Add guardrail to seahaven-alex agent #38

Merged

amoussa1229 merged 1 commit from feature/bedrock-guardrail into main

2026-06-03 19:16:07 +00:00

amoussa1229 commented

2026-06-03 19:10:25 +00:00

(Migrated from github.com)

Summary

Audit finding M-19 — Alex had no Bedrock guardrail despite returning QBO/payment/WO/PO/HR data. Adds prompt-attack + content filters and PII masking scoped to credential/financial identifiers only (vendor names/contacts intentionally unmasked — that's the bot's job).

Validation

Deployed from branch (deploy-before-merge); guardrail zjlcfq5vjic5 v1 attached, agent re-prepared, live alias → agent version 10.
Smoke tests through bedrock-agent-runtime on the live alias: SA8000 misconduct-reporting question answers normally (MISCONDUCT output=MEDIUM regression check); prompt-injection attempt returns the guardrail block message.

Tests

Live invocation smoke tests as above; tsc --noEmit + synth clean.

Notes

IAM cross-review done: BLOCK fixed (ApplyGuardrail resource covers guardrail/* version ARNs), explicit CFN dependencies added, ASCII apostrophe + version labels cleaned up.
Reviewer flag deferred: guardrail kmsKeyArn (config-at-rest CMK) — follow-up, consistent with account encryption posture work.
PII decision: bank/card numbers ANONYMIZE (finance staff have QBO/payments dashboard for full numbers).

## Summary Audit finding M-19 — Alex had no Bedrock guardrail despite returning QBO/payment/WO/PO/HR data. Adds prompt-attack + content filters and PII masking scoped to credential/financial identifiers only (vendor names/contacts intentionally unmasked — that's the bot's job). ## Validation - Deployed from branch (deploy-before-merge); guardrail `zjlcfq5vjic5` v1 attached, agent re-prepared, `live` alias → agent version 10. - Smoke tests through `bedrock-agent-runtime` on the live alias: SA8000 misconduct-reporting question answers normally (MISCONDUCT output=MEDIUM regression check); prompt-injection attempt returns the guardrail block message. ## Tests Live invocation smoke tests as above; `tsc --noEmit` + synth clean. ## Notes - IAM cross-review done: BLOCK fixed (ApplyGuardrail resource covers `guardrail/*` version ARNs), explicit CFN dependencies added, ASCII apostrophe + version labels cleaned up. - Reviewer flag deferred: guardrail `kmsKeyArn` (config-at-rest CMK) — follow-up, consistent with account encryption posture work. - PII decision: bank/card numbers ANONYMIZE (finance staff have QBO/payments dashboard for full numbers).

This repo is archived. You cannot comment on pull requests.

No reviewers