Skip to main content
Bifrost integrates with Amazon Bedrock Guardrails to provide enterprise-grade content filtering and safety features with deep AWS integration. This page covers the configuration and capabilities of the AWS Bedrock guardrail provider. AWS Bedrock Guardrails configuration form

Capabilities

  • Content Filters: Hate speech, insults, sexual content, violence, misconduct
  • Denied Topics: Block specific topics or categories
  • Word Filters: Custom profanity and sensitive word blocking
  • PII Protection: Detect and redact 50+ PII entity types
  • Contextual Grounding: Verify responses against source documents
  • Prompt Attack Detection: Identify injection and jailbreak attempts
  • Image Content Support: Analyze images in addition to text (PNG, JPEG)

Configuration Fields

FieldTypeRequiredDefaultDescription
access_keystringYes-AWS Access Key ID
secret_keystringYes-AWS Secret Access Key
guardrail_arnstringYes-ARN of the Bedrock guardrail
guardrail_versionstringYes-Version of the guardrail (e.g., “1”, “DRAFT”)
regionstringYes-AWS region

Authentication

Uses AWS SDK with static credentials:
{
  "access_key": "AKIAXXXXXXXXXXXXXXXXXX",
  "secret_key": "your-secret-access-key",
  "guardrail_arn": "arn:aws:bedrock:us-east-1:123456789:guardrail/abc123",
  "guardrail_version": "1",
  "region": "us-east-1"
}

Supported AWS Regions

Region CodeRegion Name
us-east-1US East (N. Virginia)
us-east-2US East (Ohio)
us-west-1US West (N. California)
us-west-2US West (Oregon)
ap-south-1Asia Pacific (Mumbai)
ap-northeast-1Asia Pacific (Tokyo)
ap-northeast-2Asia Pacific (Seoul)
ap-southeast-1Asia Pacific (Singapore)
ap-southeast-2Asia Pacific (Sydney)
eu-central-1Europe (Frankfurt)
eu-west-1Europe (Ireland)
eu-west-2Europe (London)
eu-west-3Europe (Paris)

Supported Content Types

  • Text content
  • Images (PNG, JPEG formats)

Usage Metrics Returned

Bedrock guardrails return detailed usage metrics for cost tracking and monitoring:
MetricDescription
content_policy_unitsUnits consumed by content policy evaluation
contextual_grounding_policy_unitsUnits for grounding checks
sensitive_information_policy_unitsUnits for PII detection
topic_policy_unitsUnits for topic filtering
word_policy_unitsUnits for word filtering
automated_reasoning_policy_unitsUnits for reasoning checks
content_policy_image_unitsUnits for image content analysis

Supported PII Types

  • Personal identifiers (SSN, passport, driver’s license)
  • Financial information (credit cards, bank accounts)
  • Contact information (email, phone, address)
  • Medical information (health records, insurance)
  • Device identifiers (IP addresses, MAC addresses)

Provider Capabilities Comparison

CapabilityAWS BedrockAzure Content SafetyGraySwanPatronus AI
PII DetectionYesNoNoYes
Content FilteringYesYesYesYes
Prompt InjectionYesYesYesYes
Hallucination DetectionNoNoNoYes
Toxicity ScreeningYesYesYesYes
Custom PoliciesYesYesYesYes
Custom Natural Language RulesNoNoYesNo
Image SupportYesNoNoNo
IPI DetectionNoYesYesNo
Mutation DetectionNoNoYesNo
For information on configuring guardrail rules and profiles, see Guardrails.