Configure Content Filter Strength for Bedrock Guardrails

Sign in to the AWS Management Console.

Navigate to Amazon Bedrock console available at https://console.aws.amazon.com/bedrock/.

In the main navigation panel, under Build, select Guardrails.

In the Guardrails section, click on the name (link) of the Amazon Bedrock guardrail that you want to examine, available in the Name column.

On the guardrail details page, review the Versions section to identify every version available for the selected guardrail, including its working draft (DRAFT) and any published (numbered) versions. A published version is an immutable snapshot of the guardrail's configuration taken at the time it was created, and is not automatically updated when you later edit the working draft.

Click on a version (a published version is used in the example below, since its configuration is a fixed snapshot) to open its configuration.

In the Content filters section, locate the Harmful categories subsection and perform the following checks:

1. Check the Prompt filters and Response filters status. If either is set to Disabled, the corresponding input or output content filters are not enabled for the selected version.
2. For each of the Hate, Insults, Sexual, Violence, and Misconduct categories, check the strength value shown under [Category] filter for prompts (input) and [Category] filter for responses (output) — for example, Sexual filter for prompts and Sexual filter for responses. If any value is Low strength or None (a None value is shown with Action: Disabled) for any of these categories, the content filter strength for the selected version is not set to at least MEDIUM.

Repeat steps no. 6 and 7 for each version listed in the Versions section.

Repeat steps no. 4 – 8 for each Amazon Bedrock guardrail available within the current AWS region.

Change the AWS cloud region from the navigation bar to repeat the Audit process for other regions.

Run list-guardrails command to list the Amazon Resource Name (ARN) of each Amazon Bedrock guardrail available in the selected AWS cloud region:

aws bedrock list-guardrails
  --region us-east-1
  --query 'guardrails[*].arn'

The command output should return the requested guardrail identifiers (ARNs):

[
    "arn:aws:bedrock:us-east-1:123456789012:guardrail/abcd1234abcd",
    "arn:aws:bedrock:us-east-1:123456789012:guardrail/1234abcd1234"
]

Run list-guardrails command with the guardrail's identifier (ARN) to list every version available for the selected guardrail, including its working draft (DRAFT) and any published (numbered) versions:

aws bedrock list-guardrails
  --region us-east-1
  --guardrail-identifier arn:aws:bedrock:us-east-1:123456789012:guardrail/abcd1234abcd
  --query 'guardrails[*].version'

The command output should return the requested version identifiers:

[
    "DRAFT",
    "1"
]

Run get-guardrail command with the identifier (ID or ARN) of the guardrail that you want to examine and one of the version values returned at the previous step (a published, numbered version is used in the example below, since its configuration is a fixed snapshot that does not change even if the working draft is later edited), to describe the content filter strengths configured on that version, excluding the PROMPT_ATTACK category:

aws bedrock get-guardrail
  --region us-east-1
  --guardrail-identifier arn:aws:bedrock:us-east-1:123456789012:guardrail/abcd1234abcd
  --guardrail-version 1
  --query 'contentPolicy.filters[?type!=`PROMPT_ATTACK`].{type:type,inputStrength:inputStrength,outputStrength:outputStrength}'

The command output should return the filter strengths configured for each content policy category on the selected version:

[
    {
        "type": "HATE",
        "inputStrength": "HIGH",
        "outputStrength": "HIGH"
    },
    {
        "type": "INSULTS",
        "inputStrength": "MEDIUM",
        "outputStrength": "MEDIUM"
    },
    {
        "type": "SEXUAL",
        "inputStrength": "LOW",
        "outputStrength": "HIGH"
    },
    {
        "type": "VIOLENCE",
        "inputStrength": "HIGH",
        "outputStrength": "NONE"
    },
    {
        "type": "MISCONDUCT",
        "inputStrength": "HIGH",
        "outputStrength": "HIGH"
    }
]

If the get-guardrail command output does not return an entry for one of the HATE, INSULTS, SEXUAL, VIOLENCE, or MISCONDUCT categories, the selected version of the guardrail is not configured with a content filter for that category. If the inputStrength or outputStrength value returned for any category is LOW or NONE (as shown for SEXUAL and VIOLENCE in the example above), the content filter strength for the selected version is not set to at least MEDIUM to adequately protect against harmful content.

Repeat steps no. 5 and 6 for each version returned at step 4.

Repeat steps no. 3 – 7 for each Amazon Bedrock guardrail available in the selected AWS region.

Change the AWS cloud region by updating the --region command parameter value and repeat steps no. 1 – 8 to perform the Audit process for other regions.

Sign in to the AWS Management Console.

Navigate to Amazon Bedrock console available at https://console.aws.amazon.com/bedrock/.

In the main navigation panel, under Build, select Guardrails.

In the Guardrails section, click on the name (link) of the Amazon Bedrock guardrail that you want to configure, available in the Name column.

On the guardrail details page, review the Versions section to identify every version available for the selected guardrail, including its working draft (DRAFT) and any published (numbered) versions.

Click on DRAFT, since only the working draft can be edited; published (numbered) versions are immutable snapshots and cannot be modified directly.

Choose Edit from the Harmful categories section to edit the content filters configured for the selected guardrail.

In the Harmful categories section, ensure the Configure harmful categories filters toggle is turned on. Note the Use the same harmful categories filters for responses check box: when it is selected (the default), the strength you set under Filters for prompts is applied to both inputs and outputs; clear this check box to configure the Filters for prompts and Filters for responses sections independently (needed when the input and output strengths differ). For each of the Hate, Insults, Sexual, Violence, and Misconduct categories, ensure the category is enabled (select Text and/or Image) and drag the Strength slider to Medium or High. If you cleared the shared-filter check box, set the Strength slider to Medium or High in both the Filters for prompts and Filters for responses sections.

Choose Save and exit to apply the configuration changes.

Repeat steps no. 4 – 9 for each Amazon Bedrock guardrail that you want to configure, available within the current AWS region.

Change the AWS cloud region from the navigation bar and repeat the Remediation process for other regions.

Run list-guardrails command with the guardrail's identifier (ARN) to list every version available for the selected guardrail, including its working draft (DRAFT) and any published (numbered) versions:

aws bedrock list-guardrails
  --region us-east-1
  --guardrail-identifier arn:aws:bedrock:us-east-1:123456789012:guardrail/abcd1234abcd
  --query 'guardrails[*].version'

The command output should return the requested version identifiers:

[
    "DRAFT",
    "1"
]

Run update-guardrail command with the identifier (ID or ARN) of the Amazon Bedrock guardrail that you want to configure, to set the content filter strength to at least MEDIUM for each harmful category on the selected guardrail. update-guardrail always applies to the working draft (DRAFT) — it does not accept a --guardrail-version parameter, so any published (numbered) versions returned at the previous step remain unaffected, immutable snapshots. The --content-policy-config parameter must be specified in full, including any filter categories you want to keep unchanged (such as PROMPT_ATTACK), since update-guardrail replaces the entire content policy configuration rather than patching individual filters. Important: update-guardrail performs a full replacement of the guardrail configuration (an HTTP PUT), not a partial update. Any other policy configuration currently on the guardrail (topic, word, sensitive information, contextual grounding, or automated reasoning policies) that you do not re-supply in this command will be removed. Before running the command, use get-guardrail to retrieve the guardrail's current configuration, then re-supply every policy you want to keep alongside the corrected content filter strengths:

aws bedrock update-guardrail
  --region us-east-1
  --guardrail-identifier arn:aws:bedrock:us-east-1:123456789012:guardrail/abcd1234abcd
  --name tm-project5-ai-guardrail
  --blocked-input-messaging "Sorry, the model cannot answer this question."
  --blocked-outputs-messaging "Sorry, the model cannot answer this question."
  --content-policy-config 'filtersConfig=[{type="PROMPT_ATTACK",inputStrength="HIGH",outputStrength="NONE"},{type="SEXUAL",inputStrength="HIGH",outputStrength="HIGH"},
{type="HATE",inputStrength="HIGH",outputStrength="HIGH"},{type="VIOLENCE",inputStrength="HIGH",outputStrength="HIGH"},{type="INSULTS",inputStrength="MEDIUM",outputStrength="MEDIUM"},{type="MISCONDUCT",inputStrength="MEDIUM",outputStrength="MEDIUM"}]'

The command output should return the identification details available for the configured guardrail:

{
    "guardrailId": "abcd1234abcd",
    "guardrailArn": "arn:aws:bedrock:us-east-1:123456789012:guardrail/abcd1234abcd",
    "version": "DRAFT",
    "updatedAt": "2024-06-15T10:07:34.347840+00:00"
}

Repeat steps no. 1 – 4 for each Amazon Bedrock guardrail that you want to configure, available in the selected AWS region.

Change the AWS cloud region by updating the --region command parameter value and repeat the Remediation process for other regions.