploying Bedrock guardrails across multiple AWS accounts and regions in an organization.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -2,7 +2,7 @@

Version: 1.0

Main app module for SRA GenAI Bedrock org security controls solution in the repo,
Main app module for SRA GenAI Bedrock org safeguards solution in the repo,
https://github.com/aws-samples/aws-security-reference-architecture-examples

Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
Expand Down
8 changes: 4 additions & 4 deletions aws_sra_examples/solutions/genai/bedrock_org/README.md
Original file line number Diff line number Diff line change
Expand Up @@ -13,7 +13,7 @@

## Introduction

This solution provides an automated framework for deploying Bedrock organizational security controls using AWS CloudFormation. It leverages a Lambda function to configure and deploy AWS Config rules, CloudWatch metrics, and other resources necessary to monitor and enforce governance policies across multiple AWS accounts and regions in an organization.
This solution provides an automated framework for deploying Bedrock organizational safeguards using AWS CloudFormation. It leverages a Lambda function to configure and deploy AWS Config rules, CloudWatch metrics, and other resources necessary to monitor and enforce governance policies across multiple AWS accounts and regions in an organization.

The architecture follows best practices for security and scalability and is designed for easy extensibility.

Expand Down Expand Up @@ -464,7 +464,7 @@ This section explains the parameters in the CloudFormation template that require

## Related Security Control Solutions

This solution works in conjunction with other AWS SRA solutions to provide comprehensive security controls for Bedrock GenAI environments:
This solution works in conjunction with other AWS SRA solutions to provide comprehensive safeguards for Bedrock GenAI environments:

### Amazon Bedrock Guardrails Solution
The [SRA Bedrock Guardrails solution](../../genai/bedrock_guardrails/README.md) provides automated deployment of Amazon Bedrock Guardrails across your organization. It supports:
Expand All @@ -487,6 +487,6 @@ The [SRA GuardDuty Malware Protection solution](../../guardduty/guardduty_malwar
The solution enables GuardDuty's malware scanning capabilities to detect malicious files that could be used in prompt injection attacks or compromise your GenAI applications.

These complementary solutions work together to provide defense-in-depth for your Bedrock GenAI environment:
- This solution (SRA Bedrock Org) provides organizational security controls and monitoring
- Bedrock Guardrails solution provides content and data security controls
- This solution (SRA Bedrock Org) provides organizational safeguards and monitoring
- Bedrock Guardrails solution provides content and data safeguards
- GuardDuty Malware Protection ensures S3 bucket security against malware threats
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
"""This script performs operations to enable, configure, and disable Bedrock security controls.
"""This script performs operations to enable, configure, and disable Bedrock safeguards.

Version: 1.0

Main app module for SRA GenAI Bedrock org security controls solution in the repo,
Main app module for SRA GenAI Bedrock org safeguards solution in the repo,
https://github.com/aws-samples/aws-security-reference-architecture-examples

Copyright Amazon.com, Inc. or its affiliates. All Rights Reserved.
Expand Down Expand Up @@ -1955,7 +1955,7 @@ def process_sns_records(event: dict) -> None:
LOGGER.info({"SNS Record": record})
message = record["Sns"]["Message"]
if message["Action"] == "configure":
LOGGER.info("Continuing process to enable SRA security controls for Bedrock (sns event)")
LOGGER.info("Continuing process to enable SRA safeguards for Bedrock (sns event)")

# 3) Deploy config rules (regional)
message["Accounts"].append(sts.MANAGEMENT_ACCOUNT)
Expand Down
Original file line number Diff line number Diff line change
@@ -1,5 +1,5 @@
AWSTemplateFormatVersion: '2010-09-09'
Description: CloudFormation template to deploy the sra-bedrock-org solution for GenAI deep-dive Bedrock capability one security controls. See https://github.com/aws-samples/aws-security-reference-architecture-examples (sra-1u3sd7f8n)
Description: CloudFormation template to deploy the sra-bedrock-org solution for GenAI deep-dive Bedrock capability one safeguards. See https://github.com/aws-samples/aws-security-reference-architecture-examples (sra-1u3sd7f8n)

Parameters:
pSRARepoZipUrl:
Expand Down Expand Up @@ -90,7 +90,7 @@ Parameters:
AllowedPattern: '^[\w+=,.@-]{1,64}$'
ConstraintDescription: Max 64 alphanumeric characters. Also special characters supported [+, =, ., @, -]
Default: sra-bedrock-org-lambda
Description: Bedrock security control configuration Lambda role name
Description: Bedrock safeguard configuration Lambda role name
Type: String
AllowedValues: ['sra-bedrock-org-lambda']

Expand Down