Skip to content
Threat Feed
Subscribe

Product

Bedrock

3 briefs RSS
medium advisory

AWS Bedrock Model Invocation Logging Deletion

Detection of AWS Bedrock model invocation logging configuration deletion via the DeleteModelInvocationLogging API in CloudTrail logs, potentially indicating an adversary attempting to evade detection of malicious AI model usage.

Bedrock aws cloudtrail defense-evasion
2r 1t
medium advisory

High Number of AWS Bedrock List Foundation Model Failures

Detection of a high number of AccessDenied errors when attempting to list AWS Bedrock foundation models, indicating potential reconnaissance activity after credential compromise to discover accessible AI models.

Bedrock aws reconnaissance cloudtrail
2r 1t
high advisory

AWS Bedrock GuardRails Deletion Attempt

Detection of AWS Bedrock GuardRails deletion, which are security controls to prevent harmful AI outputs, could indicate an adversary attempting to remove safety measures after credential compromise to enable malicious model outputs.

Bedrock +4 aws cloudtrail defense-evasion
2r 1t