Bedrock model invocation S3 logging must be enabled

bedrock
Cette page n'est pas encore disponible en français, sa traduction est en cours.
Si vous avez des questions ou des retours sur notre projet de traduction actuel, n'hésitez pas à nous contacter.

Description

Amazon Bedrock must have model invocation logging enabled with a primary S3 destination configured to ensure comprehensive audit trails of AI model interactions. While CloudWatch Logs for real-time monitoring of text prompts are valuable, S3 logging is required for complete audit coverage including large payloads, images, embeddings, and video data that may exceed CloudWatch limits.

Remediation

Configure Bedrock model invocation logging with an S3 bucket destination. Enable logging for the appropriate data types (text, image, embedding, or video) based on your use case and compliance requirements.

For detailed configuration steps, refer to the Amazon Bedrock Model invocation logging documentation.