Amazon Bedrock

1. 01The root user of account 123456789012 called Amazon Bedrock APIs. Root should never do day-to-day work: move this to an IAM role, enable MFA on root, and alert on any further root activity.
2. 02Bedrock model invocation logging is off in account 123456789012, so prompts and completions leave no record. Turn it on (CloudWatch Logs or S3) before this becomes the default way people reach models.
3. 034 calls were denied by IAM. People are trying to reach Amazon Bedrock; decide whether to grant it through a reviewed role or block it with a service control policy so the attempts stop.
4. 04Custom or fine-tuned models exist. Confirm what data trained them, that the training bucket is classified, and that the models are not shared across accounts.
5. 05Agents or knowledge bases are configured. Review which S3 buckets, databases, and APIs they can reach; a knowledge base is a permanent grant of that data to whoever can query the agent.

Identifiers come from device telemetry and proxy logs, so they may be account names rather than full directory entries.

1. cloudtrail_activity · Sep 13, 2026
   AWS (demo) (123456789012): Amazon Bedrock, 47 CloudTrail events by 6 identities, 29 write, 23 invocations, 4 denied, 3 resources in 90 days across eu-west-1, us-east-1, us-west-2
   Detail

   {
     "services": [
       "bedrock.amazonaws.com"
     ],
     "topActions": [
       {
         "name": "InvokeModel",
         "count": 17
       },
       {
         "name": "ListFoundationModels",
         "count": 9
       },
       {
         "name": "Converse",
         "count": 9
       },
       {
         "name": "GetFoundationModel",
         "count": 5
       },
       {
         "name": "CreateAgent",
         "count": 2
       },
       {
         "name": "CreateKnowledgeBase",
         "count": 1
       },
       {
         "name": "PutModelInvocationLoggingConfiguration",
         "count": 1
       },
       {
         "name": "DeleteModelInvocationLoggingConfiguration",
         "count": 1
       },
       {
         "name": "CreateModelCustomizationJob",
         "count": 1
       },
       {
         "name": "PutFoundationModelEntitlement",
         "count": 1
       }
     ],
     "invocationLogging": false
   }

2. root_activity · Sep 5, 2026
   Root user called Amazon Bedrock APIs
   Detail

   {
     "events": [
       "ListFoundationModels",
       "PutFoundationModelEntitlement"
     ]
   }

3. access_denied · Sep 10, 2026
   frank was denied InvokeModel in us-east-1
   Detail

   {
     "arn": "arn:aws:iam::123456789012:user/frank",
     "errorCode": "AccessDeniedException"
   }

4. access_denied · Sep 9, 2026
   frank was denied InvokeModel in us-east-1
   Detail

   {
     "arn": "arn:aws:iam::123456789012:user/frank",
     "errorCode": "AccessDeniedException"
   }

5. access_denied · Sep 8, 2026
   frank was denied InvokeModel in us-east-1
   Detail

   {
     "arn": "arn:aws:iam::123456789012:user/frank",
     "errorCode": "AccessDeniedException"
   }

6. access_denied · Sep 9, 2026
   frank was denied CreateAgent in eu-west-1
   Detail

   {
     "arn": "arn:aws:iam::123456789012:user/frank",
     "errorCode": "AccessDeniedException"
   }

7. bedrock:agent
   agent 'support-copilot' in us-east-1
   Detail

   {
     "arn": "arn:aws:bedrock:us-east-1:123456789012:agent/AGENT1234",
     "status": "PREPARED",
     "description": "Answers tier-1 support questions from the ticket archive"
   }

8. bedrock:knowledge-base
   knowledge base 'support-tickets-kb' in us-east-1
   Detail

   {
     "arn": "arn:aws:bedrock:us-east-1:123456789012:knowledge-base/KB5678",
     "status": "ACTIVE"
   }

9. bedrock:custom-model
   custom model 'tickets-ft-v2' in us-west-2
   Detail

   {
     "arn": "arn:aws:bedrock:us-west-2:123456789012:custom-model/tickets-ft-v2",
     "baseModel": "amazon.titan-text-express-v1",
     "customization": "FINE_TUNING"
   }