AuditaAI
Back to vendors

AI security vendor

Amazon Web Services

Commercial parent organization

AWS provides AI security controls across Bedrock runtime guardrails, AI posture governance workflows, and SageMaker monitoring and assurance capabilities.

This migration scope includes Bedrock Guardrails, AI security framework and Security Hub posture workflows, and SageMaker Clarify and Model Monitor behaviors.

Official website

4

Offerings

9

Reviewed claims

11

Capabilities

Domains

Access and GovernanceAgent SecurityData and PrivacyModel and ValidationPosture and RiskRuntime Protection

Actions

PREVENTPOSTUREDETECT

Offerings

Open an offering for reviewed behavior and evidence

Amazon Web Services · product

Amazon Bedrock Guardrails

2 claims+

Runtime policy controls for prompts and responses including content filtering, jailbreak resistance, and sensitive-data protections.

Official source
Prompt and Response Guardrails
PREVENT

Amazon Bedrock Guardrails applies inline controls that can block prompt-injection and jailbreak-style requests before model outputs are returned.

Source
Prompt and Response DLP
PREVENT

Amazon Bedrock Guardrails includes sensitive-information policy controls to reduce protected-data leakage in prompt and response flows.

Source

Amazon Web Services · module

AWS AI Security Framework and Security Hub AI-SPM

2 claims+

Layered AI control guidance and posture workflows for AI governance, misconfiguration visibility, and risk-prioritized security operations.

Official source
AI Posture ManagementAI Asset Discovery
DETECT

AWS AI Security Framework and Security Hub posture workflows support layered AI control oversight and detection of risky configuration conditions.

Source Source
Risk Prioritization
POSTURE

AWS posture and governance workflows help identify control gaps around autonomous and agentic execution paths for prioritized remediation.

Source Source

Amazon Web Services · product

Amazon SageMaker Clarify and Model Monitor

1 claims+

Model and data analysis, drift monitoring, and governance evidence workflows for training and inference assurance.

Official source
Model Security TestingRuntime Threat Detection and Response
DETECT

SageMaker Clarify and monitoring workflows provide ongoing model and data behavior analysis for drift, quality, and governance evidence.

Source

Amazon Web Services · platform

Amazon Bedrock AgentCore

4 claims+

Agent platform providing identity, policy, secure runtime, observability, registry, and gateway controls.

Official source
Agent Tool GovernanceIdentity and Entitlement Control
PREVENT

Amazon Bedrock AgentCore gives agents distinct scoped identities and uses Cedar policy to authorize every tool call and data access independently of model reasoning.

Source
Agent Communication Security
PREVENT

Amazon Bedrock AgentCore applies identity and authorization controls to agents using MCP and A2A communications with external tools and other agents.

Source
Agent-Human Oversight
PREVENT

AWS supports human approval hooks for high-consequence agent actions and behavioral monitoring for actions outside an agent's authorized scope.

Source
AI Asset Discovery
POSTURE

Amazon Bedrock AgentCore Registry catalogs agents and MCP servers for centralized governance and observability.

Source