🟡 Medium | Source: AWS What’s New
AWS has launched GuardDuty AI Protection, extending GuardDuty’s threat detection capabilities to cover AI workloads running on Amazon Bedrock and SageMaker. It monitors CloudTrail events to identify threats such as anomalous model invocations, cost harvesting attacks, and prompt injection attempts. This addresses a growing blind spot for security teams as AI adoption outpaces purpose-built security tooling.
Security Architect’s Take: Enable GuardDuty AI Protection across your AWS Organisation now via the centralised deployment option — particularly if you’re running Bedrock or SageMaker workloads — and ensure findings are routing into Security Hub for triage. Review the 30-day free trial as a low-risk opportunity to baseline normal AI workload behaviour before threats emerge.
Original advisory: Introducing Amazon GuardDuty AI Protection for AWS AI workloads