PRODUCTION SCENARIO
A pharmaceutical company's compliance team must be able to reproduce, months later, the exact prompt a user sent to an Amazon Bedrock model and the exact response the model returned. AWS CloudTrail is already enabled in the account.
What must the company do to meet this requirement?
Answering here is anonymous. Nothing is saved unless you sign in.
Show answer and explanation
Answer: Enable model invocation logging and deliver it to Amazon S3.
Model invocation logging collects the full request data, response data, and metadata for supported calls in an account and Region, and it is disabled by default, so it must be turned on and pointed at a destination. A CloudTrail trail records that a call was made, by which principal and when, not the prompt or the answer. AWS Config records configuration state, not request bodies. A guardrail in detect mode returns detection information and stores nothing.