Overview
This report assesses AWS resources against 12 enabled configuration checks across the areas below. It identifies passed and failed checks, unavailable evidence, and affected resources so you can prioritize configuration changes and investigate operational gaps.
Bedrock Agents
- Agents for Amazon Bedrock Encrypted with Customer-Managed KMS Key
- Use Bedrock Guardrails to Protect Agent Sessions
Bedrock Flows
- Bedrock Flows Resources Encrypted with Customer-Managed KMS Key
- Bedrock Flows Are Configured
Bedrock Knowledge Bases
- Bedrock Knowledge Bases Ingestion Logging Enabled
- Bedrock Knowledge Bases Resources Encrypted with Customer-Managed KMS Key
- Configure Data Deletion Policy for Bedrock Knowledge Base Data
Bedrock Prompt Management
- Bedrock Prompt Catalog Implemented with Versioning
Bedrock AgentCore Runtimes
- Bedrock AgentCore runtimes should be configured with VPC network mode
Bedrock AgentCore Gateways
- Bedrock AgentCore Gateways should require authorization for inbound requests
Bedrock AgentCore Browser Sessions
- Bedrock AgentCore custom browsers should not use public network mode
- Bedrock AgentCore custom browsers should have session recording enabled
The report includes actionable findings and remediation guidance for supported checks.