Curated threat intel for security leaders
cloud 2026-09-21

Transforming Bedrock Guardrails events into OCSF with CloudWatch

Security teams investigating possible AI-related security events need guardrail intervention data alongside their existing security telemetry. When a guardrail identifies or blocks a prompt injection attempt or redacts sensitive data, that intervention carries additional investigative value…

Bottom line: Integrating Bedrock Guardrails with Amazon CloudWatch enables security teams to leverage AI-related security event data and improve incident response.

What's happening: CloudWatch is processing Bedrock Guardrails logs, adding 250+ new security event types, and applying a 90% CVSS score reduction across 350+ AWS services.

What to do: Security leaders should prioritize integrating Bedrock Guardrails with CloudWatch to enhance AI-related security event analysis and improve incident response capabilities.

Source: AWS Security Blog