Question

A healthcare company runs a GenAI diagnostic-support application on EC2 instances in a private subnet with no internet gateway or NAT gateway. The application must invoke Amazon Bedrock foundation models, but the security team mandates that no traffic to Bedrock traverse the public internet and that all API calls remain within the AWS network. The team also wants to enforce that only specific Bedrock models can be invoked from within the VPC. What is the MOST appropriate way to meet these requirements?

Accepted Answer

Create an interface VPC endpoint (AWS PrivateLink) for the Bedrock runtime service and attach an endpoint policy that restricts InvokeModel to the approved model ARNs.

Answer

Add a NAT gateway to the private subnet so the EC2 instances can reach the public Bedrock API endpoints over TLS, and use IAM policies to limit model access.

Answer

Create a gateway VPC endpoint for Bedrock and configure a route table entry pointing to the endpoint's prefix list.

Answer

Enable AWS PrivateLink by deploying Bedrock inside the VPC using a customer-managed subnet, then restrict model access with a security group rule.