Question

A financial services company uses Amazon Bedrock foundation models for a customer-facing assistant. To satisfy an internal audit requirement, the compliance team needs to capture the full prompts submitted to the model and the complete model responses so they can be reviewed later for inappropriate content and retained in a company data store. Which approach BEST meets this requirement?

Accepted Answer

Enable Amazon Bedrock model invocation logging and deliver the input and output data to an Amazon S3 bucket or CloudWatch Logs

Answer

Rely on AWS CloudTrail to record the full prompt and response content of every Bedrock InvokeModel call

Answer

Configure Amazon Macie to scan the Bedrock endpoint and store the prompt and response text automatically

Answer

Turn on VPC Flow Logs for the subnet hosting the Bedrock VPC endpoint to capture request and response payloads