Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Contribution] Bedrock API calls logged without error codes #364

Open
korniko98 opened this issue Dec 15, 2024 · 0 comments
Open

[Contribution] Bedrock API calls logged without error codes #364

korniko98 opened this issue Dec 15, 2024 · 0 comments
Labels
addition New security issue or vulnerability aws Issue related to an AWS service

Comments

@korniko98
Copy link
Collaborator

Summary (give a brief description of the issue)

Failed Bedrock API calls were logged in the same manner as successful calls, without providing any specific error codes. The lack of error information in API responses may hinder detection efforts by generating false positives in CloudTrail logs.

References (provide links to blogposts, etc.)

https://sysdig.com/blog/bedrock-slip-sysdig-trt-discovers-cloudtrail-logging-missteps/

@korniko98 korniko98 added addition New security issue or vulnerability aws Issue related to an AWS service labels Dec 15, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
addition New security issue or vulnerability aws Issue related to an AWS service
Projects
None yet
Development

No branches or pull requests

1 participant