Question

A European healthcare analytics company runs a generative AI application on Amazon Bedrock using Anthropic Claude models. Under GDPR and internal policy, all prompt and completion data containing patient information must never be processed or stored outside the EU. During a load test, the team enabled cross-region inference profiles to improve throughput and reduce throttling. Their compliance officer flags a concern about where inference requests are being routed. Which action best ensures the solution meets the data residency requirement while still addressing throughput needs?

Accepted Answer

Use an EU-scoped cross-region inference profile so requests are only routed among EU Regions, and request a service quota increase for on-demand model throughput in those Regions.

Answer

Keep the cross-region inference profile enabled, since Bedrock automatically encrypts all data in transit and at rest, which satisfies GDPR residency obligations.

Answer

Disable cross-region inference and instead route overflow traffic to a US Region during peak load, applying client-side PII masking before each request.

Answer

Switch to provisioned throughput in a single EU Region only, because provisioned throughput is the only Bedrock feature that guarantees data never leaves a Region.