Question

A healthcare company runs a Bedrock-based clinical summarization application inside a private VPC with no internet gateway. Compliance requires that (1) all traffic to Bedrock stays on the AWS network, (2) model invocation logs be captured for audit, and (3) the security team be able to prove that a compromised application role cannot silently disable the audit trail or ship invocation logs to an attacker-controlled bucket. The team has already created an interface VPC endpoint for Bedrock. Which additional configuration BEST satisfies all three requirements while enforcing least privilege?

Accepted Answer

Enable Bedrock model invocation logging to a dedicated CloudWatch Logs group and S3 bucket owned by a separate security account, restrict the application role so it cannot modify logging configuration or write to the log destinations, and attach a VPC endpoint policy plus S3 bucket policy that only allow the approved log bucket and Bedrock resources.

Answer

Grant the application role full bedrock:* and logs:* permissions so it can self-manage invocation logging, and rely on CloudTrail management events to reconstruct any changes after the fact.

Answer

Turn on CloudTrail data events for Bedrock in the application account only, and allow the application role to write invocation logs to any S3 bucket in the account so the logs are co-located with the workload.

Answer

Disable the interface VPC endpoint and route Bedrock traffic through a NAT gateway with an egress firewall that inspects and logs all requests, storing captured payloads in the application's own S3 bucket.