Question

A financial services company runs a customer-facing chatbot on Amazon Bedrock. They configure a guardrail with a denied topic for 'investment advice' and a sensitive-information policy that masks account numbers. During testing, the security team observes that when a user asks for investment advice, the model still begins generating a response before it is blocked, and account numbers typed by users in their prompts are not being masked in the model invocation logs. The team wants the denied topic to stop the request before any model inference occurs, and they want account numbers stripped from user input. Which configuration change addresses both requirements?

Accepted Answer

Apply the denied-topics filter and the sensitive-information (PII) masking policy to the input (prompt) evaluation scope of the guardrail so both are enforced before the model is invoked.

Answer

Increase the prompt-attack filter strength to HIGH, which will intercept both the denied topic and the account numbers on input.

Answer

Enable contextual grounding checks so the guardrail evaluates the response against source documents before returning it.

Answer

Configure the guardrail to apply both policies only to the output (response) scope so the model output is filtered after generation.