Skip to content
English
Customer ticket portal
  • There are no suggestions because the search field is empty.

Amazon Bedrock Guardrails

Amazon Bedrock Guardrails replication with Arpio

Amazon Bedrock Guardrails apply configurable safeguards to generative AI applications.

Arpio replicates the following resource types from the Amazon Bedrock Guardrails service.

Guardrail

Arpio replicates selected Guardrail resources, deploying them in the recovery environment with the same name, description, policy configuration, and blocked-input and blocked-output messaging.

The guardrail's numbered versions are reproduced exactly, in order and with their original version numbers, so an application that pins a specific version keeps working after a recovery. When a version number is missing on the source because that version was deleted, Arpio reserves the same number in the recovery environment rather than shifting the later versions down. Each recovered version carries the description it was published with.

When the guardrail has a resource-based policy sharing it with other AWS accounts, Arpio replicates the policy and rewrites the accounts and ARNs it names for the recovery environment. Removing the policy on the source removes it from the recovered guardrail on the next sync.


The following attributes are translated during replication:

Attribute

Translation

Version History

Replicated with the original version numbers preserved, including numbers left vacant by versions that were deleted on the source.

KMS Key ARN

Translated to the corresponding customer managed key that Arpio manages in the recovery environment. The translated key is applied to the working draft and to every recovered version.

Cross-Region Guardrail Profile

Translated to the guardrail profile that serves the recovery region. Guardrail profiles are scoped to a geography rather than to a single region, so the original profile is preserved when the recovery region belongs to the same geography.

Resource-Based Policy

Account identifiers and resource ARNs named in the policy's Principal and Resource elements are translated to their recovery environment equivalents.

The following resources are automatically selected into recovery points when a Knowledge Base is selected:

  • The customer managed KMS key that encrypts the guardrail, when the guardrail uses one

Limitations

  • Guardrails that use an Automated Reasoning policy are not currently supported.