Question

A European financial services company must comply with regulations requiring that all customer data and model inference processing remain within the EU. The compliance team asks how they should configure their Amazon Bedrock usage to meet this data residency requirement. What is the most appropriate action?

Accepted Answer

Select an AWS Region located in the EU and run all Bedrock inference and data storage within that Region

Answer

Enable Amazon Bedrock Guardrails to filter any customer data that leaves the EU

Answer

Use IAM policies to restrict which users can invoke the Bedrock models

Answer

Encrypt the customer data with AWS KMS keys before sending it to Bedrock