AWS Bedrock Guardrails

Integrate AWS Bedrock Guardrails with Bifrost for enterprise-grade content filtering, PII protection, prompt attack detection, and image content analysis.

Bifrost integrates with Amazon Bedrock Guardrails to provide enterprise-grade content filtering and safety features with deep AWS integration. This page covers the configuration and capabilities of the AWS Bedrock guardrail provider.

Capabilities

• Content Filters: Hate speech, insults, sexual content, violence, misconduct
• Denied Topics: Block specific topics or categories
• Word Filters: Custom profanity and sensitive word blocking
• PII Protection: Detect and redact 50+ PII entity types
• Contextual Grounding: Verify responses against source documents
• Prompt Attack Detection: Identify injection and jailbreak attempts
• Image Content Support: Analyze images in addition to text (PNG, JPEG)

Streaming output: When this profile is used in an output or both rule, Bifrost accumulates the stream until the model response is complete, then checks the full response. It does not check individual stream chunks. See Streaming Output Guardrails for details.

Configuration Fields

Field	Type	Required	Default	Description
access_key	string	Yes	-	AWS Access Key ID
secret_key	string	Yes	-	AWS Secret Access Key
guardrail_arn	string	Yes	-	ARN of the Bedrock guardrail
guardrail_version	string	Yes	-	Version of the guardrail (e.g., “1”, “DRAFT”)
region	string	Yes	-	AWS region

Authentication

Uses AWS SDK with static credentials:

{
  "access_key": "AKIAXXXXXXXXXXXXXXXXXX",
  "secret_key": "your-secret-access-key",
  "guardrail_arn": "arn:aws:bedrock:us-east-1:123456789:guardrail/abc123",
  "guardrail_version": "1",
  "region": "us-east-1"
}

Supported AWS Regions

Region Code	Region Name
us-east-1	US East (N. Virginia)
us-east-2	US East (Ohio)
us-west-1	US West (N. California)
us-west-2	US West (Oregon)
ap-south-1	Asia Pacific (Mumbai)
ap-northeast-1	Asia Pacific (Tokyo)
ap-northeast-2	Asia Pacific (Seoul)
ap-southeast-1	Asia Pacific (Singapore)
ap-southeast-2	Asia Pacific (Sydney)
eu-central-1	Europe (Frankfurt)
eu-west-1	Europe (Ireland)
eu-west-2	Europe (London)
eu-west-3	Europe (Paris)

Supported Content Types

• Text content
• Images (PNG, JPEG formats)

Usage Metrics Returned

Bedrock guardrails return detailed usage metrics for cost tracking and monitoring:

Metric	Description
content_policy_units	Units consumed by content policy evaluation
contextual_grounding_policy_units	Units for grounding checks
sensitive_information_policy_units	Units for PII detection
topic_policy_units	Units for topic filtering
word_policy_units	Units for word filtering
automated_reasoning_policy_units	Units for reasoning checks
content_policy_image_units	Units for image content analysis

Supported PII Types

• Personal identifiers (SSN, passport, driver’s license)
• Financial information (credit cards, bank accounts)
• Contact information (email, phone, address)
• Medical information (health records, insurance)
• Device identifiers (IP addresses, MAC addresses)

For provider comparison and information on configuring guardrail rules and profiles, see Guardrails.