Page 278 - Cyber Defense eMagazine September 2025

- Custom topic restrictions
- Automated content monitoring

Bedrock integrates with core AWS security services to provide:

Encryption

- AWS KMS integration for data at rest
- TLS 1.2+ encryption in transit
- Customer-managed key support

Network

- VPC endpoint integration
- AWS PrivateLink support
- Granular access controls

Monitoring

- CloudWatch metrics and logging
- CloudTrail API activity tracking
- Detailed security event monitoring

Compliance

- SOC 1, 2, & 3 certifications
- HIPAA eligibility
- PCI DSS compliance
- GDPR controls

2. Amazon SageMaker

Amazon SageMaker’s security framework has significantly evolved since the service has been launched
and below are some features that prove most effective in production environments:

Model Security

- Secure training environments with isolated compute
- End-to-end artifact encryption
- Advanced model tampering detection
- Continuous model behavior monitoring
Data Protection

- Secure Data Wrangler workflows
- Protected Ground Truth labeling
- Enhanced pipeline security controls

Cyber Defense eMagazine – September 2025 Edition 278
Copyright © 2025, Cyber Defense Magazine. All rights reserved worldwide.