- Newest
- Most votes
- Most comments
Hello.
As you understand, if the geographic inference profile is used, data is exchanged within that region.
https://docs.aws.amazon.com/bedrock/latest/userguide/geographic-cross-region-inference.html
Cross-Region inference requests to an inference profile tied to a geography (e.g. US, EU and APAC) are kept within the AWS Regions that are part of the geography where the data originally resides. For example, a request made within the US is kept within the AWS Regions in the US. By default the data remains stored only in the source Region, but your input prompts and output results might move outside of your source Region during cross-Region inference. To the extent we store data for abuse detection, your input prompts and output results will be stored in the destination region. See Amazon Bedrock abuse detection for more information on which models require storage. All data will be transmitted encrypted across Amazon's secure network.
For Fable5, "provider_data_share" is required, whereas for Sonnet, it is not.
This is described in the AWS blog post below.
https://aws.amazon.com/jp/blogs/security/enforce-zero-data-retention-on-amazon-bedrock-with-bedrock-projects-and-service-control-policies/
Therefore, the data is not shared with the model provider and is handled in accordance with conventional data protection practices.
https://docs.aws.amazon.com/bedrock/latest/userguide/data-protection.html
Amazon Bedrock has a concept of a Model Deployment Account—in each AWS Region where Amazon Bedrock is available, there is one such deployment account per model provider. These accounts are owned and operated by the Amazon Bedrock service team. Model providers don't have any access to those accounts. After delivery of a model from a model provider to AWS, Amazon Bedrock will perform a deep copy of a model provider’s inference and training software into those accounts for deployment. Because the model providers don't have access to those accounts, they don't have access to Amazon Bedrock logs or to customer prompts and completions.
Relevant content
- AWS OFFICIALUpdated a year ago
Thank you, this is very helpful.
I have one remaining question about the account data retention mode.
The documentation and your table refer to the account modes default, none, and provider_data_share.
How can an individual AWS customer determine which mode their Bedrock account is currently using? Is this visible anywhere in the AWS Console, or only configurable through Bedrock Projects, Organizations, or the API/CLI?
For an individual AWS account, what is the default account mode if it has never been configured?
For example, you can check it as follows:
The following document contains instructions on how to set it up, so please check it. https://docs.aws.amazon.com/bedrock/latest/userguide/data-retention.html#data-retention-configuration