Logging, auditing, and compliance

About

This lesson provides a comprehensive guide to securing and governing Amazon Bedrock agents in enterprise environments. You’ll learn about how to combine IAM best practices, guardrails for content safety, network isolation, encryption, and compliance frameworks to build agentic AI systems that are secure, trustworthy, and aligned with organizational and regulatory standards. 

Intended audience 

This lesson is intended for cloud security engineers, solution architects, compliance officers, and AI governance leads responsible for deploying secure, compliant agentic AI systems using Amazon Bedrock. 

Learning objectives 

By the end of this lesson, you’ll have the knowledge and skills to: 

  • Apply least-privilege IAM policies for Bedrock agents and related AWS services. 

  • Implement guardrails for content safety and compliance. 

  • Design private network architectures and encrypt data at rest and in transit. 

  • Configure logging and auditing for accountability.

  • Align Bedrock deployments with ISO 27001, SOC 2, and GDPR standards. 

Prerequisites 

  • Working knowledge of AWS IAM, Lambda, and Step Functions. 

  • Familiarity with Amazon Bedrock and Bedrock agents. 

  • Basic understanding of network security, encryption, and compliance frameworks like ISO 27001, SOC 2, and GDPR. 

Unit UUID
Course UUID