Wiz Adds AI Security Posture Management Support for Amazon Bedrock
Summary
Wiz added Amazon Bedrock support to its AI-SPM tools, offering visibility into custom models and training data, configuration checks, and attack-path analysis for Bedrock models.
Key points
- Wiz says its Security Graph can show Bedrock custom models, fine-tuning jobs, training data, and the data's access and exposure.
- Configuration rules assess Bedrock settings, including whether a custom model uses a customer-managed encryption key.
- Wiz extended attack-path analysis to Bedrock, correlating vulnerabilities, misconfigurations, identities, data, and secrets to prioritize risks.
- The update adds to Wiz's existing AI-SPM coverage, which includes Amazon SageMaker.
Article Details
- Event Type
- Wiz expanded its AI Security Posture Management support to Amazon Bedrock, adding AI-BOM visibility and attack-path analysis.
- Impact
- Wiz customers can visualize Amazon Bedrock custom models, fine-tuning jobs, training data, and data access or exposure in the Wiz Security Graph. Wiz also assesses Bedrock configurations for security issues, including custom models lacking a customer-managed encryption key, and adds cloud-context attack-path analysis to help prioritize risks. The article reports no breach or other security incident.
People
Vendors
Amazon Web ServicesIn September 2023, Amazon Web Services (AWS) announced the general availability of Amazon Bedrock, a fully managed AWS service that helps customers easily build generative AI applications using a choice ofWiztasks using their own organizational data. Even though the service was recently released (in 2023), the Wiz Research Team found that 15% of organizations already have an instance of Amazon Bedrock in their
Products
Amazon BedrockIn September 2023, Amazon Web Services (AWS) announced the general availability of Amazon Bedrock, a fully managed AWS service that helps customers easily build generative AI applications using a choice ofAmazon SageMakereven faster. This is in addition to other services and platforms already supported, including Amazon SageMaker and others.AWS Key Management ServiceAdditionally, you can create, manage, and control encryption keys using the AWS Key Management Service (AWS KMS).Wiz Security Graph(AI-Bill of Materials) visibility into Amazon Bedrock custom models and fine-tuned jobs on the Wiz Security Graph. Users customizing Amazon Bedrock models with their own data can now visualize their fine-tuned